DrayTek Vigor2962 User manual

Download

Page 1

Page 2

Vigor2962 Series

2.5G Security VPN Router

User’s Guide

Version: 1.0

Firmware Version: V3.9.3

(For future update, please visit DrayTek web site)

Date: December 09, 2020

Vigor2962 Series User’s Guide

Page 3

Copyrights

© All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.

Trademarks

The following trademarks are used in this document:

 Microsoft is a registered trademark of Microsoft Corp.  Windows 8, 10 and Explorer are trademarks of Microsoft Corp.  Apple and Mac OS are registered trademarks of Apple Inc.  Other products may be trademarks or registered trademarks of their respective manufacturers.

Safety Instructions



Read the installation guide thoroughly before you set up the router.

 The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel.

Do not try to open or repair the router yourself.

 Do not place the router in a damp or humid place, e.g. a bathroom.  The router should be used in a sheltered area, within a temperature range of +5 to +40 Celsius.  Do not expose the router to direct sunlight or other heat sources. The housing and electronic components

may be damaged by direct sunlight or heat sources.

 Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards.  Keep the package out of reach of children.  When you want to dispose of the router, please follow local regulations on conservation of the environment.

Warranty

 We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship

or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.

Be a Registered Owner

 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com.

Firmware & Tools Updates

 Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult

the DrayTek web site for more information on newest firmware, tools and documents.

http://www.DrayTek.com

Vigor2962 Series User’s Guide

iii

Page 4

TTaabbllee ooff CCoonntteennttss

Part I Installation.......................................................................................i

I-1 Introduction .................................................................................................. 1

I-1-1 Indicators and Connectors .......................................................................... 2

I-2 Hardware Installation....................................................................................... 4

I-2-1 Installing Vigor Router...............................................................................4

I-2-2 Wall-Mounted Installation........................................................................... 5

I-3 Accessing Web Page ......................................................................................... 6

I-4 Changing Password .......................................................................................... 8

I-5 Dashboard....................................................................................................10

I-5-1 Virtual Panel .........................................................................................11

I-5-2 Quick Access for Common Used Menu............................................................11

I-5-3 GUI Map...............................................................................................14

I-5-4 Web Console..........................................................................................15

I-5-5 Config Backup........................................................................................15

I-5-6 Logout.................................................................................................15

I-5-7 Online Status.........................................................................................16

I-5-7-1 Physical Connection......................................................................16

I-5-7-2 Virtual WAN ...............................................................................18

I-6 Port Setup....................................................................................................20

I-7 Quick Setup..................................................................................................21

I-8 Registering Vigor Router...................................................................................25

Part II Connectivity................................................................................. 29

II-1 WAN ..........................................................................................................30

Web User Interface........................................................................................31

II-1-1 General Setup.......................................................................................31

II-1-1-1 WAN (Ethernet) ..........................................................................33

II-1-2 Internet Access......................................................................................35

II-1-2-1 WAN# Details Page (PPPoE, Physical Mode: Ethernet).............................37

II-1-2-2 WAN# Details Page (Static or Dynamic IP, Physical Mode: Ethernet) ...........40

II-1-2-3 WAN# Details Page for IPv6 – Offline.................................................45

II-1-2-4 WAN# Details Page for IPv6 – PPP .....................................................45

II-1-2-5 WAN# Details Page for IPv6 – TSPC....................................................46

II-1-2-6 WAN# Details Page for IPv6 – AICCU ..................................................48

II-1-2-7 WAN# Details Page for IPv6 – DHCPv6 Client........................................49

II-1-2-8 WAN# Details Page for IPv6 – Static IPv6.............................................51

II-1-2-9 WAN# Details Page for IPv6 – 6in4 Static Tunnel ...................................52

II-1-2-10 WAN# Details Page for IPv6 – 6rd....................................................55

II-1-3 Multi-VLAN...........................................................................................57

II-1-4 WAN Budget .........................................................................................61

II-1-4-1 General Setup ............................................................................61

II-1-4-2 Status ......................................................................................64

Application Notes..........................................................................................65

Vigor2962 Series User’s Guide

Page 5

A-1 How to configure IPv6 on WAN interface?................................................65

II-2 LAN...........................................................................................................70

Web User Interface........................................................................................72

II-2-1 General Setup.......................................................................................72

II-2-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup........................73

II-2-1-2 Details Page for LAN2 ~ LAN4..........................................................77

II-2-1-3 Details Page for IP Routed Subnet ....................................................80

II-2-1-4 Details Page for LAN IPv6 Setup.......................................................82

II-2-1-5 DHCP Server Options ....................................................................85

II-2-2 VLAN..................................................................................................87

II-2-3 Bind IP to MAC.......................................................................................90

II-2-4 Port Mirror/Packet Capture.......................................................................93

II-2-5 PPPoE Server ........................................................................................96

II-3 NAT...........................................................................................................97

Web User Interface........................................................................................98

II-3-1 Port Redirection ....................................................................................98

II-3-2 DMZ Host........................................................................................... 102

II-3-3 Open Ports......................................................................................... 105

II-3-4 Port Triggering.................................................................................... 107

II-3-5 ALG.................................................................................................. 110

II-4 Applications............................................................................................... 112

Web User Interface...................................................................................... 114

II-4-1 Dynamic DNS....................................................................................... 114

II-4-2 LAN DNS / DNS Forwarding...................................................................... 120

II-4-3 DNS Security....................................................................................... 124

II-4-3-1 General Setup .......................................................................... 124

II-4-3-2 Domain Diagnose....................................................................... 125

II-4-4 Schedule ........................................................................................... 126

II-4-5 RADIUS/TACACS+ ................................................................................. 129

II-4-5-1 External RADIUS........................................................................ 129

II-4-5-2 Internal RADIUS ........................................................................ 131

II-4-5-3 External TACACS+...................................................................... 134

II-4-6 Active Directory/LDAP........................................................................... 135

II-4-6-1 General Setup .......................................................................... 135

II-4-6-2 Active Directory / LDAP Profiles .................................................... 136

II-4-7 IGMP ................................................................................................ 138

II-4-7-1 General Setting ........................................................................ 138

II-4-7-2 Working Group ......................................................................... 139

II-4-8 Wake on LAN ...................................................................................... 140

II-4-9 SMS / Mail Alert Service ......................................................................... 141

II-4-9-1 SMS Alert................................................................................ 141

II-4-9-2 Mail Alert ............................................................................... 142

II-4-10 Bonjour ........................................................................................... 143

II-4-11 High Availability................................................................................. 146

II-4-11-1 General Setup......................................................................... 147

Vigor2962 Series User’s Guide

Page 6

II-4-11-2 Config Sync ............................................................................ 149

Application Notes........................................................................................ 151

A-1 How to use High Availability?............................................................. 151

A-2 How to use DrayDDNS?..................................................................... 159

A-3 How to Implement the LDAP/AD Authentication for User Management? ......... 164

A-4 How to Configure Customized DDNS?.................................................... 167

II-5 Routing .................................................................................................... 171

Web User Interface...................................................................................... 172

II-5-1 Static Route ....................................................................................... 172

II-5-2 Load-Balance /Route Policy..................................................................... 178

II-5-3 OSPF ................................................................................................ 186

II-5-4 BGP ................................................................................................. 188

II-5-4-1 Basic Settings........................................................................... 188

II-5-4-2 Static Network ......................................................................... 189

Application Notes........................................................................................ 190

A-1 How to set up Address Mapping with Route Policy? .................................. 190

A-2 How to use destination domain name in a route policy?............................. 192

A-3 Introduction to Load Balance/Route Policy ............................................ 194

Part III VPN ..........................................................................................197

III-1 VPN and Remote Access................................................................................ 198

Web User Interface...................................................................................... 199

III-1-1 Remote Access Control.......................................................................... 200

III-1-2 PPP General Setup............................................................................... 201

III-1-3 IPsec General Setup ............................................................................. 203

III-1-4 IPsec Peer Identity............................................................................... 205

III-1-5 VPN Matcher Setup .............................................................................. 207

III-1-6 OpenVPN .......................................................................................... 209

III-1-6-1 OpenVPN Server Setup ............................................................... 209

III-1-6-2 Client Config........................................................................... 211

III-1-7 Remote Dial-in User ............................................................................. 212

III-1-8 LAN to LAN........................................................................................ 216

III-1-9 VPN Trunk Management......................................................................... 226

III-1-10 Connection Management ...................................................................... 231

III-2 SSL VPN ................................................................................................... 233

Web User Interface...................................................................................... 234

III-2-1 General Setup .................................................................................... 234

III-2-2 User Account...................................................................................... 235

III-3 Certificate Management ............................................................................... 239

Web User Interface...................................................................................... 240

III-3-1 Local Certificate ................................................................................. 240

III-3-2 Trusted CA Certificate .......................................................................... 245

III-3-3 Certificate Backup............................................................................... 248

III-3-4 Self-Signed Certificate.......................................................................... 249

Vigor2962 Series User’s Guide

Page 7

Part IV Security.....................................................................................251

IV-1 Firewall ................................................................................................... 252

Web User Interface...................................................................................... 254

IV-1-1 General Setup .................................................................................... 254

IV-1-2 Filter Setup ....................................................................................... 259

IV-1-3 Defense Setup.................................................................................... 269

IV-1-3-1 DoS Defense............................................................................ 269

IV-1-3-2 Spoofing Defense...................................................................... 272

IV-1-4 Diagnose........................................................................................... 273

Application Notes........................................................................................ 276

A-1 How to Configure Certain Computers Accessing to Internet........................ 276

IV-2 Central Security Management (CSM) ................................................................. 279

Web User Interface...................................................................................... 280

IV-2-1 APP Enforcement Profile ....................................................................... 280

IV-2-2 URL Content Filter Profile...................................................................... 282

IV-2-3 Web Content Filter Profile ..................................................................... 286

IV-2-4 DNS Filter Profile ................................................................................ 289

Application Notes........................................................................................ 291

A-1 How to Create an Account for MyVigor ................................................. 291

A-2 How to Block Facebook Service Accessed by the Use rs via W e b Cont ent Fil ter / UR L

Content Filter.................................................................................... 296

Part V Management................................................................................301

V-1 System Maintenance..................................................................................... 302

Web User Interface...................................................................................... 303

V-1-1 System Status ..................................................................................... 303

V-1-2 TR-069.............................................................................................. 305

V-1-3 Administrator Password ......................................................................... 308

V-1-4 User Password..................................................................................... 311

V-1-5 Login Page Greeting.............................................................................. 314

V-1-6 Configuration Backup ............................................................................ 316

V-1-7 Configuration Export............................................................................. 319

V-1-8 Syslog/Mail Alert.................................................................................. 320

V-1-9 Time and Date .................................................................................... 323

V-1-10 SNMP .............................................................................................. 324

V-1-11 Management ..................................................................................... 326

V-1-12 Self-Signed Certificate ......................................................................... 331

V-1-13 Reboot System................................................................................... 333

V-1-14 Firmware Upgrade .............................................................................. 334

V-1-15 Internal Service User List ...................................................................... 335

V-1-16 Dashboard Control .............................................................................. 336

V-2 Bandwidth Management ................................................................................ 337

Vigor2962 Series User’s Guide

vii

Page 8

Web User Interface...................................................................................... 338

V-2-1 Sessions Limit ..................................................................................... 338

V-2-2 Bandwidth Limit .................................................................................. 340

V-2-3 Quality of Service................................................................................. 342

V-2-4 APP QoS ............................................................................................ 348

V-3 Hotspot Web Portal ...................................................................................... 350

Web User Interface...................................................................................... 350

V-3-1 Profile Setup ...................................................................................... 350

V-3-1-1 Login Method........................................................................... 351

V-3-1-2 Steps for Configuring a Web Portal Profile........................................ 351

V-3-2 Quota Management............................................................................... 367

Application Notes........................................................................................ 370

A-1 How to create Facebook APP for Web Portal Authentication?...................... 370

A-2 How to create Google APP for Web Portal Authentication?......................... 376

V-4 Central Management (AP) .............................................................................. 378

Web User Interface...................................................................................... 379

V-4-1 Dashboard.......................................................................................... 379

V-4-2 Status............................................................................................... 380

V-4-3 WLAN Profile ...................................................................................... 381

V-4-4 AP Maintenance................................................................................... 386

V-4-5 Traffic Graph...................................................................................... 387

V-4-6 Event Log .......................................................................................... 388

V-4-7 Total Traffic....................................................................................... 389

V-4-8 Station Number ................................................................................... 389

V-4-9 Load Balance ...................................................................................... 390

V-5 Central Management (Switch).......................................................................... 392

Web User Interface...................................................................................... 393

V-5-1 Status............................................................................................... 393

V-5-1-1 Switch Status........................................................................... 393

V-5-1-2 Switch Hierarchy....................................................................... 395

V-5-1-3 Detailed Info............................................................................ 396

V-5-2 Profile .............................................................................................. 398

V-5-3 Group............................................................................................... 401

V-5-4 Maintenance....................................................................................... 403

V-5-5 Alert and Log...................................................................................... 404

V-5-5-1 Alert Setup.............................................................................. 404

V-5-5-2 Switch and Port Setup ................................................................ 405

V-5-6 Support List........................................................................................ 407

V-6 Central Management (External Devices) ............................................................. 408

Part VI Others.......................................................................................409

VI-1 Objects Settings......................................................................................... 410

Web User Interface...................................................................................... 411

viii

Vigor2962 Series User’s Guide

Page 9

VI-1-1 IP Object .......................................................................................... 411

VI-1-2 IP Group........................................................................................... 414

VI-1-3 IPv6 Object ....................................................................................... 416

VI-1-4 IPv6 Group ........................................................................................ 418

VI-1-5 Service Type Object............................................................................. 420

VI-1-6 Service Type Group.............................................................................. 422

VI-1-7 Keyword Object.................................................................................. 424

VI-1-8 Keyword Group................................................................................... 426

VI-1-9 File Extension Object ........................................................................... 427

VI-1-10 SMS/Mail Service Object ...................................................................... 429

VI-1-11 Notification Object............................................................................. 434

VI-1-12 String Object.................................................................................... 435

VI-1-13 Country Object ................................................................................. 437

Application Notes........................................................................................ 439

A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN

Disconnection .................................................................................... 439

Part VII Troubleshooting ..........................................................................443

VII-1 Diagnostics .............................................................................................. 444

Web User Interface...................................................................................... 445

VII-1-1 Dial-out Triggering.............................................................................. 445

VII-1-2 Routing Table.................................................................................... 446

VII-1-3 ARP Cache Table ................................................................................ 447

VII-1-4 IPv6 Neighbour Table........................................................................... 448

VII-1-5 DHCP Table....................................................................................... 449

VII-1-6 NAT Sessions Table.............................................................................. 450

VII-1-7 DNS Cache Table ................................................................................ 451

VII-1-8 Ping Diagnosis.................................................................................... 452

VII-1-9 Data Flow Monitor............................................................................... 453

VII-1-10 Port Mirror/Packet Capture.................................................................. 455

VII-1-11 Traffic Graph................................................................................... 458

VII-1-12 VPN Graph ...................................................................................... 459

VII-1-13 Trace Route .................................................................................... 461

VII-1-14 Syslog Explorer................................................................................. 462

VII-1-15 IPv6 TSPC Status............................................................................... 463

VII-1-16 High Availability Status....................................................................... 463

VII-1-17 Authentication Information.................................................................. 465

VII-1-18 DoS Flood Table................................................................................ 467

VII-1-19 Route Policy Diagnosis ........................................................................ 468

VII-2 Checking If the Hardware Status Is OK or Not ..................................................... 470

VII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not ............... 471

Vigor2962 Series User’s Guide

Page 10

VII-4 Pinging the Router from Your Computer............................................................ 474

VII-5 Checking If the ISP Settings are OK or Not......................................................... 476

VII-6 Backing to Factory Default Setting If Necessary .................................................. 477

VII-7 Contacting DrayTek .................................................................................... 478

Part VIII Telnet Commands .......................................................................479

Accessing Telnet of Vigor2962 .............................................................................. 480

Index..................................................................................................714

Vigor2962 Series User’s Guide

Page 11

arrtt II II

nsstt

allll

attii

This part will introduce Vigor router and guide to install the device in hardware and software.

Page 12

Page 13

II--11 IInnttrroodduuccttiioonn

TThhiiss iiss aa ggeenneerriicc IInntteerrnnaattiioonnaall vveerrssiioonn ooff tthhee uusseerr gguuiiddee.. SSppeecciiffiiccaattiioonn,, ccoommppaattiibbiilliittyy aanndd ffeeaattuurreess vvaarryy bbyy rreeggiioonn.. FFoorr ssppeecciiffiicc uusseerr gguuiiddeess ssuuiittaabbllee ffoorr yyoouurr rreeggiioonn oorr pprroodduucctt,, pplleeaassee ccoonnttaacctt llooccaall ddiissttrriibbuuttoorr..

The Vigor2962 Series integrates a rich suite of functions, including NAT, firewall, VPN, load balance, and bandwidth management capability. These products are very suitable for providing multi-integrated solutions to SME markets.

A Virtual Private Network (VPN) is an extension of a private network that encompasses links across shared or public networks like an Intranet. A VPN enables you to send data between two computers across a shared public Internet network in a manner that emulates the properties of a point-to-point private link. The DrayTek Vigor2962 Series VPN router suppo rts Internet-industry standards technology to provide customers with open, interoperable VPN solutions such as X.509, DHCP over Internet Protocol Security (IPsec), and Point-to-Point Tunneling Protocol (PPTP).

Vigor2962 Series User’s Guide

Page 14

II--11--11 IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss

Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.

LED Status Explanation

ACT

SFP

USB

MSG

PoE (for 2962P) P1, P4, P5, P6

(for 2962P)

Left

Right

Left

P2 (Right) ~P6

Right

Blinking The router is powered on and running normally. Off The router is powered off. On The fiber connection is established.

Blinking Off

On The USB device is installed and ready. Off

On / Off /

Blinking On Power sourcing equipment for PoE is enabled.

Off Power sourcing equipment for PoE is disabled. On

Off No PoE equipment connected. On The Ethernet link is established. Off No Ethernet link is established. Blinking The data is transmitting. On The Ethernet link is established with 1/2.5Gbps. Off The Ethernet link is established with less than 1Gbps. On The Ethernet link is established on corresponding port. Off No Ethernet link is established. Blinking The data is transmitting.

Off

The data is transmitting. No fiber connection is established or the system is

hanged.

No USB device is installed. MSG means this LED is user-defined. It will be on / off /

blinking according to the rule defined on WUI.

A PoE equipment is connected to port P1, P4, P5 or P6.

The Ethernet link is established on corresponding port with 1Gbps.

The Ethernet link is established on corresponding port with less than 1Gbps.

Vigor2962 Series User’s Guide

Page 15

Interface Description

The Factory Reset button is used to restore the default settings. Turn on the router (ACT LED is blinking). Press the hole and keep for more

Reset

P2 (Left) Connector for SFP module with the rate of 1G bps.

P2 (Right)~P4

P5~P6 USB1~2 Connector for the USB device.

than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration.

Connector for local network devices (LAN) or a modem for accessing Internet (WAN).

Connectors for remote network devices or local network devices (WAN/LAN) with the rate of 1G/100M/10M bps.

Or connector for a modem for accessing Internet (WAN). Connectors for local network devices (LAN) with the rate of

1G/100M/10M bps.

Connector for a power cord. ON/OFF - Power switch.

Info 1

Info 2

P1 to P4 port can be configurable as WAN / LAN interface. At least, up to two of them can be set as the WAN port at one time.

For Vigor2962P, P1, P4, P5 and P6 also can be connected by PoE equipments.

The PoE Power budget is up to 60W.

Vigor2962 Series User’s Guide

Page 16

II--22 HHaarrddwwaarree IInnssttaallllaattiioonn

II--22--11 IInnssttaalllliinngg VViiggoorr RRoouutteerr

Before starting to configure the router, you have to connect your devices correctly. (For the hardware connection, we take “ac” model as an example.)

1. Connect a modem to any WAN port of Vigor2962 with Ethernet cable (RJ-45) to access Internet.

2. Connect the other end of the cable (RJ-45) to the Ethernet port on your computer (that device also can connect to other computers to form a small area network). The LAN LED for that port on the front panel will light up.

3. Connect the power cord to Vigor2962’s power port on the rear panel, and the other side into a wall outlet.

4. Power on the device by pressing down the power switch on the rear panel. The PWR LED should be ON.

5. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking.

Below shows an outline of the hardware installation for your reference.

Vigor2962 Series User’s Guide

Page 17

II--22--22 WWaallll--MMoouunntteedd IInnssttaallllaattiioonn

The Vigor2962 Series can be mounted on the shelf or on the wall by using standard brackets shown below.

Here we take mounted on the wall as an example. Choose a flat surface (on the wall) which is suitable for placing the router. Make the screw

holes on the short side of the bracket aim at the screw holes on the router. Next, fasten both the bracket and the router with two screws; and fasten both the wall and the bracket with another two screws. Refer to the following figure.

Then, continue to fasten the screws on the other side of the router and the wall with other screws.

When you finished about procedure, the router has been mounted on the wall firmly.

Vigor2962 Series User’s Guide

Page 18

II--33 AAcccceessssiinngg WWeebb PPaaggee

1. Make sure your PC connects to the router correctly.

You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of the guide.

2. Open a web browser on your PC and type http://192.168.1.1. The following window will be open to ask for username and password.

3. Please type “admin/admin” as the Username/Password and click Login.

Info

If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem.

Vigor2962 Series User’s Guide

Page 19

4. Now, the Main Screen will appear. Take Vigor2962 as an example.

Info

5. The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity.

The home page will be different slightly in accordance with the type of the router you have.

Vigor2962 Series User’s Guide

Page 20

II--44 CChhaannggiinngg PPaasssswwoorrdd

Please change the password for the original security of the router.

1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password.

2. Please type “admin/admin” as Username/Password for acce ssing into the web user interface with admin mode.

3. Go to System Maintenance page and choose Administrator Password.

4. Enter the login password (the default is “admin”) on the field of Old Password. Type New Password and Confirm Password. Then click OK to continue.

Info

The maximum length of the password you can set is 23 characters.

Vigor2962 Series User’s Guide

Page 21

5. Now, the password has been changed. Next time, use the new password to access the Web user interface for this router.

Info

Even the password is changed, the Username for logging onto the web user interface is still “admin”.

Vigor2962 Series User’s Guide

Page 22

II--55 DDaasshhbbooaarrdd

The Dashboard provides a convenient way to monitor the current status of the router, including firmware version, system resource usage, LAN and WAN connect ion uptimes, and interface usage. It is refreshed every 5 seconds with the latest information.

For the Dashboard is the landing page after logging into the web configuration utility, you can also bring up the Dashboard by clicking on the Dashboard on the menu bar.

The figure below shows the Dashboard of the Vigor2962. The Dashboards of other Vigor2962 models are may vary slightly due to differences in features.

The System Information section displays general information about the router, such as system uptime, current time, firmware version, LAN MAC Address and so on.

The IPv4 Internet Access section shows the IPv4 connection status of the WAN ports, including their access modes, IP addresses, MAC addresses and uptimes.

The IPv6 Internet Access section shows the IPv6 connection status of the WAN port that has IPv6 enabled. Unlike IPv4, IPv6 support is limited to one WAN port at a time, so there is always at most one IPv6 WAN connection shown.

The Interface section shows the physical connection status of the WAN and LAN interfaces.

Vigor2962 Series User’s Guide

Page 23

The Security section shows the states of the security-related features, including VPN, MyVigor and DoS.

Router Name, Current Time, LAN#, WAN# will bring the configuration page for modification. Simply move the mouse cursor on these items to access the web pages.

II--55--11 VViirrttuuaall PPaanneell

At the top of the Dashboard page is the Virtual Panel, a graphical simulation of the front panel of the router.

The WAN and LAN connectors are shaded with various colours t o i n dicate their status at any given point in time.

Port Color Description

WAN#

P1 ~ P6 (LAN)

Black WAN port is disconnected. Green WAN port is connected at 1 Gbps. Orange WAN port is connected at 10/100 Mbps. Black LAN po rt is disconnected. Green LAN port is connected at 1 Gbps. Orange LAN port is connected at 10/100 Mbps. Black No USB device is connected. USB Green A USB device is connected.

For detailed information about the LED display, refer to I-1-1 LED Indicators and Connectors.

II--55--22 QQuuiicckk AAcccceessss ffoorr CCoommmmoonn UUsseedd MMeennuu

All the menu items can be accessed and arranged orderly on the left side of the main page for your request. For your convenience, some of the most-frequently-used items in the Web Configuration Utility are listed under the Quick Access section on the Dashboard.

Look at the right side of the Dashboard. You will find a group of common used functions grouped under Quick Access.

Vigor2962 Series User’s Guide

Page 24

Move your mouse cursor on any one of the links and click on it. The corresponding setting page will be open immediately.

Hyperlink Destination System Status System Maintenance >> System Status Dynamic DNS Applications >> Dynamic DNS Setup TR-069 System Maintenance >> TR-069 Setting User Management User Management >> User Profile IM/P2P Block CSM >> APP Enforcement Profile Schedule Applications >> Schedule SysLog / Mail Alert System Maintenance >> SysLog / Mail Alert Setup LDAP Applications >> Active Directory /LDAP RADIUS Applications >> RADIUS/TACACS+ Firewall Object Setting Objects Setting >> IP Object Data Flow Monitor Diagnostics >> Data Flow Monitor

Vigor2962 Series User’s Guide

Page 25

In addition, quick access for VPN security settings such as Remote Dial-in User and LAN to LAN are located on the bottom of this page. Scroll down the page to find them and use them

if required.

Note that there is a plus ( to review the detrailed information.

Host connected physically to the router via LAN port(s) will be displayed with green circles in the field of Connected.

) icon located on the left side of LAN/VPN/MyVigor/DoS. Click it

All of the hosts (including wireless clients) displayed with Host ID, IP Address and MAC address indicates that the traffic would be transmitted through LAN port(s) and then the WAN port. The purpose is to perform the traffic monitor of the host(s).

Vigor2962 Series User’s Guide

Page 26

II--55--33 GGUUII MMaapp

All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions.

Vigor2962 Series User’s Guide

Page 27

II--55--44 WWeebb CCoonnssoollee

It is not necessary to use the telnet command via DOS prompt. The changes made by using web console have the same effects as modified through web user interface. The functions/settings modified under Web Console also can be reviewed on the web user interface.

Click the Web Console icon on the top of the main screen to open the following screen.

II--55--55 CCoonnffiigg BBaacckkuupp

There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup.

II--55--66 LLooggoouutt

Click this icon to exit the web user interface.

Vigor2962 Series User’s Guide

Page 28

II--55--77 OOnnlliinnee SSttaattuuss

II--55--77--11 PPhhyyssiiccaall CCoonnnneeccttiioonn

The Physical Connection page displays the status of all the physical network interfaces, including LAN and WAN.

The information shown for every interface can be in green, indicating the interface is enabled and online; or red, indicating the interface is either disabled or offline.

PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv44 PPrroottooccooll

This IPv4 tab displays IPv4 related information of all the LAN and WAN interfaces.

Detailed explanation (for IPv4) is shown below:

Item Description LAN Status IP Address-Displays the IP address of the LAN interface.

TX Packets-Displays the total transmitted packets at the

LAN interface. RX Packets-Displays the total received packets at the LAN

interface. Primary DNS-Displays the primary DNS server address for

WAN interface. Secondary DNS -Displays the secondary DNS server address

for WAN interface.

WAN# Status Enable – Yes in red means such interface is available but

not enabled. Yes in green means such interface is enabled. Line – Displays the physical connection (VDSL, ADSL,

Vigor2962 Series User’s Guide

Page 29

Item Description

Ethernet, or USB) of this interface.

Name – Display the name of the router. Mode - Displays the type of WAN connection (e.g., PPPoE). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. GW IP - Displays the IP address of the default gateway. TX Packets - Displays the total transmitted packets at the

WAN interface. TX Rate - Displays the speed of transmitted octets at the

WAN interface. RX Packets - Displays the total number of received packets

at the WAN interface. RX Rate - Displays the speed of received octets at the WAN

interface.

PPhhyyssiiccaall CCoonnnneeccttiioonn ffoorr IIPPvv66 PPrroottooccooll

This IPv6 tab displays IPv6 related information of all the LAN and WAN interfaces.

Detailed explanation (for IPv6) is shown below:

Item Description LAN Status IP Address- Displays the IPv6 address of the LAN interface..

TX Packets-Displays the total transmitted packets at the LAN

interface. RX Packets-Displays the total received packets at the LAN

interface. TX Bytes - Displays the speed of transmitted octets at the

LAN interface. RX Bytes - Displays the speed of received octets at the LAN

interface.

WAN# IPv6 Status Enable – No in red means such interface is available but not

enabled. Yes in green means such inte rface is enabled. No in

Vigor2962 Series User’s Guide

Page 30

Item Description

red means such interface is not available. Mode - Displays the type of WAN connection (e.g., TSPC). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. Gateway IP - Displays the IP address of the default gateway.

Info

The words in green mean that the WAN connection of that interface is ready for accessing Internet; the words in red mean that the WAN connection of that interface is not ready for accessing Internet.

II--55--77--22 VViirrttuuaall WWAANN

The Virtual WAN screen displays the status of the virtual WAN interfaces. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list the purpose of such WAN connection.

Detailed explanation is shown below:

Item Description Enable Yes- Virtual WAN interface is enabled.

No- Virtual WAN interface is disabled.

Line The WAN port and connection mode used for this virtual

WAN. ADSL- ADSL mode on WAN1. VDSL- VDSL mode on WAN1. Ethernet(WAN2)- The Ethernet WAN2 port is used for this

Name The IPv6 addresses of the WAN interface. The global address

is routable whereas the link local address is for LAN use only.

Mode Gateway address of the IPv6 WAN connection. Up Time Yes: IPv6 support on the WAN interface is enabled.

No: IPv6 support on the WAN interface is disabled.

Application The IPv6 access mode, which can be one of Offline, PPP,

TSPC, AICCU, DHCPv6 Client, Static IPv6, 6in4 Static Tunnel, and 6rd.

IP The IPv6 addresses of the WAN interface. The global address

Vigor2962 Series User’s Guide

Page 31

Item Description

is routable whereas the link local address is for LAN use only.

GW IP Gateway address of the IPv6 WAN connection. TX Packets Total number of IPv6 packets leaving the WAN interface. TX Rate(Bps) The speed of transmitted octets. RX Packets Total number of IPv6 packets received by the WAN interface. RX Rate(Bps) The speed of received octets.

Vigor2962 Series User’s Guide

Page 32

II--66 PPoorrtt SSeettuupp

This page is used for configuring tranmission rate for LAN and WAN ports respectively.

Available settings are explained as follows:

Item Description Port Display the physical ports on Vigor router. Function P1 ~ P4 - These ports are switchable between WAN and LAN

ports. Up to two of interfaces can be set as the WAN port at one

time.

Speed Transmission rate choices for P1 to P6 include:

 Auto  1G  100M  10M

The difference is that P1 is additionally supported with a

2.5G transmission rate. In addition, the SFP module (P2) is specified to the speed of

1G.

Vigor2962 Series User’s Guide

Page 33

II--77 QQuuiicckk SSeettuupp

To register your Vigor router to MyVigor website for getting more service, please follow the steps below to finish the router registration.

1. Open WAN>>Internet Access. Click Details Page of WAN1/WAN2.

Here, we take WAN1 as an example. There are two access modes for you to configure. Choose PPPoE, Static or Dynamic IP

according to the access mode offered by your ISP.

PPPPPPooEE

1. Click Details Page of WAN1. When the following page appears, choose PPPoE.

Vigor2962 Series User’s Guide

Page 34

2. After clicking Enable and entering the Username/Password provided by your ISP, click OK to get the following page.

3. To reboot the system, click OK again.

4. Later, Vigor system will reboot. Please login Vigor router again.

5. Then, you can enjoy surfing on the Internet.

Vigor2962 Series User’s Guide

Page 35

DDHHCCPP

1. Click Details Page of WAN1. When the following page appears, choose Static or Dynamic IP.

2. After clicking Enable, select Obtain an IP address automatically. Click OK to get the following page.

3. To reboot the system, click OK again.

Vigor2962 Series User’s Guide

Page 36

4. Later, Vigor system will reboot. Please login Vigor router again.

5. Then, you can enjoy surfing on the Internet.

Vigor2962 Series User’s Guide

Page 37

II--88 RReeggiisstteerriinngg VViiggoorr RRoouutteerr

To register your Vigor router to MyVigor website for getting more service, please follow the steps below to finish the router registration.

1 Please login the web configuration interface of Vigor router by typing “admin/admin” as

User Name / Password.

2 Click Support Area>>Production Registration from the home page.

3 A Login page will be shown on the screen. Please Enter the account and password that

you created previously. And click Login.

Vigor2962 Series User’s Guide

Page 38

Info

If you haven’t an accessing account, please refer to section Creating an Account for MyVigor to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account.

4 The following page will be displayed after you logging in MyVigor. Type a nickname for

the router, then click Add.

5 When the following page appears, your router information has been added to the

database.

Vigor2962 Series User’s Guide

Page 39

6 After clicking OK, you will see the following page. Your router has been registered to

myvigor website successfully.

Vigor2962 Series User’s Guide

Page 40

This page is left blank.

Vigor2962 Series User’s Guide

Page 41

arrtt IIII

eccttiivviittyy

It means wide area network. Public IP will be used in WAN.

It means local area network. Private IP will be used in LAN. Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP.

When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network.

DNS, LAN DNS, IGMP, LDAP, WOL, RADIUS, SMS, Bonjour, High Availability

Static Route, Load-Balance/Route Policy

Vigor2962 Series User’s Guide

Page 42

IIII--11 WWAANN

It allows users to access Internet.

BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk

IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC). Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP/IP local area networks (LANs), such as host PCs under the management of a router since they do not need to be accessed by the public. Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges:

WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss

As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts. Meanwhile, Vigor router will communicate with other network devices through a public IP address. When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. Thus, all the host PCs can share a common Internet connection.

From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255

GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP

In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is required for bridging customer premises equipment (CPE). Point to Point Protocol over Ethernet (PPPoE) connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator. This implementation provides users with significant ease of use. Meanwhile it provides access control, billing, and type of service according to user requirement.

When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP.

Vigor2962 Series User’s Guide

Page 43

WWeebb UUsseerr IInntteerrffaaccee

IIII--11--11 GGeenneerraall SSeettuupp

This section will introduce some general settings of Internet and explain the connection modes for WAN# in details.

This router supports multiple-WAN function. It allows users to access Internet and combine the bandwidth of the multiple WANs to speed up the transmission through the network. Each WAN port can connect to different ISPs, even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation. Please configure WAN# settings.

This webpage allows you to set general setup for WAN# respectively.

Available settings are explained as follows:

Item Description Load Balance Mode This option is available for multiple-WAN for getting enough

bandwidth for each WAN port. If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed. Otherwise, please choose Auto

Weight to let the router reach the best load balance.

Mode IP Based - The same source / destination IP pair will select

the same WAN interface as policy. It is the default setting. Session Based- All of the WAN interfaces will be used (as

out-going WAN) for passing through new sessions to get better transmission speed. Though good speed test result for throughput might be reached; however, some web site may not open smoothly, especially the site need authentication, e.g., FTP.

If you have no strong demand about speed test result, keep default settings as IP based.

Load Balance Setup Advance - Load Balance for the traffic of STUN, google

STUN, and SIP are disabled in default to prevent from conflict. The following dialog allows you to define protocol, port and name for the traffic not to be applied with load balance. That is, when an item is enabled (checked), it might

Vigor2962 Series User’s Guide

Page 44

not be affected by load balance.

Index Click on the WAN# link to bring up its settings page.

WAN# (1 to 4): Ethernet WAN interface. WAN1, WAN2, WAN3 and WAN4 are available when they are

specified as WAN interfaces on Port Setup. However, each time only two WAN interfaces are allowed to be configured in this page.

Enable Select to enable WAN interface. Physical Mode / Type /

Port Line Speed (Kbps)

DownLink/UpLink

Display the physical mode, physical type and physical port of such WAN interface.

Display the downstream and upstream rate of such WAN interface.

Active Mode Display whether such WAN interface is Active device or

backup device.

Always On - WAN is always enabled. Backup (WAN#) - Display the backup WAN interface for such

WAN when it is disabled.

Load Balance Select to enable the load balance function.

After finished the above settings, click OK to save the settings.

Vigor2962 Series User’s Guide

Page 45

IIII--11--11--11 WWAANN ((EEtthheerrnneett))

WAN# can be configured for physical mode of Ethernet.

Available settings are explained as follows:

Item Description Enable Yes - WAN is enabled.

No - WAN is disabled.

Display Name Optional name to identify the WAN. Enter the description

for the interface.

Physical Mode Physical connection used for this WAN.

Ethernet - WAN connection to be established through the

WAN2 Ethernet port.

Physical Type (Available only when Physical Mode is set to Ethernet)

Auto negotiation- Ethernet connection speed is

automatically negotiation between the router and the ISP’s equipment.

10M full duplex- Ethernet speed is manually set to 10 Mbit/s, full duplex.

100M full duplex- Ethernet speed is manually set to 100 Mbit/s, full duplex.

1G full duplex- Ethernet speed is manually set to 1 Gbit/s, full duplex.

2.5G full duplex- Ethernet speed is manually set to 2.5 Gbit/s, full duplex.

Line Speed (Kbps) It determines the ratio of outbound connections made by

the router across all active WANs. The Line Speed on

WAN>>General Setup must first be set to According to Line Speed before these values can be changed.

Vigor2962 Series User’s Guide

Page 46

DownLink - WAN downlink speed. UpLink - WAN uplink speed.

VLAN Tag insertion Determines whether 802.1ad VLAN tags will be added to

outbound WAN traffic in ADSL/VDSL 2 mode. Check with your ISP to determine if this is required, and if so, the proper tag and priority values to be used.

Enabled - Tagging enabled. Disabled - Tagging disabled. Tag value – Value must be between 1 and 4095. Priority – Priority code point (PCP). Value must be between

0 and 7.

Active Mode Always On - WAN is always enabled.

Failover – WAN is enabled only when other WAN port (see

below) has lost connection.  WAN Failure - When the active WAN failed, the WAN

selected above will be activated as the main network connection.

 Traffic Threshold - When the upload traffic and

download traffic of active WAN reaches the traffic threshold (specified here), the backup WAN will be enabled automatically to share the overloaded data traffic.

Active When - Set the condition for backup connection.

 Any – The selected WAN(s) will be activated when any

master WAN interface disconnects.

 All – All of the backup WANs will be activated only when

all master WAN interface disconnects.

After finished the above settings, click OK to save the settings.

Vigor2962 Series User’s Guide

Page 47

IIII--11--22 IInntteerrnneett AAcccceessss

Vigor router supports multi-WAN function. Users can set different WAN settings for Internet Access.

Available settings are explained as follows:

Item Description Index The WAN interface. Display Name Reflects the Display Name configured for the WAN in the

General Setup section.

Physical Mode Reflects the Physical Mode configured for the WAN in the

General Setup section.

Access Mode Internet access mode of the WAN.

The details page of that mode will be popped up. If not, click Details Page for accessing the page to configure the settings.

Details Page Click this button to bring up the Internet Access settings

page.

IPv6 Click this button to bring up the IPv6 settings page.

When IPv6 is enabled, the button label is shown in green:

- IPv6 is enabled.

- IPv6 is disabled.

DHCP Client Option Click this button to configure additional DHCP client

options. DHCP packets can be processed by adding option number

and data information when such function is enabled and configured.

Vigor2962 Series User’s Guide

Page 48

Options List - Shows all the DHCP options that have been configured in the system.

Enable/Disable – If selected, DHCP option entry is enabled. If unselected, DHCP option entry is disabled. Each DHCP option is composed by an option number with data. For example,

Option number:100 Data: abcd

When it is enabled, the specified values for DHCP option will be seen in DHCP reply packets.

Interface – WAN interface(s) to which this entry is applicable. WAN1 through WAN2 are physical WANs that can be set up in the WAN>>General Setup and WAN>>Internet Access sections. WAN8 through WAN23 are virtual WANs that can be set up in the WAN>>Multi-VLAN section.

Option Number – Enter a number for this function. DataType – Choose the type (ASCII or Hex or Address List)

for the data to be stored. Type of data in the Data field:

 ASCII Character: A text string. Example: /path.  Hexadecimal Digit: A hexadecimal string. Valid

characters are from 0 to 9 and from a to f. Example: 2f70617468.

 Address List: One or more IPv4 addresses, delimited

by commas.

Data – Data of this DHCP option. Enter the content of the data to be processed by the function of DHCP option.

Info

If you choose to configure option 61 here, the detailed settings in WAN>>Interface Access will be overwritten.

Vigor2962 Series User’s Guide

Page 49

IIII--11--22--11 WWAANN## DDeettaaiillss PPaaggee ((PPPPPPooEE,, PPhhyyssiiccaall MMooddee:: EEtthheerrnneett))

To choose PPPoE as the accessing protocol of the Internet, please select PPPoE from the WAN>>Internet Access >>WAN2 page. The following web page will be shown.

Available settings are explained as follows:

Item Description Enable/Disable Enable or disable PPPoE access mode. ISP Access Setup Enter your allocated username, password and authentication

parameters according to the information provided by your ISP.

Username – Username provided by the ISP for PPPoE authentication.

Password – Password provided by the ISP for PPPoE authentication.

More Options -

 Service Name (Optional) - Sets the PPP service name

tag. Required by some ISPs. Leave blank unless instructed otherwise by your ISP.

PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you

also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server. Thus, the PC can access Internet through such direction.

Vigor2962 Series User’s Guide

Page 50

For Wired LAN – If you check this box, PCs on the same network can use another set of PPPoE session (different with the Host PC) to access into Internet.

WAN Connection Detection

Configures how the WAN connection is monitored. Mode – Choose ARP Detect or Ping Detect for the system to

execute for WAN detection.  ARP Detect - The router broadcasts an ARP request

every 5 seconds. If no response is received within 30 seconds, the WAN connection is deemed to have failed.

 Ping Detect - The router sends an ICMP (Internet

Control Message Protocol) echo request every second to the host, whose address is specified in the Ping IP field, to verify the WAN connection. If the remote host does not respond within 30 seconds, the WAN connection is deemed to have failed.

If you choose Ping Detect as the detection mode, you have to enter required settings for the following items.

 Primary/Secondary Ping IP – Enter Primary or Secondary

IP address in this field for pinging.

 Ping Gateway IP – Enable this setting to use current WAN

gateway IP address for pinging.

With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.

 TTL (Time to Live) – Time To Live, the maximum allowed

number of hops to the ping destination. Valid values range from 1 to 255.

 Ping Interval – Enter the interval for the system to

execute the PING operation.

 Ping Retry – Enter the number of times that the system is

allowed to execute the PING operation before WAN disconnection is judged.

MTU Maximum Transmission Unit, the size of the largest packet,

in bytes, that can be transmitted to the WAN. The maximum value is 1500. For PPPoE connections, there is always an 8-byte overhead, so the maximum valid MTU value for PPPoE is 1492.

Path MTU Discovery – Use this feature to determine the optimal MTU size for the WAN.

Click Path MTU Discovery to open the following dialog.

 Path MTU to – Select Host / IP, for an IPv4 address or

Host / IPv6, for an IPv6 address, and then enter the IP address in the textbox.

 MTU size start from – Determine the starting point

value of the packet.

 MTU reduce size by – Number of octets by which to

Vigor2962 Series User’s Guide

Page 51

decrease the 1500-byte MTU. Start with a 0 value for the reduce size and click the Detect button. If the message Fail is returned, increase the MTU reduce size and try again. Repeat until you see the message Success, indicating that the optimal MTU size has been reached.

 Detect – Click it to detect a suitable MTU value.  Accept – After clicking it, the detected value will be

displayed in the field of MTU.

PPP/MP Setup PPP Authentication – The protocol used for PPP

authentication.  PAP only - Only PAP (Password Authentication Protocol)

is used.

 PAP or CHAP - Both PAP and CHAP

(Challenge-Handshake Authentication Protocol) can be used for PPP authentication. Router negotiates with the PPTP or L2TP server to determine which protocol to use.

Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action.

IP Address Assignment (IPCP) - Configure the router according to how your ISP allocates WAN IP address(es) to you.

 Static - ISP has assigned a fixed WAN IP address, which

is to be entered below in Fixed IP Address.

 Dynamic - WAN IP address is dynamically allocated. Fixed IP Address – Enter a fixed IP address.

WAN IP Alias - Click to enter multiple WAN IP addresses

assigned by your ISP.

Dial-Out Schedule Specify up to 4 time schedule entries to enable or disable the

Vigor2962 Series User’s Guide

Page 52

WAN. All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page.

TTL Change the TTL value – Enable or disable the TTL (Time to

Live) for a packet transmitted through Vigor router.  If enabled - TTL value will be reduced (-1) when it

passess through Vigor router. It will cause the client, accessing Internet through Vigor router, be blocked by certain ISP when TTL value becomes “0”.

 If disabled – TTL value will not be reduced. Then, when

a packet passes through Vigor router, it will not be cancelled. That is, the client who sends out the packet will not be blocked by ISP.

MAC Default MAC Address – Use the default MAC address for the

WAN Ethernet port. Specify a MAC Address – Specify a MAC address for the WAN

Ethernet port. Select this option if your ISP authenticates by MAC addresses.

After finishing all the settings here, please click OK to activate them.

IIII--11--22--22 WWAANN## DDeettaaiillss PPaaggee ((SSttaattiicc oorr DDyynnaammiicc IIPP,, PPhhyyssiiccaall MMooddee:: EEtthheerrnneett))

For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service pr ovider will offer a public subnet. If you have a public subnet, you could assign an IP address or many IP address to the WAN interface.

To use Static or Dynamic IP as the accessing protocol of the internet, please click the Static or Dynamic IP tab. The following web page will be shown.

Vigor2962 Series User’s Guide

Page 53

Available settings are explained as follows:

Item Description Enable/Disable Enable or disable Static or Dynamic IP access mode. IP Network Settings Obtain an IP address automatically – The router receives IP

configuration information from a DHCP server. More Options - Click to set more options.

 Router Name – Used by some ISPs. Contact your ISP for

the appropriate values.

 Domain Name –Used by some ISPs. Contact your ISP for

the appropriate values.

Enable DHCP Client Identifier* - Used by some ISPs that authenticates using DHCP Client Identifier (Option 61). To enable, tick this box and fill out the Username and Password fields below.

Specify an IP address –Use the IP address, Subnet Mask and Gateway values specified below.

 IP Address –WAN IP address assigned by the ISP.  Subnet Mask –WAN subnet mask.  Gateway IP Address – IP address of the WAN Gateway.

WAN IP Alias - Click to enter multiple WAN IP addresses assigned by your ISP.

Vigor2962 Series User’s Guide

Page 54

DNS Server IP Address Primary IP Address - IP address of primary DNS server.

Secondary IP Address - IP address of secondary DNS server.

WAN Connection Detection

Configures how the WAN connection is monitored.

Mode – Choose ARP Detect, Ping Detect, Always On or Strict ARP Detect for the system to execute for WAN detection.

 ARP Detect - The router broadcasts an ARP request

every 5 seconds. If no response is received within 30 seconds, the WAN connection is deemed to have failed.

 Ping Detect - The router sends an ICMP (Internet

 Always On- The router assumes the WAN connection is

always active.

If you choose Ping Detect as the detection mode, you have to enter required settings for the following items.

 Primary/Secondary Ping IP – Enter Primary or

Secondary IP address in this field for pinging.

 Ping Gateway IP – Enable this setting to use current

WAN gateway IP address for pinging.

With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.

 TTL (Time to Live) – Time To Live, the maximum

allowed number of hops to the ping destination. Valid values range from 1 to 255.

 Ping Interval – Enter the interval for the system to

execute the PING operation.

Vigor2962 Series User’s Guide

Page 55

 Ping Retry – Enter the number of times that the system

is allowed to execute the PING operation before WAN disconnection is judged.

MTU Maximum Transmission Unit, the size of the largest packet,

in bytes, that can be transmitted to the WAN. The maximum value is 1500. For PPPoE connections, there is always an 8-byte overhead, so the maximum valid MTU value for PPPoE is 1492.

Path MTU Discovery – Use this feature to determine the optimal MTU size for the WAN.

Click Detect to open the following dialog.

 Path MTU to – Select Host / IP, for an IPv4 address or

Host / IPv6, for an IPv6 address, and then enter the IP address in the textbox.

 MTU size start from – Determine the starting point

value of the packet.

 MTU reduce size by – Number of octets by which to

 Detect – Click it to detect a suitable MTU value.  Accept – After clicking it, the detected value will be

displayed in the field of MTU.

Keep WAN Connection Enable PING to keep alive - If selected, ping a WAN host to

maintain the connection. If unselected, ping to keep WAN alive is disabled.

PING to the IP - IP address of host to be pinged. PING Interval - Number of minutes to wait before sending a

ping request to the WAN host.

TTL Change the TTL value – Enable or disable the TTL (Time to

Live) for a packet transmitted through Vigor router.  If enabled - TTL value will be reduced (-1) when it

passess through Vigor router. It will cause the client, accessing Internet through Vigor router, be blocked by certain ISP when TTL value becomes “0”.

 If disabled – TTL value will not be reduced. Then, when

a packet passes through Vigor router, it will not be cancelled. That is, the client who sends out the packet will not be blocked by ISP.

RIP Protocol Routing Information Protocol is abbreviated as RIP(RFC1058).

If selected, the router can exchange routing information with other routers.

Vigor2962 Series User’s Guide

Page 56

Bridge Mode Enable Bridge Mode - If selected, the router will bridge the

WAN connection to a LAN group. Enable Full Bridge Mode - If the function is enabled, the

router will work as a bridge modem which is able to forward incoming packets with VLAN tags.

Enable Firewall – It is available when Bridge Mode is enabled. When both Bridge Mode and Firewall check boxes are enabled, the settings configured (user profiles) under User Management will be ignored. And all of the filter rules defined and enabled in Firewall menu will be activated.

Bridge Subnet – LAN subnet to be bridged.

MAC Address

Default MAC Address – Use the default MAC address for the

WAN Ethernet port. Specify a MAC Address – Specify a MAC address for the WAN

Ethernet port. Select this option if your ISP authenticates by MAC addresses.

After finishing all the settings here, please click OK to activate them.

Vigor2962 Series User’s Guide

Page 57

IIII--11--22--33 WWAANN## DDeettaaiillss PPaaggee ffoorr IIPPvv66

When Offline is selected, the IPv6 connection will be disabled.

IIII--11--22--44 WWAANN## DDeettaaiillss PPaaggee ffoorr IIPPvv66

IPv6 WAN address is assigned along with the IPv4 WAN address during PPPoE negotiation. This IPv6 access mode requires that the IPv4 uses PPPoE.

–

OOfffflliinnee

–

PPPPPP

Available settings are explained as follows:

Item Description WAN Connection

Detection

Vigor2962 Series User’s Guide

Configures how the WAN connection is monitored. Mode – Choose Ping Detect or Always On for the system to

execute for the WAN detection.  Ping Detect - The router sends an ICMP (Internet

 Always On - The router assumes the WAN connection is

always active.

If you choose Ping Detect as the detection mode, you have to enter required settings for the following items.

Page 58

 Ping IP/Hostname – Enter IP address in this field for

pinging.

 TTL (Time to Live) – Time To Live, the maximum

allowed number of hops to the ping destination. Valid values range from 1 to 255.

RIPng Protocol RIPng (RIP next generation) offers the same functions and

benefits as IPv4 RIP v2.

Below shows an example for successful IPv6 connection based on PPP mode.

Info

IIII--11--22--55 WWAANN## DDeettaaiillss PPaaggee ffoorr IIPPvv66

Tunnel setup protocol client (TSPC) is an application which could help you to connect to IPv6 network easily.

Please make sure your IPv4 WAN connection is OK and apply one free account from hexago (http://gogonet.gogo6.com/page/freenet6-account connection. TSPC would connect to tunnel broker and requests a tunnel according to the specifications inside the configuration file. It gets a public IPv6 IP address and an IPv6 prefix from the tunnel broker and then monitors the state of the tunnel in background.

After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet.

At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan (hinet), the Netherlands, Australia and UK.

–

TTSSPPCC

) before you try to use TSPC for network

Vigor2962 Series User’s Guide