Draytek Vigor3910 Series User Manual

Page 1
Page 2
Vigor3910 Series
Multi-WAN Security Router
User’s Guide
Version: 1.0
Firmware Version: V3.9.1.2
(For future update, please visit DrayTek web site)
Date: December 18, 2019
ii
Vigor3910 Series User’s Guide
Page 3
Copyrights
© All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.
Trademarks
The following trademarks are used in this document:
Microsoft is a registered trademark of Microsoft Corp. Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7, 10 and Explorer are trademarks of Microsoft Corp. Apple and Mac OS are registered trademarks of Apple Inc. Other products may be trademarks or registered trademarks of their respective manufacturers.
Safety Instructions
Read the installation guide thoroughly before you set up the router.
The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel.
Do not try to open or repair the router yourself.
Do not place the router in a damp or humid place, e.g. a bathroom. The router should be used in a sheltered area, within a temperature range of +5 to +40 Celsius. Do not expose the router to direct sunlight or other heat sources. The housing and electronic components
may be damaged by direct sunlight or heat sources.
Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards. Keep the package out of reach of children. When you want to dispose of the router, please follow local regulations on conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship
or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.
Be a Registered Owner
Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com.
Firmware & Tools Updates
Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult
the DrayTek web site for more information on newest firmware, tools and documents.
http://www.DrayTek.com
Vigor3910 Series User’s Guide
iii
Page 4
v
TTaabbllee ooff CCoonntteennttss
Part I Installation................................................................................................................1
I-1 Introduction ................................................................................................................................... 2
I-1-1 Indicators and Connectors .................................................................................................. 3
I-2 Hardware Installation .................................................................................................................... 5
I-2-1 Installing Vigor Router......................................................................................................... 5
I-2-2 Rack-Mounted Installation................................................................................................... 6
I-2-3 Installing USB Printer to Vigor Router................................................................................. 7
I-3 Accessing Web Page.................................................................................................................. 14
I-4 Changing Password.................................................................................................................... 16
I-5 Dashboard................................................................................................................................... 18
I-5-1 Virtual Panel...................................................................................................................... 19
I-5-2 Quick Access for Common Used Menu ............................................................................ 20
I-5-3 GUI Map ............................................................................................................................ 21
I-5-4 Web Console..................................................................................................................... 23
I-5-5 Config Backup................................................................................................................... 23
I-5-6 Manual Download.............................................................................................................. 24
I-5-7 Logout................................................................................................................................ 24
I-5-8 Online Status..................................................................................................................... 25
I-5-8-1 Physical Connection......................................................................25
I-5-8-2 Virtual WAN ...............................................................................27
I-6 Registering Vigor Router............................................................................................................. 28
Part II Connectivity ..........................................................................................................31
II-1 Port Setup.................................................................................................................................. 32
II-2 WAN........................................................................................................................................... 33
Web User Interface.................................................................................................................... 35
II-2-1 General Setup .................................................................................................................. 35
II-2-2 Internet Access................................................................................................................. 38
II-2-2-1 Details Page for PPPoE in Etherenet WAN...........................................40
II-2-2-2 Details Page for Static or Dynamic IP in Etherenet WAN..........................42
II-2-2-3 Details Page for IPv6 – Offline in Ethernet WAN....................................46
II-2-2-4 Details Page for IPv6 – PPP in Ethernet WAN........................................46
II-2-2-5 Details Page for IPv6 – TSPC in Etherenet WAN.....................................47
II-2-2-6 Details Page for IPv6 – AICCU in Ethernet WAN.....................................49
II-2-2-7 Details Page for IPv6 – DHCPv6 Client in Ethernet WAN...........................51
II-2-2-8 Details Page for IPv6 – Static IPv6 in Ethernet WAN ...............................52
II-2-2-9 Details Page for IPv6 – 6in4 Static Tunnel in Ethernet WAN......................53
II-2-2-10 Details Page for IPv6 – 6rd in Ethernet WAN.......................................55
II-2-3 Multi-VLAN ....................................................................................................................... 57
II-3 LAN............................................................................................................................................ 60
Web User Interface.................................................................................................................... 62
II-3-1 General Setup .................................................................................................................. 62
II-3-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup........................63
i
Vigor3910 Series User’s Guide
Page 5
II-3-1-2 Details Page for LAN1 – IPv6 Setup....................................................66
II-3-1-3 Details Page for IP Routed Subnet ....................................................71
II-3-1-4 DHCP Server Option .....................................................................72
II-3-2 VLAN................................................................................................................................ 74
II-3-3 Bind IP to MAC................................................................................................................. 76
II-3-4 PPPoE Server .................................................................................................................. 78
II-4 NAT ............................................................................................................................................ 79
Web User Interface.................................................................................................................... 80
II-4-1 Port Redirection................................................................................................................ 80
II-4-2 DMZ Host ......................................................................................................................... 84
II-4-3 Open Ports ....................................................................................................................... 87
II-4-4 Port Triggering.................................................................................................................. 89
II-4-5 ALG................................................................................................................................... 92
II-5 Applications................................................................................................................................ 93
Web User Interface.................................................................................................................... 95
II-5-1 Dynamic DNS................................................................................................................... 95
II-5-2 LAN DNS / DNS Forwarding.......................................................................................... 100
II-5-3 DNS Security..................................................................................................................103
II-5-3-1 General Setup .......................................................................... 103
II-5-3-2 Domain Diagnose....................................................................... 104
II-5-4 Schedule......................................................................................................................... 105
II-5-5 RADIUS/TACACS+........................................................................................................ 108
II-5-5-1 External RADIUS........................................................................ 108
II-5-5-2 Internal RADIUS ........................................................................ 110
II-5-5-3 External TACACS+...................................................................... 112
II-5-6 Active Directory/ LDAP................................................................................................... 113
II-5-7 IGMP............................................................................................................................... 116
II-5-7-1 General Setting ........................................................................ 116
II-5-7-2 Working Group ......................................................................... 117
II-5-8 Wake on LAN ................................................................................................................. 118
II-5-9 SMS / Mail Alert Service................................................................................................. 119
II-5-10 Bonjour......................................................................................................................... 121
II-5-11 High Availability............................................................................................................ 124
II-5-11-1 General Setup......................................................................... 124
II-5-11-2 Config Sync ............................................................................ 126
Application Notes.....................................................................................................................128
A-1 How to Implement the LDAP/AD Authentication for User Management? ......... 128
A-2 How to use DrayDDNS?..................................................................... 130
II-6 Routing..................................................................................................................................... 135
Web User Interface.................................................................................................................. 136
II-6-1 Static Route.................................................................................................................... 136
II-6-2 Load-Balance /Route Policy........................................................................................... 140
II-6-2-1 General Setup .......................................................................... 140
II-6-2-2 Diagnose for Route Policy ............................................................ 146
II-6-3 OSPF.............................................................................................................................. 148
Vigor3910 Series User’s Guide
v
Page 6
II-6-4 BGP................................................................................................................................ 150
II-6-4-1 Basic Settings........................................................................... 151
II-6-4-2 Static Network ......................................................................... 152
Application Notes.....................................................................................................................153
A-1 How to Customize a Secure Route between VPN Router and Remote Router by Using
Route Policy ...................................................................................... 153
Part III VPN .....................................................................................................................157
III-1 VPN and Remote Access........................................................................................................ 158
Web User Interface.................................................................................................................. 158
III-1-1 Remote Access Control................................................................................................. 159
III-1-2 PPP General Setup....................................................................................................... 160
III-1-3 IPsec General Setup ..................................................................................................... 162
III-1-4 IPsec Peer Identity ........................................................................................................ 164
III-1-5 OpenVPN ...................................................................................................................... 166
III-1-5-1 General Setup ......................................................................... 166
III-1-5-2 Client Config........................................................................... 167
III-1-6 Remote Dial-in User...................................................................................................... 168
III-1-7 LAN to LAN.................................................................................................................... 171
III-1-8 VPN Trunk Management............................................................................................... 182
III-1-9 Connection Management.............................................................................................. 191
Application Notes.....................................................................................................................193
A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec
Tunnel (Main Mode)............................................................................. 193
III-2 SSL VPN.................................................................................................................................198
Web User Interface.................................................................................................................. 199
III-2-1 General Setup ............................................................................................................... 199
III-2-2 User Account................................................................................................................. 200
III-3 Certificate Management.......................................................................................................... 204
Web User Interface.................................................................................................................. 205
III-3-1 Local Certificate............................................................................................................. 205
III-3-2 Trusted CA Certificate................................................................................................... 209
III-3-3 Certificate Backup ......................................................................................................... 211
III-3-4 Self-Signed Certificate................................................................................................... 212
Part IV Security..............................................................................................................213
IV-1 Firewall....................................................................................................................................214
Web User Interface.................................................................................................................. 216
IV-1-1 General Setup............................................................................................................... 216
IV-1-2 Filter Setup.................................................................................................................... 221
IV-1-3 Defense Setup .............................................................................................................. 230
IV-1-3-1 DoS Defense............................................................................ 230
IV-1-3-2 Spoofing Defense...................................................................... 233
IV-1-4 Diagnose.......................................................................................................................233
vi
Vigor3910 Series User’s Guide
Page 7
Application Notes.....................................................................................................................236
A-1 How to Configure Certain Computers Accessing to Internet........................ 236
IV-2 CSM (Central Security Managem ent)..................................................................................... 239
Web User Interface.................................................................................................................. 240
IV-2-1 APP Enforcement Profile.............................................................................................. 240
IV-2-2 URL Content Filter Profile............................................................................................. 242
IV-2-3 Web Content Filter Profile............................................................................................. 246
IV-2-4 DNS Filter Profile .......................................................................................................... 250
Application Notes.....................................................................................................................252
A-1 How to Create an Account for MyVigor ................................................. 252
A-2 How to Block Facebook Service Accessed by the Use rs via W e b Cont ent Fil ter / UR L
Content Filter.................................................................................... 257
A-3 How to use APP Enforcement to block application like Facebook, YouTube or
TeamViewer?..................................................................................... 262
Part V Management .......................................................................................................267
V-1 System Maintenance............................................................................................................... 268
Web User Interface.................................................................................................................. 269
V-1-1 System Status................................................................................................................269
V-1-2 TR-069........................................................................................................................... 271
V-1-2-1 ACS and CPE Settings.................................................................. 271
V-1-2-2 Reporting Configuration.............................................................. 273
V-1-2-3 Export Parameters..................................................................... 274
V-1-3 Administrator Password................................................................................................. 275
V-1-4 User Password............................................................................................................... 278
V-1-5 Login Page Greeting...................................................................................................... 281
V-1-6 Configuration Backup..................................................................................................... 283
V-1-7 Configuration Export ...................................................................................................... 285
V-1-8 Syslog/Mail Alert ............................................................................................................ 286
V-1-9 Time and Date................................................................................................................ 289
V-1-10 SNMP........................................................................................................................... 290
V-1-11 Management................................................................................................................ 293
V-1-12 Self-Signed Certificate................................................................................................. 297
V-1-13 Reboot System............................................................................................................. 299
V-1-14 Firmware Upgrade ....................................................................................................... 300
V-1-15 Activation...................................................................................................................... 301
V-1-16 Internal Service User List............................................................................................. 302
V-1-17 Dashboard Control....................................................................................................... 303
V-2 Bandwidth Management.......................................................................................................... 304
Web User Interface.................................................................................................................. 306
V-2-1 Sessions Limit................................................................................................................ 306
V-2-2 Bandwidth Limit.............................................................................................................. 308
V-2-3 Quality of Service........................................................................................................... 310
V-3 User Management................................................................................................................... 317
Vigor3910 Series User’s Guide
vii
Page 8
Web User Interface.................................................................................................................. 318
V-3-1 General Setup................................................................................................................ 318
V-3-2 User Profile .................................................................................................................... 320
V-3-3 User Group..................................................................................................................... 324
V-3-4 User Online Status......................................................................................................... 326
V-3-5 PPPoE User Online Status............................................................................................ 327
Application Notes.....................................................................................................................328
A-1 How to authenticate clients via User Management................................... 328
A-2 How to use Landing Page Feature ....................................................... 337
V-4 Hots pot Web Portal.................................................................................................................. 341
Web User Interface.................................................................................................................. 342
V-4-1 Profile Setup................................................................................................................... 342
V-4-1-1 Login Method........................................................................... 342
V-4-1-2 Steps for Configuring a Web Portal Profile........................................ 344
V-4-2 Quota Management ....................................................................................................... 360
Application Notes.....................................................................................................................363
A-1 How to allow users login to Vigor’s Hotspot with their social media accounts (e.g.,
Facebook & Google)............................................................................. 363
A-2 How to allow hotspot clients to get login PIN code via SMS?........................ 371
Part VI Others.................................................................................................................379
VI-1 Objects Settings...................................................................................................................... 380
Web User Interface.................................................................................................................. 381
VI-1-1 IP Object ....................................................................................................................... 381
VI-1-2 IP Group........................................................................................................................ 385
VI-1-3 IPv6 Object.................................................................................................................... 386
VI-1-4 IPv6 Group....................................................................................................................388
VI-1-5 Service Type Object...................................................................................................... 389
VI-1-6 Service Type Group...................................................................................................... 391
VI-1-7 Keyword Object............................................................................................................. 393
VI-1-8 Keyword Group............................................................................................................. 395
VI-1-9 File Extension Object.................................................................................................... 396
VI-1-10 SMS/Mail Service Object ............................................................................................ 398
VI-1-11 Notification Object....................................................................................................... 403
VI-1-12 String Object ............................................................................................................... 405
VI-1-13 Country Object............................................................................................................ 406
Application Notes.....................................................................................................................408
A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN
Disconnection .................................................................................... 408
Part VII Troubleshooting ...............................................................................................413
VII-1Diagnostics............................................................................................................................. 414
Web User Interface.................................................................................................................. 415
VII-1-1 Dial-out Triggering........................................................................................................ 415
viii
Vigor3910 Series User’s Guide
Page 9
VII-1-2 Routing Table............................................................................................................... 416
VII-1-3 ARP Cache Table ........................................................................................................ 417
VII-1-4 IPv6 Neighbour Table .................................................................................................. 418
VII-1-5 DHCP Table................................................................................................................. 419
VII-1-6 NAT Sessions Table .................................................................................................... 420
VII-1-7 DNS Cache Table........................................................................................................ 421
VII-1-8 Ping Diagnosis............................................................................................................. 422
VII-1-9 Data Flow Monitor........................................................................................................ 424
VII-1-10 Traffic Graph.............................................................................................................. 426
VII-1-11 Trace Route ............................................................................................................... 427
VII-1-13 Syslog Explorer.......................................................................................................... 428
VII-1-14 IPv6 TSPC Status...................................................................................................... 429
VII-1-15 High Availability Status .............................................................................................. 430
VII-1-16 Authentication Information......................................................................................... 432
VII-1-17 DoS Flood Table........................................................................................................ 433
VII-1-18 Route Policy Diagnosis.............................................................................................. 434
VII-2 Checking If the Hardware Status Is OK or Not...................................................................... 436
VII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not.................... 437
VII-4 Pinging the Router from Your Computer ............................................................................... 440
VII-5 Checking If the ISP Settings are OK or Not........................................................................... 442
VII-6 Backing to Factory Default Setting If Necessary................................................................... 443
VII-7 Contacting DrayTek............................................................................................................... 444
Part VIII DrayTek Tools..................................................................................................445
VIII-1 SmartVPN Client................................................................................................................... 446
VIII-1-1 DrayTek Android-based SmartVPN APP for the establishment of SSL VPN connection
................................................................................................................................................. 446
VIII-1-2 How to Use SmartVPN Android APP to Establish SSL VPN Tunnel?........................ 447
Part IX Telnet Commands
Accessing Telnet of Vigor3910....................................................................................................... 452
..............................................................................................451
Vigor3910 Series User’s Guide
ix
Page 10
Page 11
P
arrtt II II
P
a
nsstt
n
allll
a
attii
a
o
o
n
n
This part will introduce Vigor router and guide to install the device in hardware and software.
Vigor3910 Series User’s Guide
1
Page 12
II--11 IInnttrroodduuccttiioonn
TThhiiss iiss aa ggeenneerriicc IInntteerrnnaattiioonnaall vveerrssiioonn ooff tthhee uusseerr gguuiiddee.. SSppeecciiffiiccaattiioonn,, ccoommppaattiibbiilliittyy aanndd ffeeaattuurreess vvaarryy bbyy rreeggiioonn.. FFoorr ssppeecciiffiicc uusseerr gguuiiddeess ssuuiittaabbllee ffoorr yyoouurr rreeggiioonn oorr pprroodduucctt,, pplleeaassee ccoonnttaacctt llooccaall ddiissttrriibbuuttoorr..
Vigor3910 Series, a broadband router, integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth.
By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly and offers several proto cols (such as IPSec/PPTP/L2TP) with up to 100 VPN tunnels.
The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy easily. CSM (Content Security Management) provides users control and management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before. By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside.
Object-based firewall is flexible and allows your network be safe. In addition, Vigor3910 Series supports USB interface for connecting USB printer to share printer, USB storage device for sharing files, or for 3G/4G WAN.
2
Vigor3910 Series User’s Guide
Page 13
II--11--11 IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss
Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.
LED Status Explanation
PWR
ACT
USB
SFP+
P3~P12
LED on Connector
DMZ
LAN
WAN1~ WAN4
Left LED (Green)
Right LED (Green)
Left LED
Right LED
Left LED
Right LED
On Off Blinking Off On Off On Blinking Off
On (Left) Off (Left) Blinking (L) On (Right)
Off (Right)
On The port is connected. Off The port is disconnected. Blinking The data is transmitting. On The port is connected with 1000Mbps. Off The port is connected with 10/100Mbps.
On The port is connected. Off The port is disconnected. Blinking The data is transmitting. On The port is connected with 1000Mbps. Off The port is connected with 10/100Mbps On The port is connected. Off The port is disconnected. Blinking The data is transmitting. On The port is connected with 1000Mbps. Off The port is connected with 10/100Mbps
The router is powered on. The router is powered off. The system is active. The system is hanged. The USB device is installed and ready. No USB device is installed. The fiber connection is established. The data is transmitting. No fiber connection is established or the system is
hanged. The Ethernet link is established on corresponding port.
No Ethernet link is established. The data is transmitting. The Ethernet link is established on corresponding port
with 1G Mbps or above. The Ethernet link is established on corresponding port
with less than 1G Mbps.
Vigor3910 Series User’s Guide
3
Page 14
Interface Description
USB1 / USB2 Connecter for the USB device. Console Provided for technician use. SFP+
(P1~P2)
2.5GBase-T (P3~P4)
GbE P5~P8 Connectors for remote network devices or local network devices
GbE P9~P12 Connecter for local network devices (LAN) with the rate of
Connecter for SFP module with the rate of 10G/1G bps.
Connector for remote network devices or local network devices (WAN/LAN) with the rate of 2.5G/1G/100M/10M bps.
(WAN/LAN) with the rate of 1G/100M/10M bps.
1G/100M/10M bps. The Factory Reset button is used to restore the default settings. Turn
on the router (ACT LED is blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration.
Connecter for a power cord. ON/OFF - Power switch.
4
Vigor3910 Series User’s Guide
Page 15
II--22 HHaarrddwwaarree IInnssttaallllaattiioonn
II--22--11 IInnssttaalllliinngg VViiggoorr RRoouutteerr
Before starting to configure the router, you have to connect your devices correctly.
1. Connect a modem to any WAN port of Vigor3910 with Ethernet cable (RJ-45) to access Internet.
2. Connect the other end of the cable (RJ-45) to the Ethernet port on your computer (that device also can connect to other computers to form a small area network). The LAN LED for that port on the front panel will light up.
3. Connect a server/router (depends on your requirement) to any WAN port of Vigor3910 with Ethernet cable (RJ-45). The WAN LED will light up.
4. Connect the power cord to Vigor3910’s power port on the rear panel, and the other side into a wall outlet.
5. Power on the device by pressing down the power switch on the rear panel. The PWR LED should be ON.
6. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking.
Below shows an outline of the hardware installation for your reference.
Vigor3910 Series User’s Guide
5
Page 16
II--22--22 RRaacckk--MMoouunntteedd IInnssttaallllaattiioonn
The Vigor3910 Series can be mounted on the wall by using standard brackets shown below.
Attach the brackets to the chassis of a rack. The second bracket attaches the other side of the chassis.
After the bracket installation, the Vigor3910 Series chassis can be installed in a rack by using four screws for each side of the rack.
Desktop Type Installation
Rubber pads are included with the Vigor3910 Series. These rubber pads improve the air circulation and decrease unnecessary rubbing on the desktop.
6
Vigor3910 Series User’s Guide
Page 17
7
II--22--33 IInnssttaalllliinngg UUSSBB PPrriinntteerr ttoo VViiggoorr RRoouutteerr
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made ba sed on Windows 7. For other Windows system, please visit www.DrayTek.com.
Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
1. Connect the printer with the router through USB/parallel port.
2. Open All Programs>>Getting Started>>Devices and Printers.
3. Click Add a printer.
Vigor3910 Series User’s Guide
Page 18
4. A dialog will appear. Click Add a local printer and click Next.
5. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next.
8
Vigor3910 Series User’s Guide
Page 19
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next.
7. Click Standard and choose Generic Network Card.
Vigor3910 Series User’s Guide
9
Page 20
8. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next.
9. Type a name for the chosen printer. Click Next.
10
Vigor3910 Series User’s Guide
Page 21
10. Choose Do not share this printer and click Next.
11. Then, in the following dialog, click Finish.
Vigor3910 Series User’s Guide
11
Page 22
12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties.
13. Edit the property of the new printer you have added by clicking Configure Port.
12
Vigor3910 Series User’s Guide
Page 23
14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name.
Vigor3910 Series User’s Guide
13
Page 24
4
II--33 AAcccceessssiinngg WWeebb PPaaggee
1. Make sure your PC connects to the router correctly.
You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of the guide.
2. Open a web browser on your PC and type http://192.168.1.1. The following window will be open to ask for username and password.
3. Please type “admin/admin” as the Username/Password and click Login.
Info
If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem.
1
Vigor3910 Series User’s Guide
Page 25
4. Now, the Main Screen will appear.
Info
The home page will be different slightly in accordance with the type of the router you have.
5. The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity.
Vigor3910 Series User’s Guide
15
Page 26
II--44 CChhaannggiinngg PPaasssswwoorrdd
Please change the password for the original security of the router.
1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password.
2. Please type “admin/admin” as Username/Password for acce ssing into the web user interface with admin mode.
3. Go to System Maintenance page and choose Administrator Password.
4. Enter the login password (the default is “admin”) on the field of Old Password. Type
New Password and Confirm Password. Then click OK to continue.
Info
5. Now, the password has been changed. Next time, use the new password to access the Web user interface for this router.
The maximum length of the password you can set is 23 characters.
16
Vigor3910 Series User’s Guide
Page 27
7
Info
Even the password is changed, the Username for logging onto the web user interface is still “admin”.
Vigor3910 Series User’s Guide
1
Page 28
II--55 DDaasshhbbooaarrdd
Dashboard shows the connection status including System Information, IPv4 In ternet Access, IPv6 Internet Access, Interface (physical connection), Security and Quick Access.
Click Dashboard from the main menu on the left side of the main page.
A web page with default selections will be displayed on the screen. Refer to the following figure:
18
Vigor3910 Series User’s Guide
Page 29
II--55--11 VViirrttuuaall PPaanneell
On the top of the Dashboard, a virtual panel (simulating the physical panel of the router) displays the physical interface connection. It will be refreshed every five seconds. When you move and click the mouse cursor on LAN, or WAN, related web setting page will be open for you to configure if required.
Port Color Description
LAN
WAN
Black LAN port is disconnected. Orange LAN port is connected at 10/100 Mbps. Green LAN port is connected at 1 Gbps. Black WAN port is disconnected. Orange WAN port is connected at 10/100 Mbps. Green WAN port is connected at 1 Gbps.
For detailed information about the LED display, refer to I-1-1 LED Indicators and Connectors.
Vigor3910 Series User’s Guide
19
Page 30
II--55--22 QQuuiicckk AAcccceessss ffoorr CCoommmmoonn UUsseedd MMeennuu
All the menu items can be accessed and arranged orderly on the left side of the main page for your request. However, some important and common used menu items which can be accessed in a quick way just for convenience.
Look at the right side of the Dashboard. You will find a group of common used functions grouped under Quick Access.
The function links of System Status, Dynamic DDNS, TR-069, User Management, IM/P2P Block, Schedule, Syslog/Mail Alert, LDAP, RADIUS, Firewall Object Setting and Data Flow Monitor are displayed here. Move your mouse cursor on any one of the items and click on it. The corresponding setting page will be open immediately.
Besides, LAN, IP Routed Subnet, WAN interfaces, VPN security settings such as Remote Dial-in User and LAN to LAN also can be accessed on this page easily. Scroll down the page to find them and move your mouse cursor on the item to open the configuration web page.
20
Vigor3910 Series User’s Guide
Page 31
Note that there is a plus ( LAN connection(s) used presently.
All of the hosts (including wireless clients) displayed with Host ID, IP Address and MAC address indicates that the traffic would be transmitted through LAN port(s) and then the WAN port. The purpose is to perform the traffic monitor of the host(s).
II--55--33 GGUUII MMaapp
) icon located on the left side of VPN/LAN. Click it to review the
All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions.
Vigor3910 Series User’s Guide
21
Page 32
22
Vigor3910 Series User’s Guide
Page 33
II--55--44 WWeebb CCoonnssoollee
It is not necessary to use the telnet command via DOS prompt. The changes made by using web console have the same effects as modified through web user interface. The functions/settings modified under Web Console also can be reviewed on the web user interface.
Click the Web Console icon on the top of the main screen to open the following screen.
II--55--55 CCoonnffiigg BBaacckkuupp
There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup.
Simply click the icon on the top of the main screen.
Vigor3910 Series User’s Guide
23
Page 34
4
II--55--66 MMaannuuaall DDoowwnnllooaadd
Click this icon to open online user’s guide of Vigor router. This document offers detailed information for the settings on web user interface.
II--55--77 LLooggoouutt
Click this icon to exit the web user interface.
2
Vigor3910 Series User’s Guide
Page 35
II--55--88 OOnnlliinnee SSttaattuuss
II--55--88--11 PPhhyyssiiccaall CCoonnnneeccttiioonn
Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on.
Physical Connection for IPv4 Protocol
Vigor3910 Series User’s Guide
25
Page 36
Physical Connection for IPv6 Protocol
26
Detailed explanation (for IPv4) is shown below:
Item Description LAN Status Primary DNS-Displays the primary DNS server address for
WAN interface. Secondary DNS -Displays the secondary DNS server address
for WAN interface.
IP Address-Displays the IP address of the LAN interface. TX Packets-Displays the total transmitted packets at the
LAN interface. RX Packets-Displays the total received packets at the LAN
interface.
WAN1 to WAN8 Status Enable – Yes in red means such interface is available but
not enabled. Yes in green means such interface is enabled. Line – Displays the physical connection (VDSL, ADSL,
Ethernet, or USB) of this interface. Name – Display the name of the router.
Vigor3910 Series User’s Guide
Page 37
7
Item Description
Mode - Displays the type of WAN connection (e.g., PPPoE). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. GW IP - Displays the IP address of the default gateway. TX Packets - Displays the total transmitted packets at the
WAN interface. TX Rate - Displays the speed of transmitted octets at the
WAN interface. RX Packets - Displays the total number of received packets
at the WAN interface. RX Rate - Displays the speed of received octets at the WAN
interface.
Detailed explanation (for IPv6) is shown below:
Item Description LAN Status IP Address- Displays the IPv6 address of the LAN interface..
TX Packets-Displays the total transmitted packets at the LAN
interface. RX Packets-Displays the total received packets at the LAN
interface. TX Bytes - Displays the speed of transmitted octets at the
LAN interface. RX Bytes - Displays the speed of received octets at the LAN
interface.
WAN1 to WAN8 IPv6 Status Enable – No in red means such interface is available but not
enabled. Yes in green means such inte rface is enabled. No in red means such interface is not available.
Mode - Displays the type of WAN connection (e.g., TSPC). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. Gateway IP - Displays the IP address of the default gateway.
Info
II--55--88--22 VViirrttuuaall WWAANN
The words in green mean that the WAN connection of that interface is ready for accessing Internet; the words in red mean that the WAN connection of that interf ace is not ready for accessing Internet.
Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list i-9the purpose of such WAN connection.
Vigor3910 Series User’s Guide
2
Page 38
II--66 RReeggiisstteerriinngg VViiggoorr RRoouutteerr
You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the steps below to finish the router registration.
1 Please login the web configuration interface of Vigor router by typing “admin/admin” as
User Name / Password.
2 Click Support Area>>Production Registration from the home page.
3 A Login page will be shown on the screen. Please type the account and password that
you created previously. And click Login.
28
Vigor3910 Series User’s Guide
Page 39
Info
If you haven’t an accessing account, please refer to section Creating an Account for MyVigor to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account.
4 The following page will be displayed after you logging in MyVigor. Type a nickname for
the router, then click Add.
5 When the following page appears, your router information has been added to the
database.
Vigor3910 Series User’s Guide
29
Page 40
6 After clicking OK, you will see the following page. Your router has been registered to
myvigor website successfully.
30
Vigor3910 Series User’s Guide
Page 41
P
arrtt IIII
P
a
C
o
n
n
C
o
n
eccttiivviittyy
n
e
It means wide area network. Public IP will be used in WAN.
It means local area network. Private IP will be used in LAN.
Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP.
When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network.
DNS, LAN DNS, IGMP, WOL, RADIUS, …
Static Route, Load-Balance/Route Policy, OSPF, BGP
Vigor3910 Series User’s Guide
31
Page 42
IIII--11 PPoorrtt SSeettuupp
This page is used for configuring tranmission rate for LAN and WAN ports respectively. Due to hardware restriction, the speed of P3 is the same as the speed of P4. So whenever P3 is
changed, P4 is changed too and vice versa.
Available settings are explained as follows:
Item Description Port Display the physical ports on Vigor router. Function P1 ~ P8 - These ports are switchable between WAN and LAN
ports.
Speed P1 ~ P2 - Available options include Auto, 10G and 1G.
P3 ~ P4 - Available options include Auto and 2.5G. Due to the hardware limitation, the speed for P4 is the same as P3.
P5 ~ P12- Available options include Auto, 1G, 100M, and 10 M.
32
Vigor3910 Series User’s Guide
Page 43
IIII--22 WWAANN
It allows users to access Internet.
BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk
IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC). Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP/IP local area networks (LANs), such as host PCs under the management of a router since they do not need to be accessed by the public. Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges:
WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss
As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts. Meanwhile, Vigor router will communicate with other network devices through a public IP address. When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. Thus, all the host PCs can share a common Internet connection.
From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255
GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP
In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is required for bridging customer premises equipment (CPE). Point to Point Protocol over Ethernet (PPPoE) connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator. This implementation provides users with significant ease of use. Meanwhile it provides access control, billing, and type of service according to user requirement.
When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP.
NNeettwwoorrkk CCoonnnneeccttiioonn bbyy 33GG//44GG UUSSBB MMooddeemm
For 3G/4G mobile communication through Access Point is popular more and more, Vigor3910 adds the function of 3G/4G network connection for such purpose. By connecting 3G/4G USB Modem to the USB port of Vigor3910, it can support LTE/HSDPA/UMTS/EDGE/ GPRS/GSM and the future 3G/4G standard (HSUPA, etc). Vigor3910n with 3G/4G USB Modem allows you to receive 3G/4G signals at any place such as your car or certain location holding outdoor activity and share the bandwidth for using by more people. Users can use LAN ports on the router to access Internet. Also, they can access Internet via 802.11(a/b/g/n/ac) wireless standard, and enjoy the powerful firewall, bandwidth management, and VPN features of Vigor3910n series.
Vigor3910 Series User’s Guide
33
Page 44
4
After connecting into the router, 3G/4G USB Modem will be regarded as the WAN3/WAN4 port. However, the original WAN1 and WAN2 still can be used and Load-Balance can be done in the router. Besides, 3G/4G USB Modem in WAN3/WAN4 also can be used as backu p device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G/4G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information.
3
Vigor3910 Series User’s Guide
Page 45
WWeebb UUsseerr IInntteerrffaaccee
IIII--22--11 GGeenneerraall SSeettuupp
This section will introduce some general settings of Internet and explain the connection modes for WAN1~WAN8 in details.
This router supports multiple-WAN function. It allows users to access Internet and combine the bandwidth of the multiple WANs to speed up the transmission through the network. Each WAN port can connect to different ISPs, Even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation. Please configure WAN# settings.
This webpage allows you to set general setup for WAN# respectively.
Available settings are explained as follows:
Item Description Load Balance Mode This option is available for multiple-WAN for getting enough
Index (WAN1 ~WAN8) Click the WAN interface link under Index to access into the
Vigor3910 Series User’s Guide
bandwidth for each WAN port. If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed. Otherwise, please choose Auto
Weight to let the router reach the best load balance. IP Based - The same source / destination IP pair will select
the same WAN interface as policy. It is the default setting. Session Based- All of the WAN interfaces will be used (as
out-going WAN) for passing through new sessions to get better transmission speed. Though good speed test result for throughput might be reached; however, some web site may not open smoothly, especially the site need authentication, e.g., FTP.
If you have no strong demand about speed test result, keep default settings as IP based.
35
Page 46
WAN configuration page.
Enable Check the box to enable this WAN interface. Physical Mode / Type /
Port Line Speed(Kbps)
DownLink/UpLink
Display the physical mode, physical type, and LAN port of this WAN interface.
Display the downstream and upstream rate of this WAN interface.
Active Mode Display whether this WAN interface is Active device or
backup device. Backup (WAN#)- Display the backup WAN interface for this
WAN when it is disabled.
Load Balance V means the function of load balance for such WAN interface
is enabled.
Info
In default, each WAN port is enabled.
After finished the above settings, click OK to save the settings. To configure WAN interface settings, click the WAN# link to open the following page.
Available settings are explained as follows:
Item Description Enable Choose Yes to invoke the settings for this WAN interface.
Choose No to disable the settings for this WAN interface. Display Name Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. Physical Type You can change the physical type for WAN or choose Auto
36
Vigor3910 Series User’s Guide
Page 47
7
negotiation for determined by the system. Line Speed If your choose According to Line Speed as the Load
Balance Mode, please type the line speed for downloading
and uploading for such WAN interface. The unit is kbps. VLAN Tag insertion Enable – Enable the function of VLAN with tag.
The router will add specific VLAN number to all packets on
the WAN while sending them out.
Please type the tag value and specify the priority for the
packets sending by WAN1.
Disable – Disable the function of VLAN with tag.
Tag value – Type the value as the VLAN ID number. The
range is form 0 to 4095.
Priority – Type the packet priority number for such VLAN.
The range is from 0 to 7. Active Mode Always On - Choose Always On to make the WAN
connection being activated always.
Load Balance: Check this box to enable auto load balance
function for this WAN interface.
When the data traffic is large, the WAN interface with the
function enabled will balance the data transmission
automatically among all of the WAN interfaces in
connection status.
Failover – Choose it to make the WAN connection as a
backup connection.
WAN Failure – When the active WAN failed, such WAN
will be activated as the main network connection.
Traffic Threshold – When the data traffic of active
WAN reaches the traffic threshold (specified here), the failover WAN will be enabled automatically to share the overloaded data traffic.
Active When If you choose Failover as the Active Mode, the option of
Active When will appear.
Any of the selected WAN disconnect – Such WAN
connection will be activated when any selected WAN interface (checked below) disconnects.
All of the selected WAN disconnect – Such WAN
connection will be activated only when all of selected WAN interfaces (checked below) disconnect.
Check boxes for WAN1 to WAN5 – Specify the WAN
interface by checking the WAN box.
After finished the above settings, click OK to save the settings.
Vigor3910 Series User’s Guide
3
Page 48
IIII--22--22 IInntteerrnneett AAcccceessss
For the router supports multi-WAN function, the users can set different WAN settings for Internet Access. Due to different Physical Mode for WAN interface, the Access Mode for these connections also varies. Refer to the following figures.
Available settings are explained as follows:
Item Description Index Display the WAN interface. Display Name It shows the name of the WAN1 ~ WAN8 that entered in
general setup.
Physical Mode / Port It shows the physical connection for WAN(Ethernet) /port
number according to the real network connection.
Access Mode Use the drop down list to choose a proper access mode. The
details page of that mode will be popped up. If not, click Details Page for accessing the page to configure the settings.
Details Page This button will open different web page (based on IPv4)
according to the access mode that you choose in WAN interface.
Note that Details Page will be changed slightly based on physical mode.
IPv6 This button will open different web page (based on Physical
Mode) to setup IPv6 Internet Access Mode for WAN interface. If IPv6 service is active on this WAN interface, the color of
“IPv6” will become green.
DHCP Client Option This button allows you to configure DHCP client options.
DHCP packets can be processed by adding option number and data information when such function is enabled and configured.
38
Vigor3910 Series User’s Guide
Page 49
Enable – Check the box to enable the function of DHCP Option. Each DHCP option is composed by an option number with data. For example,
Option number:100 Data: abcd
When such function is enabled, the specified values for DHCP option will be seen in DHCP reply packets.
Interface – Specify the WAN interface(s) that will be overwritten by this function. WAN13 ~ WAN52 can be located under WAN>>Multi-VLAN.
Option Number – Type a number for such function. DataType – Choose the type (ASCII or Hex) for the data to be
stored. Data – Type the content of the data to be processed by the
function of DHCP option.
Info
If you choose to configure option 61 here, the detailed settings in WAN>>Interface Access will be overwritten.
Vigor3910 Series User’s Guide
39
Page 50
IIII--22--22--11 DDeettaaiillss PPaaggee ffoorr PPPPPPooEE iinn EEtthheerreenneett WWAANN
To choose PPPoE as the accessing protocol of the Internet, please select PPPoE from the WAN>>Internet Access >>WAN1 page. The following web page will be shown.
Available settings are explained as follows:
Item Description Enable/Disable Click Enable for activating this function. If you click Disable,
this function will be closed and all the settings that you adjusted in this page will be invalid.
ISP Access Setup Enter your allocated username, password and authentication
parameters according to the information provided by your ISP.
Username – Type in the username provided by ISP in this field.
The maximum length of the user name you can set is 63 characters.
Password – Type in the pa ssword provided by ISP in this field. The maximum length of the password you can set is 62
characters. More Options - It shows optional settings for configuration. Service Name - Enter the description of the specific
network service.
PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you
40
Vigor3910 Series User’s Guide
Page 51
also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server. Thus, the PC can access Internet through such direction.
For Wired LAN – If you check this box, PCs on the same network can use another set of PPPoE session (different with the Host PC) to access into Internet.
Note: To have PPPoA Pass-through, please choose PPPoA protocol and check the box(es) here. The router will behave like a modem which only serves the PPPoE client on the LAN. That’s, the router will offer PPPoA dial-up connection.
WAN Connection Detection
Such function allows you to verify whether network connection is alive or not through ARP Detect or Ping Detect.
Mode – Choose PPP Detect or Ping Detect for the system to execute for WAN detection. If you choose Ping Detect as the detection mode, you have to type required settings for the following items.
Primary/Secondary Ping IP – If you choose Ping Detect as
detection mode, you have to type Primary or Secondary IP address in this field for pinging.
Ping Gateway IP – If you choose Ping Detect as detection
mode, you also can enable this setting to use current WAN gateway IP address for pinging.
With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.
TTL (Time to Live) – Set TTL value of PING operation. Ping Interval – Type the interval for the system to
execute the PING operation.
Ping Retry – Type the number of times that the system is
allowed to execute the PING operation before WAN disconnection is judged.
MTU It means Max Transmit Unit for packet.
Path MTU Discovery – It is used to detect the maximum MTU
size of a packet not to be segmented in specific transmit path.
Click Detect to open the following dialog.
Path MTU to – Type the IP address as the specific
transmit path.
MTU size start from – Determine the starting point
value of the packet.
MTU reduce size by– It determines the decreasing size
of MTU value. For example, the number specified in this field is “8”. The maximum MTU size is “1500”. After clicking the “detect” button, the system will
Vigor3910 Series User’s Guide
41
Page 52
calculate and get the suitable MTU value such as 1500, 1492, 1484 and etc., automatically.
Detect – Click it to detect a suitable MTU value Accept– After clicking it, the detected value will be
displayed in the field of MTU.
PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for
PPP. Idle Timeout – Set the timeout for breaking down the
Internet after passing through the time without any action. IP Address Assignment Method (IPCP) - Usually ISP
dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function.
Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address.
WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog.
Dial-Out Schedule You can type in four sets of time schedule for your request.
All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page.
TTL Change the TTL value – Check the box to enable the TTL
(Time to Live) for a packet transmitted through Vigor router. If enabled - TTL value will be reduced (-1) when it
passess through Vigor router. It will cause the client, accessing Internet through Vigor router, be blocked by certain ISP when TTL value becomes “0”.
If disabled – TTL value will not be reduced. Then, when
a packet passes through Vigor router, it will not be cancelled. That is, the client who sends out the packet will not be blocked by ISP.
Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router.
Specify a MAC Address – Type the MAC address for the router manually.
After finishing all the settings here, please click OK to activate them.
IIII--22--22--22 DDeettaaiillss PPaaggee ffoorr SSttaattiicc oorr DDyynnaammiicc IIPP iinn EEtthheerreenneett WWAANN
For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service pr ovider will offer a public subnet. If you have a public subnet, you could assign an IP address or many IP address to the WAN interface.
To use Static or Dynamic IP as the accessing protocol of the internet, please click the Static or Dynamic IP tab. The following web page will be shown.
42
Vigor3910 Series User’s Guide
Page 53
Available settings are explained as follows:
Item Description Enable / Disable Click Enable for activating this function. If you click Disable,
this function will be closed and all the settings that you adjusted in this page will be invalid.
IP Network Settings This group allows you to obtain an IP address automatically
and allows you type in IP address manually. Obtain an IP address automatically – Click this button to
obtain the IP address automatically if you want to use
Dynamic IP mode. More Options - It shows optional settings for configuration.
Router Name: Type in the router name prov ided by ISP. Domain Name: Type in the domain name that you have
assigned.
Enable DHCP Client Identifier: Check the box to
specify username and password as the DHCP client identifier for some ISP.
- Username: Type a name as username. The maximum length of the user name you can set is 63 characters.
- Password: Type a password. The maximum length of the password you can set is 62 characters.
Vigor3910 Series User’s Guide
43
Page 54
4
Specify an IP address – Click this radio button to specify some data if you want to use Static IP mode.
IP Address: Type the IP address. Subnet Mask: Type the subnet mask. Gateway IP Address: Type the gateway IP address.
WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using.
DNS Server IP Address Type in the primary IP address for the router if you want to
use Static IP mode. If necessary, type in secondary IP address for necessity in the future.
WAN Connection Detection
Such function allows you to verify whether network connection is alive or not through ARP Detect or Ping Detect.
Mode – Choose ARP Detect, Ping Detect, Always On or Strict ARP Detect for the system to execute for WAN detection. If
you choose Ping Detect as the detection mode, you have to type required settings for the following items.
Primary/Secondary Ping IP – If you choose Ping Detect as
detection mode, you have to type Primary or Secondary IP address in this field for pinging.
Ping Gateway IP – If you choose Ping Detect as detection
mode, you also can enable this setting to use current WAN gateway IP address for pinging.
With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.
TTL (Time to Live) – Set TTL value of PING operation. Ping Interval – Type the interval for the system to
execute the PING operation.
Ping Retry – Type the number of times that the system is
allowed to execute the PING operation before WAN disconnection is judged.
MTU It means Max Transmit Unit for packet.
Path MTU Discovery – It is used to detect the maximum MTU
size of a packet not to be segmented in specific transmit path.
Click Detect to open the following dialog.
Path MTU to – Type the IP address as the specific
transmit path.
MTU size start from – Determine the starting point
value of the packet. Default setting is 1500.
MTU reduce size by– It determines the decreasing size
of MTU value. For example, the number specified in this field is “8”. The maximum MTU size is “1500”.
4
Vigor3910 Series User’s Guide
Page 55
After clicking the “detect” button, the system will calculate and get the suitable MTU value such as 1500, 1492, 1484 and etc., automatically.
Detect – Click it to detect a suitable MTU value Accept– After clicking it, the detected value will be
displayed in the field of MTU.
Keep WAN Connection Normally, this function is designed for Dynamic IP
environments because some ISPs will drop connections if there is no traffic within certain periods of time. Check
Enable PING to keep alive box to activate this function. PING to the IP - If you enable the PING function, please
specify the IP address for the system to PING it for keeping alive.
PING Interval - Enter the interval for the system to execute the PING operation.
TTL Change the TTL value – Check the box to enable the TTL
(Time to Live) for a packet transmitted through Vigor router. If enabled - TTL value will be reduced (-1) when it
passess through Vigor router. It will cause the client, accessing Internet through Vigor router, be blocked by certain ISP when TTL value becomes “0”.
If disabled – TTL value will not be reduced. Then, when
a packet passes through Vigor router, it will not be cancelled. That is, the client who sends out the packet will not be blocked by ISP.
RIP Protocol
Routing Information Protocol is abbreviated as RIP(RFC1058) specifying how routers exchange routing tables information. Click Enable RIP for activating this function.
Bridge Mode Enable Bridge Mode - If the function is enabled, the router
will work as a bridge modem. Enable Firewall – It is available when Bridge Mode is
enabled. When both Bridge Mode and Firewall check boxes are enabled, the settings configured (user profiles) under User Management will be ignored. And all of the filter rules defined and enabled in Firewall menu will be activated.
Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface.
MAC Address Default MAC Address: Click this radio button to use default
MAC address for the router. Specify a MAC Address: Some Cable service providers
specify a specific MAC address for access authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field.
After finishing all the settings here, please click OK to activate them.
Vigor3910 Series User’s Guide
45
Page 56
IIII--22--22--33 DDeettaaiillss PPaaggee ffoorr IIPPvv66
When Offline is selected, the IPv6 connection will be disabled.
IIII--22--22--44 DDeettaaiillss PPaaggee ffoorr IIPPvv66
During the procedure of IPv4 PPPoE connection, we can get the IPv6 Link Local Address between the gateway and Vigor router through IPv6CP. Later, use DHCPv6 or accept RA to acquire the IPv6 prefix address (such as: 2001:B010:7300:200::/64) offered by the ISP. In addition, PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix.
OOfffflliinnee iinn EEtthheerrnneett WWAANN
PPPPPP iinn EEtthheerrnneett WWAANN
No need to type any other information for PPP mode.
Available settings are explained as follows:
Item Description WAN Connection
Detection
Such function allows you to verify whether network connection is alive or not through Ping Detect.
Mode – Choose Always On or Ping Detect for the system to execute for WAN detection. Always On means no detection will be executed. The network connection will be on always.
Ping IP/Hostname – If you choose Ping Detect as
detection mode, you have to type IP address in this field for pinging.
46
Vigor3910 Series User’s Guide
Page 57
TTL (Time to Live) –If you choose Ping Detect as
detection mode, you have to type TTL value.
RIPng Protocol RIPng (RIP next generation) offers the same functions and
benefits as IPv4 RIP v2.
Below shows an example for successful IPv6 connection based on PPP mode.
Info
IIII--22--22--55 DDeettaaiillss PPaaggee ffoorr IIPPvv66
Tunnel setup protocol client (TSPC) is an application which could help you to connect to IPv6 network easily.
Please make sure your IPv4 WAN connection is OK and apply one free account from hexago (http://gogonet.gogo6.com/page/freenet6-account connection. TSPC would connect to tunnel broker and requests a tunnel according to the specifications inside the configuration file. It gets a public IPv6 IP address and an IPv6 prefix from the tunnel broker and then monitors the state of the tunnel in background.
After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet.
At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan (hinet), the Netherlands, Australia and UK.
TTSSPPCC iinn EEtthheerreenneett WWAANN
) before you try to use TSPC for network
Vigor3910 Series User’s Guide
47
Loading...