Manuel d'utilisation / d'entretien du produit Vigor2830 du fabricant Draytek
Aller à la page of 355
.
Vigor2830 Series User’s Guide ii.
Vigor2830 Series User’s Guide iii Vigor2830 Series ADSL2+ Security Firewall User’s Guide Version: 2.0 Firmware Version: V3.3.7.1 Date: 25/05/2012.
Vigor2830 Series User’s Guide iv Copyright Information Copyright Declarations Copyright 2012 All rights reserved. This pub lication contains information that is protected by copyright.
Vigor2830 Series User’s Guide v European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town ship, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2830 Ser ies Router DrayTek Corp.
Vigor2830 Series User’s Guide vi.
Vigor2830 Series User’s Guide vii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s Pref ace .......................................................................................................... 1 1.1 Web Conf iguration Bu ttons Explanation .
Vigor2830 Series User’s Guide viii 3.3 NA T ........................................................................................................................ ............... 86 3.3.1 Port Re direction .........................................
Vigor2830 Series User’s Guide ix 3.11.1 Local Ce rtificate ....................................................................................................... ... 205 3.11.2 Trusted CA Certificate ................................................
Vigor2830 Series User’s Guide x Application a nd Exampl es ....................................................................... 287 4.1 How to Configure Mult i-Subnet in Vigor2 830 .................................................................
Vigor2830 Series User’s Guide 1 P P r r e e f f a a c c e e Vigor2830 series is an ADSL2+ router. It inte grates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth.
Vigor2830 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. 1 1 .
Vigor2830 Series User’s Guide 3 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinkin g). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, re lease the button.
Vigor2830 Series User’s Guide 4 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 8 8 3 3 0 0 n n / / V V i i g g o o r r 2 2 8 8 3 3 0 0 n n - - p p l l u u s s LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off.
Vigor2830 Series User’s Guide 5 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on once to wait for client device making net work connect ion throug h WPS. Press "Wireless LAN ON/OFF/WPS" butt on twice to enable (WLAN LED on) or disable ( WLAN LED of f) wireless co nnection.
Vigor2830 Series User’s Guide 6 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 8 8 3 3 0 0 V V n n LED Status Explanation Blinking The router is powe red on and runnin g normally . ACT (Activity) Off The router is p owered off. On USB device is connected and ready for use.
Vigor2830 Series User’s Guide 7 On The port is conn ected with 1000Mbps. Right LED (Green) Off The por t is connected w ith 10/100Mbps wh en left LED is on.
Vigor2830 Series User’s Guide 8 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on once to wait for client device making net work connect ion throug h WPS. Press "Wireless LAN ON/OFF/WPS" butt on twice to enable (WLAN LED on) or disable ( WLAN LED of f) wireless co nnection.
Vigor2830 Series User’s Guide 9 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the ADSL interface to the external ADSL splitter with an ADSL line cable for all models.
Vigor2830 Series User’s Guide 10 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for shar ing printing. All the PCs connected this router can print documents via the router.
Vigor2830 Series User’s Guide 11 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port .
Vigor2830 Series User’s Guide 12 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next . 7. Click Standard and choose Generic Network Card.
Vigor2830 Series User’s Guide 13 9. Now, your system will ask you to choose right na me of the printer t hat you installed onto the router. Such step can make correct driver loaded onto your PC.
Vigor2830 Series User’s Guide 14 The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Note 1: Some printers with the fax/scanning or other additional fun ctions are not supported.
Vigor2830 Series User’s Guide 15 I I n n i i t t i i a a l l C C o o n n f f i i g g u u r r a a t t i i o o n n For using the router properly, it is necessar y for you to change the password of web configuration for security and adjust primary basic settings.
Vigor2830 Series User’s Guide 16 4. Now, the Main Screen will appear. Note: The home page will be different slightly in accordance with the ty pe of the router you have.
Vigor2830 Series User’s Guide 17 4. Enter the login password (the defa ult is blank) on the field of Old Password . Type New Password . Then click OK to continue. 5. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router.
Vigor2830 Series User’s Guide 18 On the next page as shown below, please select the WAN interface that you use. If DSL interface is used, please choose WAN1; if Ethernet interface is used, please choose WAN2; if 3G USB modem is used, please choose WAN3.
Vigor2830 Series User’s Guide 19 PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode.
Vigor2830 Series User’s Guide 20 Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard.
Vigor2830 Series User’s Guide 21 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet. 1 1 4 4 8 8 3 3 B B r r i i d d g g e e d d I I P P / / 1 1 4 4 8 8 3 3 R R o o u u t t e e d d I I P P 1.
Vigor2830 Series User’s Guide 22 Cancel Click it to give up the quick start wizard. 2. Please type in the IP address/mask/gateway info rmation originally provided by your ISP. Then click Next for viewing summary of such connection. 3. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear.
Vigor2830 Series User’s Guide 23 2 2 . . 3 3 . . 2 2 F F o o r r W W A A N N 2 2 ( ( E E t t h h e e r r n n e e t t ) ) WAN2 is dedicated to physical mode in Ethernet.
Vigor2830 Series User’s Guide 24 1. Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type.
Vigor2830 Series User’s Guide 25 3. Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.
Vigor2830 Series User’s Guide 26 2. Click PPTP/L2TP as the Internet Access Type. Then click Next to continue. Available settings are explained as follows: Item Description User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP.
Vigor2830 Series User’s Guide 27 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet. S S t t a a t t i i c c I I P P 1. Choose WAN2 as the WAN Interface and click the Next button.
Vigor2830 Series User’s Guide 28 Available settings are explained as follows: Item Description WAN IP Type the IP address. Subnet Mask Type the subnet mask. Gateway Type the IP address of gateway. Primary DNS Type in the primary IP address for the router.
Vigor2830 Series User’s Guide 29 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.
Vigor2830 Series User’s Guide 30 D D H H C C P P 1. Choose WAN2 as WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. 2. Click DHCP as the Internet Access type. Simply click Next to continue.
Vigor2830 Series User’s Guide 31 Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 3. After finished the settings above, click Next for viewing summary of such connection. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear.
Vigor2830 Series User’s Guide 32 2 2 . . 3 3 . . 3 3 F F o o r r W W A A N N 3 3 ( ( U U S S B B ) ) To use 3G USB modem for networ k connection, please choose WAN3. 1. Choose WAN3 as WAN Interface. 2. Then, click Next for viewing summary of such connection.
Vigor2830 Series User’s Guide 33 2 2 . . 4 4 S S e e r r v v i i c c e e A A c c t t i i v v a a t t i i o o n n W W i i z z a a r r d d Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a quick and easy way.
Vigor2830 Series User’s Guide 34 3. In the following page, you can activate the We b content filter services at the same time or individually. When you finish the selection, please click Next . Commtouch is the web content filter based on Commtouch operated in the worldwide.
Vigor2830 Series User’s Guide 35 Note: The service will be activated and applied as the default rule configured in Firewall>>General Setup . 6. Now, the web page will display the service th at you have activated according to your selection(s).
Vigor2830 Series User’s Guide 36 2 2 . . 5 5 O O n n l l i i n n e e S S t t a a t t u u s s 2 2 . . 5 5 . . 1 1 P P h h y y s s i i c c a a l l C C o o n n n n e e c c t t i i o o n n Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on.
Vigor2830 Series User’s Guide 37 Item Description Status not enabled. Yes in green means such interface is enabled. Line – Displays the physical connection (VDSL, ADSL, Ethernet, or USB) of this interface. Name – Display the name of the router. Mode - Displays the type of WAN connection (e.
Vigor2830 Series User’s Guide 38 2 2 . . 6 6 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you.
Vigor2830 Series User’s Guide 39 3 A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login . If not, please refer to section 4.12 Creating an Account for MyVigor . 4 The following page will be displayed after you logging in MyVigor.
Vigor2830 Series User’s Guide 40 5 When the following page appears, please t ype in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click o n the box of Registration Date). After adding the basic information for the router, please click Submit .
Vigor2830 Series User’s Guide 41 A A d d v v a a n n c c e e d d C C o o n n f f i i g g u u r r a a t t i i o o n n This chapter will guide users to ex ecute advanced web configuration. 1. Open a web browser on your PC and type http://192. 168.1.1.
Vigor2830 Series User’s Guide 42 As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.
Vigor2830 Series User’s Guide 43 3 3 . . 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This section will introduce some ge neral settings of Internet a nd explain the connection modes for WAN1, WAN2 and WAN3 in details. This router supports multiple-WAN function.
Vigor2830 Series User’s Guide 44 Active Mode Display whether such WAN interface is Active device or backup device. Backup WAN Display the Backup WAN interface for such WAN when it is disabled. Note: In default, each WAN port is enabled. W W A A N N 1 1 w w i i t t h h A A D D S S L L WAN1 is fixed with physical mode of ADSL.
Vigor2830 Series User’s Guide 45 VLAN Tag insertion Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the packets sending by WAN1.
Vigor2830 Series User’s Guide 46 W W A A N N 2 2 w w i i t t h h E E t t h h e e r r n n e e t t WAN2 is fixed with physical mode of Ethernet. Detailed explanation is shown below: Item Description Enable Choose Yes to invoke the settings for this WAN interface.
Vigor2830 Series User’s Guide 47 VLAN Tag insertion Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the packets sending by WAN1.
Vigor2830 Series User’s Guide 48 W W A A N N 3 3 w w i i t t h h U U S S B B To use 3G network connection through 3G USB Modem , please configure WAN3 interface. Detailed explanation is shown below: Item Description Enable Choose Yes to invoke the settings for this WAN interface.
Vigor2830 Series User’s Guide 49 Backup WAN If you choose Backup as the Active Mode , Backup WAN will be changed into Backup Type . You have to specify which role the WAN interface should play if you want to backup multiple WANs. However, ignore this setting if you want to backup a single WAN.
Vigor2830 Series User’s Guide 50 Detailed explanation is shown below: Item Description Index Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3 that entered in general setup. Physical Mode It shows the physical connection for WAN1(ADSL)/WAN2 (Ethernet) /WAN3 (3G USB Modem) according to the real network connection.
Vigor2830 Series User’s Guide 51 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E / / P P P P P P o o A A i i n n W W A A N N 1 1 To choose PPPoE /PPPoA as the accessing pr otocol of the Internet, please select PPPoE/PPPoA from the WAN> > Internet Access >>WAN1 page.
Vigor2830 Series User’s Guide 52 protocol, then it is not necessary for you to change any settings in this group. Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. PPPoE Pass-through The router offers PPPoE dial-up connection.
Vigor2830 Series User’s Guide 53 PPP Authentication – Select PAP only or PAP or CHAP for PPP. If you want to connect to Internet all the time, you can check Always On . Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action.
Vigor2830 Series User’s Guide 54 D D e e t t a a i i l l s s P P a a g g e e f f o o r r M M P P o o A A i i n n W W A A N N 1 1 MPoA is a specification that enables ATM ser vices to be integrated with existing LANs, which use either Ethernet, token-ring or TCP/ IP protocols.
Vigor2830 Series User’s Guide 55 that fits the requirement of your router. WAN Connection Detection Such function allows you to verify whether network connection is alive or not through ARP De tect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection.
Vigor2830 Series User’s Guide 56 Obtain an IP address automatically – Click this button to obtain the IP address automatically. Router Name – Type in the router name provided by ISP. Domain Name – Type in the domain name that you have assigned.
Vigor2830 Series User’s Guide 57 ISP Access Setup Enter your allocated username , password and authentication parameters according to the in formation provided by your ISP. Username – Type in the valid user name (maximum 63 characters) provided by the ISP in this field.
Vigor2830 Series User’s Guide 58 Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address . Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router.
Vigor2830 Series User’s Guide 59 Detailed explanation is shown below: Item Description Enable / Disable Click Enable for activating this function. If you click Disable , this function will be closed and all the settings that you adjusted in this page will be invalid.
Vigor2830 Series User’s Guide 60 RIP(RFC1058) specifying how routers exchange routing tables information. Click Enable RIP for activating this function. WAN IP Network Settings This group allows you to obtain an IP address automatically and allows you type in IP address manually.
Vigor2830 Series User’s Guide 61 Detailed explanation is shown below: Item Description PPTP/L2TP Enable PPTP- Click this radio button to enable a PPTP client to establish a tunnel to a DSL modem on the WAN interface. Enable L2TP - Click this radio button to enable a L2TP client to establish a tunnel to a DSL modem on the WAN interface.
Vigor2830 Series User’s Guide 62 other than the current one you are using. Fixed IP - Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request.
Vigor2830 Series User’s Guide 63 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P i i n n W W A A N N 3 3 To use PPP (for 3G USB Modem) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPP mode for WAN2.
Vigor2830 Series User’s Guide 64 PPP Username - Type the PPP username (optional). PPP Password - Type the PPP password (optional). PPP Authentication - Select PAP only or PAP or CHAP for PPP. Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request.
Vigor2830 Series User’s Guide 65 you enabled here will be shown in the Multi-PVC channel drop down list on the web page of Internet Access . Though you can enable eight channels in this page, yet onl y one channel can be chosen on the web page of Internet Access .
Vigor2830 Series User’s Guide 66 Available settings are explained as follows: Item Description WAN for Router-borne Application Choose the router service for channel 5, 6 or 7. Management - It can be specified for general management (Web configuration/telnet/TR069).
Vigor2830 Series User’s Guide 67 A A T T M M Q Q o o S S Such configuration is applied to upstream packet s. Such inform ation will be provided by ISP.
Vigor2830 Series User’s Guide 68 P P o o r r t t - - b b a a s s e e d d B B r r i i d d g g e e General page lets you set the first PVC. As to set the second PVC line, please click the Port-based Bridge tab to open Bridge configuration page.
Vigor2830 Series User’s Guide 69 3 3 . . 1 1 . . 5 5 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balanci ng. It can assign traffic with protocol type, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN1, WAN2, and WAN3 interface.
Vigor2830 Series User’s Guide 70 Click Index 1 to access into the following page for configuring load-balance policy. Available settings are explained as follows: Item Description Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface.
Vigor2830 Series User’s Guide 71 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router . The design of network structure is related to what type of public IP addresses coming from your ISP . 3 3 . . 2 2 .
Vigor2830 Series User’s Guide 72 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing.
Vigor2830 Series User’s Guide 73 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . There are four subnets provided by the router wh ich allow users to divide groups into d ifferent subnets (LAN1 – LAN4).
Vigor2830 Series User’s Guide 74 D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 1 1 Available settings are explained as follows: Item Description IP Address T ype in private IP address for connecting to a local private network (Default: 192.
Vigor2830 Series User’s Guide 75 the DHCP server to start with when issuing IP addresses. If the 1st IP address of your rout er is 192.168.1.1, the starting IP address must be 192.168.1.2 or greater , but smaller than 192.168.1.25 4. IP Pool Counts - En ter the max imu m nu mbe r of PCs th at you want the DHCP server to assign IP addresses to.
Vigor2830 Series User’s Guide 76 D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 2 2 / / L L A A N N 3 3 / / L L A A N N 4 4 Available settings are explained as follows: Item Description Network Configuration Enable/Disable - Click Enable to enable such configuration.
Vigor2830 Series User’s Guide 77 default is 50 and the maxim um is 253. Gateway IP Addr ess - Enter a value of the gateway IP address for the DHCP server . The value is usually as same as the 1st IP address of the router , which means the router is the default gateway .
Vigor2830 Series User’s Guide 78 If you want to use another DHCP server in the network other than the V igor Router ’ s, you can let Relay Agent help you to redirect the DHCP request to the specified location. S tart IP Address - Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses.
Vigor2830 Series User’s Guide 79 Item Description Set to Factory Default Click it to return to factory default settings. Viewing Routing Table Displays the routing table for your reference. Index The number (1 to 10) unde r Index allows you to open next page to set up static route.
Vigor2830 Series User’s Guide 80 1. Go to LAN page and click General Setup , select 1st Subnet as the RIP Protocol Control. Then click the OK button.
Vigor2830 Series User’s Guide 81 4. Go to Diagnostics and choose Routing T able to verify current routing table..
Vigor2830 Series User’s Guide 82 3 3 . . 2 2 . . 4 4 V V L L A A N N ( ( M M u u l l t t i i - - S S u u b b n n e e t t ) ) Virtual LAN function provides you a very convenient way to manage hosts by g rouping them based on the physical port. Go to LAN page and select VLAN .
Vigor2830 Series User’s Guide 83 Subnet Choose one of them to make the selected VLAN mapping to the specified subnet only . For example, LAN1 is specified for VLAN0. It means that PCs grouped unde r VLAN0 can get the IP address(es) that specified by the subnet.
Vigor2830 Series User’s Guide 84 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthening co ntrol in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed.
Vigor2830 Series User’s Guide 85 Refresh Refresh the ARP table listed below to obtain the newest ARP table information. IP Bind List It displays a list for the IP bind to MAC information. Add and Edit IP Address – Type the IP address that will be used for the specified MAC address.
Vigor2830 Series User’s Guide 86 Item Description Port Mirror Check Enable to activate this function. Or, check Disable to close this function. Mirror Port Select a port to view traffic sent from mirrored ports. Mirrored port Select which ports are necessary to be mirrored.
Vigor2830 Series User’s Guide 87 3 3 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc.
Vigor2830 Series User’s Guide 88 Available settings are explained as follows: Item Description Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range .
Vigor2830 Series User’s Guide 89 Note that the router has its own built-in servi ces (servers) such as T elnet, HTTP and FTP etc. Since the common port numbers of these services (servers) are all the sa me, you may need to reset the router in order to avoid confliction.
Vigor2830 Series User’s Guide 90 The security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: DMZ Host for WAN2 and WAN3 is slightly different with WAN1.
Vigor2830 Series User’s Guide 91 If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN2 interface , you will find them in Aux. WAN IP for your selection. Available settings are explained as follows: Item Description Enable Check to enable the DMZ Host function.
Vigor2830 Series User’s Guide 92 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc.
Vigor2830 Series User’s Guide 93 Available settings are explained as follows: Item Description Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN IP Specify the WAN IP address that will be used for this entry.
Vigor2830 Series User’s Guide 94 Available settings are explained as follows: Item Description Protocol Display the protocol used for this address mapping. Public IP Display the public IP address se lected for this entry, e.g., 172.16.3.102. Private IP Display the private IP set for this address mapping, e.
Vigor2830 Series User’s Guide 95 WAN Interface Choose the WAN interface for such address mapping profile. WAN IP Select an IP address (the selections provided here are set in IP Alias List of Network >>WAN interface). Local host can use this IP to connect to Internet.
Vigor2830 Series User’s Guide 96 Triggering Port Display the port of the triggering packets. Incoming Protocol Display the protocol for the incoming data of such triggering profile. Incoming Port Display the port for the incoming data of such triggering profile.
Vigor2830 Series User’s Guide 97 Triggering Port Type the port or port range for such trigger profile. Incoming Protocol When the triggering packets received, it is expected the incoming packets will use the selected protocol. Select the protocol (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile.
Vigor2830 Series User’s Guide 98 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned.
Vigor2830 Series User’s Guide 99 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer.
Vigor2830 Series User’s Guide 100 3 3 . . 4 4 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p General Setup allows you to adjust setti ngs of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter . Under some circumstance, your filter set can be linked to work in a serial manner.
Vigor2830 Series User’s Guide 101 will be filtered by firewall settings configured by Vigor router if such feature is enabled. If the firewall system does not have any response (pass or block) for these packets, such as no response coming from web content filter, then the router’s firewall will block the packets directly.
Vigor2830 Series User’s Guide 102 Load-Balance Policy Choose the W AN interface for applying Load-Balance Policy . User Management Such item is available only when Rule-Based is selected in User Management>>General Setup . The general firewall rule will be applied to the user/user group/all users specified here.
Vigor2830 Series User’s Guide 103 CSM>> W eb Content Filter web page first. Or choose [Cr eate New] from the drop down list in this page to c reate a new profile. For troubleshooting needs, you can specify to record information for W eb Content Filter by checking the Log box.
Vigor2830 Series User’s Guide 104 3 3 . . 4 4 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown.
Vigor2830 Series User’s Guide 105 To edit Filter Rule , click the Filter Rule index button to enter the Filter Rule setup page. Available settings are explained as follows: Item Description Check to enable the Filter Rule Check this box to enable the filter rule.
Vigor2830 Series User’s Guide 106 LAN. Source/Destination IP Click Edit to access into the follo wing dialog to choose the source/destination IP or IP ranges. To set the IP address manually, please choose Any Address/Single Address/ Range Address/Subnet Address as the Address Type and type them in this dialog.
Vigor2830 Series User’s Guide 107 Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port – (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this service type.
Vigor2830 Series User’s Guide 108 MAC Bind IP Strict – Make the MAC address and IP address settings configured in IP Object for Source IP and Destination IP be bound for applying such filter rule. No-Strict - no limitation. Quality of Service Choose one of the QoS rules to be applied as firewall rule.
Vigor2830 Series User’s Guide 109 W eb Content Filter Select one of the W eb Content Filter profile settings (created in CSM>> W eb Content Filter ) for applying with this router . Please set at lea st one profile for anti-virus in CSM>> W eb Content Filter web page first.
Vigor2830 Series User’s Guide 110 Window size – It determines the size of TCP protocol (0~65535). T he more the value is, the better the performance will be. However , if the network is not stable, small value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources.
Vigor2830 Series User’s Guide 111.
Vigor2830 Series User’s Guide 112 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default.
Vigor2830 Series User’s Guide 113 Enable ICMP flood defense Check the box to activate the ICMP flood defense function. Similar to the UDP flood defense function, once if the Threshold of ICMP packets fro m Internet has exceeded the defined value, the router will discard the ICMP echo requests coming from the Internet.
Vigor2830 Series User’s Guide 114 Many machines may crash when receiving ICMP datagra ms (packets) that exceed the maximum length. To avoid this type of attack, the Vigor router is designed to be capable of discarding any fragmented ICMP packets with a length greater than 1024 octets.
Vigor2830 Series User’s Guide 115 3 3 . . 5 5 U U s s e e r r M M a a n n a a g g e e m m e e n n t t User Management is a security feature which disallows any IP traffic (except DHCP-related packets) from a particular host until that host has correctly supplied a valid username and password.
Vigor2830 Series User’s Guide 116 3 3 . . 5 5 . . 1 1 G G e e n n e e r r a a l l S S e e t t u u p p General Setup can determine the standard (rule -based or user-based) for the users controlled by User Management. The mode (standard) select ed here will influence the contents of the filter rule(s) applied to every user.
Vigor2830 Series User’s Guide 117 3 3 . . 5 5 . . 2 2 U U s s e e r r P P r r o o f f i i l l e e This page allows you to set customized profiles (up to 200) which will be applied for users controlled under User Management . Simply open User Management>>User Profile .
Vigor2830 Series User’s Guide 118 Available settings are explained as follows: Item Description Enable this account Check this box to enable such user profile. User Name Type a name for such user profile (e.g., LAN_User_Group_1, WLAN_User_Group_A, WLAN_User_Group_B, etc).
Vigor2830 Series User’s Guide 119 For the detailed configuration, simply refer to Firewall>>Filter Rule . The firewall filter rules that are not selected in Firewall>>General>>Defa ult rule can be available for use in User Management>>User Profile .
Vigor2830 Series User’s Guide 120 window with remaining time of connection for such user will be displayed. Next, the u ser can access Internet through any browser on Windows. Note that Alert Tool can be downloaded from DrayTek web site. Telnet – If it is selected, the user can use Telnet command to perform the authentication job.
Vigor2830 Series User’s Guide 121 Available settings are explained as follows: Item Description Name Type a name for this user group. Available User Objects You can gather user profiles (objects) from User Profile page within one user group. All the available user objects that you have created will be shown in this box.
Vigor2830 Series User’s Guide 122 Available settings are explained as follows: Item Description Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh this page manually.
Vigor2830 Series User’s Guide 123 3 3 . . 6 6 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently.
Vigor2830 Series User’s Guide 124 Click the number under Index co lumn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface.
Vigor2830 Series User’s Guide 125 MAC Address Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected.
Vigor2830 Series User’s Guide 126 Click the number under Index colu mn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or Any to display all the available IP objects with the specified interface.
Vigor2830 Series User’s Guide 127 3 3 . . 6 6 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles.
Vigor2830 Series User’s Guide 128 Protocol Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number.
Vigor2830 Series User’s Guide 129 3 3 . . 6 6 . . 4 4 S S e e r r v v i i c c e e T T y y p p e e G G r r o o u u p p This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles.
Vigor2830 Series User’s Guide 130 Available Service Type Objects All the available service objects that you have added on Objects Setting>>Service Type Object will be shown in this box. Selected Service Type Objects Click >> button to add the selected IP objects in this box.
Vigor2830 Series User’s Guide 131 Click the number under Index column for setting in detail. Available settings are explained as follows: Item Description Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For example, type gambling as Contents.
Vigor2830 Series User’s Guide 132 3 3 . . 6 6 . . 6 6 K K e e y y w w o o r r d d G G r r o o u u p p This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile .
Vigor2830 Series User’s Guide 133 Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Click button to add the selected Keyword objects in this box.
Vigor2830 Series User’s Guide 134 3 3 . . 6 6 . . 7 7 F F i i l l e e E E x x t t e e n n s s i i o o n n O O b b j j e e c c t t This page allows you to set eight profiles which will be applied in CSM>>URL Content Filter . All the files with the extension names specified in these profiles will be processed according to the chosen action.
Vigor2830 Series User’s Guide 135 Item Description Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms of file extension that will be processed in the router. Finally, click OK to save this profile. 3 3 .
Vigor2830 Series User’s Guide 136 Vigor router will then decide whether to allow access to this site according to the categories you have selected. Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced datab ase servers can handle millions of requests for categorization.
Vigor2830 Series User’s Guide 137 Below shows the items which are categorized under Protocol . Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. Select All Click it to choose all of the items in this page.
Vigor2830 Series User’s Guide 138 The items categorized under P2P ----- The items categorized under Misc -----.
Vigor2830 Series User’s Guide 139 3 3 . . 7 7 . . 2 2 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e To provide an appropriate cyberspace to users, Vigor.
Vigor2830 Series User’s Guide 140 Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. Priority It determines the action that this router will apply.
Vigor2830 Series User’s Guide 141 Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog.
Vigor2830 Series User’s Guide 142 should be noticed that the more sim plified the blocking keyword list is, the more efficiently the Vigor router performs. Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed.
Vigor2830 Series User’s Guide 143 3 3 . . 7 7 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation .
Vigor2830 Series User’s Guide 144 Setup Query Server It is recommended for you to use the default setting, auto-selected. You need to sp ecify a server for categorize searching when you type URL in browser based on the web content filter profile. Setup Test Server It is recommended for you to use the default setting, auto-selected.
Vigor2830 Series User’s Guide 145 Available settings are explained as follows: Item Description Black/White List Enable – Activate white/black list function for such profile. Group/Object Selections – Click Edit to choose the group or object profile as the content of white/black list.
Vigor2830 Series User’s Guide 146 Action Pass - allow accessing into the co rresponding webpage with the categories listed on the box below. Block - restrict accessing into the corresponding webpage with the categories listed on the box below.
Vigor2830 Series User’s Guide 147 3 3 . . 8 8 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate the records of NAT sessions for such c onnection.
Vigor2830 Series User’s Guide 148 Specific Limitation Start IP- Defines the start IP address for limit session. End IP - Defines the end IP address for limit session. Maximum Sessions - Defines the available session number for each host in the specific range of IP addresses.
Vigor2830 Series User’s Guide 149 3 3 . . 8 8 . . 2 2 B B a a n n d d w w i i d d t t h h L L i i m m i i t t The downstream or upstream from FTP, HTTP or so me P2P applications will occupy large of bandwidth and affect the applications for othe r programs.
Vigor2830 Series User’s Guide 150 Specific Limitation Start IP - Define the start IP address for limit bandwidth. End IP - Define the end IP address for limit bandwidth.
Vigor2830 Series User’s Guide 151 3 3 . . 8 8 . . 3 3 Q Q u u a a l l i i t t y y o o f f S S e e r r v v i i c c e e Deploying QoS (Quality of Service) management to guarantee that all applications.
Vigor2830 Series User’s Guide 152 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners.
Vigor2830 Series User’s Guide 153 can be adjusted for your necessity. Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Available settings are explained as follows: Item Description Enable the QoS Control The factory default for this setting is checked.
Vigor2830 Series User’s Guide 154 Outbound TCP ACK Prioritize The difference in bandwidth between download and upload are great in ADSL2+ environment. For the download speed might be impacted by the uploading TCP ACK, you can check this box to push ACK of upload faster to speed the network traffic.
Vigor2830 Series User’s Guide 155 E E d d i i t t t t h h e e C C l l a a s s s s R R u u l l e e f f o o r r Q Q o o S S The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one.
Vigor2830 Series User’s Guide 156 Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit button to set the remote IP address (on LAN/WAN) for the rule. Edit It allows you to edit source address information.
Vigor2830 Series User’s Guide 157 By the way, you can set up to 20 rules for one Class. If you want to edit an existed rule, please select the radio button of that one and clic k Edit to open the rule edit page for modification.
Vigor2830 Series User’s Guide 158 For adding a new service type, click Add to open the following pag e. Available settings are explained as follows: Item Description Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP or other) for the new service.
Vigor2830 Series User’s Guide 159 most popular DDNS service providers such as www.dyndns.org, www.no-ip.com, www.dtdns.com, www.changeip.com, www.dynamic- nameserver.com. You should visit their websites to register your own domain nam e for the router.
Vigor2830 Series User’s Guide 160 3. Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account , and choose correct Service Provider: dyn dns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block.
Vigor2830 Series User’s Guide 161 Wildcard and Backup MX The W ildcard and Backup MX (Mail Exchange) features are not supported for all Dynamic DNS providers. Y ou could get more detailed info rmation from their websites. Mail Extender If the mail server is defined with another name, please type the name in this area.
Vigor2830 Series User’s Guide 162 Index Click the number below Index to access into the setting page of schedule. Status Display if this schedule setting is active or inactive. You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings.
Vigor2830 Series User’s Guide 163 Idle Timeout Specify the duration (or period) for the schedule. How often - Specify how often the schedule will be applied Once - The schedule will be applied just once Weekdays - Specify which days in one week should perform the schedule.
Vigor2830 Series User’s Guide 164 Available settings are explained as follows: Item Description Enable Check to enable RADIUS client feature. Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using.
Vigor2830 Series User’s Guide 165 The UPnP facility on the router enables UPnP aware applications such as MSN Messenger to discover what are behind a NA T router . The application will also learn the external IP address and configure port mappings on the rout er .
Vigor2830 Series User’s Guide 166 The UPnP function dynamically adds port ma ppings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. 3 3 . . 9 9 . . 5 5 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol .
Vigor2830 Series User’s Guide 167 3 3 . . 9 9 . . 6 6 W W a a k k e e o o n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she must type correct MAC address of the specified PC on this web page of Wake on LAN (WOL) of this router.
Vigor2830 Series User’s Guide 168 3 3 . . 9 9 . . 7 7 S S h h o o r r t t M M e e s s s s a a g g e e S S e e r r v v i i c c e e The function of Short Message Service is that Vi gor router sends a message to user’s mobile through specified service provider to assist the u ser knowing the real-time abnormal situations.
Vigor2830 Series User’s Guide 169 Available settings are explained as follows: Item Description Enable SMS Setup Click Enable to enable SMS function. Click Disable to close SMS function. Profile Name Type a name for such SMS profile. Service Provider Use the drop down list to specify the service provider which offers SMS service.
Vigor2830 Series User’s Guide 170 3 3 . . 1 1 0 0 . . 1 1 V V P P N N C C l l i i e e n n t t W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connec tion (from server to client) step by step.
Vigor2830 Series User’s Guide 171 2. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page.
Vigor2830 Series User’s Guide 172 z When you choose PPTP (None Encryption) or PPTP (Encryption) , you will see the following graphic: z When you choose IPSec , you will see the following graphic:.
Vigor2830 Series User’s Guide 173 z When you choose L2TP , you will see the following graphic: z When you choose L2TP over IPSec (N ice to Have) or L2TP over IPSec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile.
Vigor2830 Series User’s Guide 174 VPN Dial-Out Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for VPN connection.
Vigor2830 Series User’s Guide 175 3. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action.
Vigor2830 Series User’s Guide 176 3 3 . . 1 1 0 0 . . 2 2 V V P P N N S S e e r r v v e e r r W W i i z z a a r r d d Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connec tion (from client to server) step by step.
Vigor2830 Series User’s Guide 177 Please choose a LAN-to-LAN Profile This item is available when you choose Site to Site VPN (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as VPN server mode.
Vigor2830 Series User’s Guide 178 z When you check PPTP , you will see the following graphic: z When you check PPTP/IPSec/L2TP (three ty pes) or PPTP/IPSec (two types) or L2TP with Policy (Nice to H.
Vigor2830 Series User’s Guide 179 z When you check IPSec , you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters.
Vigor2830 Series User’s Guide 180 3. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action.
Vigor2830 Series User’s Guide 181 3 3 . . 1 1 0 0 . . 4 4 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VP N connections, such as PPTP, L2TP, L2TP over IPSec.
Vigor2830 Series User’s Guide 182 Mutual Authentication (PAP) The Mutual Authentication function is mainly used to communicate with other routers or clients who need bi-directional authentication in order to provide stronger security, for example, Cisco routers.
Vigor2830 Series User’s Guide 183 Available settings are explained as follows: Item Description IKE Authentication Method This usually applies to those are remote dial-in user or node (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel.
Vigor2830 Series User’s Guide 184 3 3 . . 1 1 0 0 . . 6 6 I I P P S S e e c c P P e e e e r r I I d d e e n n t t i i t t y y To use digital certificate for p eer authentication in either LAN-to-LAN connection or Remote User Dial-In connection, here you may edit a table of peer certificate for selectio n.
Vigor2830 Series User’s Guide 185 Available settings are explained as follows: Item Description Profile Name Type the name of the profile. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value.
Vigor2830 Series User’s Guide 186 3 3 . . 1 1 0 0 . . 7 7 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via VPN connecti on.
Vigor2830 Series User’s Guide 187 Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will gui de you to fill all the necessary fields.
Vigor2830 Series User’s Guide 188 Allowed Dial-In Type PPTP - Allow the remote dial-in user to make a PPTP VPN connection through the Internet. You should set the U ser Name and Password of remote dial-in user below. IPSec Tunnel - Allow the remote dial-in user to make an IPSec VPN connection through Internet.
Vigor2830 Series User’s Guide 189 mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6). IKE Authentication Method This group of fields is applicable for IPSec Tunnels and L2TP with IPSec Policy when you specify the IP address of the remote node. The only exception is Digital Signature (X.
Vigor2830 Series User’s Guide 190 The following figure shows the summary table according to the item (All/Trunk) selected for View . The following shows profiles join ed into VPN Backup mechanism. Available settings are explained as follows: Item Description View All – Click it to display the LAN to LAN profiles.
Vigor2830 Series User’s Guide 191 Available settings are explained as follows: Item Description Common Settings Profile Name – Specify a name for the profile of the LAN-to-LAN connection. Enable this profile - Check here to activate this profile. VPN Dial-Out Through - Use the drop down menu to choose a proper WAN interface for this profile.
Vigor2830 Series User’s Guide 192 z WAN1 /WAN2 /WAN3 First - While connecting, the router will use WAN1 /WAN2 /WAN3 as the first channel for VPN connection. If WAN1 fails, the router will use another WAN interface instead. WAN1 /WAN2 /WAN3 Only - While connecting, the router will use WAN1 /WAN2 /WAN3 as the only channel for VPN connection.
Vigor2830 Series User’s Guide 193 Dial-Out Settings Type of Server I am calling - PPTP - Build a PPTP VPN connection to the server through the Internet. You should set the identity like User Name and Password below for the authentication of remote server.
Vigor2830 Series User’s Guide 194 IPSec Security Method - This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy. z Medium AH (Authentication Header) means data will be authenticated, but not be encrypted. By default, this option is active.
Vigor2830 Series User’s Guide 195 that covers the most algorithms. z IKE phase 1 key lifetime- For security reason, the lifetime of key should be defined. The d efault value is 28800 seconds. You may specify a value in between 900 and 86400 seconds.
Vigor2830 Series User’s Guide 196 and Password of remote dial-in user below. IPSec Tunnel- Allow the remote dial-in user to trigger an IPSec VPN connection through Internet. L2TP with IPSec Policy - Allow the remote dial-in user to make a L2TP VPN connection through the Internet.
Vigor2830 Series User’s Guide 197 Certificate Management>>Local Certificate ) will be inspected first. IPSec Security Method - This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node. Medium- Authentication Header (AH) means data will be authenticated, but not be encrypte d.
Vigor2830 Series User’s Guide 198 Network Mask through the VPN connection. More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router.
Vigor2830 Series User’s Guide 199 3 3 . . 1 1 0 0 . . 9 9 V V P P N N T T R R U U N N K K M M a a n n a a g g e e m m e e n n t t VPN trunk includes some features - VPN Backup, GRE over IPSec, and Binding tunnel policy.
Vigor2830 Series User’s Guide 200 Available settings are explained as follows: Item Description Backup Profile List Set to Factory Default - Click to clear all VPN TRUNK-VPN Backup mechanism profile. No – The order of VPN TRUNK-VPN Backup mechanism profile.
Vigor2830 Series User’s Guide 201 Detailed information for this dialog, see later section - Advanced Backup . General Setup Status - After choosing one of the profi le listed above, please click Enable to activate this profile.
Vigor2830 Series User’s Guide 202 H H o o w w c c a a n n y y o o u u s s e e t t a a V V P P N N T T R R U U N N K K - - V V P P N N B B a a c c k k u u p p m m e e c c h h a a n n i i s s m m p p r r o o f f i i l l e e ? ? 1. First of all, go to VPN and Remote Access>>LAN- to-LAN .
Vigor2830 Series User’s Guide 203 3. Later, on peer side (as VPN Client): please type 192.168.50.100 in the field of My GRE IP and type IP address of the server (192.
Vigor2830 Series User’s Guide 204 3 3 . . 1 1 0 0 . . 1 1 0 0 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button.
Vigor2830 Series User’s Guide 205 3 3 . . 1 1 1 1 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name , a serial number, expiration dates etc.
Vigor2830 Series User’s Guide 206 Type in all the information that the window requests. Then click Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below.
Vigor2830 Series User’s Guide 207 3 3 . . 1 1 1 1 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window.
Vigor2830 Series User’s Guide 208 3 3 . . 1 1 1 1 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them.
Vigor2830 Series User’s Guide 209 z Calling via SIP Servers First, the Vigor V models of yours will have to register to a SIP Registrar by sending registration messages to validate. Then, bo th parties’ SIP proxies will forward the sequence of messages to caller to establish the session .
Vigor2830 Series User’s Guide 210 3 3 . . 1 1 2 2 . . 1 1 D D i i a a l l P P l l a a n n This page allows you to set phone book and digit map for the VoIP function. Click the Phone Book and Digit Map links on the page to access into next pages for dialplan settings.
Vigor2830 Series User’s Guide 211 P P h h o o n n e e B B o o o o k k In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number .
Vigor2830 Series User’s Guide 212 Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of SIP URL Address. SIP URL Enter your friend’s SIP Address.
Vigor2830 Series User’s Guide 213 D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface.
Vigor2830 Series User’s Guide 214 OP Number The front number you type here is the first part of the account number that you want to execute special function (according to the chosen mode) by using the prefix number. Min Len Set the minimal length of the dial number for appl ying the prefix number settings.
Vigor2830 Series User’s Guide 215 Available settings are explained as follows: Item Description Enable Check it to enable this entry. Call Direction Determine the direction for th e phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls.
Vigor2830 Series User’s Guide 216 For Block Unknown Domain – this function can block incomi ng calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Such control also can be done based on preconfigured schedules.
Vigor2830 Series User’s Guide 217 R R e e g g i i o o n n a a l l This page allows you to process incoming or out going phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed.
Vigor2830 Series User’s Guide 218 Do Not Disturb [Act] Dial the number typed in this field to invoke the function of DND. Do Not Distrub [Deact] Dial the number typed in this field to release the DND function. Hide caller ID [Act] Dial the number typed in this field to make your phone number (ID) not displayed on the display panel of re mote end.
Vigor2830 Series User’s Guide 219 3 3 . . 1 1 2 2 . . 2 2 S S I I P P A A c c c c o o u u n n t t s s In this section, you set up your own SIP setti ngs. When you apply for an account, your SIP service provider will give you an Account Name or user name, SIP Registrar, Proxy, and Domain name .
Vigor2830 Series User’s Guide 220 Codec Display the codec type for the account. Ring Port Specify which port will ring when receiving a phone call. Set Phone, ISDN1-S0 or ISDN-TE as the default ring port for the SIP account. If you choose Phone or ISDN1-S0, the ISDN2-TE selection will be dimmed, vice versa.
Vigor2830 Series User’s Guide 221 Item Description Profile Name Assign a name for this profile for identifying. You can type similar name with the domain.
Vigor2830 Series User’s Guide 222 your necessity. None – Disable this function. Stun – Choose this option if there is Stun server provid ed for your router. Manual – Choose this option if you wan t to specify an external IP address as the NAT transversal support.
Vigor2830 Series User’s Guide 223 Single Codec – If the box is checked, only the selected Codec will be applied. Packet Size The amount of data contained in a single packet. The default value is 20 ms, which means the data packet will contain 20 ms voice information.
Vigor2830 Series User’s Guide 224 configure. Phone1/Phone2 allows you to set general settings for PSTN phones. Call Feature – A brief description for call feature will be shown in this field for your reference. Tone - Display the tone settings that configured in the advanced settings page of Phone Index.
Vigor2830 Series User’s Guide 225 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r P P h h o o n n e e P P o o r r t t Click the number link for Phone port, you can access into t he following page for configuring Phone settings.
Vigor2830 Series User’s Guide 226 Call Waiting Check this box to invoke this function. A notice sound will appear to tell the user new phone call is waiting for your response. Click hook flash to pick up the waiting phone call. Call Transfer Check this box to invoke this function.
Vigor2830 Series User’s Guide 227 one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, bus y tone, congestion tone by yourself for VoIP phone. Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication.
Vigor2830 Series User’s Guide 228 z InBand - Choose this one then the Vigor will send the DTMF tone as audio directly when you press the keypad on the phone.
Vigor2830 Series User’s Guide 229 Port It shows current connection status for Phone(s) and ISDN ports. Status It shows the VoIP connection status. IDLE - Indicates that the VoIP function is idle. HANG_UP - Indicates that the connection is not established (busy tone).
Vigor2830 Series User’s Guide 230 mobility so WLAN users can simultaneously access all LAN facil ities just like on a wired LAN as well as Internet access. The Vigor wireless routers are equipped with a wireless LAN interface compliant with the standard IEEE 802.
Vigor2830 Series User’s Guide 231 In WPA-Personal, a pre-defined key is used for encryption during data transmission. WPA applies Temporal Key Integrity Protocol (TKIP) for data encryption while WPA2 applies AES. The WPA-Enterprise combines not only encry ption but also authentication.
Vigor2830 Series User’s Guide 232 3 3 . . 1 1 3 3 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information.
Vigor2830 Series User’s Guide 233 or In which, 802.11b/g operates on 2.4G ba nd, 802.11a operates on 5G band, and 802.11n oper ates on either 2.4G or 5G band. Index(1-15) Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup.
Vigor2830 Series User’s Guide 234 Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync field instead of long pream ble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble.
Vigor2830 Series User’s Guide 235 Rate Control It controls the data transmission rate through wireless connection. Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download.
Vigor2830 Series User’s Guide 236 Available settings are explained as follows: Item Description Mode There are several modes provided for you to choose. Note: You should also set RADIUS Server simultaneously if 802.1x mode is selected. Disable - Turn off the encryption mechanism.
Vigor2830 Series User’s Guide 237 WPA/802.1x Only- Accepts only WPA clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 802.
Vigor2830 Series User’s Guide 238 3 3 . . 1 1 3 3 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l In the Access Control , the router may restrict wireless access to cert ain wireless clients only by locking their MAC address into a black or wh ite list.
Vigor2830 Series User’s Guide 239 Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. OK Click it to save the access control list. Clear All Clean all entries in the MAC address list.
Vigor2830 Series User’s Guide 240 z If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN code of the wireless clie nt you wish to connect to the vigor router.
Vigor2830 Series User’s Guide 241 Below shows Wireless LAN>>WPS web page. Available settings are explained as follows: Item Description Enable WPS Check this box to enable WPS setting.
Vigor2830 Series User’s Guide 242 3 3 . . 1 1 3 3 . . 6 6 W W D D S S WDS means Wireless Distribution System. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air.
Vigor2830 Series User’s Guide 243 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2.
Vigor2830 Series User’s Guide 244 invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Security There are three types for security, Disable , WEP and Pre-shared key . The setting you choose here will make the following WEP or Pre-shared key field valid or not.
Vigor2830 Series User’s Guide 245 3 3 . . 1 1 3 3 . . 7 7 A A d d v v a a n n c c e e d d S S e e t t t t i i n n g g This page allows users to set advanced se ttings such as operation mode, channel bandwidth, guard interval, and aggregation MSDU for wireless data transmission.
Vigor2830 Series User’s Guide 246 3 3 . . 1 1 3 3 . . 8 8 W W M M M M C C o o n n f f i i g g u u r r a a t t i i o o n n WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access categories derived from 802.1d (prioritization tabs).
Vigor2830 Series User’s Guide 247 categories must be smaller; however, the difference between AC_BE and AC_BK categories must be greater. Txop It means transmission opportunity. For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission, please set greater value for them to get highest transmission opportunity.
Vigor2830 Series User’s Guide 248 Available settings are explained as follows: Item Description Scan It is used to discover all the connected AP. The results will be shown on the box above this button. Statistics It displays the statistics for the channels used by APs.
Vigor2830 Series User’s Guide 249 3 3 . . 1 1 3 3 . . 1 1 0 0 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of connecting wire less clients now along with its status code. There is a code summary belo w for explanation.
Vigor2830 Series User’s Guide 250 3 3 . . 1 1 3 3 . . 1 1 1 1 W W e e b b P P o o r r t t a a l l This page allows you to specify an URL fo r accessing into or display a message when a wireless user connects to Internet through th is router.
Vigor2830 Series User’s Guide 251 3 3 . . 1 1 4 4 U U S S B B A A p p p p l l i i c c a a t t i i o o n n USB storage disk connected on Vigor router can be regarded as a server. By way of Vigor router, clients on LAN can access, write and read data stored in USB storage disk with different applications.
Vigor2830 Series User’s Guide 252 types of character sets. Default Charset is for English based file name. Samba Service Settings Click Enable to invoke samba service via the router. Access Mode LAN Only – Users coming from internet cannot connect to the samba server of the router.
Vigor2830 Series User’s Guide 253 Available settings are explained as follows: Item Description FTP/Samba User Enable – Click this button to activate this profile (account) for FTP service or Samba User service. Later, the user can use the username specified in this page to login into FTP server.
Vigor2830 Series User’s Guide 254 new folder which can be specified as the Home Folder. Access Rule It determines the authority for such profile. Any user, who uses such profile for accessing into USB storage disk, must follow the rule specified here.
Vigor2830 Series User’s Guide 255 3 3 . . 1 1 4 4 . . 3 3 F F i i l l e e E E x x p p l l o o r r e e r r File Explorer offers an easy way for users to view and manage the content of USB storage disk connected on Vigor router. Available settings are explained as follows: Item Description Refresh Click this icon to refresh files list.
Vigor2830 Series User’s Guide 256 Item Description Connection Status If there is no USB storage disk connected to Vigor router, “ No Disk Connected ” will be shown here. Disk Capacity It displays the total capacity of the USB storage disk. Free Capacity It displays the free space of the USB storage disk.
Vigor2830 Series User’s Guide 257 Stop record when fulls – when the capacity of syslog is full, the system will stop recording. Always record the new event – only the newest events will be recorded by the system. Time Display the time of the event occurred.
Vigor2830 Series User’s Guide 258 3 3 . . 1 1 5 5 . . 1 1 S S y y s s t t e e m m S S t t a a t t u u s s The System Status provides basic network settings of Vigor router. It includes L AN and WAN interface information. Also, you could ge t the current running firmware version or firmware related information from this presentation.
Vigor2830 Series User’s Guide 259 - It can be Europe (13 usable channels), USA (11 usable channels) etc. The available channels supported by the wireless products in different countries are various. Firmware Version - It indicates information about equipped WLAN miniPCi card.
Vigor2830 Series User’s Guide 260 3 3 . . 1 1 5 5 . . 2 2 T T R R - - 0 0 6 6 9 9 This device supports TR-069 standard. It is very convenient for an administrator to m anage a TR-069 device through an Auto Configuration Server, e.
Vigor2830 Series User’s Guide 261 Periodic Inform Settings The default setting is Enable . Please set interval time or schedule time for the router to send notification to CPE. Or click Disable to close the mechanism of notification. STUN Settings The default is Disable .
Vigor2830 Series User’s Guide 262 3 3 . . 1 1 5 5 . . 4 4 U U s s e e r r P P a a s s s s w w o o r r d d This page allows you to set ne w password for user operation.
Vigor2830 Series User’s Guide 263 3 3 . . 1 1 5 5 . . 5 5 L L o o g g i i n n C C u u s s t t o o m m i i z z a a t t i i o o n n When you want to access into the web configurator of Vigor router, the system will ask you to offer username and password first.
Vigor2830 Series User’s Guide 264 Please refer to 4.5 How to Customize Your Login Page for more details. 3 3 . . 1 1 5 5 . . 6 6 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p B B a a c c k k u u p p t t h h e e C C o o n n f f i i g g u u r r a a t t i i o o n n Follow the steps below to backup your configuration.
Vigor2830 Series User’s Guide 265 2. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself.
Vigor2830 Series User’s Guide 266 R R e e s s t t o o r r e e C C o o n n f f i i g g u u r r a a t t i i o o n n 1. Go to System Maintenance >> Configuration Backup . The following windows will be popped-up, as shown below. 2. Click Browse button to choose the correct configura tion file for uploading to the router.
Vigor2830 Series User’s Guide 267 3 3 . . 1 1 5 5 . . 7 7 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipm ents.
Vigor2830 Series User’s Guide 268 User Access, Call, WAN, Router/DSL information to Syslog. AlertLog Setup Check “ Enable ” to activate function of alert log. AlertLog Port - Type the port number for alert log. The default setting is 514. Mail Alert Setup Check “ Enable ” to activate function of mail alert.
Vigor2830 Series User’s Guide 269.
Vigor2830 Series User’s Guide 270 3 3 . . 1 1 5 5 . . 8 8 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Available settings are explained as follows: Item Description Current System Time Click Inquire Time to get the current time.
Vigor2830 Series User’s Guide 271 3 3 . . 1 1 5 5 . . 9 9 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SNMP setup. For example, as to management ac cess control, the port number is used to send/receive SIP message for building a session.
Vigor2830 Series User’s Guide 272 Telnet and HTTP servers. Enable SNMP Agent - Check it to enable this function. Get Community - Set the name for getting community by typing a proper character. The default setting is public. Set Community - Set community by typing a proper name.
Vigor2830 Series User’s Guide 273 3 3 . . 1 1 5 5 . . 1 1 1 1 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
Vigor2830 Series User’s Guide 274 3 3 . . 1 1 5 5 . . 1 1 2 2 A A c c t t i i v v a a t t i i o o n n There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation .
Vigor2830 Series User’s Guide 275 Below shows the successful activation of Web Content Filter:.
Vigor2830 Series User’s Guide 276 3 3 . . 1 1 6 6 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router.
Vigor2830 Series User’s Guide 277 3 3 . . 1 1 6 6 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page.
Vigor2830 Series User’s Guide 278 3 3 . . 1 1 6 6 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc.
Vigor2830 Series User’s Guide 279 3 3 . . 1 1 6 6 . . 5 5 N N A A T T S S e e s s s s i i o o n n s s T T a a b b l l e e Click Diagnostics and click NAT Sessions Table to open the list page. Available settings are explained as follows: Item Description Private IP:Port It indicates the source IP address and port of local PC.
Vigor2830 Series User’s Guide 280 Available settings are explained as follows: Item Description Ping through Use the drop down list to choose the WAN interface that you want to ping through o r choose Unspecified to be determined by the router autom atically.
Vigor2830 Series User’s Guide 281 3 3 . . 1 1 6 6 . . 7 7 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management.
Vigor2830 Series User’s Guide 282 Refresh Click this link to refr esh this page manually. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (kbps) Display the transmission speed of the monitored device.
Vigor2830 Series User’s Guide 283 3 3 . . 1 1 6 6 . . 8 8 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1/WAN2/WAN3 Bandwidth, Sessions, daily or weekly for viewing different traffic graph.
Vigor2830 Series User’s Guide 284 3 3 . . 1 1 6 6 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run .
Vigor2830 Series User’s Guide 285 3 3 . . 1 1 6 6 . . 1 1 0 0 S S y y s s l l o o g g E E x x p p l l o o r r e e r r Such page provides real-time syslog and displays the information on the screen. F F o o r r W W e e b b S S y y s s l l o o g g This page displays the time and message fo r User/Firewall/call/WAN/VPN settings.
Vigor2830 Series User’s Guide 286 F F o o r r U U S S B B S S y y s s l l o o g g This page displays the syslog recorded on the USB storage disk. Available settings are explained as follows: Item Description Time Display the time of the event occurred.
Vigor2830 Series User’s Guide 287 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 H H o o w w t t o o C C o o n n f f i i g g u u r r e e M M u u l l t t i i - - S S u u b b n n e e t t i i n n V V i i g g o o r r 2 2 8 8 3 3 0 0 There are two types of VLAN.
Vigor2830 Series User’s Guide 288 5. In the page of LAN >> General Setup , check the Status box of LAN2 and LAN3 and enable the function of DHCP. After finishing the above configuration, the equipm ent connecting to Vigor2830 LAN Port can get the corresponding IP address of the network segment.
Vigor2830 Series User’s Guide 289 6. To make any two of VLAN groups linked with each other, just check the boxes of the ones in the field of Inter-LAN Routing in the page of LAN >> General Setup . Refer to the following figure. LAN2 and LAN3 are linked.
Vigor2830 Series User’s Guide 290 I I I I . . T T a a g g B B a a s s e e d d V V L L A A N N By identifying the tagged message, Vigor2830 can divide the LAN Port into several VLAN groups. Such LAN port with tagged informati on will accept the packets only with VLAN ID number.
Vigor2830 Series User’s Guide 291 5. To activate the function of VLAN Tag for VLAN3 setting, check the box of Enable and type the value (10) for VID setting. Then check P4 and set LAN4 as the Subnet . 6. In the page of LAN >> General Setup , check the Status box of LAN2, LAN3 and LAN4 and enable the function of DHCP.
Vigor2830 Series User’s Guide 292 2. Add four VID groups. In this case, we can e xplanation it with Port 15, 16, 17, 18 and Trunk Port 23. VLAN Name 2830-VID7, Port Members = 15 、 23 VLAN Name 2830-VID8, Port Members = 16 、 23 VLAN Name 2830-VID9, Port Members = 17 、 23 VLAN Name 2830-VID10, Port Members = 18 、 23 3.
Vigor2830 Series User’s Guide 293 4. After finishing the above configuration, the equipment connecting to VigorSwitch Port 15 , 16, 17 and 18 can get the corresponding IP address(es) of the network segment. The equipment connecting to VigorSwitch Port 15 can get the IP address of 192.
Vigor2830 Series User’s Guide 294 4 4 . . 2 2 H H o o w w C C a a n n I I U U s s e e F F T T P P t t o o G G e e t t t t h h e e F F i i l l e e s s f f r r o o m m U U S S B B S S t t o o r r a a .
Vigor2830 Series User’s Guide 295 3. Setup a user account for the FTP service by using USB Application >>USB User Management. Click Enable to enable FTP/Samba User account. Here we add a new account "user1" and assign authorities “Read”, “Write” and “List” to it.
Vigor2830 Series User’s Guide 296 7. Return to USB Application >> USB Disk Status . The information for FTP server will be shown as below. Now, users in LAN of Vigor2830 can access into the USB storage device by typing ftp://192.168.1.1 on any browser.
Vigor2830 Series User’s Guide 297 4 4 . . 3 3 H H o o w w t t o o S S e e n n d d o o u u t t S S M M S S v v i i a a V V i i g g o o r r R R o o u u t t e e r r Such vigor router supports the feature of SMS. 1. Go to Application >>Short Message Service to create a new SMS profile.
Vigor2830 Series User’s Guide 298 want to receive the SMS in the field of Destination Number ; type the total number of the messages that the router will send out in the field of Quota ; type the shortest time interval for the system to send SMS in the field of Sending Interval .
Vigor2830 Series User’s Guide 299 6. Configure the settings as the following figure. Choose one of the SMS profiles. In this example, the profile “For warning” is selected.
Vigor2830 Series User’s Guide 300 4 4 . . 4 4 W W e e b b P P o o r r t t a a l l L L o o g g - - I I n n A A p p p p l l i i c c a a t t i i o o n n f f o o r r W W i i r r e e l l e e s s s s C C .
Vigor2830 Series User’s Guide 301 W W i i r r e e l l e e s s s s G G e e n n e e r r a a l l S S e e t t u u p p 1. From Vigor router web configuration page, select Wireless LAN>>General Setup . 2. Check Enable Wireless LAN and set the SSID. Then click OK to save the settings.
Vigor2830 Series User’s Guide 302 4. Use a Notebook or mobile device supporting Wi reless function to connect Vigor2830 via Wireless LAN. 5. Try to open a new tab in the same browser (for IE 7. 0/FireFox and above) or open a new web browser. 6. The first connection session will be redirected to DrayTek Website (specified in step 2) automatically.
Vigor2830 Series User’s Guide 303 4 4 . . 5 5 H H o o w w t t o o C C u u s s t t o o m m i i z z e e Y Y o o u u r r L L o o g g i i n n P P a a g g e e Login page can be customized to fit the request of the administrator. 1. Open User Management>>General Setup .
Vigor2830 Series User’s Guide 304 4. Open System Maintenance>>Login Customization . Check the box to enable this function. Type a brief description (e.g., Just for Carrie ) in the field of Login De scription which will be shown on the heading of the login dialog.
Vigor2830 Series User’s Guide 305 4 4 . . 6 6 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o .
Vigor2830 Series User’s Guide 306 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.
Vigor2830 Series User’s Guide 307 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, y ou should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection.
Vigor2830 Series User’s Guide 308 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service i s selected, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security Method for this Dial-In connection.
Vigor2830 Series User’s Guide 309 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: 1.
Vigor2830 Series User’s Guide 310 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.
Vigor2830 Series User’s Guide 311 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authen tication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection.
Vigor2830 Series User’s Guide 312 If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection.
Vigor2830 Series User’s Guide 313 4 4 . . 7 7 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w .
Vigor2830 Series User’s Guide 314 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection.
Vigor2830 Series User’s Guide 315 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Com p ression for this Dial-In connection. Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router.
Vigor2830 Series User’s Guide 316 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router.
Vigor2830 Series User’s Guide 317 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 8 8 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children.
Vigor2830 Series User’s Guide 318 3. Set Inbound/Outbound ba ndwidth. Note: The rate of outbound/inbound m ust be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to se t the bandwidth value for inbound/outbound as 80% - 85% of ph ysical network speed provided by ISP to maximize the QoS performance.
Vigor2830 Series User’s Guide 319 5. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP . 6. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS .
Vigor2830 Series User’s Guide 320 8. Check Enable UDP Bandwidth Control on the bottom to prevent enorm ous UDP traffic of influent other application. Click OK . 9. If the worker has connected to the headquart er using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it.
Vigor2830 Series User’s Guide 321 11. Click Add to open the following window . Check the ACT box, first. 12. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s IP address. Leave other fields and click OK .
Vigor2830 Series User’s Guide 322 4 4 . . 9 9 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r U U s s i i n n g g F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e U U t t i i l l i i t t y y Before upgrading your router firmware, you need to i nstall the Router Tools.
Vigor2830 Series User’s Guide 323 5. Double click on the icon of router tool. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility .
Vigor2830 Series User’s Guide 324 10. Click Send . 11. Now the firmware update is finished. U U s s i i n n g g W W e e b b P P a a g g e e The web page also can guide you to upgrade firm ware. Note that this example is running over Windows OS (Operating System).
Vigor2830 Series User’s Guide 325 4 4 . . 1 1 0 0 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Go to Certificate Management and choose Local Certificate .
Vigor2830 Series User’s Guide 326 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.
Vigor2830 Series User’s Guide 327 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below.
Vigor2830 Series User’s Guide 328 5. Back to Vigor router, go to Local Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh and you will find the below window showin g “------BEGINE CERTIFICATE------.
Vigor2830 Series User’s Guide 329 4 4 . . 1 1 1 1 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1.
Vigor2830 Series User’s Guide 330 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.
Vigor2830 Series User’s Guide 331 4 4 . . 1 1 2 2 C C r r e e a a t t i i n n g g a a n n A A c c c c o o u u n n t t f f o o r r M M y y V V i i g g o o r r The website of MyVigor (a server located on http://myvigor.draytek.com ) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.
Vigor2830 Series User’s Guide 332 2. Click the Activate link. A login page for MyVigor web site will pop up autom atically. 3. Click the link of Create an account now .
Vigor2830 Series User’s Guide 333 5. Type your personal information in this page and then click Continue . 6. Choose proper selection for your computer and click Continue .
Vigor2830 Series User’s Guide 334 7. Now you have created an account successfully. Click START. 8. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 9. Click the Activate my Account link to enable the account that you created.
Vigor2830 Series User’s Guide 335 10. When you see the following page, please type in the account and password (that y ou just created) in the fields of UserName and Password . 11. Now, click Login . Your account has been activated. You can access into MyVigor server to activate the service (e.
Vigor2830 Series User’s Guide 336 2. Check to confirm that you accept the Agreement and click Accept . 3. Type your personal information in this page and then click Continue .
Vigor2830 Series User’s Guide 337 5. Now you have created an account successfully. Click START. 6. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 7. Click the Activate my Account link to enable the account that you created.
Vigor2830 Series User’s Guide 338 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of Auth Code according to the value displayed on the right side of it.
Vigor2830 Series User’s Guide 339 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the we b configuration.
Vigor2830 Series User’s Guide 340 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s .
Vigor2830 Series User’s Guide 341 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O S S 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and get into Network .
Vigor2830 Series User’s Guide 342 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router.
Vigor2830 Series User’s Guide 343 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Open WAN >> Internet Access page and then check whether the ISP settings are set correctly.
Vigor2830 Series User’s Guide 344 T T r r a a n n s s m m i i s s s s i i o o n n R R a a t t e e i i s s n n o o t t f f a a s s t t e e n n o o u u g g h h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor2830.
Vigor2830 Series User’s Guide 345 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly, please release the button.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté Draytek Vigor2830 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du Draytek Vigor2830 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation Draytek Vigor2830, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le Draytek Vigor2830 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le Draytek Vigor2830, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du Draytek Vigor2830.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le Draytek Vigor2830. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei Draytek Vigor2830 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
