Vigor2800 Series ADSL2/2+ Security Router User’s Guide
Table of Contents
102
Application and Examples 159
Trouble Shooting 187
Preface
LED Indicators and Connectors
For Vigor2800
Connector Explanation
LED Explanation
P2P
For Vigor2800G
Isdn
For Vigor2800i
Isdn
For Vigor2800Gi
FXS2 & FXS1
For Vigor2800V
Wlan
For Vigor2800VG
For Vigor2800VGi
Hardware Installation
This page is left blank
Changing Password
Configuring Basic Settings
Vigor2800 Series User’s Guide
Quick Start Wizard
Adjusting Protocol/Encapsulation
VPI
VCI
PPPoE/PPPoA
Confirm Password
Password
Idle Timeout
User Name
Bridged IP
Routed IP
Online status for PPPoA/PPPoE Online status for Bridge
Online Status
Secondary DNS
Online status for Routed IP Primary DNS
IP Address in LAN
TX Packets
Saving Configuration
Basics of Internet Protocol IP Network
Internet Access
What are Public IP Address and Private IP Address
Get Your Public IP Address from ISP
Below shows the menu items for Internet Access
PPP
PPP Authentication Select PAP only or PAP or Chap for
Vigor2800 Series User’s Guide
Ports
MPoA RFC1483/2684
IP Address Type in the private IP address
Data
Subnet Mask Type in the subnet mask
Gateway IP Address Type in gateway IP address
Multi-PVCs
Enable
Type in the value provided by your ISP
Basics of LAN
LAN
What is Static Route
What is Routing Information Protocol RIP
What are Virtual LANs and Rate Control
Subnet
General Setup
Dhcp Server
Configuration
Relay Agent 1st subnet/2nd subnet Specify which subnet that
DNS Server
Static Route
Index
Destination Address
Add Static Routes to Private and Public Networks
Delete Static Route
NAT
Disable Static Route
Port Redirection
Service Name
Public Port
DMZ Host
Private IP
Private Port
Choose PC
Comment
Open Ports
Aux. WAN IP
Local IP Address
Inactive or Active state
Enable Open Ports
Local Computer
Start Port
Basics for Firewall
Firewall
Firewall Facilities
Stateful Packet Inspection SPI
IP Filters
Content Filtering
Denial of Service DoS Defense
Web Filtering
Call Filter
Filter Setup
Data Filter
Log Flag
Next Filter Set
Filter Rule
Set
Branch to other Filter
Log
Direction
Example
5 P2P Blocking
IM Blocking
Action
DoS Defense
Block Land
Block IP options
Block Smurf
Block trace router
Block Unknown
URL Content Filter
Control
Prevent web access
White List pass those
Matching keyword
Exe, .com, .scr, .pif, .bas, .bat, .inf, .reg
Zip, rar, .arj, .ace, .cab, .sit
Inside to outside world to protect the local users privacy
Files downloading from web pages. Accordingly, files with
Web Content Filter
Bind IP to MAC
Limit Session
Bandwidth Management
Setup
Default session limit
Limitation List
Start IP
Default RX limit
Default TX limit
Limit Bandwidth
TX limit
Quality of Service
Class Name
Enable the QoS Control
Reserved Bandwidth Ratio
Reserved bandwidth to upstream speed and reserved
Advanced Settings for QoS
Basic Settings for QoS
Enable UDP Bandwidth
On Line Statistics
SrcEdit It allows you to edit source address information
DiffServ CodePoint
Service Type
Applications
Enable the Function and Add a Dynamic DNS Account
Dynamic DNS
Index WAN Interface Domain Name
Disable the Function and Clear all Dynamic DNS Accounts
Enable Dynamic
Active Display if this account is active or inactive
Delete a Dynamic DNS Account
Schedule
Enable Schedule Setup
Radius
Destination Port
Server IP Address
Shared Secret
Re-type Shared Secret
UPnP
Cant work with Firewall Software
Wake by
Wake On LAN
MAC Address
Wake Up
Remote Access Control
VPN and Remote Access
PPP General Setup
PAP
IPSec General Setup
IPSec Peer Identity
Set to Factory Default
Name
Next
Vigor2800 Series User’s Guide
User
Remote User Profiles
Pptp
Isdn
L2TP
Check to enable Callback function -Enables the callback
Medium -Authentication Header AH means data will be
Check to enable callback budget control -By default,
Callback Function
LAN to LAN
Enable Ping to Keep Alive is used to handle abnormal
Enable this profile
Profile Name
Call Direction
IKE Authentication
PPP Authentication
Medium Authentication Header AH means data will be
L2TP with …
3DES with Authentication- Use triple DES encryption
3DES without Authentication -Use triple DES encryption
High ESP-Encapsulating Security Payload- means
Advanced
For I models only
Perfect Forward Secret PFS- The IKE Phase 1 key will be
Provide Isdn Number to Remote- In the case that
Allowed Dial-In Type
VPN Gateway
Specify Clid or Remote
Digital Signature X.509 Check the box of Digital
My WAN IP
Callback Budget Unit minutes- Specify the time budget
Remote Gateway IP
Remote Network IP
Connection Management
Certificate Management
Dial
Refresh Seconds
Generate
Local Certificate
Import
View
Trusted CA Certificate
Vigor2800 Series User’s Guide
VoIP
Sip userpassword @ host port
Calling via SIP Servers
Scenario Peer-to-Peer
Concepts of Isdn On-Net and Off-Net for 2800VGi only
Scenario
Phone Book
DialPlan
Phone Number
Digit Map
Display Name
SIP URL
OP Number
Prefix Number
SIP Accounts
Register via
SIP Ping interval
SIP Port
Act as Outbound Proxy
Account Number/Name
Authentication ID
Expiry Time
NAT Traversal Support
Phone List
Phone Settings
RTP
Session Timer
Detailed Settings for VoIP 1
Hotline
Fax Function
Default Call Route
Call Waiting Call Transfer Prefer Codec Default SIP Account
Region
Settings of Caller ID Type , Dial tone , Ringing tone , Busy
Caller ID Type
Volume Gain
Misc
Dtmf
Detailed Settings for Isdn available for VGi model only
Clir hide caller ID
DND Do Not Disturb
Play dial tone only when
110
Dtmp
Authentication PIN Code
Disallow VoIP to Isdn Calls with the Following Prefixes
Status
Port
Isdn
Country Code
Isdn Port
Own Number
MSN Numbers for the Router
Cbcp
Dialing to a Single ISP
Virtual TA
Dialing to Dual ISPs
Fixed IP Address
Fixed IP Address Type the IP address
117
Virtual TA Server
User Profile
MSN1/ MSN2/MSN3
MSN Configuration
Call Control
Dial Delay Interval
Dial Retry
Remote Activation
Basic Concepts
Wireless LAN
High Water Mark
Security Overview
Below shows the menu items for Wireless LAN
Enable Wireless LAN
General Settings
Mixed 11b+11g+SuperG The radio can support
Index1-15
Channel
Ssid
Hide Ssid
Long Preamble
Security
Pre-Shared Key PSK Either 8~63 Ascii characters
WPA
WEP
Access Control
11.5 WDS
Choose the mode for WDS setting. Disable mode will not
AP Discovery
Station List
Into Access Contro l
Vlan
Wired Vlan
Station Rate Control
P1 P4
Wireless Vlan
VLAN0-3
Details
Login ID
How can you wireless client access into Internet?
Vlan Cross Setup
WVLAN0-15
Out
Wired Rate Control
Upload Rate
Wireless Rate Control
Download Rate
System Status
System Maintenance
Configuration Backup
Administrator Password
Backup the Configuration
DNS
143
Syslog/Mail Alert
Restore Configuration
Authentication
Time and Date
Management
Reboot System
Firmware Upgrade
WAN Connection
Diagnostics
Connection
Routing Table
Dial-out Trigger
Refresh Click it to reload
Dhcp Table
ARP Cache Table
Leased Time
Host ID
Status
NAT Sessions Table
Adsl Spectrum Analysis
Ping Diagnosis
Wireless Vlan Online Station Table
Ping to
Run
Data Flow Monitor
TX rate kbps
Trace Route
RX rate kbps
Sessions
158
Application and Examples
160
161
162
163
164
165
Settings in VPN Router in the enterprise office
167
Settings in the remote host
169
QoS Setting Example
171
LAN Created by Using NAT
173
174
Calling via SIP Sever
Calling Scenario for VoIP function
CODEC/RTP/DTMF
SIP URL 4321@draytel.org
Settings for Paulin
Settings for Arnor
Peer-to-Peer Calling
Arnor calls Paulin
Upgrade Firmware for Your Router
179
Request a certificate from a CA server on Windows CA Server
Go to Certificate Management and choose Local Certificate
182
183
184
Time and Date to reset current time of the router first
186
Checking If the Hardware Status Is OK or Not
Trouble Shooting
For Windows
For MacOs
For MacOs Terminal
Pinging the Router from Your Computer
For PPPoE/PPPoA Users
Checking If the ISP Settings are OK or Not
For MPoA Users
Software Reset
Backing to Factory Default Setting If Necessary
Hardware Reset
Contacting Your Dealer