Vigor2800 Series ADSL2/2+ Security Router User’s Guide
 Table of Contents
 102
 Application and Examples 159
Trouble Shooting 187
 Preface
LED Indicators and Connectors
 For Vigor2800
Connector Explanation
LED Explanation
 P2P
For Vigor2800G
 Isdn
For Vigor2800i
 Isdn
For Vigor2800Gi
 FXS2 & FXS1
For Vigor2800V
 Wlan
For Vigor2800VG
 For Vigor2800VGi
 Hardware Installation
 This page is left blank
 Changing Password
Configuring Basic Settings
 Vigor2800 Series User’s Guide
 Quick Start Wizard
Adjusting Protocol/Encapsulation
VPI
 VCI
PPPoE/PPPoA
 Confirm Password
Password
Idle Timeout
User Name
 Bridged IP
 Routed IP
 Online status for PPPoA/PPPoE Online status for Bridge
Online Status
 Secondary DNS
Online status for Routed IP Primary DNS
IP Address in LAN
TX Packets
 Saving Configuration
 Basics of Internet Protocol IP Network
Internet Access
What are Public IP Address and Private IP Address
Get Your Public IP Address from ISP
 Below shows the menu items for Internet Access
 PPP
PPP Authentication Select PAP only or PAP or Chap for
 Vigor2800 Series User’s Guide
 Ports
 MPoA RFC1483/2684
 IP Address Type in the private IP address
Data
Subnet Mask Type in the subnet mask
Gateway IP Address Type in gateway IP address
 Multi-PVCs
Enable
Type in the value provided by your ISP
 Basics of LAN
LAN
 What is Static Route
What is Routing Information Protocol RIP
What are Virtual LANs and Rate Control
 Subnet
General Setup
 Dhcp Server
Configuration
Relay Agent 1st subnet/2nd subnet Specify which subnet that
 DNS Server
Static Route
Index
Destination Address
 Add Static Routes to Private and Public Networks
 Delete Static Route
 NAT
Disable Static Route
 Port Redirection
Service Name
 Public Port
DMZ Host
Private IP
Private Port
 Choose PC
 Comment
Open Ports
Aux. WAN IP
Local IP Address
 Inactive or Active state
Enable Open Ports
Local Computer
Start Port
 Basics for Firewall
Firewall
Firewall Facilities
 Stateful Packet Inspection SPI
IP Filters
 Content Filtering
Denial of Service DoS Defense
 Web Filtering
 Call Filter
Filter Setup
Data Filter
Log Flag
 Next Filter Set
Filter Rule
 Set
Branch to other Filter
Log
Direction
 Example
 5 P2P Blocking
IM Blocking
Action
 DoS Defense
 Block Land
Block IP options
Block Smurf
Block trace router
 Block Unknown
URL Content Filter
 Control
Prevent web access
White List pass those
Matching keyword
 Exe, .com, .scr, .pif, .bas, .bat, .inf, .reg
Zip, rar, .arj, .ace, .cab, .sit
Inside to outside world to protect the local users privacy
Files downloading from web pages. Accordingly, files with
 Web Content Filter
 Bind IP to MAC
 Limit Session
Bandwidth Management
 Setup
Default session limit
Limitation List
Start IP
 Default RX limit
Default TX limit
Limit Bandwidth
TX limit
 Quality of Service
 Class Name
Enable the QoS Control
Reserved Bandwidth Ratio
Reserved bandwidth to upstream speed and reserved
 Advanced Settings for QoS
Basic Settings for QoS
Enable UDP Bandwidth
On Line Statistics
 SrcEdit It allows you to edit source address information
 DiffServ CodePoint
 Service Type
 Applications
Enable the Function and Add a Dynamic DNS Account
Dynamic DNS
Index WAN Interface Domain Name
 Disable the Function and Clear all Dynamic DNS Accounts
Enable Dynamic
Active Display if this account is active or inactive
Delete a Dynamic DNS Account
 Schedule
Enable Schedule Setup
 Radius
 Destination Port
Server IP Address
Shared Secret
Re-type Shared Secret
 UPnP
 Cant work with Firewall Software
 Wake by
Wake On LAN
MAC Address
Wake Up
 Remote Access Control
VPN and Remote Access
PPP General Setup
 PAP
 IPSec General Setup
 IPSec Peer Identity
Set to Factory Default
Name
Next
 Vigor2800 Series User’s Guide
 User
Remote User Profiles
 Pptp
Isdn
L2TP
 Check to enable Callback function -Enables the callback
Medium -Authentication Header AH means data will be
Check to enable callback budget control -By default,
Callback Function
 LAN to LAN
 Enable Ping to Keep Alive is used to handle abnormal
Enable this profile
Profile Name
Call Direction
 IKE Authentication
PPP Authentication
Medium Authentication Header AH means data will be
L2TP with …
 3DES with Authentication- Use triple DES encryption
3DES without Authentication -Use triple DES encryption
High ESP-Encapsulating Security Payload- means
Advanced
 For I models only
Perfect Forward Secret PFS- The IKE Phase 1 key will be
Provide Isdn Number to Remote- In the case that
Allowed Dial-In Type
 VPN Gateway
Specify Clid or Remote
Digital Signature X.509 Check the box of Digital
 My WAN IP
Callback Budget Unit minutes- Specify the time budget
Remote Gateway IP
Remote Network IP
 Connection Management
Certificate Management
Dial
Refresh Seconds
 Generate
Local Certificate
Import
View
 Trusted CA Certificate
 Vigor2800 Series User’s Guide
 VoIP
Sip userpassword @ host port
Calling via SIP Servers
 Scenario Peer-to-Peer
Concepts of Isdn On-Net and Off-Net for 2800VGi only
Scenario
 Phone Book
DialPlan
 Phone Number
Digit Map
Display Name
SIP URL
 OP Number
Prefix Number
 SIP Accounts
 Register via
SIP Ping interval
SIP Port
Act as Outbound Proxy
 Account Number/Name
Authentication ID
Expiry Time
NAT Traversal Support
 Phone List
Phone Settings
 RTP
 Session Timer
Detailed Settings for VoIP 1
Hotline
Fax Function
 Default Call Route
Call Waiting Call Transfer Prefer Codec Default SIP Account
 Region
Settings of Caller ID Type , Dial tone , Ringing tone , Busy
 Caller ID Type
Volume Gain
Misc
Dtmf
 Detailed Settings for Isdn available for VGi model only
 Clir hide caller ID
DND Do Not Disturb
Play dial tone only when
 110
 Dtmp
Authentication PIN Code
 Disallow VoIP to Isdn Calls with the Following Prefixes
Status
Port
 Isdn
 Country Code
Isdn Port
Own Number
MSN Numbers for the Router
 Cbcp
Dialing to a Single ISP
 Virtual TA
Dialing to Dual ISPs
Fixed IP Address
Fixed IP Address Type the IP address
 117
 Virtual TA Server
User Profile
MSN1/ MSN2/MSN3
 MSN Configuration
 Call Control
Dial Delay Interval
Dial Retry
Remote Activation
 Basic Concepts
Wireless LAN
High Water Mark
 Security Overview
 Below shows the menu items for Wireless LAN
 Enable Wireless LAN
General Settings
Mixed 11b+11g+SuperG The radio can support
Index1-15
 Channel
Ssid
Hide Ssid
Long Preamble
 Security
 Pre-Shared Key PSK Either 8~63 Ascii characters
WPA
WEP
 Access Control
 11.5 WDS
 Choose the mode for WDS setting. Disable mode will not
 AP Discovery
 Station List
Into Access Contro l
 Vlan
Wired Vlan
Station Rate Control
 P1 P4
Wireless Vlan
VLAN0-3
 Details
Login ID
 How can you wireless client access into Internet?
 Vlan Cross Setup
 WVLAN0-15
 Out
Wired Rate Control
 Upload Rate
Wireless Rate Control
Download Rate
 System Status
System Maintenance
 Configuration Backup
Administrator Password
Backup the Configuration
DNS
 143
 Syslog/Mail Alert
Restore Configuration
 Authentication
 Time and Date
 Management
 Reboot System
 Firmware Upgrade
 WAN Connection
Diagnostics
Connection
 Routing Table
Dial-out Trigger
Refresh Click it to reload
 Dhcp Table
ARP Cache Table
Leased Time
Host ID
 Status
NAT Sessions Table
 Adsl Spectrum Analysis
 Ping Diagnosis
Wireless Vlan Online Station Table
Ping to
Run
 Data Flow Monitor
 TX rate kbps
Trace Route
RX rate kbps
Sessions
 158
 Application and Examples
 160
 161
 162
 163
 164
 165
 Settings in VPN Router in the enterprise office
 167
 Settings in the remote host
 169
 QoS Setting Example
 171
 LAN Created by Using NAT
 173
 174
 Calling via SIP Sever
Calling Scenario for VoIP function
CODEC/RTP/DTMF
 SIP URL 4321@draytel.org
 Settings for Paulin
Settings for Arnor
Peer-to-Peer Calling
Arnor calls Paulin
 Upgrade Firmware for Your Router
 179
 Request a certificate from a CA server on Windows CA Server
 Go to Certificate Management and choose Local Certificate
 182
 183
 184
 Time and Date to reset current time of the router first
 186
 Checking If the Hardware Status Is OK or Not
Trouble Shooting
 For Windows
 For MacOs
 For MacOs Terminal
Pinging the Router from Your Computer
 For PPPoE/PPPoA Users
Checking If the ISP Settings are OK or Not
 For MPoA Users
 Software Reset
Backing to Factory Default Setting If Necessary
Hardware Reset
Contacting Your Dealer