Manuals / Draytek / Computer Equipment / Network Router

Draytek manual Vigor2910 Series User’s Guide

Models: 2910

1 235

Download 235 pages 48.67 Kb

Page 20

14	Vigor2910 Series User’s Guide

Image 20

Draytek manual Vigor2910 Series User’s Guide

Contents

Vigor2910 Dual-WAN Security Router User’s Guide Table of Contents 100 Application and Examples 189 Trouble Shooting 221 Page Web Configuration Buttons Explanation LED Indicators and ConnectorsLED Explanation Connector ExplanationFor Vigor2910 For Vigor2910G WlanFor Vigor2910i IsdnFor Vigor2910V FXS1/FXS2For Vigor2910VG For Vigor2910VGi Hardware Installation Printer Installation Open Start-Settings- Printer and FaxesVigor2910 Series User’s Guide Vigor2910 Series User’s Guide Vigor2910 Series User’s Guide Vigor2910 Series User’s Guide Vigor2910 Series User’s Guide Configuring Basic Settings Changing PasswordVigor2910 Series User’s Guide Quick Start Wizard PPPoE Vigor2910 Series User’s Guide Pptp Static IP 4 L2TP Dhcp Online Status GW IP Displays the IP address of the default gatewayOnline status for Dhcp Saving Configuration WAN Basics of Internet Protocol IP NetworkWhat are Public IP Address and Private IP Address Get Your Public IP Address from ISPGeneral Setup Network Connection by 3G USB ModemEnable Physical ModeDisplay Name Physical TypeLoad Balance Mode Active ModeInternet Access Access ModeIndex DetailsDetails Page for PPPoE Ipcp Details Page for Static or Dynamic IP Settings Keep WANConnection RIP ProtocolDNS Server IP AddressDetails Page for PPTP/L2TP MethodIPCP PPP SetupAssignment Load-Balance Policy Details Page for PPPWAN Binding WAN Interface Src IP StartLAN Basics of LANWhat are Virtual LANs and Rate Control What is Routing Information Protocol RIPWhat is Static Route 1st IP Address 1st Subnet Mask For IP Routing Usage SubnetRelay Agent 1st subnet/2nd subnet Specify which subnet that ConfigurationDhcp Server Static Route DNS ServerAdd Static Routes to Private and Public Networks Destination AddressStatus Viewing Routing TableVigor2910 Series User’s Guide Bind IP to MAC NAT Port RedirectionSpecific service, select Range DMZ Host Public PortPrivate IP Private PortWAN1 IP DMZ Host Choose PCOpen Ports CommentWAN Interface Local IP AddressEnable Open Ports WAN IPLocal Computer Start PortIP Object Set to Factory Default Clear all profilesObjects and Groups Address Type Start IP AddressEnd IP Address Subnet MaskSelected IP Objects IP GroupAvailable IP Objects Service Type Object Service Type Group CSM Profile Pages of FirewallGeneral Setup FirewallEdit Filter SetEdit Filter RuleFirewall Facilities FirewallBasics for Firewall IP Filters Stateful Packet Inspection SPIContent Filtering Content Security Management CSMDenial of Service DoS Defense Web Filtering Filter Setup Call FilterData Filter FilterCheck to enable Filter RuleMove Up/Down Next Filter SetService Type DirectionFragments Filter onlyContent Management Configured in Objects and GroupsCSM Profiles selectedExample Branch to other FilterVigor2910 Series User’s Guide DoS Defense Block IP options Block LandBlock Smurf Block trace routerBlock Unknown Reject this kind of packetsURL Content Filter ControlWhite List pass those Matching keywordZip, rar, .arj, .ace, .cab, .sit Exe, .com, .scr, .pif, .bas, .bat, .inf, .regInside to outside world to protect the local users privacy Files downloading from web pages. Accordingly, files withWeb Content Filter Bandwidth Management Sessions LimitBandwidth Limit RX limit Quality of ServiceTX limit General Setup for WAN Interface Vigor2910 Series User’s Guide Edit the Class Rule for QoS On Line StatisticsCheck this box to invoke these settings ACTRule DiffServ CodePointEdit the Service Type for Class Rule Service Name Port ConfigurationEnable the Function and Add a Dynamic DNS Account ApplicationsDynamic DNS Index WAN InterfaceForce Update Enable DynamicService Provider Login NameSet to Factory Default ScheduleEnable Schedule Setup Idle TimeoutStart Date yyyy-mm-dd Start Time hhmmRadius Server IP AddressDestination Port Shared SecretUPnP Wake On LAN Cant work with Firewall SoftwareWake Up Wake byMAC Address PPP General Setup VPN and Remote AccessRemote Access Control PAP IPSec Security Method IPSec General SetupIKE Authentication Method IPSec Peer Identity Profile Name Accept Any Peer IDRemote Dial-in User UserL2TP IsdnPptp Medium -Authentication Header AH means data will be Check to enable Callback function -Enables the callbackCheck to enable callback budget control -By default, User NameLAN to LAN Enable this profile Ping to the IP Enable Ping to Keep Alive is used to handle abnormalCall Direction PPP Authentication IKE AuthenticationProfiles set from VPN and Remote AccessIPSec Peer Medium Authentication Header AH means data will beAdvanced Provide Isdn Number to Remote- In the case that Perfect Forward Secret PFS- The IKE Phase 1 key will beFor i models only Allowed Dial-In Type Specify Clid or RemoteAccessIPSec Peer Identity VPN GatewayDigital Signature X.509 Check the box of Digital Callback Budget Unit minutes- Specify the time budgetChange default route to this VPN tunnel From first subnet to remote network, you have to doFeatures of VPN Trunk VPN Trunk ManagementField Member1 on Backup Type on Backup ProfileMember2 on Backup Configured in VPN and Remote Access LAN-to-LANTime for activating VPN Trunk profile How can you set a VPN Trunk profile?Connection Management General ModeBackup Mode Refresh Seconds Generate Certificate ManagementLocal Certificate Import ViewTrusted CA Certificate Certificate Backup Calling via SIP Servers Sip userpassword @ host portVoIP Peer-to-Peer DialPlanPhone Book Phone Number SIP URLLoop through Digit Map Prefix NumberSIP Accounts OP NumberMin Len Max LenProfile Domain/RealmProxy Account NameAuthentication ID SIP PortAct as Outbound Proxy Account Number/NamePhone Settings Phone ListDetailed Settings for VoIP 1 RTPSession Timer HotlineFax Function Call ForwardingDefault SIP Account Play dial tone only when account registered Check thisDefault Call Route Call WaitingSettings of Caller ID Type , Dial tone , Ringing tone , Busy RegionVolume Gain Caller ID TypeMisc DtmfDetailed Settings for Isdn available for VGi model only PortClir hide caller ID DND Do Not DisturbIndex 1-15 in Schedule Enter the index of schedule Play dial tone only when Enable VoIP to Isdn Off-Net Calls -Check this box toSettings of Caller ID Type, Dial tone, Ringing tone, Busy Authentication PIN Code DtmpStatus Disallow VoIP to Isdn Calls with the Following PrefixesIsdn Isdn Port Country CodeOwn Number RouterDialing to a Single ISP CbcpDialing to Dual ISPs Virtual TAFixed IP Address Fixed IP Address Type the IP addressVirtual TA Server Virtual TA User ProfilesUser Profile Install a Virtual TA ClientConfigure a Virtual TA Client/ Server MSN Configuration Dial Delay Interval Call ControlDial Retry Remote ActivationTCP Header Compression High Water MarkSecurity Overview Wireless LANBasic Concepts Example Below shows the menu items for Wireless LAN General Settings SsidHide Ssid Long PreambleSecurity WEP WPAPre-Shared Key PSK Either 8~63 Ascii characters Access Control 12.5 WDS Click it to save the access control listClear All Clean all entries in the MAC address list Choose the mode for WDS setting. Disable mode will not AP Discovery Into Access Contro l Station ListStation Rate Control Wired VlanVlan VLAN0-3 Wireless VlanP1 P4 Login ID Multicast traffic How can you wireless client access into Internet?Disable broadcast 167 Vlan Cross Setup Wireless Rate Control WVLAN0-15Upload Rate Download RateSystem Maintenance System Status14.2 TR-069 Setting Default GatewayDNS Frequency DomainBackup the Configuration Administrator PasswordConfiguration Backup 173 Restore Configuration Syslog/Mail AlertEnable syslog message AuthenticationSmtp Server Mail ToTime and Date Management Reboot System Firmware Upgrade Refresh Click it to reload DiagnosticsDial-out Trigger Routing Table ARP Cache TableDhcp Table NAT Sessions TableLeased Time Host IDPeer IPPort Wireless Vlan Online Station TableData Flow Monitor Monitor TX rate kbpsRX rate kbps SessionsTraffic Graph Ping Diagnosis Trace RoutePing through Ping toHost/IP Address This page is left blank Application and Examples 190 191 192 193 194 195 Settings in VPN Router in the enterprise office 197 Settings in the remote host 199 QoS Setting Example 201 LAN Created by Using NAT 203 Calling Scenario for VoIP function Calling via SIP SeverCODEC/RTP/DTMF John calls DavidSIP URL 4321@draytel.org Settings for Arnor Settings for PaulinPeer-to-Peer Calling Arnor calls PaulinUpgrade Firmware for Your Router 208 Request a certificate from a CA server on Windows CA Server Go to Certificate Management and choose Local Certificate 211 212 213 Time and Date to reset current time of the router first Disable VPN Trunk profiles VPN Trunk ApplicationChange the name of VPN Trunk profiles Delete VPN Trunk profilesWeb Page Changes for VPN Trunk Examples for VPN Trunk Backup Profile 218 To inquire current ERD setting None Mode Default SettingResume Mode AutoDrop Mode¾ To set AutoDrop Trouble Shooting Checking If the Hardware Status Is OK or NotFor Windows For MacOs Pinging the Router from Your Computer For MacOs Terminal225 For Static/Dynamic IP Users Checking If the ISP Settings are OK or NotFor PPPoE Users USB LED lights on but the network connection does not work Problems for 3G Network ConnectionCheck if USB LED lights on or off Transmission Rate is not fast enough Backing to Factory Default Setting If NecessarySoftware Reset Hardware Reset Contacting Your Dealer