Manuals / Draytek / Computer Equipment / Network Router

Draytek 2910 manual 225

Models: 2910

1 235

Download 235 pages 48.67 Kb

Page 231

Vigor2910 Series User’s Guide

225

Image 231

Draytek 2910 manual 225

Contents

Vigor2910 Dual-WAN Security Router User’s Guide Table of Contents 100 Application and Examples 189 Trouble Shooting 221 Page LED Indicators and Connectors Web Configuration Buttons ExplanationConnector Explanation For Vigor2910LED Explanation Wlan For Vigor2910GIsdn For Vigor2910iFXS1/FXS2 For Vigor2910VFor Vigor2910VG For Vigor2910VGi Hardware Installation Open Start-Settings- Printer and Faxes Printer InstallationVigor2910 Series User’s Guide Vigor2910 Series User’s Guide Vigor2910 Series User’s Guide Vigor2910 Series User’s Guide Vigor2910 Series User’s Guide Changing Password Configuring Basic SettingsVigor2910 Series User’s Guide Quick Start Wizard PPPoE Vigor2910 Series User’s Guide Pptp Static IP 4 L2TP Dhcp Online Status Displays the IP address of the default gateway Online status for DhcpGW IP Saving Configuration Get Your Public IP Address from ISP WANBasics of Internet Protocol IP Network What are Public IP Address and Private IP AddressNetwork Connection by 3G USB Modem General SetupPhysical Type EnablePhysical Mode Display NameActive Mode Load Balance ModeDetails Internet AccessAccess Mode IndexDetails Page for PPPoE Ipcp Details Page for Static or Dynamic IP RIP Protocol SettingsKeep WAN ConnectionAddress DNS Server IPDetails Page for PPTP/L2TP PPP Setup AssignmentMethodIPCP Details Page for PPP Load-Balance PolicyWAN Interface Src IP Start Binding WANBasics of LAN LANWhat is Routing Information Protocol RIP What is Static RouteWhat are Virtual LANs and Rate Control Subnet 1st IP Address 1st Subnet Mask For IP Routing UsageConfiguration Dhcp ServerRelay Agent 1st subnet/2nd subnet Specify which subnet that DNS Server Static RouteViewing Routing Table Add Static Routes to Private and Public NetworksDestination Address StatusVigor2910 Series User’s Guide Bind IP to MAC Port Redirection NATSpecific service, select Range Private Port DMZ HostPublic Port Private IPWAN1 Choose PC IP DMZ HostLocal IP Address Open PortsComment WAN InterfaceStart Port Enable Open PortsWAN IP Local ComputerSet to Factory Default Clear all profiles Objects and GroupsIP Object Subnet Mask Address TypeStart IP Address End IP AddressIP Group Available IP ObjectsSelected IP Objects Service Type Object Service Type Group CSM Profile FirewallEdit Filter SetEdit Filter Rule Pages of FirewallGeneral SetupFirewall Basics for FirewallFirewall Facilities Stateful Packet Inspection SPI IP FiltersContent Security Management CSM Denial of Service DoS DefenseContent Filtering Web Filtering Filter Filter SetupCall Filter Data FilterNext Filter Set Check to enableFilter Rule Move Up/DownDirection Service TypeFilter only FragmentsBranch to other Filter Content ManagementConfigured in Objects and GroupsCSM Profiles selected ExampleVigor2910 Series User’s Guide DoS Defense Block trace router Block IP optionsBlock Land Block SmurfReject this kind of packets Block UnknownMatching keyword URL Content FilterControl White List pass thoseFiles downloading from web pages. Accordingly, files with Zip, rar, .arj, .ace, .cab, .sitExe, .com, .scr, .pif, .bas, .bat, .inf, .reg Inside to outside world to protect the local users privacyWeb Content Filter Sessions Limit Bandwidth ManagementBandwidth Limit Quality of Service TX limitRX limit General Setup for WAN Interface Vigor2910 Series User’s Guide On Line Statistics Edit the Class Rule for QoSDiffServ CodePoint Check this box to invoke these settingsACT RuleEdit the Service Type for Class Rule Port Configuration Service NameIndex WAN Interface Enable the Function and Add a Dynamic DNS AccountApplications Dynamic DNSLogin Name Force UpdateEnable Dynamic Service ProviderSchedule Set to Factory DefaultStart Time hhmm Enable Schedule SetupIdle Timeout Start Date yyyy-mm-ddShared Secret RadiusServer IP Address Destination PortUPnP Cant work with Firewall Software Wake On LANWake by MAC AddressWake Up VPN and Remote Access Remote Access ControlPPP General Setup PAP IPSec General Setup IKE Authentication MethodIPSec Security Method IPSec Peer Identity Accept Any Peer ID Profile NameUser Remote Dial-in UserIsdn PptpL2TP User Name Medium -Authentication Header AH means data will beCheck to enable Callback function -Enables the callback Check to enable callback budget control -By default,LAN to LAN Enable this profile Enable Ping to Keep Alive is used to handle abnormal Call DirectionPing to the IP Medium Authentication Header AH means data will be PPP AuthenticationIKE Authentication Profiles set from VPN and Remote AccessIPSec PeerAdvanced Perfect Forward Secret PFS- The IKE Phase 1 key will be For i models onlyProvide Isdn Number to Remote- In the case that Specify Clid or Remote Allowed Dial-In TypeCallback Budget Unit minutes- Specify the time budget AccessIPSec Peer IdentityVPN Gateway Digital Signature X.509 Check the box of DigitalFrom first subnet to remote network, you have to do Change default route to this VPN tunnelVPN Trunk Management Features of VPN TrunkConfigured in VPN and Remote Access LAN-to-LAN Field Member1 on BackupType on Backup Profile Member2 on BackupHow can you set a VPN Trunk profile? Time for activating VPN Trunk profileGeneral Mode Backup ModeConnection Management Refresh Seconds Certificate Management Local CertificateGenerate View ImportTrusted CA Certificate Certificate Backup Sip userpassword @ host port VoIPCalling via SIP Servers DialPlan Phone BookPeer-to-Peer SIP URL Phone NumberLoop through Prefix Number Digit MapMax Len SIP AccountsOP Number Min LenAccount Name ProfileDomain/Realm ProxyAccount Number/Name Authentication IDSIP Port Act as Outbound ProxyPhone List Phone SettingsRTP Detailed Settings for VoIP 1Call Forwarding Session TimerHotline Fax FunctionCall Waiting Default SIP AccountPlay dial tone only when account registered Check this Default Call RouteRegion Settings of Caller ID Type , Dial tone , Ringing tone , BusyDtmf Volume GainCaller ID Type MiscPort Detailed Settings for Isdn available for VGi model onlyDND Do Not Disturb Index 1-15 in Schedule Enter the index of scheduleClir hide caller ID Enable VoIP to Isdn Off-Net Calls -Check this box to Settings of Caller ID Type, Dial tone, Ringing tone, BusyPlay dial tone only when Dtmp Authentication PIN CodeDisallow VoIP to Isdn Calls with the Following Prefixes StatusIsdn Router Isdn PortCountry Code Own NumberCbcp Dialing to a Single ISPFixed IP Address Type the IP address Dialing to Dual ISPsVirtual TA Fixed IP AddressVirtual TA User Profiles Virtual TA ServerInstall a Virtual TA Client Configure a Virtual TA Client/ ServerUser Profile MSN Configuration Remote Activation Dial Delay IntervalCall Control Dial RetryHigh Water Mark TCP Header CompressionWireless LAN Basic ConceptsSecurity Overview Example Below shows the menu items for Wireless LAN Ssid General SettingsLong Preamble Hide SsidSecurity WPA Pre-Shared Key PSK Either 8~63 Ascii charactersWEP Access Control Click it to save the access control list Clear All Clean all entries in the MAC address list12.5 WDS Choose the mode for WDS setting. Disable mode will not AP Discovery Station List Into Access Contro lWired Vlan VlanStation Rate Control Wireless Vlan P1 P4VLAN0-3 Login ID How can you wireless client access into Internet? Disable broadcastMulticast traffic 167 Vlan Cross Setup Download Rate Wireless Rate ControlWVLAN0-15 Upload RateSystem Status System MaintenanceFrequency Domain 14.2 TR-069 SettingDefault Gateway DNSAdministrator Password Configuration BackupBackup the Configuration 173 Syslog/Mail Alert Restore ConfigurationMail To Enable syslog messageAuthentication Smtp ServerTime and Date Management Reboot System Firmware Upgrade Diagnostics Dial-out TriggerRefresh Click it to reload ARP Cache Table Routing TableHost ID Dhcp TableNAT Sessions Table Leased TimeWireless Vlan Online Station Table Data Flow MonitorPeer IPPort Sessions MonitorTX rate kbps RX rate kbpsTraffic Graph Ping to Ping DiagnosisTrace Route Ping throughHost/IP Address This page is left blank Application and Examples 190 191 192 193 194 195 Settings in VPN Router in the enterprise office 197 Settings in the remote host 199 QoS Setting Example 201 LAN Created by Using NAT 203 John calls David Calling Scenario for VoIP functionCalling via SIP Sever CODEC/RTP/DTMFSIP URL 4321@draytel.org Arnor calls Paulin Settings for ArnorSettings for Paulin Peer-to-Peer CallingUpgrade Firmware for Your Router 208 Request a certificate from a CA server on Windows CA Server Go to Certificate Management and choose Local Certificate 211 212 213 Time and Date to reset current time of the router first Delete VPN Trunk profiles Disable VPN Trunk profilesVPN Trunk Application Change the name of VPN Trunk profilesWeb Page Changes for VPN Trunk Examples for VPN Trunk Backup Profile 218 AutoDrop Mode To inquire current ERD settingNone Mode Default Setting Resume Mode¾ To set AutoDrop Checking If the Hardware Status Is OK or Not Trouble ShootingFor Windows For MacOs For MacOs Terminal Pinging the Router from Your Computer225 Checking If the ISP Settings are OK or Not For PPPoE UsersFor Static/Dynamic IP Users Problems for 3G Network Connection Check if USB LED lights on or offUSB LED lights on but the network connection does not work Backing to Factory Default Setting If Necessary Software ResetTransmission Rate is not fast enough Contacting Your Dealer Hardware Reset