DraytekメーカーVigor2820VSnの使用説明書/サービス説明書
ページ先へ移動 of 279
Vigor2820 Series User’s Guide i.
Vigor2820 Series User’s Guide ii.
Vigor2820 Series User’s Guide iii Vigor2820 Series ADSL2/2+ Security Firewall User’s Guide Version: 3.0 Date: 30/07/2009.
Vigor2820 Series User’s Guide iv Copyright Information Copyright Declarations Copyright 2009 All rights reserved. This pub lication contains information that is protected by copyright.
Vigor2820 Series User’s Guide v European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town ship, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor2820 Ser ies Router DrayTek Corp.
Vigor2820 Series User’s Guide vi.
Vigor2820 Series User’s Guide vii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Web Conf iguration Buttons Explanation .
Vigor2820 Series User’s Guide viii 3.3.3 Open Ports ...................................................................................................................... 74 3.4 Fire wall .............................................................
Vigor2820 Series User’s Guide ix 3.12.1 Basic Concept ............................................................................................................. 183 3.12.2 General Settings .........................................................
Vigor2820 Series User’s Guide x 4.7 Request a certificate from a CA server on Windows CA Server ......................................... 253 4.8 Request a CA Certificate and Set as T rusted on Wind ows CA Se rver ............................... 257 5 T r ouble Shoot ing .
Vigor2820 Series User’s Guide 1 1 P P r r e e f f a a c c e e Vigor2820 series is an ADSL and broadband router with WAN interface. It provides policy-based load-balance, fail-over and BOD (Bandwidth on Demand), also it integrates IP layer QoS, NAT session/bandwidth managem ent to help users control works well with large bandwidth.
Vigor2820 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. The displays of LED indicators and connectors for the routers are different slightly.
Vigor2820 Series User’s Guide 3 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 4 Interface Description Factory Reset Restore the def ault settings. Us age: T urn on the router (ACT LED is blinking). Press the hole and keep fo r more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, release the button.
Vigor2820 Series User’s Guide 5 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 6 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection th rough WPS. Press "Wireless LAN ON/OFF/WPS" button once to enab le (WLAN LED on) or disa ble (WLAN LED off) wireless c onnection.
Vigor2820 Series User’s Guide 7 1 1 . . 2 2 . . 3 3 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 8 Interface Description Factory Reset Restore the def ault settings. Us age: T urn on the router (ACT LED is blinking). Press the hole and keep fo r more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, release the button.
Vigor2820 Series User’s Guide 9 1 1 . . 2 2 . . 4 4 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 10 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on for 2 seconds to wait for client device makin g network c onnection th rough WPS. Press "Wireless LAN ON/OFF/WPS" button once to enab le (WLAN LED on) or disa ble (WLAN LED off) wireless c onnection.
Vigor2820 Series User’s Guide 11 1 1 . . 2 2 . . 5 5 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V S S LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 12 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking Th e data is transmitting. On The port is conn ected with 1000Mbps. LAN 1(Giga) Right LED (Green) Off The port is di sconnected wit h 10/100Mb ps.
Vigor2820 Series User’s Guide 13 1 1 . . 2 2 . . 6 6 F F o o r r V V i i g g o o r r 2 2 8 8 2 2 0 0 V V S S n n LED Status Explanation Blinking The router is powere d on and running no rmally. ACT (Activity) Off The router is powe red off. On A USB device is connected and active.
Vigor2820 Series User’s Guide 14 On The port is connected. Off The port is disconnected. Left LED (Green) Blinking Th e data is transmitting. On The port is conn ected with 1000Mbps. LAN 1(Giga) Right LED (Green) Off The port is di sconnected wit h 10/100Mb ps.
Vigor2820 Series User’s Guide 15 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the ADSL interface to the external ADSL splitter with an ADSL line cable for all models.
Vigor2820 Series User’s Guide 16 Caution : Each of the Phone ports can be connected to an analog phone onl y. Do not connect the phone ports to the telephone wall jack.
Vigor2820 Series User’s Guide 17 1 1 . . 5 5 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router.
Vigor2820 Series User’s Guide 18 3. Open File->Add a New Computer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port .
Vigor2820 Series User’s Guide 19 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port nam e. Then, click Next . 7. Click Standard and choose Generic Network Card.
Vigor2820 Series User’s Guide 20 9. Now, your system will ask you to choose right name of the printer that you installed onto t he router. Such step can make correct driver loaded ont o your PC.
Vigor2820 Series User’s Guide 21 Note 1: Some printers with the fax/scanning or other additional fun ctions are not supported. If you do not know whether your printer is supported or not, please visit www.
Vigor2820 Series User’s Guide 22 This page is left blank..
Vigor2820 Series User’s Guide 23 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings.
Vigor2820 Series User’s Guide 24 Note: The home page will change slightly in accordance with the router you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the default is blank) on the field of Old Password .
Vigor2820 Series User’s Guide 25 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickl y.
Vigor2820 Series User’s Guide 26 In the Quick Start Wizard , you can configure the router to access the Internet with different protocol/modes such as PPPoE/PPPoA , 1483 Bridged IP or 1483 Routed IP . The router supports the DSL WAN interface for Internet access.
Vigor2820 Series User’s Guide 27 If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown: User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP.
Vigor2820 Series User’s Guide 28 2 2 . . 2 2 . . 2 2 1 1 4 4 8 8 3 3 B B r r i i d d g g e e d d I I P P Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection.
Vigor2820 Series User’s Guide 29 2 2 . . 2 2 . . 3 3 1 1 4 4 8 8 3 3 R R o o u u t t e e d d I I P P Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page.
Vigor2820 Series User’s Guide 30 2 2 . . 3 3 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, W AN status, ADSL Information and other status related to this router within one page.
Vigor2820 Series User’s Guide 31 Online status for Static IP (for WAN1) Online status for DHCP (WAN1).
Vigor2820 Series User’s Guide 32 Online status for ISDN enabled Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Display s the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface.
Vigor2820 Series User’s Guide 33 RX Rate Displays the speed of received octets at the ISDN interface. Up Time Displays the total uptime of the interface.
Vigor2820 Series User’s Guide 34 This page is left blank..
Vigor2820 Series User’s Guide 35 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease.
Vigor2820 Series User’s Guide 36 3 3 . . 1 1 . . 2 2 N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n b b y y 3 3 G G U U S S B B M M o o d d e e m m For 3G mobile communication through Access Point is popular more and more, Vigor2820 adds the function of 3G network connection fo r such purpose.
Vigor2820 Series User’s Guide 37 Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface.
Vigor2820 Series User’s Guide 38 determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed . Otherwise, please choose Auto Weigh to let the router reach the best load balance.
Vigor2820 Series User’s Guide 39 3 3 . . 1 1 . . 4 4 I I n n t t e e r r n n e e t t A A c c c c e e s s s s For the router supports dual WAN function, the users can set different WAN settings (for WAN1/WAN2) for Internet Access. Due to di fferent physical mode for WAN1 and WAN2, the Access Mode for these two connections also varies slightly.
Vigor2820 Series User’s Guide 40 Enable/Disable Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. DSL Modem Settings Set up the DSL parameters required by your ISP.
Vigor2820 Series User’s Guide 41 PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server.
Vigor2820 Series User’s Guide 42 In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias.
Vigor2820 Series User’s Guide 43 DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your ISP. Multi-PVC channel - The selections displayed here are determined by the page of Internet Access – Multi PVCs .
Vigor2820 Series User’s Guide 44 a Single ISP to create the backup profile. None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection.
Vigor2820 Series User’s Guide 45 Then click OK to exit the dialog. IP Address – Type in the private IP address. Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. Default MAC Address Type in MAC address for the router.
Vigor2820 Series User’s Guide 46 Enable/Disable Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid.
Vigor2820 Series User’s Guide 47 Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. MTU Mean maximum transmission unit of one packet.
Vigor2820 Series User’s Guide 48 S S t t a a t t i i c c o o r r D D y y n n a a m m i i c c I I P P f f o o r r W W A A N N 2 2 For static IP mode, you usually receive a fixed public IP address or a public subnet, nam ely multiple public IP addresses from your DSL or Cable ISP service providers.
Vigor2820 Series User’s Guide 49 Detection Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference.
Vigor2820 Series User’s Guide 50 if you want to use Static IP mode. IP Address : Type the IP address. Subnet Mask : Type the subnet mask. Gateway IP Address : Type the gateway IP address. Default MAC Address : Click this radio button to use default MAC address for the router.
Vigor2820 Series User’s Guide 51 ISDN Dial Backup Setup This setting is available for the routers supporting ISDN function only. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click ISDN > Dialing to a Single ISP to create the backup profile.
Vigor2820 Series User’s Guide 52 address in the box of Fixed IP Address . Fixed IP Address - Type a fixed IP address. WAN IP Network Settings Obtain an IP address automatically – Click this button to obtain the IP address automatically. Specify an IP address – Click this radio button to specify some data.
Vigor2820 Series User’s Guide 53 3 3 . . 1 1 . . 5 5 M M u u l l t t i i - - P P V V C C s s This router allows you to create multi-PVCs for different data transferring for using.
Vigor2820 Series User’s Guide 54 Encapsulation Choose a proper type for this channel. The types will be different according to the protocol setting that you choose. WAN link for Channel 3, 4, 5 are provided for router-borne applic ation such as TR069 and VoIP.
Vigor2820 Series User’s Guide 55 A A T T M M Q Q o o S S Such configuration is applied to upstream packets. Such inform ation will be provided by ISP. Please contact with your ISP for detailed information. QoS Type Select a proper QoS type for the channel according to the information that your ISP provides.
Vigor2820 Series User’s Guide 56 P P o o r r t t - - b b a a s s e e d d B B r r i i d d g g e e General page lets you set the first PVC. As to set the second PVC line, please click the Port-based Bridge tab to open Bridge configuration page. Enable Check this box to enable that channel.
Vigor2820 Series User’s Guide 57 3 3 . . 1 1 . . 6 6 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balancing. It can assign traffic with protocol type, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN1 or WAN2 interface.
Vigor2820 Series User’s Guide 58 Dest Port Start Display s the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Move UP/Move Down Use Up or Down link to m ove the order of the policy.
Vigor2820 Series User’s Guide 59 Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the destination ports will be passed through the WAN interface. 3 3 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and ruled by router .
Vigor2820 Series User’s Guide 60 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V i gor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing.
Vigor2820 Series User’s Guide 61 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in pri vate IP address for connecting to a local private network (Default: 192.
Vigor2820 Series User’s Guide 62 server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.135.240.1, the starting IP address must be 220.135.240.2 or greater , b ut smaller than 220.135.240.254. IP Pool Cou nts: Enter the number of IP addresses in the pool.
Vigor2820 Series User’s Guide 63 the DHCP server you are going to use so the Relay Ag ent can help to forward the DHCP request to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Internet host must have a unique IP address, also they may have a human-friendly, easy to remember name such as www.
Vigor2820 Series User’s Guide 64 Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference.
Vigor2820 Series User’s Guide 65 the router , and continuously exchange o f IP routing information with dif ferent subnets. 2. Click the LAN - S tatic Route and click on the Index Num ber 1. Check the Enable box. Please add a static route as shown below , which regulates all packets destined to 192.
Vigor2820 Series User’s Guide 66 3 3 . . 2 2 . . 4 4 V V L L A A N N Virtual LAN function provides you a very convenient way to manage hosts by g rouping them based on the physical port. You can also manage the in/out rate of each port. Go to LAN page and select VLAN .
Vigor2820 Series User’s Guide 67 T o remove VLAN, uncheck the needed box and click OK to save the results. 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthening co ntrol in network.
Vigor2820 Series User’s Guide 68 Strict Bind Click this radio butt on to block the connection of the IP/MAC which is not listed in IP Bind List. ARP Table This table is the LAN ARP table of this router. The information for IP and MAC will be displayed in this field.
Vigor2820 Series User’s Guide 69 On NAT page, you will see the private IP address defined in RFC-1918. Usually we use the 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services.
Vigor2820 Series User’s Guide 70 Press any number under Index to access into next page for configuring port redirection. Enable Check this box to enable such port redirection setting. Mode Two optio ns (Single and Range) are provided here for you to cho ose.
Vigor2820 Series User’s Guide 71 Private IP Specify the private IP address of the internal host providing the service. If you choose Range as the port redirection mode, you will see two boxes on this field. Type a complete IP address in the first box (as the starting point) and the fourth digits i n the second box (as the end point).
Vigor2820 Series User’s Guide 72 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias for PPPoE/PPPoA or MPoA mode , you will find them in Aux.
Vigor2820 Series User’s Guide 73 Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this button and then a window will autom atically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network.
Vigor2820 Series User’s Guide 74 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc.
Vigor2820 Series User’s Guide 75 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one.
Vigor2820 Series User’s Guide 76 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned.
Vigor2820 Series User’s Guide 77 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer.
Vigor2820 Series User’s Guide 78 3 3 . . 4 4 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p General Setup allows you to adjust setti ngs of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter . Under some circumstance, your filter set can be linked to work in a serial manner.
Vigor2820 Series User’s Guide 79 the Log box. It will be sent to Syslog server . Please refer to section 3.14.5 Syslog/Mail Alert for more detailed information. W e b Content Filter Select one of the W eb Content Filter Profile settings (created in CSM>> W e b Content Filter Profile ) for applying with this router .
Vigor2820 Series User’s Guide 80 (0~65535). The m ore the value is, the better the performance will be. However , if the network is not stable, sm all value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources.
Vigor2820 Series User’s Guide 81 Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the butt on will open Edit Filter Rule web page. For the detailed information, refer to the following page. Active Enable or disable the filter rule.
Vigor2820 Series User’s Guide 82 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Ty pe and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type.
Vigor2820 Series User’s Guide 83 use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to.
Vigor2820 Series User’s Guide 84 will be sent to Syslog server . Please refer to section 3.14.5 Syslog/Mail Alert for more detailed information. W e b Content Filter Select one of the W eb Content Filter profile settings (created in CSM>> W e b Content Filter ) for applying with this router .
Vigor2820 Series User’s Guide 85 Window size – It determines the size of TCP protocol (0~65535). The m ore the value is, the better the performance will be. However , if the network is not stable, sm all value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources.
Vigor2820 Series User’s Guide 86 3 3 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default.
Vigor2820 Series User’s Guide 87 detecting this malicious exploration behavior by monitoring the port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the bo x to activate the Block IP options function.
Vigor2820 Series User’s Guide 88 indicate the protocol type running over the upper layer. However, the protocol types greater than 100 are reserved and undefined at this time. Therefore, the router should have ability to detect and reject this kind of packets.
Vigor2820 Series User’s Guide 89 3 3 . . 5 5 O O b b j j e e c c t t s s S S e e t t t t i i n n g g For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently.
Vigor2820 Series User’s Guide 90 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface (WAN, LAN or Any). For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address.
Vigor2820 Series User’s Guide 91 3 3 . . 5 5 . . 2 2 I I P P G G r r o o u u p p This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail.
Vigor2820 Series User’s Guide 92 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or A ny to display all the available IP objects with the specified interface. Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box.
Vigor2820 Series User’s Guide 93 Name Type a name for this profile. Protocol Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols.
Vigor2820 Series User’s Guide 94 3 3 . . 5 5 . . 4 4 S S e e r r v v i i c c e e T T y y p p e e G G r r o o u u p p This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail.
Vigor2820 Series User’s Guide 95 3 3 . . 5 5 . . 5 5 K K e e y y w w o o r r d d O O b b j j e e c c t t You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles.
Vigor2820 Series User’s Guide 96 3 3 . . 5 5 . . 6 6 K K e e y y w w o o r r d d G G r r o o u u p p This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL Web Content Filter Profile .
Vigor2820 Series User’s Guide 97 3 3 . . 5 5 . . 7 7 F F i i l l e e E E x x t t e e n n s s i i o o n n O O b b j j e e c c t t This page allows you to set eight profiles which will be applied in CSM>>URL Content Filter . All the files with the extension names specified in these profiles will be processed according to the chosen action.
Vigor2820 Series User’s Guide 98 Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. 3 3 . . 5 5 . . 8 8 I I M M O O b b j j e e c c t t This page allows you to set 32 profiles for Instant Messenger.
Vigor2820 Series User’s Guide 99 Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms that not allowed to be used in the host.
Vigor2820 Series User’s Guide 100 3 3 . . 5 5 . . 9 9 P P 2 2 P P O O b b j j e e c c t t This page allows you to set 32 profiles for peer-to-peer application. These profiles will be applied in CSM>>IM/P2P Filter Profile for filtering. Set to Factory Default Clear all profiles.
Vigor2820 Series User’s Guide 101 Profile Name Type a name for this profile. Type a name for such profile and check all the prot ocols that not allowed to be used in t he host.
Vigor2820 Series User’s Guide 102 Type a name for such profile and check all the prot ocols that not allowed to be used in t he host. Finally, click OK to save this profile. 3 3 . . 5 5 . . 1 1 1 1 M M i i s s c c O O b b j j e e c c t t This page allows you to set 32 profiles for miscellaneous applications.
Vigor2820 Series User’s Guide 103 Profile Name Type a name for this profile. Type a name for such profile and check all the prot ocols that not allowed to be used in t he host.
Vigor2820 Series User’s Guide 104 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal.
Vigor2820 Series User’s Guide 105 3 3 . . 6 6 . . 1 1 I I M M / / P P 2 2 P P F F i i l l t t e e r r P P r r o o f f i i l l e e You can define policy profiles for different policy of IM (Instant Messenger)/P2P (Peer to Peer) application. Such profile will be used in Firewall>>General Setup and Firewall>>Filter Setup pages.
Vigor2820 Series User’s Guide 106 3 3 . . 6 6 . . 2 2 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal.
Vigor2820 Series User’s Guide 107 Profile Name Type the name for such profile. Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the conditions specified in URL Access Control and Web Feature below passing through.
Vigor2820 Series User’s Guide 108 All – All the actions (Pass and Block) will be recorded in Syslog. URL Access Control Enable URL Access Control - Check the box to activate URL Access Control. Note that the priority for URL A ccess Control is higher than Restrict Web Feature .
Vigor2820 Series User’s Guide 109 more efficiently the Vigor router perform. Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed. Action - This setting is available only when Either : URL Access Control First or Either : Web Feature Firs is selected.
Vigor2820 Series User’s Guide 110 3 3 . . 6 6 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible parent or employer, you should protect those in your trust against the hazards.
Vigor2820 Series User’s Guide 111 Black/White List Enable – Check this box t o enable the filtering mechanism with the condition of black/white list. Click Edit to open the keyword object /group selection window and choose the one you want to use.
Vigor2820 Series User’s Guide 112 All – All the actions (Pass and Block) will be recorded in Syslog. For this section, please refer to Web Content Filter user’s guide for more information. 3 3 . . 7 7 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t Below shows the menu items for Bandwidth Management.
Vigor2820 Series User’s Guide 113 Default session limit Defines the default session number used for each computer in LAN. Limitation List Displays a list of specific limitations that you set on this web page. Start IP Defines the start IP address for limit session.
Vigor2820 Series User’s Guide 114 To activate the function of limit bandwidth, simply click Enable and set the default upstream and downstream limit.
Vigor2820 Series User’s Guide 115 3 3 . . 7 7 . . 3 3 Q Q u u a a l l i i t t y y o o f f S S e e r r v v i i c c e e Deploying QoS (Quality of Service) management to guarantee that all applications.
Vigor2820 Series User’s Guide 116 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners.
Vigor2820 Series User’s Guide 117 OUT- apply to outgoing traffic only. BOTH- apply to both incoming and outgoing traffic. Check this box and click OK , then click Setup link again. You will see the Online Statistics link appearing on this page. WAN Inbound Bandwidth It allows y ou to set the connecting rate of data input for WAN.
Vigor2820 Series User’s Guide 118 After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. For adding a new rule, click Add to open the following page.
Vigor2820 Series User’s Guide 119 Edit It allows you to edit source address information. Address Type – Determine the address type for the source address. For Single Address , you have to fill in Start IP address. For Range Address , you have to fill in Start IP address and End IP address.
Vigor2820 Series User’s Guide 120 After you click the Edit link, you will see the following page. For adding a new service type, click Add to open the following pag e. Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for the new service.
Vigor2820 Series User’s Guide 121 3 3 . . 8 8 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 3 3 . . 8 8 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP.
Vigor2820 Series User’s Guide 122 Index Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name that you set on the setting page of DDNS setup.
Vigor2820 Series User’s Guide 123 Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup , and push Clear All button to disable the function and clear all accounts from the router.
Vigor2820 Series User’s Guide 124 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the schedule. Duration Time (hh:mm) Specify the duration (or period) for the schedule.
Vigor2820 Series User’s Guide 125 2. Configure the PPPoE always on from 9:00 to 18:00 f or whole week. 3. Configure the For ce Down from 18:00 to next day 9:00 for whole week.
Vigor2820 Series User’s Guide 126 3 3 . . 8 8 . . 4 4 U U P P n n P P The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configuration which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system.
Vigor2820 Series User’s Guide 127 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your P C may cause the UPnP function not working properly. This is because these applicati ons will block the accessing ability of some network ports.
Vigor2820 Series User’s Guide 128 3 3 . . 8 8 . . 5 5 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is mainly used for managing the membership of Internet Protocol m ulticast groups.
Vigor2820 Series User’s Guide 129 3 3 . . 8 8 . . 6 6 W W a a k k e e o o n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she must type correct MAC address of the specified PC on this web page of Wake on LAN of this router.
Vigor2820 Series User’s Guide 130 3 3 . . 9 9 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Internet.
Vigor2820 Series User’s Guide 131 3 3 . . 9 9 . . 2 2 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol.
Vigor2820 Series User’s Guide 132 Assigned IP Address Enter a specif ic IP address for the dial-in PPP connection. You should choose an IP address from the local private network. 3 3 . . 9 9 . . 3 3 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration.
Vigor2820 Series User’s Guide 133 Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active.
Vigor2820 Series User’s Guide 134 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value.
Vigor2820 Series User’s Guide 135 3 3 . . 9 9 . . 5 5 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via ISDN or build the VPN connection.
Vigor2820 Series User’s Guide 136 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds.
Vigor2820 Series User’s Guide 137 aggressive mode). Uncheck the checkbox- This means the connection type you select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above.
Vigor2820 Series User’s Guide 138 3 3 . . 9 9 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles.
Vigor2820 Series User’s Guide 139 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. Netbios Naming Packet Pass – click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connecting.
Vigor2820 Series User’s Guide 140 WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. If WAN2 fails, the router will use another WAN interface instead.
Vigor2820 Series User’s Guide 141 IPSec Tunnel Build an IPSec VPN connection to t he server through Internet. L2TP with … Build a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: None: Do not apply the IPSec policy.
Vigor2820 Series User’s Guide 142 IKE phase 1 mode - Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposals to create a protected secure channel. Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session.
Vigor2820 Series User’s Guide 143 the remote router. This feature is useful for s model only. Allowed Dial-In Type Determine the dial-in connection with different types. ISDN Allow the remote ISDN LAN-to-LAN connection. You should set the User Name and Password of remote dial-in user below.
Vigor2820 Series User’s Guide 144 becomes one pure L2TP connection. Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Specify CLID or Remote VPN Gateway You can specify the IP address of the remote dial-in user or peer ID (should be the same with the ID setting in dial-in type) by checking the box.
Vigor2820 Series User’s Guide 145 exhausted, the function will be disabled automatically. Callback Budget (Unit: minutes)- Specify the time budget for the dial-in user. The budget will be decreased automatically per callback connection. The default value 0 means no limitation of callback period.
Vigor2820 Series User’s Guide 146 3 3 . . 9 9 . . 7 7 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button.
Vigor2820 Series User’s Guide 147 3 3 . . 1 1 0 0 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc.
Vigor2820 Series User’s Guide 148 Type in all the information that the window request. Then click Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below.
Vigor2820 Series User’s Guide 149 3 3 . . 1 1 0 0 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window.
Vigor2820 Series User’s Guide 150 3 3 . . 1 1 0 0 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them.
Vigor2820 Series User’s Guide 151 registration messages to validate. Then, both parties’ SIP proxies will forward the sequence of messages to caller to establish the session .
Vigor2820 Series User’s Guide 152 3 3 . . 1 1 1 1 . . 1 1 D D i i a a l l P P l l a a n n This page allows you to set phone book and digit map for the VoIP function. Click the Phone Book and Digit Map links on the page to access into next pages for dialplan settings.
Vigor2820 Series User’s Guide 153 Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen.
Vigor2820 Series User’s Guide 154 Loop through For the model of Vigor 2820Vn, the selection should be as the following: Backup Phone Number When the VoIP phone is obstructs or the Internet breaks down for some reasons, the backup phone will be dialed out to replace the VoIP phone number.
Vigor2820 Series User’s Guide 155 D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface.
Vigor2820 Series User’s Guide 156 specific VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” will be changed to “88631111111” and sent to SIP server.
Vigor2820 Series User’s Guide 157 Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/URL or number.
Vigor2820 Series User’s Guide 158 For Block Unknown Domain – this function can block incomi ng calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Such control also can be done based on preconfigured schedules.
Vigor2820 Series User’s Guide 159 R R e e g g i i o o n n a a l l This page allows you to process incoming or outgoing phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed.
Vigor2820 Series User’s Guide 160 Hide caller ID [Act] Dial the number typed in this field to make your phone number (ID) not displayed on the display panel of remote end. Hide caller ID [Deact] Dial the number typed in this field to release this function.
Vigor2820 Series User’s Guide 161 3 3 . . 1 1 1 1 . . 2 2 S S I I P P A A c c c c o o u u n n t t s s In this section, you set up your own SIP setti ngs. When you apply for an account, your SIP service provider will give you an Account Name or user name, SIP Registrar, Proxy, and Domain name .
Vigor2820 Series User’s Guide 162 For Vigor2820VS/Vigor2820VSn models, you will see the following page: Index Click this link to access into next page for setting SIP account. Profile Display the profile name of the account. Domain/Realm Display the domain nam e or IP address of the SIP registrar server.
Vigor2820 Series User’s Guide 163 Account Name Display the account name of SIP address before @. Ring Port Specify which port will ring when receiving a phone call. Set Phone, ISDN1-S0 or ISDN-TE as the default ring port for the SIP account. If you choose Phone or ISDN1-S0, the ISDN2-TE selection will be dimmed, vice versa.
Vigor2820 Series User’s Guide 164 The system will select a proper way for your VoIP call. SIP Port Set the port num ber for sending/receiving SIP message for building a session. The default value is 5060. Your peer must set the same value in his/her Registrar.
Vigor2820 Series User’s Guide 165 can specify one of them or choose Any as ring port for specified SIP account. By the way, ISDN-S0 can be used by mapping with MSN numbers. Ring Pattern Choose a ring tone type for the VoIP phone call. 3 3 . . 1 1 1 1 .
Vigor2820 Series User’s Guide 166 For Vigor2820VS/Vigor2820VSn models, you will see the following page: Phone List Port – For Vigor2820V/Vigor2820Vn, there are two phone ports provided here for you to configur e. However, for Vigor2820VS/Vigor2820VSn, there are three phone ports provided here for you to configure.
Vigor2820 Series User’s Guide 167 Disable Port The router can support up to 4 VoIP calls sim ultaneously. In general, only 3 VoIP calls can be dialed through ISDN at the same time. If you want to use four ISDN channels, you have to check this box. When the Phone port is disabled, it could not be used anymore.
Vigor2820 Series User’s Guide 168 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r P P h h o o n n e e P P o o r r t t Click the number link for Phone port, you can access into t he following page for configuring Phone settings.
Vigor2820 Series User’s Guide 169 Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigured schedules. Refer to section 3.8.2 Schedule for detailed configuration. Index (1-60) in Phone Book - Enter the index of ph one book profiles.
Vigor2820 Series User’s Guide 170 Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile nam es for the accounts as the default one for this phone setting. Play dial tone only when account registered - Check this box to invoke the function.
Vigor2820 Series User’s Guide 171 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10.
Vigor2820 Series User’s Guide 172 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 1 1 - - S S 0 0 P P o o r r t t Click the number link of Index 2 (ISDN1-S0), you can access into the following page for configuring Phone settings.
Vigor2820 Series User’s Guide 173 abc@iptel.org) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) mode Set a period of peace time without disturbing by VoIP phone call.
Vigor2820 Series User’s Guide 174 invoke this function; click off to close the function. Default SIP Account You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile nam es for the accounts as the default one for this phone setting.
Vigor2820 Series User’s Guide 175 Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page.
Vigor2820 Series User’s Guide 176 recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is.
Vigor2820 Series User’s Guide 177 D D e e t t a a i i l l e e d d S S e e t t t t i i n n g g s s f f o o r r I I S S D D N N 2 2 - - T T E E P P o o r r t t ( ( A A v v a a i i l l a a b b l l e e f f o o r r V V S S n n m m o o d d e e l l o o n n l l y y ) ) Vigor2820VSn allows users to switch the func tion of ISDN2 port between TE or S0 mode.
Vigor2820 Series User’s Guide 178 Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that you set in this field, if there is no response, the connecting call will be closed automatically.
Vigor2820 Series User’s Guide 179 profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hi de the caller ID on the display panel of the phone set. Prefer Codec Select one of five codecs as the default for your VoIP calls.
Vigor2820 Series User’s Guide 180 Loop Through to ISDN1-S0 Port – Choose this radio button to make all the calls controlled by ISDN line. In addition, you can press the Advanced button to configure tone settings, volume gain, MISC and DTMF mode.
Vigor2820 Series User’s Guide 181 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10.
Vigor2820 Series User’s Guide 182 Payload Type (rfc2833) - Choose a nu mber from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. 3 3 . . 1 1 1 1 . . 4 4 S S t t a a t t u u s s From this page, you can find codec, connection and ot her important call status for each port.
Vigor2820 Series User’s Guide 183 waiting for remote user’s answer. ALERTING - Indicates that a call is coming. ACTIVE- Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. PeerID The present in-call or out-call peer ID (the format may be IP or Domain).
Vigor2820 Series User’s Guide 184 3 3 . . 1 1 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t t t i i n n g g s s This web page allows you to enable ISDN function. ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country code.
Vigor2820 Series User’s Guide 185 default, MSN function is disabled. If you leave the fields blank, all incoming calls will be accepted without number matching. 1-10 fields – Fill in the portion that is di fferent with the own number. For example, the own number is 123456 7 and MSN numbers are 12345 50 , 12345 17 and 12345 82 respectively.
Vigor2820 Series User’s Guide 186 A A p p p p l l i i c c a a t t i i o o n n E E x x a a m m p p l l e e You got ISDN numbers with 59 72720~5972729 fro m your ISP, and you try to connect ISDN-TE port to ISDN network. Please refer to the following configuration.
Vigor2820 Series User’s Guide 187 3 3 . . 1 1 2 2 . . 3 3 D D i i a a l l t t o o S S i i n n g g l l e e / / D D u u a a l l I I S S P P s s Select Dialing to a Single ISP if you access the Internet via a single ISP. ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet and so on.
Vigor2820 Series User’s Guide 188 IP Address Assignment Method (IPCP) In most environments, you should not change these settings as most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Yes and enter the IP address in the field of Fixed IP Address .
Vigor2820 Series User’s Guide 189 Primary ISP Setup ISP Name - Enter your ISP name. Dial Number - Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP.
Vigor2820 Series User’s Guide 190 Click Dial ISDN . Wait for a moment after clicking the dial link. Then, a successful ISDN connection will be shown as the following.
Vigor2820 Series User’s Guide 191 3 3 . . 1 1 2 2 . . 4 4 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router (only for the I SDN models) be remotely activated, or be able to dial up to the ISP via the ISDN interface.
Vigor2820 Series User’s Guide 192 method for PPP/MP connections. Normally you can set it to PAP/CHAP for better compatibility. TCP Header Compression - VJ Compression : It is used for TCP/IP protocol header compression. Normally it is set to Yes to improve bandwidth utilization.
Vigor2820 Series User’s Guide 193 In an Infrastructure Mode of wireless network, Vigor wireless router plays a role as an Access Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router.
Vigor2820 Series User’s Guide 194 Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection.
Vigor2820 Series User’s Guide 195 Mode At present, the router can connect to 11b Only, 11g Only, 11n Only, Mixed(11b+11g), Mixed(11 g+11n) and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode. Index(1-15) Set the wireless LAN to work at certain time interval onl y.
Vigor2820 Series User’s Guide 196 Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync filed instead of long pream ble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble.
Vigor2820 Series User’s Guide 197 Download – Type the transmitting rate for data download. Default value is 30,000 kbps. 3 3 . . 1 1 3 3 . . 3 3 S S e e c c u u r r i i t t y y This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively.
Vigor2820 Series User’s Guide 198 WPA2/802.1x Only- Accepts only WPA2 clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. Mixed (WPA+WPA2/802.1x only) - Accepts WPA and WPA2 clients simultaneously and the encryption key is obtained dynamically from RADIUS server with 802.
Vigor2820 Series User’s Guide 199 Enable Max Access Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN.
Vigor2820 Series User’s Guide 200 3 3 . . 1 1 3 3 . . 5 5 W W P P S S WPS (Wi-Fi Protected Setup) provides easy procedure to m ake network connection between wireless station and wireless access point (vigor router) with the encryption of WPA and WPA2.
Vigor2820 Series User’s Guide 201 z If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN code of the wireless client you wish to connect to the vigor router.
Vigor2820 Series User’s Guide 202 Authentication Mode Display current authentication mode of the router. Only WPA2/PSK and WPA/PSK support WPS. Configure via Push Button Click Start PBC to invoke Push-Button style WPS setup procedure. The router will wait for WPS requests from wireless clients about two minutes.
Vigor2820 Series User’s Guide 203 The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be for warded to local wired or wireless hosts.
Vigor2820 Series User’s Guide 204 Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repea ter mode is for the second one. Security There are three ty pes for security, Disable , WEP and Pre-shared key .
Vigor2820 Series User’s Guide 205 Key - Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Bridge If you choose Bridge as the connecting mode, please type in the peer MAC address in these fields. Four peer MAC addresses are allowed to be entered in this page at one time.
Vigor2820 Series User’s Guide 206 Aggregation MSDU Aggregation MSDU can combine fram es with different sizes. It is used for improving MAC layer’s performance for some brand’s clients.
Vigor2820 Series User’s Guide 207 however, the difference between AC_BE and AC_BK categories must be greater. Txop It means transmission opportunity. For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission, please set greater value for them to get highest transmission opportunity.
Vigor2820 Series User’s Guide 208 Statistics It displays the statistics for the channels used by APs. Add to If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page or choose the AP MAC address from the Scan result field, and click Bridge or Repeater .
Vigor2820 Series User’s Guide 209 3 3 . . 1 1 4 4 U U S S B B A A p p p p l l i i c c a a t t i i o o n n USB diskette can be regarded as a server. By way of Vigor router, clients on LAN can access, write and read data stored in USB diskette.
Vigor2820 Series User’s Guide 210 3 3 . . 1 1 4 4 . . 2 2 F F T T P P U U s s e e r r M M a a n n a a g g e e m m e e n n t t This page allows you to set profiles for FTP users. Any user who wants to access into the USB diskette must type the same username and password configured in this page.
Vigor2820 Series User’s Guide 211 Password Type the password for FTP users for accessing FTP server. Later, you can open FTP client software and type the password specified here for accessing into USB storage diskette. Confirm Password Type the password again to make confirmation.
Vigor2820 Series User’s Guide 212 Free Capacity It display s the free space of the USB diskette. Click Refresh at any time to get new status for free capacity. Username It displa ys the username that user uses to login to the FTP server. IP Address It displays the IP address of the user’s host which connecting to the FTP server.
Vigor2820 Series User’s Guide 213 Model Name Display the m odel name of the router. Firmware Version Display the firmware version of the router. Build Date/Time Display the date and time of the current firmware build. ADSL Firmware Version Display the ADSL firmware version.
Vigor2820 Series User’s Guide 214 Firmware Version It indicates information about equipped WLAN m iniPCi card. This also helps to provide availability of some features that are bound with some WLAN miniPCi. SSID Display the SSID of the router. 3 3 .
Vigor2820 Series User’s Guide 215 3 3 . . 1 1 5 5 . . 3 3 A A d d m m i i n n i i s s t t r r a a t t o o r r P P a a s s s s w w o o r r d d This page allows you to set new password. Old Password Type in the old password. The factory default setting for password is blank.
Vigor2820 Series User’s Guide 216 3. In Save As dialog, the default filename is config.cfg . You could gi ve it another name by yourself. 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg .
Vigor2820 Series User’s Guide 217 3 3 . . 1 1 5 5 . . 5 5 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipm ents.
Vigor2820 Series User’s Guide 218 For viewing the Syslog, please do the following: 1. Just set your monitor PC’s IP address in the field of Server IP Address 2. Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu.
Vigor2820 Series User’s Guide 219 Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as router’s system time. Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol.
Vigor2820 Series User’s Guide 220 3 3 . . 1 1 5 5 . . 7 7 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the settings for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session.
Vigor2820 Series User’s Guide 221 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a pr oper name.
Vigor2820 Series User’s Guide 222 3 3 . . 1 1 5 5 . . 9 9 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools.
Vigor2820 Series User’s Guide 223 3 3 . . 1 1 6 6 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router.
Vigor2820 Series User’s Guide 224 3 3 . . 1 1 6 6 . . 2 2 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page.
Vigor2820 Series User’s Guide 225 3 3 . . 1 1 6 6 . . 4 4 D D H H C C P P T T a a b b l l e e The facility provides information on IP address assignments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc.
Vigor2820 Series User’s Guide 226 Peer IP:Port It indicates the destination IP address an d port of remote host. Interface It displays the representing number for different interface.
Vigor2820 Series User’s Guide 227 3 3 . . 1 1 6 6 . . 7 7 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management.
Vigor2820 Series User’s Guide 228 Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column. 3 3 .
Vigor2820 Series User’s Guide 229 3 3 . . 1 1 6 6 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run .
Vigor2820 Series User’s Guide 230 This page is left blank..
Vigor2820 Series User’s Guide 231 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A .
Vigor2820 Series User’s Guide 232 general settings in IPSec General Setup , such as the pre-shared key that both parties have known. 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.
Vigor2820 Series User’s Guide 233 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection.
Vigor2820 Series User’s Guide 234 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection.
Vigor2820 Series User’s Guide 235 2. Then, for usi ng PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup . For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup , such as the pre-shared key that both parties have known.
Vigor2820 Series User’s Guide 236 If an IPSec-based service is selected, y ou should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection.
Vigor2820 Series User’s Guide 237 If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection.
Vigor2820 Series User’s Guide 238 4 4 . . 2 2 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w .
Vigor2820 Series User’s Guide 239 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection.
Vigor2820 Series User’s Guide 240 If a PPP-based service is select ed, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router.
Vigor2820 Series User’s Guide 241 3. In Step 2. Connect to VPN Server , click Insert button to ad d a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method.
Vigor2820 Series User’s Guide 242 If a PPP-based service is selected, you should further specify the remote VPN server IP address, Username, Password, and encryption method. The User Name and Password should be consistent with the one set up in the VPN router.
Vigor2820 Series User’s Guide 243 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children.
Vigor2820 Series User’s Guide 244 5. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS .
Vigor2820 Series User’s Guide 245 8. If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel.
Vigor2820 Series User’s Guide 246 10. Then click Edit of Local Address to set a worker ’ s subnet address. Click Edit of Remote Address to set headquarter ’ s IP address.
Vigor2820 Series User’s Guide 247 T o use another DHCP server in the network rather than the built-in one of V i gor Router , you have to change the settings as show below . Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.
Vigor2820 Series User’s Guide 248 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers.
Vigor2820 Series User’s Guide 249 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.
Vigor2820 Series User’s Guide 250 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each ot her’s IP address and assign an Account Name for the port used for calling.
Vigor2820 Series User’s Guide 251 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The file RTSxxx.
Vigor2820 Series User’s Guide 252 5. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility .
Vigor2820 Series User’s Guide 253 10. Click Send . 11. Now the firmware update is finished. 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1.
Vigor2820 Series User’s Guide 254 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use.
Vigor2820 Series User’s Guide 255 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below.
Vigor2820 Series User’s Guide 256 you will find the below window showing “------BEGINE CERTIFICATE------.....” 6. You may review the detail information of the certificate by clicking View button.
Vigor2820 Series User’s Guide 257 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1.
Vigor2820 Series User’s Guide 258 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.
Vigor2820 Series User’s Guide 259 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration.
Vigor2820 Series User’s Guide 260 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s .
Vigor2820 Series User’s Guide 261 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network .
Vigor2820 Series User’s Guide 262 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router.
Vigor2820 Series User’s Guide 263 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click WAN>> Internet Access and then check whether the ISP settings are set correctly.
Vigor2820 Series User’s Guide 264 F F o o r r M M P P o o A A U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if DSL Modem Settings is set appropriately. Check if IP Address, Subnet Mask and Gateway are set correctly (must identify with the values from your ISP) if you choose Specify an IP address .
Vigor2820 Series User’s Guide 265 F F o o r r P P P P T T P P U U s s e e r r s s 1. Check if the Enable option for PPTP Link is selected. 2. Check if PPTP Server, Username, Password and WAN IP address are set correctly (must identify with the values from your ISP).
Vigor2820 Series User’s Guide 266 C C h h e e c c k k i i f f U U S S B B L L E E D D l l i i g g h h t t s s o o n n o o r r o o f f f f You have to wait about 15 seconds after inserting 3G USB Modem into your Vigor2820. Later, the USB LED will light on which means the installation of USB Modem is successful.
Vigor2820 Series User’s Guide 267 Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK . After few seconds, the router will return all th e settings to the factory settings.
Vigor2820 Series User’s Guide 268 This page is left blank..
Vigor2820 Series User’s Guide 269 A A p p p p e e n n d d i i x x : : H H a a r r d d w w a a r r e e S S p p e e c c i i f f i i c c a a t t i i o o n n s s Operating : 0°C ~ 45°C Temperature Storage : -25°C ~ 70°C Humidity 10% ~ 90% ( non-condensing ) Max.
デバイスDraytek Vigor2820VSnの購入後に（又は購入する前であっても）重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります：
Draytek Vigor2820VSnをまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこにはDraytek Vigor2820VSnの技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。Draytek Vigor2820VSnの取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。Draytek Vigor2820VSnで得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
Draytek Vigor2820VSnを既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又はDraytek Vigor2820VSnの不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、Draytek Vigor2820VSnに関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわちDraytek Vigor2820VSnデバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。
