Page 2 Windows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are trademarks of Microsoft Corp. Apple and Mac OS are registered trademarks of Apple Inc. Other products may be trademarks or registered trademarks of their respective manufacturers. Vigor2930 Series User’s Guide...
Page 3 Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be Updates regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 4 Product: Vigor2930 Series Router DrayTek Corp. declares that Vigor2930 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 5: Table Of Contents
3.2.4 VLAN (Monitor) ....................... 49 3.2.5 Bind IP to MAC ....................... 50 3.2.6 Web Authentication......................52 How to use Web Authentication ....................53 3.3 NAT ............................54 3.3.1 Port Redirection ......................54 3.3.2 DMZ Host........................57 Vigor2930 Series User’s Guide...
Page 6 3.10.1 Local Certificate ......................158 3.10.2 Trusted CA Certificate ....................162 3.10.3 Certificate Backup....................... 163 3.11 VoIP ........................... 163 3.11.1 DialPlan ........................164 3.11.2 SIP Accounts ......................172 3.11.3 Phone Settings ......................176 3.11.4 Status.......................... 192 Vigor2930 Series User’s Guide...
Page 7 4.1 Create a LAN-to-LAN Connection Between Remote Office and Headquarter ....247 4.2 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter..255 4.3 QoS Setting Example......................259 4.4 LAN – Created by Using NAT ..................... 263 4.5 Calling Scenario for VoIP function ..................265 Vigor2930 Series User’s Guide...
Page 8 5.3 Pinging the Router from Your Computer ................288 5.4 Checking If the ISP Settings are OK or Not ................ 289 5.5 Backing to Factory Default Setting If Necessary ..............289 5.6 Contacting Your Dealer ....................... 290 Vigor2930 Series User’s Guide viii...
Page 9: Preface
Vigor2930 is a broadband router with dual-WAN interface. It provides policy-based load-balance, fail-over and BOD (Bandwidth on Demand), also it integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform, hardware encryption of AES/DES/3DS and hardware key hash of SHA-1/MD5, the router increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP) with up to 100 VPN tunnels.
Page 10: Led Indicators And Connectors
ISDN S0 intern in Germany. The ISDN S0 (1) port on Vigor2930 series is fixed to connect phone forever and the LED on the connecter will light orange always. However ISDN S0 (2) port on this device is configurable for connecting phone or accessing Internet according to the settings that you adjust on WEB UI (please refer to VoIP>>Phone Setting for detailed information).
Page 11: For Vigor2930
Status Explanation ACT (Activity) Blinking The router is powered on and running normally. The router is powered off. The DoS/DDoS function is active. Blinking It will blink while deleting an attack. The profile of CSM (Content Security Management) for IM/P2P application is active. (It is enabled from CSM >>...
Page 12: For Vigor2930N
Then the router will restart with the factory default configuration. Restart Restart the router forcefully. Phone (1/2) Connecters for PSTN phones. WAN (1/2) Connecters for remote networked devices. Vigor2930 Series User’s Guide...
Page 13 LAN (1-4) Connecters for local networked devices. Connecter for a power adapter.. Power Switch. ON/OFF igor2930 Series User’s Guide...
Page 14: For Vigor2930Vn
Then the router will restart with the factory default configuration. Restart Restart the router forcefully. Phone (1/2) Connecters for PSTN phones. WAN (1/2) Connecters for remote networked devices. Vigor2930 Series User’s Guide...
Page 15 LAN (1-4) Connecters for local networked devices. Connecter for a power adapter. Power Switch. ON/OFF igor2930 Series User’s Guide...
Page 16: For Vigor2930Vs
(phone call) is transmitting. Left LED The port is connected. WAN 1/2 (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 100Mbps. (Green) The port is disconnected with 10Mbps. Vigor2930 Series User’s Guide...
Page 17 Left LED The port is connected. LAN 1/2/3/4 (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 100Mbps. (Green) The port is disconnected with 10Mbps. Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for more than 5 seconds.
Page 18: For Vigor2930Vsn
In ISDN TE mode, it means data, fax or voice (phone call) is transmitting. Left LED The port is connected. WAN 1/2 (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 100Mbps. Vigor2930 Series User’s Guide...
Page 19 (Green) The port is disconnected with 10Mbps. Left LED The port is connected. LAN 1/2/3/4 (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 100Mbps. (Green) The port is disconnected with 10Mbps. Interface Description Factory Reset...
Page 20: Hardware Installation
(For the detailed information of LED status, please refer to section 1.2.) Caution: Each of the Phone ports can be connected to an analog phone only. Do not connect the phone ports to the telephone wall jack. Such connection might damage your router. Vigor2930 Series User’s Guide...
Page 21: Isdn Phone Adapter Installation
Such information is provided for Vigor2930 S models (e.g., Vigor2930VS). ISDN S0 1 is always fixed to connect ISDN phone. However, ISDN S0 2 is configurable as ISDN line or ISDN phone. When the user configures ISDN S0 2 as ISDN phone in VoIP>> Phone Settings, the orange LED will light on to indicate ISDN2-S0 mode is selected.
Page 22 This page is left blank. Vigor2930 Series User’s Guide...
Page 23: Configuring Basic Settings
For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password for an administrator and how to adjust basic settings for accessing Internet successfully.
Page 24 New Password and retype it on the field of Retype New Password. Then click OK to continue. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. Vigor2930 Series User’s Guide...
Page 25: Quick Start Wizard
If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next. On the next page as shown below, please select the WAN interface that you use.
Page 26: Pppoe
If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown: User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Vigor2930 Series User’s Guide...
Page 27 Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. igor2930 Series User’s Guide...
Page 28: Pptp/L2Tp
Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2930 Series User’s Guide...
Page 29: Static Ip
Click Static IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown.
Page 30: Dhcp
After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2930 Series User’s Guide...
Page 31: Service Activation Wizard
Service Activation Wizard is a tool which allows you to use trial version or update the license of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to section 3.6.3 Web Content Filter Profile for detailed information.
Page 32 Wait for a moment till the following page appears. When such page appears, you can enable or disable these services for your necessity. Then, click Finish. Note: The service will be activated and applied as the default rule configured in Firewall>>General Setup. Vigor2930 Series User’s Guide...
Page 33 Now, the web page will display the service that you have activated according to your selection(s). The valid time for the free trial of these services is one month. Later, if you need to extend the license valid time, you can also use the Service Activation Wizard again to reach your goal by clicking the radio button of Formal edition with license key and clicking Next.
Page 34: Online Status
If you select PPPoE/PPTP as the protocol, you will find out a link of Dial PPPoE/PPPoA or Drop PPPoE/PPPoA in the Online Status web page. Online status for PPPoE Online status for PPTP (for WAN2) Online status for Static IP (for WAN1) Vigor2930 Series User’s Guide...
Page 35 Online status for DHCP Detailed explanation is shown below: Primary DNS Displays the IP address of the primary DNS. Secondary DNS Displays the IP address of the secondary DNS. LAN Status IP Address Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface.
Page 36: Saving Configuration
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2930 Series User’s Guide...
Page 37: Advanced Web Configuration
After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suiting his/her request, please refer to this chapter for getting detailed information about the advanced configuration of this router. As for other examples of application, please refer to chapter 4.
Page 38: General Setup
Type the description for the WAN1/WAN2 interface. Physical Mode For WAN1, the physical connection is done through ADSL port; yet the physical connection for WAN2 is done through an Ethernet port (P1). You cannot change it. Vigor2930 Series User’s Guide...
Page 39 Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. Load Balance Mode If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed. Otherwise, please choose Auto Weigh to let the router reach the best load balance.
Page 40: Internet Access
There are three access modes provided for PPPoE, Static or Dynamic IP and PPTP. Details Page This button will open different web page according to the access mode that you choose in WAN1 or WAN2. Vigor2930 Series User’s Guide...
Page 41 To use PPPoE as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPPoE mode for WAN2. The following web page will be shown. PPPoE Client Mode Click Enable for activating this function. If you click Disable, this function will be closed and all the settings that you adjusted in this page will be invalid.
Page 42 Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. Vigor2930 Series User’s Guide...
Page 43 After finishing all the settings here, please click OK to activate them. For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Cable service provider will offer a fixed public IP, while a DSL service provider will offer a public subnet.
Page 44 Domain Name: Type in the domain name that you have assigned. Specify an IP address – Click this radio button to specify some data if you want to use Static IP mode. IP Address: Type the IP address. Vigor2930 Series User’s Guide...
Page 45 Subnet Mask: Type the subnet mask. Gateway IP Address: Type the gateway IP address. Default MAC Address : Click this radio button to use default MAC address for the router. Specify a MAC Address: Some Cable service providers specify a specific MAC address for access authentication.
Page 46 WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Vigor2930 Series User’s Guide...
Page 47: Load-Balance Policy
Default MAC Address – Click this radio button to use default MAC address for the router. Specify a MAC Address - Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field.
Page 48 Move UP/Move Down Use Up or Down link to move the order of the policy. Click Index 1 to access into the following page for configuring load-balance policy. Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Vigor2930 Series User’s Guide...
Page 49 Binding WAN Choose the WAN interface (WAN1 or WAN2) for binding. interface You can check the box of Auto failover to other WAN to make a backup WAN connection if the selected WAN interface fails to connect to Internet. Src IP Start Type the source IP start for the specified WAN interface.
Page 50: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2930 Series User’s Guide...
Page 51 Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing. This allows users to change the information of the router such as IP address and the routers will automatically inform for each other. When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method.
Page 52: General Setup
Type in secondary IP address for connecting to a subnet. (Default: 192.168.2.1/ 24) Subnet Mask An address code that determines the size of the network. (Default: 255.255.255.0/ 24) DHCP Server You can configure the router to serve as a DHCP server for the 2nd subnet. Vigor2930 Series User’s Guide...
Page 53 Start IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.135.240.1, the starting IP address must be 220.135.240.2 or greater, but smaller than 220.135.240.254.
Page 54: Static Route
There are two common scenarios of LAN settings that stated in Chapter 4. For the configuration examples, please refer to that chapter to get more information for your necessity. Go to LAN to open setting page and choose Static Route. Vigor2930 Series User’s Guide...
Page 55 Index The number (1 to 10) under Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. Here is an example of setting Static Route in Main Router so that user A and B locating in different subnet can talk to each other via the router.
Page 56 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2930 Series User’s Guide...
Page 57: Vlan (Monitor)
Virtual LAN function provides you a very convenient way to manage hosts by grouping them based on the physical port. You can also manage the in/out rate of each port. LAN Port mirror can be applied for the users in LAN. Generally speaking, this function copies traffic from one or more specific ports to a target port.
Page 58: Bind Ip To Mac
When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC address, it might cause you not access into the Internet. Click LAN and click Bind IP to MAC to open the setup page. Vigor2930 Series User’s Guide...
Page 59 Enable Click this radio button to invoke this function. However, IP/MAC which is not listed in IP Bind List also can connect to Internet. Disable Click this radio button to disable this function. All the settings on this page will be invalid. Strict Bind Click this radio button to block the connection of the IP/MAC which is not listed in IP Bind List.
Page 60: Web Authentication
LAN side. The default settings for ID/password are “draytek/draytek”. All the users should use such account to pass the web authentication. Share vpn remote dial in profile – you can share the account set in remote VPN dial-in profiles.
Page 61: How To Use Web Authentication
Click the HERE link to access into the authentication page. Type the ID and password configured in Common Account. The default setting is “draytek” for both ID and password. After entering the ID and Password, click OK. If you pass the authentication, you will see the following page.
Page 62: Nat
IP address/port, the goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping private IP address/port of the server. Vigor2930 Series User’s Guide...
Page 63 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection. igor2930 Series User’s Guide...
Page 64 Therefore, you need to change the router’s http port to any one other than the default port 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. Vigor2930 Series User’s Guide...
Page 65: Dmz Host
You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port.
Page 66 Click this button and then a window will automatically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network. Select one private IP address in the list to be the DMZ host. Vigor2930 Series User’s Guide...
Page 67 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. igor2930 Series User’s Guide...
Page 68: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2930 Series User’s Guide...
Page 69: Address Mapping
Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that will be used for this entry. Local Computer Enter the private IP address of the local host or click Choose PC to select one.
Page 70 Select an IP address (the selections provided here are set in IP Alias List of Network >>WAN interface). Local host can use this IP to connect to Internet. If you want to choose any one of the Public IP settings, you must Vigor2930 Series User’s Guide...
Page 71: Firewall
specify some IP addresses in the IP Alias List of the Static/DHCP Configuration page first. If you did not type in any IP address in the IP Alias List, the Public IP setting will be empty in this field. When you click Apply, a message will appear to inform you. Private IP Assign an IP address (e.g., 192.168.1.10) or a subnet to be compared with the Public IP address for incoming packets.
Page 72 Vigor router will activate its defense mechanism to mitigate in a real-time manner. The below shows the attack types that DoS/DDoS defense function can detect: 1. SYN flood attack 9. Smurf attack Vigor2930 Series User’s Guide...
Page 73: General Setup
2. UDP flood attack 10. SYN fragment 3. ICMP flood attack 11. ICMP fragment 4. TCP Flag scan 12. Tear drop attack 5. Trace route 13. Fraggle attack 6. IP options 14. Ping of Death attack 7. Unknown protocol 15. TCP/UDP port scan 8.
Page 74 Please use the drop-down list to choose a codepage. If you do not have any idea of choosing suitable codepage, please open Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Vigor2930 Series User’s Guide...
Page 75 Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the performance will be. However, if the network is not stable, small value will be proper. Session timeout–Setting timeout for sessions can make the best utilization of network resources.
Page 76: Filter Setup
To edit or add a filter, click on the set number to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule number button to edit each rule. Check Active to enable the rule. Vigor2930 Series User’s Guide...
Page 77 Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the button will open Edit Filter Rule web page. For the detailed information, refer to the following page. Active Enable or disable the filter rule. Comment Enter filter set comments/description.
Page 78 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please Vigor2930 Series User’s Guide...
Page 79 choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port - (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this service type.
Page 80 Session timeout–Setting timeout for sessions can make the best utilization of network resources. However, Queue timeout is configured for TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. Vigor2930 Series User’s Guide...
Page 81 As stated before, all the traffic will be separated and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is composed by 7 filter rules, which can be further defined.
Page 82: Dos Defense
UDP flood defense function, once if the Threshold of ICMP packets from Internet has exceeded the defined value, the router will discard the ICMP echo requests coming from the Internet. The default setting for threshold and timeout are 50 packets per second Vigor2930 Series User’s Guide...
Page 83 and 10 seconds, respectively. Enable PortScan Port Scan attacks the Vigor router by sending lots of packets to detection many ports in an attempt to find ignorant services would respond. Check the box to activate the Port Scan detection. Whenever detecting this malicious exploration behavior by monitoring the port-scanning Threshold rate, the Vigor router will send out a warning.
Page 84 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2930 Series User’s Guide...
Page 85: Objects Settings
For IPs in a range and service ports in a limited range usually will be applied in configuring router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/group that can apply it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address).
Page 86 Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. Below is an example of IP objects settings. Vigor2930 Series User’s Guide...
Page 87: Ip Group
This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed.
Page 88: Service Type Object
The filter rule will filter out any port number. (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this profile. Vigor2930 Series User’s Guide...
Page 89: Service Type Group
it indicates (!=) – when the first and last value are the same, all the ports except the port defined here; when the first last values are different, it indicates that all the ports except the range defined here are available for this service type.
Page 90: Keyword Object
You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles. Click the number under Index column for setting in detail. Vigor2930 Series User’s Guide...
Page 91 Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For example, type gambling as Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings.
Page 92 Profile 1 with name of “default” is the default profile, some files with the file extensions specified in this profile will be ignored and not be scanned by Vigor router. Set to Factory Default Clear all profiles. Click the number under Profile column for configuration in details. Vigor2930 Series User’s Guide...
Page 93: Im Object
Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. You can define policy profiles for IM (Instant Messenger) application. The object profile(s) configured here will be seen and adopted in CSM>>APP Enforcement Profile page.
Page 94: P2P Object
You can define policy profiles for P2P (Point-to-Point) application. The object profile(s) configured here will be seen and adopted in CSM>>APP Enforcement Profile page. Vigor2930 Series User’s Guide...
Page 95 Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allowed to access into the forbidden items.
Page 96: Protocol Object
Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click OK to save this profile. Vigor2930 Series User’s Guide...
Page 97: Misc Object
You can define policy profiles for Misc application. The object profile(s) configured here will be seen and adopted in CSM>>IM/P2P Profile page. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. igor2930 Series User’s Guide...
Page 98 Profile Name Type a name for the CSM profile. Check for Disallow Check the items that disallow to use. Any device that uses such profile might not be allowed to access into the forbidden items. Vigor2930 Series User’s Guide...
Page 99: Csm
CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter the web content and URL content to reach a goal of security management. Note: The priority of URL Content Filter is higher than Web Content Filter. As the popularity of all kinds of instant messenger application arises, communication cannot become much easier.
Page 100: Url Content Filter Profile
Or you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”. Also the Vigor router will discard any request that tries to retrieve the malicious code. Click CSM and click URL Content Filter Profile to open the setup page. Vigor2930 Series User’s Guide...
Page 101 You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Profile Name Type the name for such profile. Priority It determines the action that this router will apply. Both: Pass –...
Page 102 If the web pages do not match with the keyword set here, it will be processed with reverse action. Group/Object Selections – The Vigor router provides several frames for users to define keywords and each frame supports multiple keywords. The keyword could be a noun, a partial noun, Vigor2930 Series User’s Guide...
Page 103 or a complete URL string. Multiple keywords within a frame are separated by space, comma, or semicolon. In addition, the maximal length of each frame is 32-character long. After specifying keywords, the Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword.
Page 104: Web Content Filter Profile
WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request. Be aware that service provider matching with VigorPro5510 currently offers a period of time for trial version for users to experiment.
Page 105 By the way, you can click the link of Test a site to verify whether it is categorized to access into the test server selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Test a site to verify Click this link to do the verification.
Page 106 Group/Object Selections. If the web pages do not match with the specified feature set here, they will be processed with the categories listed on the box below. Block - restrict accessing into the corresponding webpage with the characters listed on Group/Object Selections. Vigor2930 Series User’s Guide...
Page 107: Bandwidth Management
If the web pages do not match with the specified feature set here, they will be processed with the categories listed on the box below. Action Pass - allow accessing into the corresponding webpage with the categories listed on the box below. Block - restrict accessing into the corresponding webpage with the categories listed on the box below.
Page 108 You can type in four sets of time schedule for your request. Setup All the schedules can be set previously in Application – Schedule web page and you can use the number that you have set in that web page. Vigor2930 Series User’s Guide...
Page 109: Bandwidth Limit
The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs. Please use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Management menu, click Bandwidth Limit to open the web page. To activate the function of limit bandwidth, simply click Enable and set the default upstream and downstream limit.
Page 110: Quality Of Service
Service Code Point) and IP Precedence disciplines at Layer 3. Compared with legacy IP Precedence that uses Type of Service (ToS) field in the IP header to define 8 service classes, DSCP is a successor creating 64 classes possible with backward IP Precedence compatibility. Vigor2930 Series User’s Guide...
Page 111 In a QoS-enabled network, or Differentiated Service (DiffServ or DS) framework, a DS domain owner should sign a Service License Agreement (SLA) with other DS domain owners to define the service level provided toward traffic from different domains. Then each DS node in these domains will perform the priority treatment.
Page 112 UDP application traffic such as streaming video will exhaust lots of bandwidth. Outbound TCP ACK The difference in bandwidth between download and upload Prioritize are great in ADSL2+ environment. For the download speed might be impacted by the uploading TCP ACK, you can Vigor2930 Series User’s Guide...
Page 113 check this box to push ACK of upload faster to speed the network traffic. Limited_bandwidth Ratio The ratio typed here is reserved for limited bandwidth of UDP application. Online Statistics Display an online statistics for quality of service for your reference.
Page 114 All the packets of data will be divided with different levels and will be processed according to the level type by the system. Please assign one of the levels of the data for processing with QoS control. Vigor2930 Series User’s Guide...
Page 115 Service Type It determines the service type of the data for processing with QoS control. It can also be edited. You can choose the predefined service type from the Service Type drop down list. Those types are predefined in factory. Simply choose the one that you want for using by current QoS.
Page 116 Range as the type. By the way, you can set up to 40 service types. If you want to edit/delete an existed service type, please select the radio button of that one and click Edit/Edit for modification. Vigor2930 Series User’s Guide...
Page 117: Applications
Below shows the menu items for Applications. The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP. It means that the public IP address assigned to your router changes each time you access the Internet.
Page 118 Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. Vigor2930 Series User’s Guide...
Page 119: Schedule
The Vigor router has a built-in real time clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As a result, you can not only schedule the router to dialup to the Internet at a specified time, but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours, say, business hours.
Page 120: Radius
Remote Authentication Dial-In User Service (RADIUS) is a security authentication client/server protocol that supports authentication, authorization and accounting, which is widely used by Internet service providers. It is the most common method of authenticating and authorizing dial-up and tunneled network users. Vigor2930 Series User’s Guide...
Page 121 The built-in RADIUS client feature enables the router to assist the remote dial-in user or a wireless station and the RADIUS server in performing mutual authentication. It enables centralized remote access authentication for network management. Enable Check to enable RADIUS client feature Server IP Address Enter the IP address of RADIUS server Destination Port...
Page 122: Upnp
NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor2930 Series User’s Guide...
Page 123: Wake On Lan
The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will block the accessing ability of some network ports.
Page 124 MAC Address Type any one of the MAC address of the binded PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2930 Series User’s Guide...
Page 125: Vpn And Remote Access
A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Internet. In short, by VPN technology, you can send data between two computers across a shared or public network in a manner that emulates the properties of a point-to-point private link.
Page 126 When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making Vigor2930 Series User’s Guide...
Page 127 the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: When you choose IPSec, you will see the following graphic: igor2930 Series User’s Guide...
Page 128 When you choose L2TP, you will see the following graphic: When you choose L2TP over IPSec (Nice to Have/Must), you will see the following graphic: Vigor2930 Series User’s Guide...
Page 129 Profile Name Type a name for such profile. The length of the file is limited to 10 characters. Use the drop down menu to choose a proper WAN VPN Dial-Out Through interface for this profile. This setting is useful for dial-out only.
Page 130 Click this radio button to set another profile of VPN Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2930 Series User’s Guide...
Page 131: Vpn Server Wizard
Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connection (from client to server) step by step. VPN Server Mode Choose the direction for the VPN server. Selection Site to Site VPN/Remote Dial-in User –...
Page 132 (similar to VPN Client Wizard). Different Dial-in Type will lead to different configuration page. In addition, adjustable items for each dial-in type will be changed according to the VPN Server Mode (Site to Site VPN and Remote Dial-in User) selected. Vigor2930 Series User’s Guide...
Page 133 After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. Here we take the example of choosing Remote-Dial-in User as the VPN Server Mode. When you check PPTP/L2TP with IPSec Policy (None), you will see the following graphic: When you check PPTP/IPSec/L2TP (three types) or PPTP/IPSec (two types) or L2TP with IPSec Policy (Nice to Have/Must), you will see the following graphic:...
Page 134 Please type one LAN IP address (according to the real location of the remote host) for building VPN connection. Remote Network Mask Please type the network mask (according to the real location of the remote host) for building VPN connection. Vigor2930 Series User’s Guide...
Page 135: Remote Access Control
After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Go to the VPN Connection Click this radio button to access VPN and Remote Management...
Page 136: Ppp General Setup
Cisco routers. So you should enable this function when your peer router requires mutual authentication. You should further specify the User Name and Password of the mutual authentication peer. Vigor2930 Series User’s Guide...
Page 137: Ipsec General Setup
Start IP Address Enter a start IP address for the dial-in PPP connection. You should choose an IP address from the local private network. For example, if the local private network is 192.168.1.0/255.255.255.0, you could choose 192.168.1.200 as the Start IP Address. But, you have to notice that the first two IP addresses of 192.168.1.200 and 192.168.1.201 are reserved for ISDN remote dial-in user.
Page 138: Ipsec Peer Identity
Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2930 Series User’s Guide...
Page 139 Profile Name Type in a name in this file. Accept Any Peer ID Click to accept any peer regardless of its identity. Accept Subject Alternative Click to check one specific field of digital signature to accept Name the peer with matching value. The field can be IP Address, Domain, or E-mail Address.
Page 140: Remote Dial-In User
Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. Vigor2930 Series User’s Guide...
Page 141 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection.
Page 142 To check if SSL Tunnel is activated or not, please open Draytek SSL VPN portal interface. From the web page, you will see the message to indicate the SSL Tunnel is activated. Specify Remote Node...
Page 143 Web Proxy and choose the one(s) you need as SSL VPN. To check if SSL Web Proxy is activated or not, please open Draytek SSL VPN portal interface. From the web page, you will see the message to indicate that you have the privilege for the SSL Web Proxy.
Page 144 Once the callback budget has been exhausted, the callback mechanism will be disabled automatically. Callback Budget (Unit: minutes)- Specify the time budget for the dial-in user. The budget will be decreased automatically per callback connection. Vigor2930 Series User’s Guide...
Page 145: Lan To Lan
Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including specified connection direction (dial-in or dial-out), connection peer ID, connection type (ISDN connection, VPN connection - including PPTP, IPSec Tunnel, and L2TP by itself or over IPSec) and corresponding security methods, etc.
Page 146 Use the drop down menu to choose a proper WAN interface Through for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for VPN connection. If WAN1 fails, the Vigor2930 Series User’s Guide...
Page 147 router will use another WAN interface instead. WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. If WAN2 fails, the router will use another WAN interface instead.
Page 148 This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy. Medium Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active. High (ESP-Encapsulating Security Payload)- means payload (data) will be encrypted and authenticated. Select Vigor2930 Series User’s Guide...
Page 149 from below: DES without Authentication -Use DES encryption algorithm and not apply any authentication scheme. DES with Authentication-Use DES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. 3DES without Authentication-Use triple DES encryption algorithm and not apply any authentication scheme. 3DES with Authentication-Use triple DES encryption algorithm and apply MD5 or SHA-1 authentication algorithm.
Page 150 Vigor router to callback, the local ISDN number will be provided to the remote peer. Check here to allow the Vigor router to send the ISDN number to the remote router. This feature is useful for i model only. Vigor2930 Series User’s Guide...
Page 151 Allowed Dial-In Type Determine the dial-in connection with different types. Allow the remote ISDN LAN-to-LAN connection. You ISDN should set the User Name and Password of remote dial-in user below. This feature is useful for S model only. In addition, you can further set up Callback function below.
Page 152 (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. Callback Function The callback function provides a callback service only for the ISDN LAN-to-LAN connection (this feature is useful for S Vigor2930 Series User’s Guide...
Page 153 model only). The remote user will be charged the connection fee by the telecom. Check to enable Callback function-Enables the callback function. Callback number-The option is for extra security. Once enabled, the router will ONLY call back to the specified Callback Number.
Page 154: Vpn Trunk Management
VPN server and correct it to complete the backup of VPN Tunnel in real-time. PN TRUNK-VPN Backup mechanism is compliant with all WAN modes (single/multi) Dial-out connection types contain IPSec, PPTP, L2TP, L2TP over IPSec and ISDN (depends on hardware specification) Vigor2930 Series User’s Guide...
Page 155 The web page is simple to understand and easy to configure Filly compliant with VPN Server LAN Sit Single/Multi Network Mail Alert support, please refer to System Maintenance >> SysLog / Mail Alert for detailed configuration Syslog support, please refer to System Maintenance >> SysLog / Mail Alert for detailed configuration Specific ERD (Environment Recovery Detection) mechanism which can be operated by using Telnet command...
Page 156 Type (on Backup Profile field) - Display the connection type for that profile, such as IPSec, PPTP, L2TP, L2TP over IPSec (NICE), L2TP over IPSec(MUST) and so on. Member2 (on Backup Profile field) - Display the dial-out Vigor2930 Series User’s Guide...
Page 157 profile selected from the Member2 drop down list below. Advanced – This button is only available when there is one profile (or more) created in this page. Detailed information for this dialog, see later section - Advanced Load Balance and Backup. Load Balance Profile List Set to Factory Default - Click to clear all VPN TRUNK-VPN Load Balance mechanism profile.
Page 158 (LAN-to-LAN profiles) grouped in such new VPN TRUNK – VPN Backup mechanism profile will be locked. The profiles in LAN-to-LAN will be displayed in red. VPN TRUNK – VPN Load Balance mechanism profile will be locked. The profiles in Vigor2930 Series User’s Guide...
Page 159 LAN-to-LAN will be displayed in blue. Edit Click this button to save the changes to the Status (Enable or Disable), profile name, member1 or member2. Click this button to delete the selected VPN TRUNK profile. Delete The corresponding members (LAN-to-LAN profiles) grouped in the deleted VPN TRUNK profile will be released and that profiles in LAN-to-LAN will be displayed in black.
Page 160 Peer GRE IP. See the following graphic for an example. Later, on peer side (as VPN Client): please type 192.168.50.100 in the field of My GRE IP and type IP address of the server (192.168.50.200) in the field of Peer GRE Vigor2930 Series User’s Guide...
Page 161 After setting profiles for load balance, you can choose any one of them and click Advance for more detailed configuration. The windows for advanced load balance and backup are different. Refer to the following explanation: Advanced Load Balance Profile Name List the load balance profile name.
Page 162 ICMP Service Port also fits the number here, such binding tunnel table can be established. IGMP means when the source IP, destination IP, destination port and fragment conditions Vigor2930 Series User’s Guide...
Page 163 match with the settings specified here and IGMP Service Port also fits the number here, such binding tunnel table can be established. Other means when the source IP, destination IP, destination port and fragment conditions match with the settings specified here with different TCP Service Port/UDP Service Port/ICMP/IGMP, such binding tunnel table can be established.
Page 164: Connection Management
Backup/Load Balance Mode drop-down list for you to choose for dialing. General Mode This filed displays the profile configured in LAN-to-LAN (with Index number and VPN Server IP address). The VPN connection built by General Mode does not support VPN Vigor2930 Series User’s Guide...
Page 165 backup function. Backup Mode This filed displays the profile name saved in VPN TRUNK Management (with Index number and VPN Server IP address). The VPN connection built by Backup Mode supports VPN backup function. Dial Click this button to execute dial out function. Refresh Seconds Choose the time for refresh the dial information among 5, 10, and 30.
Page 166: Certificate Management
Click this button to open Generate Certificate Signing Request window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE again. Vigor2930 Series User’s Guide...
Page 167 Note: Please be noted that “Common Name” must be configured with rotuer’s WAN IP or domain name. After clicking GENERATE, the generated information will be displayed on the window below: IMPORT Vigor router allows you to generate a certificate request and submit it the CA server, then import it as “Local Certificate”.
Page 168 Netscape and Microsoft Internet Explorer with their import and export options. Upload Certificate and It is useful when users have separated certificates and private Private Key keys. And the password is needed if the private key is encrypted. Vigor2930 Series User’s Guide...
Page 169 REFRESH Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. Note: You have to copy the certificate request information from above window. Next, access your CA server and enter the page of certificate request, copy the information into it and submit a request.
Page 170: Trusted Ca Certificate
For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2930 Series User’s Guide...
Page 171: Certificate Backup
Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Retype password.
Page 172: Dialplan
This page allows you to set phone book and digit map for the VoIP function. Click the Phone Book and Digit Map links on the page to access into next pages for dialplan settings. Vigor2930 Series User’s Guide...
Page 173 In this section, you can set your VoIP contacts in the “phonebook”. It can help you to make calls quickly and easily by using “speed-dial” Phone Number. There are total 60 index entries in the phonebook for you to store all your friends and family members’ SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor 2930V for setting the phone book.
Page 174 For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Vigor2930 Series User’s Guide...
Page 175 Enable Check this box to invoke this setting. Prefix Number The phone number set here is used to add, strip, or replace the OP number. Mode None - No action. Add - When you choose this mode, the OP number will be added with the prefix number for calling out through the specific VoIP interface.
Page 176 SIP accounts. Please set up one SIP account first to make this interface available. Call barring is used to block phone calls that are not welcomed. Click any index number to display the dial plan setup page. Vigor2930 Series User’s Guide...
Page 177 Enable Click this to enable this entry. Call Direction Determine the direction for the phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/URL or number.
Page 178 This page allows you to process incoming or outgoing phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed. Vigor2930 Series User’s Guide...
Page 179 Last Call Return [Miss] Sometimes, people might miss some phone calls. Please dial number typed in this field to know where the last phone call comes from and call back to that one. Last Call Return [In] You have finished an incoming phone call, however you want to call back again for some reason.
Page 180: Sip Accounts
SIP Address as in Account Name@ Domain name As Vigor VoIP Router is turned on, it will first register with Registrar using AuthorizationUser@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity. Vigor2930 Series User’s Guide...
Page 181 igor2930 Series User’s Guide...
Page 182 SIP server. Profile Name Assign a name for this profile for identifying. You can type similar name with the domain. For example, if the domain name is draytel.org, then you might set draytel-1 in this field. Vigor2930 Series User’s Guide...
Page 183 Register via If you want to make VoIP call without register personal information, please choose None and check the box to achieve the goal. Some SIP server allows user to use VoIP function without registering. For such server, please check the box of Call without registration.
Page 184: Phone Settings
ISDN2-TE for Internet connection or choose ISDN2-S0 (ISDN intern) for ISDN phone. In addition, you can connect six phones to this router in certain case. Please refer to Section 4-1 for detailed information of ISDN phone/network connection. Vigor2930 Series User’s Guide...
Page 185 If you want to enable function of ISDN On-Net/Off-Net, you have to choose ISDN2-TE. Call Feature – A brief description for call feature will be shown in this field for your reference. Codec – The default Codec setting for each port will be shown in this field for your reference.
Page 186 Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigured schedules. Refer to section 3.5.2 Schedule for Vigor2930 Series User’s Guide...
Page 187 detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book profiles. Refer to section 3.11.1 DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hide the caller ID on the display panel of the phone set.
Page 188 Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Vigor2930 Series User’s Guide...
Page 189 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is.
Page 190 No answer means if the incoming calls do not receive any response, they will be forwarded to the SIP URL by the time out. SIP URL – Type in the SIP URL (e.g., aaa@draytel.org or Vigor2930 Series User’s Guide...
Page 191 abc@iptel.org) as the site for call forwarded. Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) Set a period of peace time without disturbing by VoIP phone mode call.
Page 192 Or you can adjust tone settings manually if you choose User Defined. TOn1, TOff1, TOn2 and TOff2 mean the cadence of the tone pattern. TOn1 and TOn2 represent sound-on; TOff1 and TOff2 represent the sound-off. Vigor2930 Series User’s Guide...
Page 193 Region Select the proper region which you are located. The common settings of Caller ID Type, Dial tone, Ringing tone, Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone.
Page 194 30 – 39) with any number you desire. For example, type 50 in the box of MSN 30. Later you will find MSN 30 has been replaced with MSN50 in all related pages. See the following figures for examples (pages of VoIP>>SIP Accounts and VoIP>>Phone Settings). Vigor2930 Series User’s Guide...
Page 195 Vigor2930VSn allows users to switch the function of ISDN2 port between TE or S0 mode. Please use the drop down list to choose the one you want. If you choose ISDN2-S0, please refer to Detailed Settings for Phone1, Phone2, ISDN1-S0 for the configuration.
Page 196 Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigured schedules. Refer to section Application>>Schedule for detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book Vigor2930 Series User’s Guide...
Page 197 profiles. Refer to section VoIP>>DialPlan – Phone Book for detailed configuration. CLIR (hide caller ID) Check this box to hide the caller ID on the display panel of the phone set. Prefer Codec Select one of five codecs as the default for your VoIP calls. The codec used for each call will be negotiated with the peer party before each session, and so may not be your default choice.
Page 198 Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Vigor2930 Series User’s Guide...
Page 199 Also, you can specify each field for your necessity. It is recommended for you to use the default settings for VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is.
Page 200: Status
IDLE - Indicates that the VoIP function is idle. HANG_UP - Indicates that the connection is not established (busy tone). CONNECTING - Indicates that the user is calling out. WAIT_ANS - Indicates that a connection is launched and waiting for remote user’s answer. Vigor2930 Series User’s Guide...
Page 201: Isdn
ALERTING - Indicates that a call is coming. ACTIVE-Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. PeerID The present in-call or out-call peer ID (the format may be IP or Domain). Elapse The format is represented as hours:minutes:seconds.
Page 202: General Settings
MSN number MSN Numbers for the MSN Numbers mean that the router is able to accept only Router number-matched incoming calls. In addition, local ISDN network provider should support MSN services. The router Vigor2930 Series User’s Guide...
Page 203 Usually the router will send "Own Number" to the remote side. However Own number will restrict the router displaying only one number on remote side. Vigor2930 series can connect up to 6 phones at the same time. Therefore, if CLIP is selected, the external MSN numbers that you setup will be displayed to remote side.
Page 204 If you use ISDN1-S0 with MSN 5972729 to dial an outgoing call: remote user will see the number 5972729 because Phone CLIP is checked. If you use ISDN1-S0 without MSN Setup to dial an outgoing call: remote user will see the number 5972720 because Phone CLIP is checked. Vigor2930 Series User’s Guide...
Page 205: Dial To Single/Dual Isps
Select Dialing to a Single ISP if you access the Internet via a single ISP. ISP Access Setup ISP Name - Enter your ISP name such as Seednet, Hinet and so on. Dial Number -Enter the ISDN access number provided by your ISP.
Page 206 Idle Timeout - Idle timeout means the router will be disconnect after being idle for a preset amount of time. The default is 180 seconds. If you set the time to 0, the ISDN connection to the ISP will always remain on. Vigor2930 Series User’s Guide...
Page 207 Primary ISP Setup ISP Name - Enter your ISP name. Dial Number -Enter the ISDN access number provided by your ISP. Username - Enter the username provided by your ISP. Password - Enter the password provided by your ISP. IP Address Assignment In most environments, you should not change these settings as Method (IPCP) for most ISPs provide a dynamic IP address for the router when it...
Page 208: Call Control
Dial Delay Interval - It specifies the interval between dialup retries. By default, the interval is 0 second. Remote Activation – It can help users who would like to access the server which is off the Internet in the head office. Vigor2930 Series User’s Guide...
Page 209 To remotely make the server to be available on the Internet, i.e. make the router in the head office activating its Internet access either by dialing-up or starting broadband connection, users can make a regular phone call (the number is set in the Remote Activation field) to the router as signaling it for activation.
Page 210: Wireless Lan
Complete Security Standard Selection: To ensure the security and privacy of your wireless communication, we provide several prevailing standards on market. Vigor2930 Series User’s Guide...
Page 211 WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via radio using either a 64-bit or 128-bit key. Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys. WPA (Wi-Fi Protected Access), the most dominating security mechanism in industry, is separated into two categories: WPA-personal or called WPA Pre-Share Key (WPA/PSK), and WPA-Enterprise or called WPA/802.1x.
Page 212: General Setup
The default setting of this filed is blank and the function will always work. Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your Vigor2930 Series User’s Guide...
Page 213 SSID Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. LAN – Check this box to make the wireless clients Isolate (stations) with the same SSID cannot access wired PCs on LAN.
Page 214: Security
This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invoke it. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WEP and WPA. Vigor2930 Series User’s Guide...
Page 215 Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP-Accepts only WEP clients and the encryption key should be entered in WEP Key. WEP/802.1x Only - Accepts only WEP clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol.
Page 216: Access Control
MAC address that has been configured can access the wireless LAN interface. By clicking the Access Control, a new web page will appear, as depicted below, so that you could edit the clients' MAC addresses to control their access rights. Vigor2930 Series User’s Guide...
Page 217 Policy Select to enable any one of the following policy. Activate MAC address filter- Allow to set MAC address list for accessing Access Point. PCs with MAC address not listed above cannot access AP. In addition, selected station with MAC address listed above can be isolated from LAN by checking Isolate the station from LAN.
Page 218: Wps
On the side of a station with network card installed, press Start PBC button of network card. If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN code of the wireless client you wish to connect to the Vigor2930 Series User’s Guide...
Page 219 vigor router. For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security, you will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again.
Page 220: Wds
Provide bridge traffic between two LANs through the air. Extend the coverage range of a WLAN. To meet the above requirement, two WDS modes are implemented in Vigor router. One is Bridge, the other is Repeater. Below shows the function of WDS-bridge interface: Vigor2930 Series User’s Guide...
Page 221 The application for the WDS-Repeater mode is depicted as below: The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be forwarded to local wired or wireless hosts.
Page 222 If you do not check that box, you can set the WEP key now in this page. Pre-shared Key Type – There are three types for you to choose. DrayTek WPA can be used for all DrayTek wireless routers like Vigor2700, Vigor2800, Vigor2820, and etc., except for other brand's wireless routers.
Page 223 encryption mode as WPA or WPA2 to establish your WDS system between AP and the router. Key - Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Bridge If you choose Bridge as the connecting mode, please type in the peer MAC address in these fields.
Page 224: Ap Discovery
Station List provides the knowledge of connecting wireless clients now along with its status code. There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Vigor2930 Series User’s Guide...
Page 225 Refresh Click this button to refresh the status of station list. Click this button to add current selected MAC address into Access Control. igor2930 Series User’s Guide...
Page 226: Rate Control
Internet or the desired web page through this router. That is, a company which wants to have an advertisement for its products to the users, can specify the URL in this page to reach its goal. Vigor2930 Series User’s Guide...
Page 227: Ssl Vpn
Disable Click this button to close this function. Redirect to URL Any user who wants to access into Internet through this router will be redirected to the URL specified here first. It is a useful method for the purpose of advertisement. For example, force the wireless user(s) in hotel to access into the web page that the hotel wants the user(s) to visit.
Page 228: Ssl Web Proxy
SSL Web Proxy will allow the remote users to access the internal web sites over SSL. Name Display the name of the profile that you create. Display the URL. Active Display current status (active or inactive) of such profile. Click number link under Index filed to set detailed configuration. Vigor2930 Series User’s Guide...
Page 229: User Account
Name Type name of the profile. Type the address (function variation or IP address) or path of the proxy server. Host IP Address If you type function variation as URL, you have to type corresponding IP address in this filed. Such field must match with URL setting.
Page 230 However, if you have set several SSL Web Proxy Profiles in SSL VPN>> SSL Web Proxy web page: The SSL Web Proxy profile names will be displayed (together with check box) as shown below. Vigor2930 Series User’s Guide...
Page 231: Online User Status
If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into Draytek SSL VPN portal interface. Next, users can open SSL VPN>> Online Status to view logging status of SSL VPN.
Page 232: System Status
Display the total memory of your hard disk. Memory Usage Display current usage of memory. LAN --- MAC Address Display the MAC address of the LAN Interface. IP Address Display the IP address of the LAN interface. Vigor2930 Series User’s Guide...
Page 233 Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHCP server of the LAN interface. Display the assigned IP address of the primary DNS. WAN1/WAN2 --- Link Status Display the connection status. MAC Address Display the MAC address of the WAN Interface.
Page 234: Setting
URL as the following and type username and password for VigorACS server: http://{IP address of VigorACS}:8080/ACSServer/services/ACSServlet If the connected CPE does not need to be authenticated please set URL as the following: http://{IP address of VigorACS}:8080/ACSServer/services/UnAuthACSServ Vigor2930 Series User’s Guide...
Page 235: Administrator Password
Username/Password - Type username and password for ACS Server for authentication. For example, if you want to use such CPE with VigorACS, you can type as the following: Username: acs Password: password CPE Client It is not necessary for you to type them. Such information is useful for Auto Configuration Server.
Page 236: Configuration Backup
Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. Vigor2930 Series User’s Guide...
Page 237 Click Save button, the configuration will download automatically to your computer as a file named config.cfg. The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently.
Page 238: Syslog/Mail Alert
For viewing the Syslog, please do the following: Just set your monitor PC’s IP address in the field of Server IP Address Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. Vigor2930 Series User’s Guide...
Page 239: Time And Date
From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. It allows you to specify where the time of the router should be inquired from. igor2930 Series User’s Guide...
Page 240 Type the IP address of the time server. Time Zone Select the time zone where the router is located. Automatically Update Interval Select a time interval for updating from the NTP server. Click OK to save these settings. Vigor2930 Series User’s Guide...
Page 241: Management
This page allows you to manage the settings for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. The default value is 5060 and this must match with the peer Registrar when making VoIP calls.
Page 242: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2930 Series User’s Guide...
Page 243: Firmware Upgrade
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.
Page 244 The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. Authentication As for authentication information of web filter, the process of Message authenticating will be displayed on this field for your reference. Vigor2930 Series User’s Guide...
Page 245: Diagnostics
Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. Click Diagnostics and click Dial-out Trigger to open the web page. The internet connection (e.g., ISDN, PPPoE, PPPoA, etc) is triggered by a package sending from the source IP address.
Page 246: Routing Table
Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Refresh Click it to reload the page. Clear Click it to clear the whole table. Vigor2930 Series User’s Guide...
Page 247: Dhcp Table
The facility provides information on IP address assignments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection item number. IP Address It displays the IP address assigned by this router for specified PC.
Page 248: Web Authentication Table
Management. You have to enable IP bandwidth limit and IP session limit before invoke Data Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. Vigor2930 Series User’s Guide...
Page 249 Enable Data Flow Check this box to enable this function. Monitor Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refresh this page manually. Index Display the number of the data flow.
Page 250 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General. If you do not specify any rate at that page, here will display Auto for instead. Vigor2930 Series User’s Guide...
Page 251: Traffic Graph
Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Refresh to renew the graph at any time. The following two figures display different charts by daily and weekly. The horizontal axis represents time.
Page 252: Ping Diagnosis
Type in the IP address of the Host/IP that you want to ping. Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. Vigor2930 Series User’s Guide...
Page 253: Trace Route
Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run. The result of route trace will be shown on the screen. Trace through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the...
Page 254 This page is left blank. Vigor2930 Series User’s Guide...
Page 255: Application And Examples
The most common case is that you may want to connect to network securely, such as the remote branch office and headquarter. According to the network structure as shown in the below illustration, you may follow the steps to create a LAN-to-LAN profile. These two networks (LANs) should NOT have the same network address.
Page 256 Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. Vigor2930 Series User’s Guide...
Page 257 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection.
Page 258 Address, Username, Password, and VJ Compression for this Dial-In connection. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Vigor2930 Series User’s Guide...
Page 259 Settings in Router B in the remote office: Go to VPN and Remote Access and select Remote Access Control to enable the necessary VPN service and click OK. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup.
Page 260 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. Vigor2930 Series User’s Guide...
Page 261 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection.
Page 262 Vigor2930 Series User’s Guide...
Page 263: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter
The other common case is that you, as a teleworker, may want to connect to the enterprise network securely. According to the network structure as shown in the below illustration, you may follow the steps to create a Remote User Profile and install Smart VPN Client on the remote host.
Page 264 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2930 Series User’s Guide...
Page 265 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.draytek.com download center. Install as instructed.
Page 266 Username, Password, and encryption method. The User Name and Password should be consistent with the one set up in the VPN router. To use default gateway on remote network means that all the packets of remote host will be directed to VPN Vigor2930 Series User’s Guide...
Page 267: Qos Setting Example
server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. Assume a teleworker sometimes works at home and takes care of children.
Page 268 Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the name “E-mail” for Class 1. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP. Vigor2930 Series User’s Guide...
Page 269 Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. Click Setup link for WAN1. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of VoIP influent other application.
Page 270 10. Click Edit to open a new window. 11. First, check the ACT box. 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s subnet address. Leave other fields and click OK. Vigor2930 Series User’s Guide...
Page 271: Lan - Created By Using Nat
– – An example of default setting and the corresponding deployment are shown below. The default Vigor router private IP address/Subnet Mask is 192.168.1.1/255.255.255.0. The built-in DHCP server is enabled so it assigns every local NATed host an IP address of 192.168.1.x starting from 192.168.1.10.
Page 272 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. Vigor2930 Series User’s Guide...
Page 273: Calling Scenario For Voip Function
Example 1: Both John and David have SIP Addresses from different service providers. John’s SIP URL: 1234@draytel.org, David’s SIP URL: 4321@iptel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@iptel.org SIP Accounts Settings --- Profile Name: draytel1 Register via: Auto SIP Port: 5060 (default)
Page 274 Expiry Time: (use default value) CODEC/RTP/DTMF--- David calls John (Use default value) He picks up the phone and dials 2222# (DialPlan Phone Number for John) Or, He picks up the phone and dials 1234# (John’s Account Name) Vigor2930 Series User’s Guide...
Page 275: Peer-To-Peer Calling
Example 3: Arnor and Paulin have Vigor routers respectively, they can call each other without SIP Registrar. First they must have each other’s IP address and assign an Account Name for the port used for calling. Arnor’s SIP URL: 1234@214.61.172.53 Paulin’s SIP URL: 4321@ 203.69.175.24 Settings for Arnor DialPlan index 1...
Page 276: Upgrade Firmware For Your Router
3. Access into Support >> Downloads. Please find out Utility menu and click it. 4. Click on the link of Router Tools to download the file. After downloading the files, please decompressed the file onto your host. Vigor2930 Series User’s Guide...
Page 277 5. Double click on the router tool icon. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility.
Page 278: Request A Certificate From A Ca Server On Windows Ca Server
10. Click Send. 11. Now the firmware update is finished. Go to Certificate Management and choose Local Certificate. Vigor2930 Series User’s Guide...
Page 279 You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2000 CA server for example.
Page 280 64 encoded certificate and Download CA certificate. Now you should get a certificate (.cer file) and save it. Back to Vigor router, go to Local Certificate. Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh Vigor2930 Series User’s Guide...
Page 281 and you will find the below window showing “------BEGINE CERTIFICATE------..” You may review the detail information of the certificate by clicking View button. igor2930 Series User’s Guide...
Page 282: Request A Ca Certificate And Set As Trusted On Windows Ca Server
Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. Vigor2930 Series User’s Guide...
Page 283 In Choose file to download, click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. Back to Vigor router, go to Trusted CA Certificate. Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh and you will find the below illustration.
Page 284: Creating An Account For Myvigor
The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
Page 285 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. igor2930 Series User’s Guide...
Page 286 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2930 Series User’s Guide...
Page 287 New Account Confirmation 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login.
Page 288: Creating An Account Via Myvigor Web Site
11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
Page 289 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. igor2930 Series User’s Guide...
Page 290 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2930 Series User’s Guide...
Page 291 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login.
Page 292 This page is left blank. Vigor2930 Series User’s Guide...
Page 293: Trouble Shooting
This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. Checking if the hardware status is OK or not. Checking if the network connection settings on your computer are OK or not.
Page 294 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2930 Series User’s Guide...
Page 295 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4.
Page 296: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2930 Series User’s Guide...
Page 297: Checking If The Isp Settings Are Ok Or Not
Click WAN>> Internet Access and then check whether the ISP settings are set correctly. Click Details Page of WAN1/WAN2 to review the settings that you configured previously. Sometimes, a wrong connection can be improved by returning to the default settings. Try to reset the router by software or hardware.
Page 298: Contacting Your Dealer
After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor2930 Series User’s Guide...

Draytek Vigor2930 Series User Manual

Preface

Configuring Basic Settings

Advanced Web Configuration

Application and Examples

Trouble Shooting

Quick Links

Related Manuals for Draytek Vigor2930 Series

Summary of Contents for Draytek Vigor2930 Series

Table of Contents