Page 2 Vigor2925 Series User’s Guide...
Page 3 Vigor2925 Series Dual-WAN Security Router User’s Guide Version: 3.1 Firmware Version: V3.8.0 (For future update, please visit DrayTek web site) Date: April 15, 2015 Vigor2925 Series User’s Guide...
Page 4 Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 5: European Community Declarations
Product: Vigor2925 Series Router DrayTek Corp. declares that Vigor2925 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 6 Vigor2925 Series User’s Guide...
Page 7: Table Of Contents
2.1.2 For WAN3/WAN4 (USB)....................41 2.2 Service Activation Wizard...................... 43 2.3 VPN Client Wizard ........................ 46 2.4 VPN Server Wizard ....................... 52 2.5 Wireless Wizard ........................57 2.6 VoIP Wizard........................... 61 2.7 Registering Vigor Router....................... 63 Tutorials and Applications.................67 Vigor2925 Series User’s Guide...
Page 8 3.15 How to use AP Management function (in Vigor2925) to check AP status and deploy WLAN profile............................139 3.16 CVM Application - How to manage the CPE (router) through Vigor2925 series? .... 142 3.17 CVM Application - How to build the VPN between remote devices and Vigor2925 series? ..............................
Page 9 4.11.7 IGMP........................... 342 4.11.8 Wake on LAN......................343 4.11.9 SMS / Mail Alert Service ..................... 344 4.11.10 Bonjour ........................346 4.12 VPN and Remote Access....................349 4.12.1 Remote Access Control ....................350 4.12.2 PPP General Setup ....................350 Vigor2925 Series User’s Guide...
Page 10 4.18.5 User Group ......................... 462 4.18.6 Online User Status...................... 464 4.19 USB Application ........................ 465 4.19.1 USB General Settings....................465 4.19.2 USB User Management....................467 4.19.3 File Explorer........................ 469 4.19.4 USB Device Status ..................... 470 4.19.5 Temperature Sensor....................471 Vigor2925 Series User’s Guide...
Page 11 Telnet Command: bpa ......................527 Telnet Command: csm appe prof ..................528 Telnet Command: csm appe set.................... 528 Telnet Command: csm appe show ..................529 Telnet Command: csm appe config..................530 Telnet Command: csm ucf..................... 531 Vigor2925 Series User’s Guide...
Page 12 Telnet Command: Log ......................577 Telnet Command: mngt ftpport ....................578 Telnet Command: mngt httpport.................... 578 Telnet Command: mngt httpsport ..................578 Telnet Command: mngt telnetport ..................579 Telnet Command: mngt sshport .................... 579 Telnet Command: mngt ftpserver ..................579 Vigor2925 Series User’s Guide...
Page 13 Telnet Command: srv dhcp ipcnt................... 614 Telnet Command: srv dhcp off....................614 Telnet Command: srv dhcp on....................614 Telnet Command: srv dhcp relay................... 614 Telnet Command: srv dhcp startip..................615 Telnet Command: srv dhcp status..................615 Vigor2925 Series User’s Guide xiii...
Page 14 Telnet Command: vlan off...................... 644 Telnet Command: vlan on...................... 644 Telnet Command: vlan pri...................... 644 Telnet Command: vlan restart ....................645 Telnet Command: vlan status ....................645 Telnet Command: vlan subnet....................646 Telnet Command: vlan submode................... 646 Vigor2925 Series User’s Guide...
Page 15 Telnet Command: wl dual config ................... 685 Telnet Command: wl dual restart................... 688 Telnet Command: wl dual security ..................688 Telnet Command: wl dual stalist.................... 689 Telnet Command: wl dual wds....................689 Telnet Command: wl dual wps....................692 Vigor2925 Series User’s Guide...
Page 16 Telnet Command: wol......................693 Telnet Command: appqos ..................... 693 Vigor2925 Series User’s Guide...
Page 17: Introduction
On the Wireless-equipped models (Vigor2925n/n-plus/Vn/Vn-plus/ac/Vac) each of the wireless SSIDs can also be grouped within one of the VLANs. In addition, Vigor2925 series supports USB interface for connecting USB printer to share printing function or 3G USB modem for network connection.
Page 18: Web Configuration Buttons Explanation
Add new settings for specified item. Edit the settings for the selected item. Delete the selected item with the corresponding settings. Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed explanation. Vigor2925 Series User’s Guide...
Page 19: Led Indicators And Connectors
The port is connected with 10/100Mbps Left The port is connected. LAN1~LAN5 The port is disconnected. (for Vigor2925) Blinking The data is transmitting. LAN1~LAN4 Right The port is connected with 1000Mbps. (for Vigor2925F) The port is connected with 10/100Mbps Vigor2925 Series User’s Guide...
Page 20 Connecter for local network devices or modem for accessing Internet. (for Vigor2925) WAN2 (for Vigor2925F) WAN1 Fiber connection (100Mbps) for accessing the Internet. (for Vigor2925F) LAN1~LAN5 Connecters for local network devices. (for Vigor2925) LAN1~LAN4 (for Vigor2925F) Connecter for a power adapter. Power Switch. ON/OFF Vigor2925 Series User’s Guide...
Page 21: For Vigor2925Ac / Vigor2925N-Plus / Vigor2925N / Vigor2925Fn
WPS within 2 minutes.) The VPN tunnel is active. VPN service is disabled. Blinking Traffic is passing through VPN tunnel. The DMZ function is enabled. The DMZ function is disabled. Blinking The data is transmitting. Vigor2925 Series User’s Guide...
Page 22 Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with Vigor2925 Series User’s Guide...
Page 23 Connecter for local network devices or modem for accessing Internet. (for Vigor2925ac/ Vigor2925n-plus/ Vigor2925n) WAN2 (for Vigor2925Fn) Fiber connection (100Mbps) for accessing the Internet. WAN1 (for Vigor2925Fn) LAN1~LAN5 Connecters for local network devices. Connecter for a power adapter. ON/OFF Power Switch. Vigor2925 Series User’s Guide...
Page 24: For Vigor2925Vac / Vigor2925Vn-Plus
The port is connected with 1000Mbps. The port is connected with 10/100Mbps Left The port is connected. LAN1~ The port is disconnected. LAN5 Blinking The data is transmitting. Right The port is connected with 1000Mbps. The port is connected with 10/100Mbps Vigor2925 Series User’s Guide...
Page 25 Connecter for local network devices or modem for accessing Internet. LAN1~LAN5 Connecters for local network devices. Phone 1/2 Connecter for analog phone(s). Line Connector for PSTN life line. Connecter for a power adapter. Power Switch. ON/OFF Vigor2925 Series User’s Guide...
Page 26: Hardware Installation
Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. (For the hardware connection, we take “n” model as an example.) Vigor2925 Series User’s Guide...
Page 27 For the installation of Vigor2829Vn-plus, refer to the following figure: Vigor2925 Series User’s Guide...
Page 28: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 29 A dialog will appear. Click Add a local printer and click Next. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next. Vigor2925 Series User’s Guide...
Page 30 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next. Click Standard and choose Generic Network Card. Vigor2925 Series User’s Guide...
Page 31 Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. Type a name for the chosen printer. Click Next. Vigor2925 Series User’s Guide...
Page 32 10. Choose Do not share this printer and click Next. 11. Then, in the following dialog, click Finish. Vigor2925 Series User’s Guide...
Page 33 12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties. 13. Edit the property of the new printer you have added by clicking Configure Port. Vigor2925 Series User’s Guide...
Page 34 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click it.
Page 35: Accessing Web Page
Please type “admin/admin” as the Username/Password and click Login. Notice: If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Now, the Main Screen will appear. Vigor2925 Series User’s Guide...
Page 36: Changing Password
Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type “admin/admin” as Username/Password for accessing into the web user interface with admin mode. Go to System Maintenance page and choose Administrator Password. Vigor2925 Series User’s Guide...
Page 37: Introducing Dashboard
IPv6 Internet Access, Interface (physical connection), Security and Quick Access. Click Dashboard from the main menu on the left side of the main page. A web page with default selections will be displayed on the screen. Refer to the following figure: Vigor2925 Series User’s Guide...
Page 38: Virtual Panel
LED (left side) Black It means the router or the function is not working. Green It means the router or the function is working. For detailed information about the LED display, refer to 1.2 LED Indicators and Connectors. Vigor2925 Series User’s Guide...
Page 39: Name With A Link
In addition, quick access for VPN security settings such as Remote Dial-in User and LAN to LAN are located on the bottom of this page. Scroll down the page to find them and use them if required. Vigor2925 Series User’s Guide...
Page 40: Gui Map
All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions. Vigor2925 Series User’s Guide...
Page 41: Web Console
The functions/settings modified under Web Console also can be reviewed on the web user interface. Click the Web Console icon on the top of the main screen to open the following screen. Vigor2925 Series User’s Guide...
Page 42: Config Backup
Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting. Click the Logout icon to exit the web user interface. Such page displays the physical connection status such as LAN connection status, WAN connection status, and so on. Vigor2925 Series User’s Guide...
Page 43 Detailed explanation (for IPv4) is shown below: Item Description LAN Status Primary DNS-Displays the primary DNS server address for WAN interface. Secondary DNS -Displays the secondary DNS server Vigor2925 Series User’s Guide...
Page 44 Mode - Displays the type of WAN connection (e.g., TSPC). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. Gateway IP - Displays the IP address of the default Vigor2925 Series User’s Guide...
Page 45: Virtual Wan
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2925 Series User’s Guide...
Page 46 This page is left blank. Vigor2925 Series User’s Guide...
Page 47: Quick Setup
If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next. Vigor2925 Series User’s Guide...
Page 48 WAN1/WAN2; if 3G/4G USB modem is used, please choose WAN3/WAN4. Then click Next for next step. WAN1, WAN2, WAN3 and WAN4 will bring up different configuration page. Refer to the following for detailed information. Vigor2925 Series User’s Guide...
Page 49: For Wan1/Wan2 (Ethernet)
ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2925 Series User’s Guide...
Page 50 Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. Vigor2925 Series User’s Guide...
Page 51 Now, you can enjoy surfing on the Internet. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2925 Series User’s Guide...
Page 52 Second DNS –Type in secondary IP address for necessity in the future. PPTP Server / L2TP Type the IP address of the server. Server Back Click it to return to previous setting page. Next Click it to get into the next setting page. Vigor2925 Series User’s Guide...
Page 53 Now, you can enjoy surfing on the Internet. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2925 Series User’s Guide...
Page 54 Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Please type in the IP address information originally provided by your ISP. Then click Next for next step. Vigor2925 Series User’s Guide...
Page 55 Click DHCP as the Internet Access type. Simply click Next to continue. Available settings are explained as follows: Item Description Host Name Type the name of the host. Note: The maximum length of the host name you can set is Vigor2925 Series User’s Guide...
Page 56 After finished the settings above, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2925 Series User’s Guide...
Page 57: For Wan3/Wan4 (Usb)
Modem Initial String – Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of the string you can set is 47 characters. Vigor2925 Series User’s Guide...
Page 58 Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2925 Series User’s Guide...
Page 59: Service Activation Wizard
Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Page 60 When you finish the selection, please click Next. Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from retailing outlets.
Page 61 The valid time for the free trial of these services is one month. When all the trial editions for various web content filters had been enabled, the configuration page of Service Activation Wizard will be invalid as shown below. Vigor2925 Series User’s Guide...
Page 62: Vpn Client Wizard
Route Mode/NAT Mode – If the remote network only allows you to dial in with single IP, please choose NAT mode, otherwise please choose Route Mode. There are 64 VPN profiles for users to set. Please choose a LAN-to-LAN Profile Vigor2925 Series User’s Guide...
Page 63 In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. Vigor2925 Series User’s Guide...
Page 64 When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic:  When you choose IPsec, you will see the following graphic:  When you choose L2TP, you will see the following graphic: Vigor2925 Series User’s Guide...
Page 65 When you choose L2TP over IPsec (Nice to Have) or L2TP over IPsec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. Vigor2925 Series User’s Guide...
Page 66 Certificate Management >> Local Certificate. Otherwise, the setting you choose here will not be effective. IPsec Security Medium - Authentication Header (AH) means data will be Method authenticated, but not be encrypted. By default, this option Vigor2925 Series User’s Guide...
Page 67 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2925 Series User’s Guide...
Page 68: Vpn Server Wizard
VPN connection. Please choose a This item is available when you choose Site to Site VPN LAN-to-LAN Profile (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Vigor2925 Series User’s Guide...
Page 69 2. After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. Here we take the examples of choosing Site-to-Site VPN as the VPN Server Mode. Vigor2925 Series User’s Guide...
Page 70 When you check PPTP, you will see the following graphic:  When you check PPTP & IPsec & L2TP (three types) or PPTP & IPsec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2925 Series User’s Guide...
Page 71 Peer IP/VPN Client Type the WAN IP address or VPN client IP address for the remote client. Peer ID Type the ID name for the remote client. The length of the name is limited to 47 characters. Vigor2925 Series User’s Guide...
Page 72 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2925 Series User’s Guide...
Page 73: Wireless Wizard
Description Wireless 2.4GHz Settings Name Type the SSID name of this router for wireless 2.4GHz. The default name is defined with DrayTek. Change the name if required. Mode At present, the router can connect to 11n Only, 11g Only, Mixed (11b+11g), Mixed (11a+11n), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously.
Page 74 802.1x authentication. Either 8~63 ASCII characters, such as 012345678(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). Next Click it to get into the next setting page. Cancel Exit the wireless wizard without saving any changes. Vigor2925 Series User’s Guide...
Page 75 Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbps. Wireless 5GHz Settings Click it to enable or disable settings in this page. Enable/Disable Vigor2925 Series User’s Guide...
Page 76 Exit the wireless wizard without saving any changes. 4. After typing the required information, click Next. 5. The following page will display the configuration summary for wireless setting. 6. Click Finish to complete the wireless settings configuration. Vigor2925 Series User’s Guide...
Page 77: Voip Wizard
Password – Type the password for the account registered to your ISP. Use the same Account as phone 1 – If you don’t need to configure Phone 2 settings, simply check this box. Click it to get into the next setting page. Next Vigor2925 Series User’s Guide...
Page 78 Cancel Click it to give up the VoIP wizard. 3. After finished the settings above, click Next for viewing summary of such connection. 4. Click Finish. A page of VoIP Wizard Setup OK!!! will appear. Vigor2925 Series User’s Guide...
Page 79: Registering Vigor Router
Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login. Vigor2925 Series User’s Guide...
Page 80 When the following page appears, please type in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit. Vigor2925 Series User’s Guide...
Page 81 When the following page appears, your router information has been added to the database. After clicking OK, you will see the following page. Your router has been registered to myvigor website successfully. Vigor2925 Series User’s Guide...
Page 82 This page is left blank. Vigor2925 Series User’s Guide...
Page 83: Tutorials And Applications
TSPC, AICCU, DHCPv6 Client and Static IPv6. Access into the web user interface of Viogr2925. Open WAN>> Internet Access. Choose one of the WAN interfaces as the one supporting IPv6 service. Then, click the IPv6 button of the selected WAN. Vigor2925 Series User’s Guide...
Page 84 PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same time Choose PPP and type the information for PPPoE of IPv4. Access into the setting page for IPv6 service, it is not necessary for you to configure anything. Vigor2925 Series User’s Guide...
Page 85 Click OK and open Online Status. If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time. Vigor2925 Series User’s Guide...
Page 86 Vigor2925 Series User’s Guide...
Page 87 (In the following figure, the TSPC information is obtained from http://gogo6.com/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shown as follows: Vigor2925 Series User’s Guide...
Page 88 (In the following figure, the AICCU information is obtained from https://www.sixxs.net/main/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
Page 89  DHCPv6 Client Choose DHCPv6 Client. Click one of the identity associations and type the IAID number. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
Page 90  Static IPv6 Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
Page 91 Choose 6in4 Static Tunnel. Type remote endpoint IPv4 address, 6in4 IPv6 Address, LAN Routed Prefix and Tunnel TTL. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
Page 92  Choose 6rd. Type IPv4 Border Relay, IPv4 Mask Length, 6rd Prefix and 6rd Prefix Length. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
Page 93 In the field of DHCPv6 Server Configuration, when DHCPv6 service is enabled, you can assign available IPv6 address for the client manually. Note: When both mechanisms are enabled, the client can determine which mechanism to be used (e.g., the default mechanism for Windows7 is router advertisement service). Vigor2925 Series User’s Guide...
Page 94 IPv4 IP and IPv6 IP services. Its IPv6 address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7. After getting the above message, it means the IPv6 service has been activated successfully. Vigor2925 Series User’s Guide...
Page 95 If not, only a steady turtle will be seen. If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to access and utilize. Vigor2925 Series User’s Guide...
Page 96: How Can I Get The Files From Usb Storage Device Connecting To Vigor Router
Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable SMB service. Vigor2925 Series User’s Guide...
Page 97 "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2925 Series User’s Guide...
Page 98 Now, users in LAN of Vigor2925 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. Vigor2925 Series User’s Guide...
Page 99: (Main Mode)
(in this case, type VPN Server), and check the box of Enable This Profile. For Vigor router will be set as a server, the call direction shall be set as Dial-in and set 0 as Idle Timeout. Vigor2925 Series User’s Guide...
Page 100 (e.g., 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote side. Click OK to save the settings. Vigor2925 Series User’s Guide...
Page 101 (in this case, type VPN Client), and check the box of Enable This Profile. For such Vigor router will be set as a client, the call direction shall be set as Dial-out. Check the box of Always on for a permanent VPN connection. Vigor2925 Series User’s Guide...
Page 102 IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the remote side. Click OK to save the settings. Vigor2925 Series User’s Guide...
Page 103: How To Optimize The Bandwidth Through Qos Technology
Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
Page 104 In the pop-up window, choose Range Address as the Address Type and type the start IP address and end IP address in relational fields. Click OK to save the settings and exit the window. Click OK again to save the settings. Vigor2925 Series User’s Guide...
Page 105 The class rule for VoIP has been set. Click OK to return to previous page. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. Vigor2925 Series User’s Guide...
Page 106 10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control. 11. Click OK to save the settings. The class rules for WAN1 are defined as shown below. Vigor2925 Series User’s Guide...
Page 107: Qos Setting Example
Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor2925 Series User’s Guide...
Page 108 E-mail using protocol POP3 and SMTP. Click OK to save the settings. Return to previous page. Enter the Name of Index Class #2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. Vigor2925 Series User’s Guide...
Page 109 If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. Vigor2925 Series User’s Guide...
Page 110 11. Click Add to open the following window. Check the ACT box, first. 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor2925 Series User’s Guide...
Page 111: How To Use Landing
Landing Page is a special feature configured under User Management. It can specify the message, content to be seen or specify which website to be accessed into when users try to access into the Internet by passing the authentication. Here, we take Vigor2925 series router as an example.
Page 112 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will see the message of Login Success from the browser you use. Vigor2925 Series User’s Guide...
Page 113 Next, enable the Landing Page function. Open User Management -> User Profile and click one of the index number (e.g., index number 3) links. In the following page, check the box of Landing page and click OK to save the settings. Vigor2925 Series User’s Guide...
Page 114 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will be directed into the website of www.draytek.com. Vigor2925 Series User’s Guide...
Page 115: How To Send A Notification To Specified Phone Number Via Sms Service In Wan Disconnection
Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider setting. In the following page, type the username and password and set the quota that the router can send the message out. Vigor2925 Series User’s Guide...
Page 116 Choose any index number (e.g., Index 1 in this case) to configure conditions for sending the SMS. In the following page, type the name of the profile and check the Disconnected and Reconnected boxes for WAN to work in concert with the topic of this paper. Vigor2925 Series User’s Guide...
Page 117 Click OK to save the settings. Later, if one of the WAN connections fails in your router, the system will send out SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully. Vigor2925 Series User’s Guide...
Page 118 URL string of the SMS provider and type the username and password. After clicking OK, the new added SMS provider will be added and will be available for you to specify for sending SMS out. Vigor2925 Series User’s Guide...
Page 119: How To Create An Account For Myvigor
The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
Page 120 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. Vigor2925 Series User’s Guide...
Page 121 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2925 Series User’s Guide...
Page 122 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2925 Series User’s Guide...
Page 123: Create An Account Via Myvigor Web Site
11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
Page 124 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. Vigor2925 Series User’s Guide...
Page 125 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2925 Series User’s Guide...
Page 126 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2925 Series User’s Guide...
Page 127: How To Configure Certain Computers Accessing To Internet
Firewall>>Filter Setup is used as the default setting, we have to create a new rule starting from Filter Rule 2 of Set 2. Access into the web user interface of Vigor router. Open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 2 button. Vigor2925 Series User’s Guide...
Page 128 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. Vigor2925 Series User’s Guide...
Page 129 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. Vigor2925 Series User’s Guide...
Page 130 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor2925 Series User’s Guide...
Page 131: How To Block Facebook Service Accessed By The Users Via Web Content Filter / Url Content Filter
Benefits: Easily and quickly implement the category/website that you want to block. Note: License is required. URL Content Filter, Benefits: Free, flexible for customize webpage. Note: Manual setting (e.g., one keyword for one website.) Make sure the Web Content Filter (powered by Commtouch) license is valid. Vigor2925 Series User’s Guide...
Page 132 Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Enable this profile in Firewall>>General Setup>>Default Rule. Vigor2925 Series User’s Guide...
Page 133 In the field of Contents, please type facebook. Configure the settings as the following figure. Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. Vigor2925 Series User’s Guide...
Page 134 B. Disallow users to play games on Facebook Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Vigor2925 Series User’s Guide...
Page 135 Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. When you finished the above steps, please open Firewall>>General Setup. Vigor2925 Series User’s Guide...
Page 136 Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. Vigor2925 Series User’s Guide...
Page 137: How To Setup Address Mapping
We will take an example to introduce how to make use of this feature. Log into the web user interface of Vigor2925. Open WAN>>Internet Access. For WAN1, choose MPoA/Static or Dynamic IP as the Access Mode. Vigor2925 Series User’s Guide...
Page 138 WAN IP address as 202.211.100.10. Click the WAN IP Alias button to configure the other IP address which is 202.211.100.11. Make sure Join IP NAT Pool is not checked. Click OK to save the settings. Vigor2925 Series User’s Guide...
Page 139 After finished configuration for WAN1, open Load-Balance/Route Policy. Click Index number 1 and 2 to configure the details. After finished the settings, click OK to save the settings respectively. Vigor2925 Series User’s Guide...
Page 140 Upon completing the above configuration, you have specified the outgoing IP address(es) for some specific computers. Now, you bind some specific computers to some WAN IP alias for outgoing traffic. Vigor2925 Series User’s Guide...
Page 141: How To Setup Load Balance For Packets
Internet. The PC in LAN1 can send the data to the remote PC through the specified WAN1. Access into web user interface of Vigor2925series. Open Load-Balance/Route Policy. From the following web page, simply click index number #1. Vigor2925 Series User’s Guide...
Page 142 203.65.1.35; choose WAN1 as the Interface; click default gateway; do not check Auto Failover To The Other WAN. After finished the above settings, click OK to save the configuration. Now, the packets sent to the remote PC (IP address: 203.65.1.35) will be forced to pass through WAN1. Vigor2925 Series User’s Guide...
Page 143: How To Authenticate Clients Via User Management
With User Management authentication function, before a valid username and password have been correctly supplied, a particular client will not be allowed to access Internet through the router. There are three ways for authentication: Web, Telnet and Alert Tool. Vigor2925 Series User’s Guide...
Page 144 Web authentication interface first. Then, the client is trying to access http://www.draytek.com and but brought to the Vigor router. Since this is an SSL connection, some web browsers will display warning messages.
Page 145 With Chrome browser, you may get the following warning. Click Proceed anyway. After that, the web authentication window will appear. Input the user name and the password for your account (defined in User Management) and click Login. Vigor2925 Series User’s Guide...
Page 146 If the authentication is successful, the client will be redirected to the original web site that he tried to access. In this example, it is http://www.draytek.com . Furthermore, you will get a popped up window as the following. Then you can access the Internet.
Page 147 With the default setup <body stats=1><script language='javascript'> window.location='http://www.draytek.com'</script></body>, you will be redirected to http://www.draytek.com . You may change it if you want. For example, you will get the following welcome message if you enter Login Successful in the Welcome Message table.
Page 148 If SSL Tunnel or SSL Web Proxy is disabled in the VPN profile, a User Management account and a remote dial-in VPN profile can use the same Username, even with different passwords. However, we recommend you to use different usernames for different user profiles in User Management and VPN profiles. Vigor2925 Series User’s Guide...
Page 149 Note: Here expired time is “Unlimited” means the Time Quota function is not enabled for this account. After login, this account will not be expired until it is logout. In the Web interface of router, the configuration page of Time Quota is shown as below. Vigor2925 Series User’s Guide...
Page 150 You will get the following message. The expired time is shown after you login. After you run out the available time, you can’t use this account any more until the administrator manually adds additional time for you. Vigor2925 Series User’s Guide...
Page 151 Any modification to the Firewall policy will break down the connections of all current users. They all have to authenticate again for Internet access.  The administrator may check the current users from User Online Status page. Vigor2925 Series User’s Guide...
Page 152: How To Use Dns Filter
1. Open CSM>>Web Content Filter Profile to set the categories. Make sure WCF License has already been activated. 2. Click Index 1 link to open the following page. Disable all of the categories first. Then, enable Search Engine, Portals, and Social Networking. Vigor2925 Series User’s Guide...
Page 153 WCF-1 Default. 6. Click OK to save the DNS filter configuration. Now, all settings about blocking search engine and social website are complete. Please try to access into www.google.com (the search engine) to see the result. Vigor2925 Series User’s Guide...
Page 154 From the Syslog, we can find out “google” is blocked. Vigor2925 Series User’s Guide...
Page 155: How To Use Ap Management Function (In Vigor2925) To Check Ap Status And Deploy Wlan Profile
Edit button be available. Then, click the Edit button. When the following configuration page appears, make the changes you want and check Apply to All APs. Then, click Next to access into the next page. Vigor2925 Series User’s Guide...
Page 156 “plug and play” and “zero-configuration”. The following page allows you to modify related settings for 2.4G SSID of managed AP. Make the changes you want for 2.4G SSID. Click Next for next page. Vigor2925 Series User’s Guide...
Page 157 AP. Continue to make any changes you want. After finished all of the changes, simply click Finish. Now, the AP (represented with AP800_00507F6EE4980) detected by Vigor router will be applied with the settings modified by Vigor router. Vigor2925 Series User’s Guide...
Page 158: Cvm Application - How To Manage The Cpe (Router) Through Vigor2925 Series
To manage CPEs through Vigor2925 series, you have to set URL on CPE first and set username and password for Vigor2925 series. For this section, we use Vigor2860 series as the example. All the CPE configuration will be done through Vigor2925 series.
Page 159 In the field of ACS Server, type the URL (IP address with port number) of Vigor2925 series and type the same Username and Password defined on the page of Central VPN Management>>General Setup in Vigor2925 series. Then, click Enable for CPE Client and then click OK to save the settings.
Page 160 Open WAN>>Internet Access. Use the drop down list of Access Mode on WAN1 to select MPoA (RFC1483/2684). Then, click Details Page. Click Specify an IP address. Type correct WAN IP address, subnet mask and gateway IP address for your CPE. Then click OK. Vigor2925 Series User’s Guide...
Page 161 Note: Reboot the CPE device and re-log into Vigor2925 series. CPE which has registered to Vigor2925 series will be captured and displayed on the page of Central VPN Management>>CPE Management. Return to the web user interface of Vigor2925 series. Open Central VPN Management>>CPE Management. Now there is one CPE (Vigor2860n+) displayed on the screen.
Page 162: Cvm Application - How To Build The Vpn Between Remote Devices And Vigor2925 Series
When a remote device (e.g., Vigor2860n+ in the following figure) is managed by Vigor2925 series, it is easy to build VPN between these two devices. Access into the web user interface of Vigor2925 series. Open Central VPN Management>>VPN Management. Click the device icon (e.g., Vigor2860n+) to display a drop down list. Then, click the PPTP, IPsec or Advanced.
Page 163 VPN and Remote Access>>LAN to LAN of the remote device for viewing the detailed information. Note: The profile name is created automatically by the system (Vigor2925, the VPN Server). Do not modify any value in such page to avoid VPN error. Vigor2925 Series User’s Guide...
Page 164: Cvm Application - How To Upgrade Cpe Firmware Through Vigor2925 Series
Vigor2860, as an example, is chosen for Vigor2925 to perform the CPE firmware upgrade remotely in this case. Plug in USB storage disk onto Vigor2925 series via USB interface. Make sure the USB disk has been installed correctly; otherwise, the firmware upgrade will not be successful.
Page 165 Select to locate it. Specify the Schedule profile. At last, click Now, a new maintenance profile has been created. Click Now to perform the firmware upgrade immediately for Vigor2850. Wait for several minutes for firmware upgrade. Vigor2925 Series User’s Guide...
Page 166 Click Managed Devices List. Click the icon of Vigor2860 and click Edit and view the software version. Another way to check if the firmware upgrade is completed or not, simply open Central VPN Management>>Log & Alert. Vigor2925 Series User’s Guide...
Page 167: Advanced Configuration
Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor2925 Series User’s Guide...
Page 168 After connecting into the router, 3G/4G USB Modem will be regarded as the third WAN port. However, the original WAN1 and WAN2 still can be used and Load-Balance can be done in the router. Besides, 3G/4G USB Modem in WAN3 also can be used as backup device. Vigor2925 Series User’s Guide...
Page 169: General Setup
Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G/4G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information. Below shows the menu items for WAN.
Page 170 Choose No to disable the settings for this WAN interface. Display Name Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. Physical Type You can change the physical type for WAN2 or choose Vigor2925 Series User’s Guide...
Page 171 WAN will be activated when any master WAN interface disconnects. When all of selected WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
Page 172 WAN interfaces in connection status. Backup Type If you choose Backup as the Active Mode, Backup Type will appear. Please specify which WAN will be treated as the Backup WAN. Vigor2925 Series User’s Guide...
Page 173: Internet Access
Access Mode for these connections also varies. Refer to the following figures. Available settings are explained as follows: Item Description Index Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3/WAN4 that entered in general setup. Vigor2925 Series User’s Guide...
Page 174 Option Number – Type a number for such function. Note If you choose to configure option 61 here, the detailed settings in WAN>>Interface Access will be overwritten. DataType – Choose the type (ASCII or Hex) for the data to Vigor2925 Series User’s Guide...
Page 175 The maximum length of the password you can set is 62 characters. Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and Vigor2925 Series User’s Guide...
Page 176 OK to exit the dialog. Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address. Default MAC Address – You can use Default MAC Vigor2925 Series User’s Guide...
Page 177 Keep WAN Connection Normally, this function is designed for Dynamic IP environments because some ISPs will drop connections if there is no traffic within certain periods of time. Check Vigor2925 Series User’s Guide...
Page 178 WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode. Vigor2925 Series User’s Guide...
Page 179 After finishing all the settings here, please click OK to activate them. To use PPTP/L2TP as the accessing protocol of the internet, please click the PPTP/L2TP tab. The following web page will be shown. Vigor2925 Series User’s Guide...
Page 180 It means Max Transmit Unit for packet. PPP Authentication - Select PAP only or PAP or CHAP PPP Setup for PPP. Idle Timeout - Set the timeout for breaking down the Vigor2925 Series User’s Guide...
Page 181 Specify an IP address – Click this radio button to specify some data.  IP Address – Type the IP address.  Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2925 Series User’s Guide...
Page 182 SIM PIN code Type PIN code of the SIM card that will be used to access Internet. The maximum length of the PIN code you can set is 15 characters. Vigor2925 Series User’s Guide...
Page 183 TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. Default Click it to return to factory default settings. After finishing all the settings here, please click OK to activate them. Vigor2925 Series User’s Guide...
Page 184 APN Name APN means Access Point Name which is provided and required by some ISPs. Type the name and click Apply. The maximum length of the name you can set is 47 characters. Vigor2925 Series User’s Guide...
Page 185 IPv6 prefix address (such as: 2001:B010:7300:200::/64) offered by the ISP. In addition, PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix. No need to type any other information for PPP mode. Vigor2925 Series User’s Guide...
Page 186 After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet. Vigor2925 Series User’s Guide...
Page 187 Ping IP/Hostname – Type the IP address/host name in such field.  TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
Page 188 Type the address for the tunnel broker IP, FQDN or an optional port number. Tunnel ID Type a value. Subnet Prefix Type the subnet prefix address obtained from service provider. The maximum length of the prefix you can set is 128 characters. Vigor2925 Series User’s Guide...
Page 189 After finished the above settings, click OK to save the settings. – – DHCPv6 client mode would use DHCPv6 protocol to obtain IPv6 address from server. Available settings are explained as follows: Item Description IAID (Identify Type a number as IAID. Association ID) Vigor2925 Series User’s Guide...
Page 190 Ping IP/Hostname – Type the IP address/host name in such field.  TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
Page 191 Add – Click it to add a new entry. Delete – Click it to remove an existed entry. Current IPv6 Address Display current interface IPv6 address. Table IPv6 Gateway Address - Type your IPv6 gateway address Static IPv6 Gateway Configuration here. Vigor2925 Series User’s Guide...
Page 192 Ping IP/Hostname – Type the IP address/host name in such field.  TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
Page 193 IP address or hostname for pinging.  Ping IP/Hostname – Type the IP address/host name in such field.  TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. Vigor2925 Series User’s Guide...
Page 194 Available settings are explained as follows: Item Description 6rd Mode Auto 6rd – Retrieve 6rd prefix automatically from 6rd service provider. The IPv4 WAN must be set as "DHCP". Static 6rd - Set 6rd options manually. Vigor2925 Series User’s Guide...
Page 195 TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode. Vigor2925 Series User’s Guide...
Page 196: Multi-Vlan
Enable - Check this box to enable the port-based bridge function on this channel. P1 ~ P5 – Check the box(es) to build bridge connection on LAN. Click any index (8, 9 and 10) to get the following web page: Vigor2925 Series User’s Guide...
Page 197 Moreover, WAN link for Channel 5, 6 and 7 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 5, 6 or 7 to configure your router. Vigor2925 Series User’s Guide...
Page 198 The user will be able to select the physical WAN interface the channel shall use here. VLAN Tag – Type the value as the VLAN ID number. General Settings Valid settings are in the range from 1 to 4095. The network Vigor2925 Series User’s Guide...
Page 199 ISP Access Setup, IP For other settings, refer to Details Page for PPPoE in Address From ISP, WAN WAN1. IP Network Settings, DNS Server IP Address After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
Page 200: Wan Budget
Shutdown WAN interface – All the outgoing traffic through such WAN interface will be terminated. Send Mail Alert to Administrator – The system will send out a warning message to the administrator when the quota Vigor2925 Series User’s Guide...
Page 201  Current day in cycle – Specify the day in the billing cycle as the starting point which Vigor router will reset the traffic record. For example, 3 means the third day of the billing cycle. Vigor2925 Series User’s Guide...
Page 202 Send Mail Alert to Administrator is selected. Or, the system will send out SMS message to the administrator if Send SMS messages to Administrator is selected. Vigor2925 Series User’s Guide...
Page 203: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2925 Series User’s Guide...
Page 204 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2925 Series User’s Guide...
Page 205: General Setup
Such information is set in default and you can not modify it. Details Page - Click it to access into the setting page. Each LAN will have different LAN configuration page. Each LAN must be configured in different subnet. Vigor2925 Series User’s Guide...
Page 206 Internet Access server (PPPoE, PPTP, L2TP or DHCP server). Inter-LAN Routing Check the box to link two or more different subnets (LAN and LAN). When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...
Page 207 LAN. Disable Server – Let you manually assign IP address to every host in the LAN. Enable Relay Agent –Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to. Vigor2925 Series User’s Guide...
Page 208 DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: 194.98.0.1 to this field. The default DNS Server IP address can be found via Online Status: Vigor2925 Series User’s Guide...
Page 209 Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...
Page 210 Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry. Delete – Click it to remove an existed entry. Unique Local Address Such feature is used for the host without assigned IPv6 Vigor2925 Series User’s Guide...
Page 211 IPv6 addresses separately. Start IPv6 Address / End IPv6 Address –Type the start and end address for IPv6 server. Advance setting More options are offered under the Advance setting. Click Edit to open the pop-up window. Vigor2925 Series User’s Guide...
Page 212 Extension WAN – Not only the IP address can be obtained from the primary WAN, but also the prefix for IPv6 LAN IP address can be assigned by extension WAN specified here. When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...
Page 213 Enable Relay Agent - If you want to use another DHCP server in the network other than the Vigor Router’s, you can let Relay Agent help you to redirect the DHCP request to the specified location. DHCP Server IP Address – It is available when Enable Vigor2925 Series User’s Guide...
Page 214 DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: 194.98.0.1 to this field. The default DNS Server IP address can be found via Online Status: Vigor2925 Series User’s Guide...
Page 215 When you finish the configuration, please click OK to save and exit this page. Open LAN>>General Setup. Click the Details Page button of LAN1. In the setting page, type the settings as follows and click OK to save the settings. Note that LAN1 is always for NAT usage. Vigor2925 Series User’s Guide...
Page 216 OK to save the settings. Open WAN>>Internet Access. Choose Static or Dynamic IP as Access Mode. Then click Details Page. In the configuration web page, type the settings as follows and click OK to save the settings. Vigor2925 Series User’s Guide...
Page 217 Now, a network connection via MPLS (Multiprotocol Label Switching) between LAN2 user and the Branch user is established successfully. Internet is not required for them. Vigor2925 Series User’s Guide...
Page 218 Start IP Address - Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 1st IP address of your router is 192.168.1.1, the starting IP address must be 192.168.1.2 or greater, but smaller than Vigor2925 Series User’s Guide...
Page 219 Edit – Click it to edit the selected MAC address. Cancel – Click it to cancel the job of adding, deleting and editing. When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...
Page 220: Static Route
The number (1 to 30) under Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Vigor2925 Series User’s Guide...
Page 221 Type the subnet mask for such static route. Use the drop down list to specify an interface for such static Network Interface route. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 222 Displays the destination address of the static route. Status Displays the status of the static route. Click any underline of index number to get the following page. Available settings are explained as follows: Item Description Enable Check it to enable this profile. Vigor2925 Series User’s Guide...
Page 223 1st subnet (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and continuously exchange of IP routing information with different subnets. Vigor2925 Series User’s Guide...
Page 224 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Click OK. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2925 Series User’s Guide...
Page 225: Vlan
The multi-subnet can let a small businesses have much better isolation for multi-occupancy applications. Go to LAN page and select VLAN. The following page will appear. Click Enable to invoke VLAN function. Below is an example page in Vigor2925n: Vigor2925 Series User’s Guide...
Page 226 Choose one of them to make the selected VLAN mapping Subnet to the specified subnet only. For example, LAN1 is specified for VLAN0. It means that PCs grouped under VLAN0 can get the IP address(es) that specified by the subnet. Vigor2925 Series User’s Guide...
Page 227 Note: Leave one VLAN untagged at least to prevent from not connecting to Vigor router due to unexpected error. Vigor2925 series features a hugely flexible VLAN system. In its simplest form, each of the Gigabit LAN ports can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated.
Page 228 Click OK to save the settings. The Vigor router also supports up to six private IP subnets on the LAN. Each can be independent (isolated) or common (able to communicate with each other). This is ideal for departmental or multi-occupancy applications. Vigor2925 Series User’s Guide...
Page 229: Bind Ip To Mac
Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below Select All Click this link to select all the items in the ARP table. Reorder the table based on the IP address. Sort Vigor2925 Series User’s Guide...
Page 230 Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. Vigor2925 Series User’s Guide...
Page 231: Lan Port Mirror
Select which ports are necessary to be mirrored for transmitting the packets. Mirrored Rx Port Select which ports are necessary to be mirrored for receiving the packets. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 232: Wired 802.1X
Check the box to enable LAN 802.1x function. 802.1x ports After enabling the function, simply specify the LAN port(s) to apply such function. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 233: Web Portal Setup
Display the number link which allows you to configure the profile. Display the content (Disable, URL Redirect or Message) of the Status profile. Interface Display the applied interface of the profile. Preview Open a preview window according to the configured settings. Vigor2925 Series User’s Guide...
Page 234 Force the user to click on the button to proceed – Check the box to force the user clicking on a special button to proceed the operation of web redirection. Vigor2925 Series User’s Guide...
Page 235: Load-Balance /Route Policy
Through dedicated interface (WAN/LAN/VPN), the data can be sent from the source IP to the destination IP.  Address Mapping. Allows you specify the outgoing WAN IP address (es) for an internal private IP address or a range of internal private IP addresses.  Priority. Vigor2925 Series User’s Guide...
Page 236 Display the priority of the selected profile in data transmission. Src IP Start Display the IP address for the start of the source IP. Src IP End Display the IP address for the end of the source IP. Vigor2925 Series User’s Guide...
Page 237 Dest IP End - Type the destination IP end for the specified WAN interface. If this field is blank, it means that all the destination IPs will be passed through the WAN interface. 3. Click Next to get the following page. Vigor2925 Series User’s Guide...
Page 238 4. After specifying the interface, click Next to get the following page. Available settings are explained as follows: Item Description Force NAT /Force It determines which mechanism that the router will use to Routing forward the packet to WAN. Vigor2925 Series User’s Guide...
Page 239 5. After choosing the mechanism, click Next to get the summary page for reference. 6. If there is no error, click Finish to complete wizard setting. Vigor2925 Series User’s Guide...
Page 240 WAN interface. Src IP End - Type the source IP end for the specified WAN interface. If this field is blank, it means that all the source IPs inside the LAN will be passed through the WAN Vigor2925 Series User’s Guide...
Page 241 Route Policy – Use the drop down list to choose an existed route policy profile. Gateway IP – Specific gateway is used only when you want to forward the packets to the desired gateway. Usually, Default Gateway is selected in default. Vigor2925 Series User’s Guide...
Page 242 When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...
Page 243 Note: The web user interface will be revised later. Example 1: In the following figure, a LAN to LAN VPN tunnel is built between DrayTek VPN router (e.g., Vigor2925 series) and the remote router. Firewall Router can receive all of the traffic coming from remote PC which wants to access into Internet;...
Page 244 To route the packets coming from the Firewall Router back to the remote router, access into the web user interface of the Firewall Router. Then, set “192.168.1.1/24” as the gateway IP address and set “172.16.3.0/24” as the destination IP address. Vigor2925 Series User’s Guide...
Page 245 Click any index number (e.g., #1 in this case). In the following web page, check Enable; type “192.168.1.10” as Src IP Range; type “213.57.89.100” as the Destination IP for the remote VPN server; and choose VPN as the Interface setting. Vigor2925 Series User’s Guide...
Page 246 Click OK to save the settings. Vigor2925 Series User’s Guide...
Page 247: Nat
192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Vigor2925 Series User’s Guide...
Page 248: Port Redirection
The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor2925 Series User’s Guide...
Page 249 Display the IP address of the internal host providing the service. Status Display if the profile is enabled (v) or not (x). Press any number under Index to access into next page for configuring port redirection. Available settings are explained as follows: Vigor2925 Series User’s Guide...
Page 250 80 to avoid conflict, such as 8925. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2925 Series User’s Guide...
Page 251: Dmz Host
LAN. Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption. DMZ Host allows a defined internal user to be totally exposed to the Internet, which usually helps some special applications such as Netmeeting or Internet Games etc. Vigor2925 Series User’s Guide...
Page 252 IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2925 Series User’s Guide...
Page 253 WAN2 interface, you will find them in Aux. WAN IP for your selection. Available settings are explained as follows: Item Description Check to enable the DMZ Host function. Enable Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Vigor2925 Series User’s Guide...
Page 254 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 255: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2925 Series User’s Guide...
Page 256 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2925 Series User’s Guide...
Page 257: Port Triggering
TCP: 86400 sec. UDP: 180 sec. IGMP: 10 sec. TCP WWW: 60 sec. TCP SYN: 60 sec. Available settings are explained as follows: Item Description Comment Display the text which memorizes the application of this Vigor2925 Series User’s Guide...
Page 258 Check to enable this entry. Choose the predefined service to apply for such trigger Service profile. Comment Type the text to memorize the application of this rule. Triggering Protocol Select the protocol (TCP, UDP or TCP/UDP) for such triggering profile. Vigor2925 Series User’s Guide...
Page 259 (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Incoming Port Type the port or port range for the incoming packets. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 260: Hardware Acceleration
Hardware Acceleration is also called PPA in DrayTek for it is based on Protocol Processing Engine (PPE) of Infinion. It can only support 128 sessions for network traffic (IN & OUT) with implementing three kinds of modes - Disable, Auto and Manual.
Page 261 For checking whether the rule of PPA is working or not, a user can login toVigor2925 series by using telnet. User can view how many sessions is transferring in each direction of PPA table after entering “ppa –v”. Vigor2925 Series User’s Guide...
Page 262: Firewall
It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2925 Series User’s Guide...
Page 263 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor2925 Series User’s Guide...
Page 264: General Setup
Instinctively as a secure firewall, Vigor router will reject these fragmented packets to prevent attack unless you enable “Accept large incoming fragmented UDP or ICMP Packets”. By checking this box, you can play these kinds of on-line games. If security concern is in higher Vigor2925 Series User’s Guide...
Page 265 IPv4 - To prevent remote client accessing into the PCs on LAN, check the box to make the incoming packets via IPv4 being blocked by such router. It is effective only for the packets routed but not for packets translated by NAT. Vigor2925 Series User’s Guide...
Page 266 Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Policy Route Choose the WAN interface for applying Policy Route. Vigor2925 Series User’s Guide...
Page 267 It will be sent to Syslog server. Please refer to section Syslog/Mail Alert for more detailed information. DNS Filter Select one of the DNS Filter profile settings (created in CSM>>DNS Filter) for applying with this router. Please set Vigor2925 Series User’s Guide...
Page 268 However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 269: Filter Setup
Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Vigor2925 Series User’s Guide...
Page 270 Set the direction of packet flow. It is for Data Filter only. Direction For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other LAN. Vigor2925 Series User’s Guide...
Page 271 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Vigor2925 Series User’s Guide...
Page 272 The default setting is 60000. Strict –Make the MAC address and IP address settings MAC Bind IP configured in IP Object for Source IP and Destination IP Vigor2925 Series User’s Guide...
Page 273 (created in CSM>> Web Content Filter) for applying with this router. Please set at least one profile for anti-virus in CSM>> Web Content Filter web page first. Or choose [Create New] from the drop down list in this page to create Vigor2925 Series User’s Guide...
Page 274 Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the Vigor2925 Series User’s Guide...
Page 275 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
Page 276 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2925 Series User’s Guide...
Page 277: Dos Defense
10 seconds. Enable UDP flood defense Check the box to activate the UDP flood defense function. Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router Vigor2925 Series User’s Guide...
Page 278 Check the box to activate the Block SYN fragment function. The Vigor router will drop any packets having SYN flag and more fragment bit set. Block Fraggle Attack Check the box to activate the Block fraggle Attack function. Vigor2925 Series User’s Guide...
Page 279 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2925 Series User’s Guide...
Page 280 After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 281: User Management
Note: Filter rules configured under Firewall usually are applied to the host (the one that the router installed) only. With user management, the rules can be applied to every user connected to the router with customized profiles. Vigor2925 Series User’s Guide...
Page 282: General Setup
You can use the default one, blank page or upload other image files (the size no mare than 524 × 352 pixel) to have an image of enterprise or have the effect of advertisement. Vigor2925 Series User’s Guide...
Page 283: User Profile
To set the user profile, please click any index number link to open the following page. Notice that profile 1 (admin) and profile 2 (Dial-In User) are factory default settings. Profile 2 is reserved for future use. Vigor2925 Series User’s Guide...
Page 284 Max User Login Such profile can be used by many users. You can set the limitation for the number of users accessing Internet with the conditions of such profile. The default setting is 0 which means Vigor2925 Series User’s Guide...
Page 285 Syslog. Please choose any one of the log items to take down relational records for the user(s). Pop Browser Tracking If such function is enabled, a pop up window will be displayed on the screen with time remaining for connection if Idle Vigor2925 Series User’s Guide...
Page 286 You can type in four sets of time schedule for your request. All Schedule Setup the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2925 Series User’s Guide...
Page 287 Default Time Quota – Type the value for the time manually. Default Data Quota – Type the value for the data manually. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 288: User Group
All the available user objects that you have created will be shown in this box. Notice that user object, Admin and Dial-In User are factory settings. User defined profiles will be numbered with 3, 4, 5 and so Vigor2925 Series User’s Guide...
Page 289: User Online Status
Profile Display the authority of the account. Display the login time that such user connects to the router Last Login Time last time. Expired Time Display the expired time of the network connection for the user. Vigor2925 Series User’s Guide...
Page 290: Objects Settings
Later, we can select that object/group that can apply it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address). Vigor2925 Series User’s Guide...
Page 291: Ip Object
Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2925 Series User’s Guide...
Page 292 Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. Vigor2925 Series User’s Guide...
Page 293 After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. Vigor2925 Series User’s Guide...
Page 294: Ip Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2925 Series User’s Guide...
Page 295: Ipv6 Object
You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2925 Series User’s Guide...
Page 296 Prefix Len Type the number (e.g., 64) for the prefix length of IPv6 address. Invert Selection If it is checked, all the IPv6 addresses except the ones listed above will be applied later while it is chosen. Vigor2925 Series User’s Guide...
Page 297: Ipv6 Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2925 Series User’s Guide...
Page 298: Service Type Object
Display the profile number that you can configure. Name Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. Vigor2925 Series User’s Guide...
Page 299 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 300: Service Type Group
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Vigor2925 Series User’s Guide...
Page 301: Keyword Object
Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2925 Series User’s Guide...
Page 302 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 303: Keyword Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2925 Series User’s Guide...
Page 304: File Extension Object
Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2925 Series User’s Guide...
Page 305 Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2925 Series User’s Guide...
Page 306: Sms/Mail Service Object
Display the service provider which offers SMS service. To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. Vigor2925 Series User’s Guide...
Page 307 Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 308 Display the name of this profile. It cannot be modified. Service Provider Type the website of the service provider. Type the URL string in the box under the filed of Service Provider. You have to contact your SMS provider to obtain the exact URL string. Vigor2925 Series User’s Guide...
Page 309 Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Vigor2925 Series User’s Guide...
Page 310 Type the port number for SMTP server. Sender Address Type the e-mail address of the sender. Check this box to use port 465 for SMTP server for some Use SSL e-mail server uses https as the transmission method. Vigor2925 Series User’s Guide...
Page 311: Notification Object
Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Display the name for such mail server profile. Profile Settings Display the category selected for such profile. Vigor2925 Series User’s Guide...
Page 312 Display the types that will be monitored. Status Display the status for the category. You can check the box you want to be monitored. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 313: Csm Profile
Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor2925 Series User’s Guide...
Page 314: App Enforcement Profile
Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Others displayed on this page. Each tab will bring out different items with supported versions that you can choose to disallow people using. Vigor2925 Series User’s Guide...
Page 315 APP. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Below shows the items which are categorized under Protocol. Vigor2925 Series User’s Guide...
Page 316 The items categorized under P2P ----- Vigor2925 Series User’s Guide...
Page 317 The items categorized under Others ----- Vigor2925 Series User’s Guide...
Page 318: Appe Signature Upgrade
The APPE Enforcement Profile adopted by Vigor router will be treated as the APPE signature. DrayTek will periodically upgrade versions for all of the APPs supported by Vigor router. However, it might be inconvenient for users to upgrade the APP version one by one. This feature is specially designed to offer a quick method to execute APP version upgrade.
Page 319 Upgrade Automatically Scheduled Update - Check the box to make Vigor router upgrading the APPE signature based on the schedule configured here. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 320: Url Content Filter Profile
Each item is explained as follows: Item Description Set to Factory Default Clear all profiles. Profile Display the number of the profile which allows you to click to set different policy. Name Display the name of the URL Content Filter Profile. Vigor2925 Series User’s Guide...
Page 321 For this one, the router will process the packages with the conditions set below for URL first, then Web feature second. Either: Web Feature First –When all the packages Vigor2925 Series User’s Guide...
Page 322 If the web pages do not match with the keyword set here, it will be processed with reverse action. Group/Object Selections – The Vigor router provides several frames for users to define keywords and each frame Vigor2925 Series User’s Guide...
Page 323 Upload – Check the box to block the file upload by way of web page. File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Vigor2925 Series User’s Guide...
Page 324: Web Content Filter Profile
Please refer to section of creating MyVigor account. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
Page 325 Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Click this link to do the verification. Test a site to verify...
Page 326 If you have and activate another web content filter license, the items will be changed simultaneously. All of the configuration made for web content filter will be deleted automatically. Therefore, please backup your data before you change the web content filter license. Vigor2925 Series User’s Guide...
Page 327 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 328: Dns Filter Profile
It displays a list of different DNS filter profiles (with specified WCF and UCF). Click the profile link to open the following page. Then, type the name of the profile and specify WCF/UCF based on your requirement. Vigor2925 Series User’s Guide...
Page 329 Administration Message Type the words or sentences which will be displayed when a web page is blocked by Vigor router. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 330: Bandwidth Management
To activate the function of limit session, simply click Enable and set the default session limit. Available settings are explained as follows: Item Description Enable - Click this button to activate the function of limit Session Limit session. Disable - Click this button to close the function of limit Vigor2925 Series User’s Guide...
Page 331 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 332: Bandwidth Limit
Disable - Click this button to close the function of limit bandwidth. Default TX limit - Define the default speed of the upstream for each computer in LAN. Default RX limit - Define the default speed of the Vigor2925 Series User’s Guide...
Page 333 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2925 Series User’s Guide...
Page 334: Quality Of Service
The core routers in the backbone will do the same checking before executing treatments in order to ensure service-level consistency throughout the whole QoS-enabled network. Vigor2925 Series User’s Guide...
Page 335 Index – Display the class number that you can edit. Class Rule Name – Display the name of the class. Rule – Allow to configure detailed settings for the selected Class. Service Type – Allow to configure detailed settings for the Vigor2925 Series User’s Guide...
Page 336 There are four queues allowed for QoS control. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Vigor2925 Series User’s Guide...
Page 337 Check this and set the limited bandwidth ratio on the right Control field. This is a protection of TCP application traffic since UDP application traffic such as streaming video will exhaust lots of bandwidth. Outbound TCP ACK The difference in bandwidth between download and upload Vigor2925 Series User’s Guide...
Page 338 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2925 Series User’s Guide...
Page 339 All the packets of data will be divided with different levels and will be processed according to the level type by the system. Please assign one of the levels of the data for processing with QoS control. Vigor2925 Series User’s Guide...
Page 340 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. Vigor2925 Series User’s Guide...
Page 341 After finishing all the settings here, please click OK to save the configuration. By the way, you can set up to 10 service types. If you want to edit/delete an existed service type, please select the radio button of that one and click Edit/Delete for modification. Vigor2925 Series User’s Guide...
Page 342 For example, in the following illustration, the VoIP packets in LAN go into Vigor router without any header. However, when they go forward to the Server on ISP through Vigor router, all of the packets are tagged with AF (configured in Bandwidth >>QoS>>Class) automatically. Vigor2925 Series User’s Guide...
Page 343: Applications
Enable the Function and Add a Dynamic DNS Account Assume you have a registered domain name from the DDNS provider, say hostname.dyndns.org, and an account with username: test and password: test. In the DDNS setup menu, check Enable Dynamic DNS Setup. Vigor2925 Series User’s Guide...
Page 344 Enable Dynamic Check this box to enable the current account. If you did DNS Account check the box, you will see a check mark appeared on the Active column of the previous web page in step 2). Vigor2925 Series User’s Guide...
Page 345 Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. Vigor2925 Series User’s Guide...
Page 346: Lan Dns / Dns Forwarding
FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2925 series will respond the specified private IP address.
Page 347 Delete – Click it to remove the setting. IP Address List The IP address listed here will be used for mapping with the domain name specified above. In general, one domain name maps with one IP address. If required, you can configure Vigor2925 Series User’s Guide...
Page 348 LAN DNS automatically. Domain Name Type the domain name for such profile. Type the IP address of the DNS server you want to use for DNS Server IP Address DNS forwarding. Click OK button to save the settings. Vigor2925 Series User’s Guide...
Page 349: Schedule
Set to Factory Default Clear all profiles and recover to factory settings. Index Click the number below Index to access into the setting page of schedule. Status Display if this schedule setting is active or inactive. Vigor2925 Series User’s Guide...
Page 350 Specify the duration (or period) for the schedule. Idle Timeout How often -Specify how often the schedule will be applied Once -The schedule will be applied just once Weekdays -Specify which days in one week should perform the schedule. Vigor2925 Series User’s Guide...
Page 351 Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Vigor2925 Series User’s Guide...
Page 352: Radius/Tacacs
The maximum length of the shared secret you can set is 36 characters. Confirm Shared Secret Re-type the Shared Secret for confirmation. After finished the above settings, click OK button to save the settings. Vigor2925 Series User’s Guide...
Page 353 Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. After finished the above settings, click OK button to save the settings. Vigor2925 Series User’s Guide...
Page 354: Active Directory/ Ldap
Anonymous – Perform a search action first with Anonymous account then do the bind authentication.  Regular Mode– Mostly it is the same with anonymous mode. The different is that, the server will firstly check if you have the search authority. Vigor2925 Series User’s Guide...
Page 355 After finished the above settings, click OK button to save the settings. You can configure eight AD/LDAP profiles. These profiles would be used with User Management for different purposes in management. Click any index number link to open the following page. Vigor2925 Series User’s Guide...
Page 356 AD/LDAP Server to assist you finish the setup. After finished the above settings, click OK to save and exit this page. A new profile has been created. Vigor2925 Series User’s Guide...
Page 357: Upnp
Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2925 Series User’s Guide...
Page 358: Igmp
This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P5 It indicates the LAN port used for the multicast group. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 359: Wake On Lan
MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2925 Series User’s Guide...
Page 360: Sms / Mail Alert Service
SMS. Schedule Type the schedule number that the SMS will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 361 Schedule Type the schedule number that the notification will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 362: Bonjour
Below shows an example for applying the bonjour feature that Vigor router can be used as the FTP server. 1. Here, we use Firefox and DNSSD to discover the service in such case. Therefore, just ensure the Bonjour client program and DNSSD for Firefox have been installed on the computer. Vigor2925 Series User’s Guide...
Page 363 (DNSSD) and see the following results. 3. Open System Maintenance>>Management. Type a name (e.g., Vigor Router) as the Router Name and click OK. 4. Next, open Applications>>Bonjour. Check the service that you want to use via Bonjour. Vigor2925 Series User’s Guide...
Page 364 Vigor router (based on Bonjour protocol) is ready to be used as a printer server, FTP server, SSH Server, Telnet Server, and HTTP Server. 6. Now, any page or document can be printed out through Vigor router (installed with a printer). Vigor2925 Series User’s Guide...
Page 365: Vpn And Remote Access
Secure connection between Teleworker, staff on business trip and main office  Exchange data between remote office and main office  POS between chain store and headquarters Below shows the menu items for VPN and Remote Access. Vigor2925 Series User’s Guide...
Page 366: Remote Access Control
This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Available settings are explained as follows: Item Description Dial-In PPP PAP Only - elect this option to force the router to Authentication authenticate dial-in users with the PAP protocol. PAP/CHAP/MS-CHAP/MS-CHAPv2 - Selecting this Vigor2925 Series User’s Guide...
Page 367 Simply check the one you want to enable the PPP authentication by LDAP server profiles. However, if there is no profile listed, simply click the link of PPTP LDAP Profile to create/add some new LDAP profiles you want. Vigor2925 Series User’s Guide...
Page 368: Ipsec General Setup
AH it receives. Encapsulating Security Payload (ESP) is a security protocol that provides data confidentiality and protection with optional authentication and replay detection service. Vigor2925 Series User’s Guide...
Page 369 High (ESP) - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 370: Ipsec Peer Identity
Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2925 Series User’s Guide...
Page 371 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 372: Remote Dial-In User
Index page of Remote Dial-in User. User Display the username for the specific dial-in user of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Active Check the box to activate such profile. Vigor2925 Series User’s Guide...
Page 373 IPSec Tunnel - Allow the remote dial-in user to make an IPSec VPN connection through Internet. L2TP with IPSec Policy - Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You Vigor2925 Series User’s Guide...
Page 374 Secret – Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6). Chose one of the subnet selections for such VPN profile. Subnet Assign Static IP Address – Please type a static IP address for the subnet you specified. Vigor2925 Series User’s Guide...
Page 375: Lan To Lan
L2TP by itself or over IPSec) and corresponding security methods, etc. The router supports up to 32 VPN tunnels simultaneously. The following figure shows the summary table. The following figure shows the summary table according to the item (All/Trunk) selected for View. Vigor2925 Series User’s Guide...
Page 376 Click to clear all indexes. Name Indicate the name of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Active V – means the profile has been enabled. X – means the profile has not been enabled. Vigor2925 Series User’s Guide...
Page 377 Description Common Settings Profile Name – Specify a name for the profile of the LAN-to-LAN connection. Enable this profile - Check here to activate this profile. VPN Dial-Out Through - Use the drop down menu to Vigor2925 Series User’s Guide...
Page 378 Dial-Out- initiator only  Dial-In- responder only. Always On-Check to enable router always keep VPN connection. Idle Timeout: The default value is 300 seconds. If the connection has been idled over the value, the router will Vigor2925 Series User’s Guide...
Page 379 PPTP or L2TP with or without IPSec policy above. VJ Compression is used for TCP/IP protocol header compression. Normally set to On to improve bandwidth utilization. IKE Authentication Method - This group of fields is applicable for IPSec Tunnels and L2TP with IPSec Policy. Vigor2925 Series User’s Guide...
Page 380 Advanced - Specify mode, proposal and key life of each IKE phase, Gateway, etc. The window of advance setup is shown as below: IKE phase 1 mode -Select from Main mode and Aggressive mode. The ultimate outcome is to exchange Vigor2925 Series User’s Guide...
Page 381 Index(1-15) - Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Vigor2925 Series User’s Guide...
Page 382 Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.  Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Vigor2925 Series User’s Guide...
Page 383 By default, this option is active.  High- Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and Vigor2925 Series User’s Guide...
Page 384 More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Masks through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. Vigor2925 Series User’s Guide...
Page 385 Advanced – Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote Vigor2925 Series User’s Guide...
Page 386 Virtual IP Mapping – A pop up dialog will appear for you to specify the local IP address and the mapping virtual IP address. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 387: Vpn Trunk Management
VPN Tunnels disconnected. Users do not need to reconnect with setting TCP/UDP Service Port again. The VPN Load Balance function can keep the transmission for internal data on tunnel stably Vigor2925 Series User’s Guide...
Page 388 Dial-in mode (for call direction) in LAN-to-LAN. Type - Display the connection type for that profile, such as IPSec, PPTP, L2TP, L2TP over IPSec (NICE), L2TP over IPSec(MUST) and so on. Member2 - Display the dial-out profile selected from the Vigor2925 Series User’s Guide...
Page 389 IPSec(MUST) and so on. Member2 - Display the dial-out profile selected from the Member2 drop down list below. Advanced – This button is only available when there is one or more profiles created in this page. Vigor2925 Series User’s Guide...
Page 390 The corresponding members (LAN-to-LAN profiles) grouped in such new VPN TRUNK – VPN Backup mechanism profile will be locked. The profiles in LAN-to-LAN will be displayed in red. VPN TRUNK – VPN Load Balance mechanism profile will be locked. The Vigor2925 Series User’s Guide...
Page 391 Enable radio button; type a name for such profile (e.g., 071023); choose one of the LAN-to-LAN profiles from Member1 drop down list; choose one of the LAN-to-LAN profiles from Member2 drop down list; and click Add at last. Vigor2925 Series User’s Guide...
Page 392 Peer GRE IP. See the following graphic for an example. Later, on peer side (as VPN Client): please type 192.168.50.100 in the field of My GRE IP and type IP address of the server (192.168.50.200) in the field of Peer GRE IP. Vigor2925 Series User’s Guide...
Page 393 (10Mbps/100Mbps) and switch with fixed value ratio (3:7) for packet transmission. If the transmission rate for packets on both sides of the tunnels is the same, the value of Auto Weighted should be 5.5. According to Speed Ratio allows Vigor2925 Series User’s Guide...
Page 394 Port also fits the number here, such binding tunnel table can be established. Other means when the source IP, destination IP, destination port and fragment conditions match with the settings specified here with different TCP Service Port/UDP Service Port/ICMP/IGMP, such binding tunnel table can be established. Vigor2925 Series User’s Guide...
Page 395 Type Binding Src IP range (Start and End) and Binding Des IP range (Start and End). Choose TCP/UDP, IGMP/ICMP or Other as Binding Protocol. Detailed Settings for Advanced Backup Available settings are explained as follows: Vigor2925 Series User’s Guide...
Page 396: Connection Management
LAN-to-LAN (with Index number and VPN Server IP address). The VPN connection built by General Mode does not support VPN backup function. Backup Mode - This filed displays the profile name saved in VPN TRUNK Management (with Index number and Vigor2925 Series User’s Guide...
Page 397: Certificate Management
Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor2925 Series User’s Guide...
Page 398 Then click GENERATE again. Note: Please be noted that “Common Name” must be configured with rotuer’s WAN IP or domain name. After clicking GENERATE, the generated information will be displayed on the window below: Vigor2925 Series User’s Guide...
Page 399 Upload Local Certificate It allows users to import the certificate which is generated by Vigor router and signed by CA server. If you have done well in certificate generation, the Status of the certificate will be shown as “OK”. Vigor2925 Series User’s Guide...
Page 400 Private Key keys. And the password is needed if the private key is encrypted. REFRESH Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. Vigor2925 Series User’s Guide...
Page 401: Trusted Ca Certificate
CA to save time and provide convenience for general user. Later, such root CA generated by DrayTek server can perform the issuing of local certificate. Note: Root CA can be deleted but not edited. If you want to modify the settings for a Root CA, please delete the one and create another one by clicking Create Root CA.
Page 402 For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2925 Series User’s Guide...
Page 403: Certificate Backup
Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Confirm password. Also, you can use Restore to retrieve these two settings to the router whenever you want. Vigor2925 Series User’s Guide...
Page 404: Central Vpn Management
Note: Such menu can manage the CPE connected through WAN only. This page is used to configure settings which will be used by the clients to register to such Vigor router. Click General Settings and IPsec VPN Settings to configure the basic settings for CVM mechanism. Vigor2925 Series User’s Guide...
Page 405 Password Type the password for the user. Polling Interval Type the time value (unit is second). The range is from 60 ~ 86400. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 406 Encryption Type Choose one of the selections as the encryption type. Local Subnet Type the IP address and subnet mask of local host. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 407: Cpe Management
All the CPEs managed by Vigor2925 series can be seen with icons from this page Before using such feature, make sure the CVM port has been enabled and configured properly. This page allows you to manage the CPEs connected to Vigor2925 series.
Page 408 Delete – To disconnect the management of any CPE, click the CPE icon you want and click the Delete button. Note: Double-clicking the CPE icon also can pop up the Managed Device Detail window. However, you cannot Vigor2925 Series User’s Guide...
Page 409 Unmanaged Devices List Any device (CPE) which follows the standard of TR-069 can be configured and can be detected by Vigor2925 series automatically. Only eight remote devices can be managed by Vigor2925 at one time. Therefore, other remote devices detected by Vigor2925 series might not be displayed in such field.
Page 410 Click the icon to see the content inside the USB disk. Set to Factory Default Click to clear all indexes. Index Display the number of the profile that you can edit. Display the name of the maintenance profile. Profile Name Vigor2925 Series User’s Guide...
Page 411 Check it to enable such profile. The drop down list will display all the CPE devices detected Device Name by Vigor2925 series. Choose the one which will be applied with such new created profile. Action Type There are three actions for you to choose for such profile.
Page 412 Click Select to locate the file you want to save, restore or File Name upgrade for CPE. Index in Schedule Vigor2925 series will perform the specified action to the selected CPE based on the schedule configured here. Specify one or two schedule profiles (represented by number) here.
Page 413: Vpn Management
An easy and quick method is offered to configure VPN settings for building VPN connection automatically between Vigor2925 series (treated as VPN server) and other Vigor router (treated as CPE device, i.e., VPN client).  Page without CPE connected ...
Page 414 Display the dial-in type and the authentication method. Remote IP Display the IP address of the remote CPE and the interface. Virtual Network Display the IP address and subnet mask of Vigor2925 series. Tx Pkts Display the number of the transmitted packets. Tx Rate(Bps) Display the number of the transmitted rate.
Page 415: Log & Alert
Vigor2925 series. Action Type Display the action that Vigor2925 series will perform for the managed CPE. Message Display the information for each event. The Alert page offers brief information to identify the CPE connected to Vigor2925 series. Vigor2925 Series User’s Guide...
Page 416: Central Ap Management
In which, 0/64 means that up to 64 clients are allowed to connect to the access point. But, now no one connects to the access point. The number displayed on the left side means 2.4GHz; and the Vigor2925 Series User’s Guide...
Page 417: Wlan Profile
Disable means only SSID1 is active. WLAN ACL Display the name of the access control list. Rate Control Display the upload and/or download transmission rate. It can copy settings from an existing WLAN profile to another Clone Vigor2925 Series User’s Guide...
Page 418 Simply choose the device you want from Existing Device field. Click >> to move the device to Selected Device field. Then, click OK. The selected WLAN profile will be applied to the selected access point immediately. Later the access point will reboot. Vigor2925 Series User’s Guide...
Page 419 1. Check the box on the left side of the selected profile. 2. Click the Edit button to display the following page. 3. After finished the general settings configuration, click Next to open the following page for 2.4G wireless security settings. Vigor2925 Series User’s Guide...
Page 420 4. After finished the above web page configuration, click Next to open the following page for 5G wireless security settings. 5. When you finished the above web page configuration, click Finish to exit and return to the first page. The modified WLAN profile will be shown on the web page. Vigor2925 Series User’s Guide...
Page 421: Ap Maintenance
Simply click << or >> to move the device(s) between Select Device and Selected Device areas. Selected Device Display the access points that will be applied by such function after clicking OK. After finishing all the settings here, please click OK to perform the action. Vigor2925 Series User’s Guide...
Page 422: Traffic Graph
The horizontal axis represents time; the vertical axis represents the transmission rate (in kbps). It displays the access point scanned by Vigor router. In which, the APs will be classified with friendly APs, rogue APs and unknown APs in different colors. Vigor2925 Series User’s Guide...
Page 423 Specify the access points which are classified under each type. Refresh Min(s) Use the drop down list to specify the time to refresh the web page. Refresh Click such link to refresh the web page immediately. Display the channel used by the detected access point. Vigor2925 Series User’s Guide...
Page 424 AP is friendly and which one is Rogue respectively. Follow the steps below to perform the classification of access points. 1. Click the radio button on one of the access points. In this case, DrayTek-LAN-A is selected. 2. Later, some options will appear on the bottom of the page.
Page 425 AP, simply choose the one and click Delete. Later, the page will refresh and the one will be classified as Unknown. 3. Click OK to save the settings. The following figure shows the APs classified and displayed in different colors. Vigor2925 Series User’s Guide...
Page 426: Load Balance
By signal Strength - When the access point is overload (e.g., reaching the limit of station number or limit of network traffic), it will terminate the network connection of the client’s Vigor2925 Series User’s Guide...
Page 427: Function Support List
Click the Client tab to list the AP management functions that the Access Points support under different firmware versions. Click the Server tab to list the AP management functions that Vigor router supports under different firmware versions. Vigor2925 Series User’s Guide...
Page 428: Voip
Then, both parties’ SIP proxies will forward the sequence of messages to caller to establish the session. If you both register to the same SIP Registrar, then it will be illustrated as below: Vigor2925 Series User’s Guide...
Page 429 QoS Assurance assists to assign high priority to voice traffic via Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor2925 Series User’s Guide...
Page 430: General Setting
IP of local router), you can check this box to solve this problem. Dynamic RTP Port Start - Specifies the start port for RTP stream. The default value is 10050. Dynamic RTP Port End - Specifies the end port for RTP Vigor2925 Series User’s Guide...
Page 431 Note: If the incoming or outgoing calls do not match any entry on the phonebook, the router will try to make the call "being protected". But, if the call ends up "unprotected"(e.g. peer side does not support ZRTP+SRTP), the router will not play out a warning message. Vigor2925 Series User’s Guide...
Page 432: Sip Accounts
Display the codec type for the account. Ring Port Specify which port will ring when receiving a phone call. Show the status for the corresponding SIP account. R means Status such account is registered on SIP server successfully. – Vigor2925 Series User’s Guide...
Page 433 Some SIP server allows user to use VoIP function without registering. For such server, please check the box of Call without Registration. Choosing Auto is recommended. The system will select a proper way for your VoIP call. Vigor2925 Series User’s Guide...
Page 434 IP address as the NAT transversal support. Nortel – If the soft-switch that you use supports Nortel solution, you can choose this option. Call Forwarding There are four options for you to choose. Disable is to close Vigor2925 Series User’s Guide...
Page 435 Single Codec – If the box is checked, only the selected Codec will be applied. The amount of data contained in a single packet. The default Packet Size value is 20 ms, which means the data packet will contain 20 ms voice information. Vigor2925 Series User’s Guide...
Page 436: Dialplan
“speed-dial” Phone Number. There are total 60 index entries in the phonebook for you to store all your friends and family members’ SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor2925 series for setting the phone book.
Page 437 And when the VoIP phone is switched into the PSTN phone, the telecom co. might charge you for the connection fee. Please type in backup phone number for this VoIP phone setting. ZRTP+SRTP - It allows users to have encrypted RTP Secure Phone Vigor2925 Series User’s Guide...
Page 438 Add - When you choose this mode, the OP number will be added before the match prefix number for calling out through the specific route. Strip - When you choose this mode, the partial or whole Vigor2925 Series User’s Guide...
Page 439 VoIP>> Phone Settings. Move UP /Move Down Click the link to move the selected entry up or down. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 440 For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Such control also can be done based on preconfigured schedules. Click any index number to display the call barring setup page. Vigor2925 Series User’s Guide...
Page 441 All means all the phone calls will be blocked with such mechanism. Index (1-15) in Schedule Enter the index of schedule profiles to control the call barring according to the preconfigured schedules. Refer to section Applications>>Schedule for detailed configuration. Vigor2925 Series User’s Guide...
Page 442 Dial the number typed in this field to forward all the Ans][Act] incoming calls to the specified place while there is no answer of the connected phone. Do Not Disturb [Act] Dial the number typed in this field to invoke the function of Vigor2925 Series User’s Guide...
Page 443 PSTN number available for dial whenever you need and type the number in the field of phone number for PSTN relay. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 444: Phone Settings
SIP account for each phone port. DTMF Relay Display DTMF mode that configured in the advanced settings page of Phone Index. Click the number link for Phone port, you can access into the following page for configuring Phone settings. Vigor2925 Series User’s Guide...
Page 445 ID type automatically. Or you can adjust tone settings manually if you choose User Defined. TOn1, TOff1, TOn2 and TOff2 mean the cadence of the tone pattern. TOn1 and TOn2 represent sound-on; TOff1 and TOff2 represent the sound-off. Vigor2925 Series User’s Guide...
Page 446 If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Also, you can specify each field for your necessity. It is Vigor2925 Series User’s Guide...
Page 447 “+” can be replaced by “00”. Then the above phone number will become 008865972727. When the callee receives such number, he can use re-dial function to dial back to the caller. Vigor2925 Series User’s Guide...
Page 448: Status
ACTIVE-Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. PeerID The present in-call or out-call peer ID (the format may be IP or Domain). Elapse(hh:mm:ss) The format is represented as hours:minutes:seconds. Vigor2925 Series User’s Guide...
Page 449: Wireless Lan(2.4Ghz/5Ghz)
Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router. The General Settings will set up the information of this wireless network, including its SSID as identification, located channel etc. Vigor2925 Series User’s Guide...
Page 450 WPA (Wi-Fi Protected Access), the most dominating security mechanism in industry, is separated into two categories: WPA-personal or called WPA Pre-Share Key (WPA/PSK), and WPA-Enterprise or called WPA/802.1x. Vigor2925 Series User’s Guide...
Page 451 The following sections explain setting for wireless LAN. Here we take menu items under Wireless LAN (2.4 GHz) as the examples. The differences for the settings between 2.4 GHz and 5 GHz will be pointed out. Vigor2925 Series User’s Guide...
Page 452: General Setup
Check the box to enable wireless function. Mode 2.4GHz in “n”, “n-plus” and “ac” model: At present, the router can connect to 11g Only, 11n Only(2.4 GHz), Mixed (11b+11g), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mixed (11b+11g+11n) mode. Vigor2925 Series User’s Guide...
Page 453 If you have no idea of choosing the frequency, please select Auto to let system determine for you. 2.4GHz in “n”, “n-plus” and “ac” model: For 5 GHz in “n” and “n-plus” model: Vigor2925 Series User’s Guide...
Page 454 Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Vigor2925 Series User’s Guide...
Page 455: Security
PSK value for connection. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Available settings are explained as follows: Item Description Vigor2925 Series User’s Guide...
Page 456 Pre-Shared Key (PSK) - Either 8~63 ASCII characters, such as 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, Vigor2925 Series User’s Guide...
Page 457: Access Control
Item Description Enable Mac Address Select to enable the MAC Address filter for wireless LAN Filter identified with SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be Vigor2925 Series User’s Guide...
Page 458: Wps
Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time. He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. Vigor2925 Series User’s Guide...
Page 459 Start PBC button or using PIN Code.  On the side of Vigor2925 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card.
Page 460 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2925 Series User’s Guide...
Page 461: Wds
In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Vigor2925 Series User’s Guide...
Page 462 Click WDS from Wireless LAN menu. The following page will be shown. Available settings are explained as follows: Item Description Vigor2925 Series User’s Guide...
Page 463 Disable to cancel this function. It allows user to send “hello” message to peers. Yet, it is Status valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 464: Advanced Setting
Such channel can increase the performance for data transit. Guard Interval It is to assure the safety of propagation delays and reflections for the sensitive digital data. If you choose auto Vigor2925 Series User’s Guide...
Page 465 To apply WMM parameters for wireless data transmission, WMM Capable please click the Enable radio button. APSD Capable The default setting is Disable. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 466: Ap Discovery
AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2925 Series User’s Guide...
Page 467: Station List
“1 day”. Thus, the guest can finish his job within one hour and will not occupy the wireless network for a long time. Note: Up to 300 Wireless Station records are supported by Vigor router. Vigor2925 Series User’s Guide...
Page 468 SSID will be listed on Station Control List. Control List WEB Portal Setup Click it to access in to LAN>>Web Portal Setup page for modifying the settings if required. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 469: Ssl Vpn
Otherwise, choose Self-signed to use the router’s built-in default certificate. The default certificate can be used in SSL VPN server and HTTPS Web Proxy. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 470: Ssl Web Proxy
Available settings are explained as follows: Item Description Type name of the profile. The length of the name is limited to Name 15 characters. Type the address (function variation or IP address) or path of the proxy server. Vigor2925 Series User’s Guide...
Page 471: Ssl Application
Display the type of the service selected, e.g., VNC/RDP/SMB. Active Display current status (active or inactive) of the selected profile. To create a new SSL application profile: 1. Click number link under Index filed to set detailed configuration. Vigor2925 Series User’s Guide...
Page 472 SSL VPN tunnel. Scaling If you choose VNC, you have to choose the percentage (100%, 80%, 60%) for such application. Screen Size If you choose RDP, you have to choose the screen size for Vigor2925 Series User’s Guide...
Page 473 3. Enter the required information. 4. After finished the above settings, click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 474: User Account
With SSL VPN, Vigor2925 series let teleworkers have convenient and simple remote access to central site VPN. The teleworkers do not need to install any VPN software manually. From regular web browser, you can establish VPN connection back to your main office even in a guest network or web cafe.
Page 475 Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.  Must -Specify the IPSec policy to be definitely applied on the L2TP connection. Vigor2925 Series User’s Guide...
Page 476 Check this box to make the authentication with mOTP One-Time Passwords function. (mOTP) PIN Code – Type the code for authentication (e.g, 1234). Secret – Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6). Vigor2925 Series User’s Guide...
Page 477 Local ID - Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 478: User Group
Click to clear all indexes. Index Display the number link of the profile. Name Display the name of the group profile. Click any index number link to open the following page for detailed configuration. Available settings are explained as follows: Vigor2925 Series User’s Guide...
Page 479 If the above three options are enabled, the system will do the authentication based on them in sequence. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 480: Online User Status
If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into DrayTek SSL VPN portal interface. Next, users can open SSL VPN>> Online Status to view logging status of SSL VPN.
Page 481: Usb Application
Vigor router, please make sure the memory format for the USB storage disk is FAT16 or FAT32. It is recommended for you to use FAT32 for viewing the filename completely (FAT16 cannot support long filename). Vigor2925 Series User’s Guide...
Page 482 ; : " < > * + = \ | ?. Workgroup Name – Type a name for the workgroup. Host Name – Type the host name for the router. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 483: Usb User Management
USB storage disk in anonymity. Later, you can open FTP client software and type the username specified here for accessing into USB storage disk. The length of the name is limited to 11 characters. Vigor2925 Series User’s Guide...
Page 484 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB storage disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor2925 Series User’s Guide...
Page 485: File Explorer
Click this icon to add a new folder. Create Current Path Display current folder. Upload Click this button to upload the selected file to the USB storage disk. The uploaded file in the USB diskette can be shared for other user through FTP. Vigor2925 Series User’s Guide...
Page 486: Usb Device Status
Username It displays the username that user uses to login to the FTP server. When you insert USB storage disk into the Vigor router, the system will start to find out such device within several seconds. Vigor2925 Series User’s Guide...
Page 487: Temperature Sensor
A USB Thermometer is now available. It complements your installed DrayTek router installations that will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating. During summer in particular, it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures.
Page 488: Modem Support List
Below shows an example of temperature graph: Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router. Vigor2925 Series User’s Guide...
Page 489: Smb Client Support List
SMB Client Support List provides the test status information for applications with file sharing operated under different platforms. Vigor2925 Series User’s Guide...
Page 490: System Maintenance
Below shows the menu items for System Maintenance. The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Vigor2925 Series User’s Guide...
Page 491 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. Vigor2925 Series User’s Guide...
Page 492: 476
Last Inform Response Time – Display the time that VigorACS server made a response while receiving Inform message from CPE last time. CPE Client Such information is useful for Auto Configuration Server. Vigor2925 Series User’s Guide...
Page 493 Gateway. Please type a number as the maximum period. A value of “-1” indicates that no maximum period is specified. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 494: Administrator Password
This feature allows other user in LAN who can access into the web user interface with the same privilege of the administrator. Local User – Check the box to enable the local user configuration. Local User List – It displays the username of the local user. Vigor2925 Series User’s Guide...
Page 495 LDAP Profile Setup. LDAP Profile Setup – It allows you to create a new LDAP profile. When you click OK, the login window will appear. Please use the new password to access into the web user interface again. Vigor2925 Series User’s Guide...
Page 496: User Password
Below shows an example for accessing into User Operation with User Password. 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. Vigor2925 Series User’s Guide...
Page 497 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2925 Series User’s Guide...
Page 498 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Note: Setting in User Mode can be configured as same as in Admin Mode. Vigor2925 Series User’s Guide...
Page 499: Login Page Title
Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Type words or sentences here. It will be displayed for Welcome Message and bulletin message.
Page 500 Below shows an example of login customization with the information typed in Login Description and Bulletin. Vigor2925 Series User’s Guide...
Page 501: Configuration Backup
Support Model List Web configuration file from other Vigor router can be applied to Vigor2925 series. At present, only the configuration file of Vigor2920 is accepted for Vigor2925. This field displays model name(s) and firmware which web Vigor2925 Series User’s Guide...
Page 502 Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Vigor2925 Series User’s Guide...
Page 503 Click Choose File button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2925 Series User’s Guide...
Page 504: Syslog/Mail Alert
VPN, User Access, WAN, Router/DSL information to Syslog. AlertLog Setup Check Enable to activate function of alert log. AlertLog Port - Type the port number for alert log. The default setting is 514. Vigor2925 Series User’s Guide...
Page 505 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2925 Series User’s Guide...
Page 506 Vigor2925 Series User’s Guide...
Page 507: Time And Date
Check the box to enable the daylight saving. Such feature is available for certain area. Advanced – Click it to open a pop up dialog. Use the default time setting or set user defined time for your requirement. Vigor2925 Series User’s Guide...
Page 508: Snmp
DES) and authentication method (support MD5 and SHA) for the management needs. Available settings are explained as follows: Item Description Enable SNMP Agent Check it to enable this function. Get Community Set the name for getting community by typing a proper Vigor2925 Series User’s Guide...
Page 509 Privacy Algorithm Choose one of the methods listed below as the privacy algorithm. Privacy Password Type a password for privacy. The maximum length of the text is limited to 23 characters. Click OK to save these settings. Vigor2925 Series User’s Guide...
Page 510: Management
Available settings are explained as follows: Item Description Router Name Type in the router name provided by ISP. Default: Disable If it is enabled, the function of auto-logout for web user Auto-Logout interface will be disabled. Vigor2925 Series User’s Guide...
Page 511 SmartVPN Client, you may still need to enable SSL 3.0 to make sure you can connect, however, it's not recommended. CVM Access Control CVM Port – Check the box to enable such port setting. CVM SSL Port – Check the box to enable such port setting. Vigor2925 Series User’s Guide...
Page 512 A maximum of three IPs/subnet masks is allowed. IPv6 Address /Prefix Length- Indicate the IP address(es) allowed to login to the router. After finished the above settings, click OK to save the configuration. Vigor2925 Series User’s Guide...
Page 513: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2925 Series User’s Guide...
Page 514: Firmware Upgrade
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 515: Activation
The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. Vigor2925 Series User’s Guide...
Page 516: Diagnostics
Below shows the successful activation of Web Content Filter: Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. Vigor2925 Series User’s Guide...
Page 517: Dial-Out Triggering
(e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2925 Series User’s Guide...
Page 518: Routing Table
Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2925 Series User’s Guide...
Page 519: Arp Cache Table
The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Vigor2925 Series User’s Guide...
Page 520: Dhcp Table
Click Diagnostics and click DHCP Table to open the web page. Available settings are explained as follows: Item Description Index It displays the connection item number. IP Address It displays the IP address assigned by this router for specified PC. Vigor2925 Series User’s Guide...
Page 521: Nat Sessions Table
It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. Vigor2925 Series User’s Guide...
Page 522: Dns Cache Table
Click OK to enable such function. It means when the TTL value of each DNS query reaches the threshold of the value specified here, the corresponding record will be deleted from router’s Cache automatically. Vigor2925 Series User’s Guide...
Page 523: Ping Diagnosis
Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Ping to Use the drop down list to choose the destination that you want to ping. Vigor2925 Series User’s Guide...
Page 524: Data Flow Monitor
Data Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Vigor2925 Series User’s Guide...
Page 525 RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Vigor2925 Series User’s Guide...
Page 526 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2925 Series User’s Guide...
Page 527: Traffic Graph
WAN1/WAN2/WAN3/WAN4 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2925 Series User’s Guide...
Page 528: Trace Route
Available settings are explained as follows: Item Description IPv4 / IPv6 Click one of them to display corresponding information for Trace through Use the drop down list to choose the interface that you want to ping through. Vigor2925 Series User’s Guide...
Page 529: Syslog Explorer
Click this link to save the data as a file. Click this link to refresh this page manually. Refresh Clear Click this link to clear information on this page. Display Mode There are two modes for you to choose. Vigor2925 Series User’s Guide...
Page 530: Ipv6 Tspc Status
Display the information for each event. IPv6 TSPC status web page could help you to diagnose the connection status of TSPC. If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Vigor2925 Series User’s Guide...
Page 531: External Devices
You can change the device name if required or remove the information for off-line device whenever you want. When you finished the configuration, click OK to save it. Note: Only DrayTek products can be detected by this function. Vigor2925 Series User’s Guide...
Page 532: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2925 Series User’s Guide...
Page 533: Checking If The Network Connection Settings On Your Computer Is Ok Or Not
Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. Vigor2925 Series User’s Guide...
Page 534 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. Vigor2925 Series User’s Guide...
Page 535 Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2925 Series User’s Guide...
Page 536: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2925 Series User’s Guide...
Page 537: Checking If The Isp Settings Are Ok Or Not
 If the problem of LEDs cannot be solved by the above measures, please contact with the nearest reseller, or send an e-mail to DrayTek FAE for technical support.  Check if the settings offered by ISP are configured well or not.
Page 538: Problems For 3G/4G Network Connection
Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek. Please connect your Notebook with 3G/4G USB Modem to test the connection speed to verify if the problem is caused by Vigor2925.
Page 539 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the factory default setting, you can configure the settings for the router again to fit your personal request. Vigor2925 Series User’s Guide...
Page 540: Contacting Draytek
If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor2925 Series User’s Guide...
Page 541 This page is left blank. Vigor2925 Series User’s Guide...
Page 542: Telnet Command Reference
If you have changed the default, enter the current IP address of the router. Next, type admin/admin for Account/Password. Then, type ?. You will see a list of valid/common commands depending on the router that your use. Vigor2925 Series User’s Guide...
Page 543: Telnet Command: Bpa
-p <PassWord> contact PassWord (max. 24 characters) -s <select> It means to specify an IP address for Server. 0 : no selection. 1 : NSW(61.9.192.13) 2 : QLD(61.9.208.13), 3 : VIC(61.9.128.13) 4 : SA(61.9.224.13), 5 : WA(61.9.240.13) Vigor2925 Series User’s Guide...
Page 544: Telnet Command: Csm Appe Prof
-i INDEX [-v GROUP | -e AP_IDX | -d AP_IDX | -a AP_IDX [ACTION]] Parameter Description INDEX It means to specify the index number of CSM profile, from 1 to 32. GROUP It means the types to be specified for the APP Enforcement profile. Available types include: Vigor2925 Series User’s Guide...
Page 545: Telnet Command: Csm Appe Show
OTHERS TUNNEL HTTP Proxy OTHERS TUNNEL HTTP Tunnel OTHERS TUNNEL Hamachi OTHERS TUNNEL Hotspot Shield OTHERS TUNNEL MS Teredo OTHERS TUNNEL PGPNet OTHERS TUNNEL Ping Tunnel OTHERS TUNNEL RealTunnel OTHERS TUNNEL Skyfire OTHERS TUNNEL Socks 4/5 Vigor2925 Series User’s Guide...
Page 546: Telnet Command: Csm Appe Config
Advance abbreviation: : M, F, G, C, and O ------------------------------------------------------------------ Disable AliWW Enable Ares Disable BaiduHi Disable Fetion Disable 5 GaduGadu Protocol Disable Google Chat Disable Disable ICU2 Disable 9 Jabber Protocol/Goog Disable Disable LINE Disable Vigor2925 Series User’s Guide...
Page 547: Telnet Command: Csm Ucf
It means the log type of the profile. They are: P: Pass, B: Block, A: All, N: None It means to specify the Administration Message, less then 255 characters It means to set URL Access Control part. Vigor2925 Series User’s Guide...
Page 548: Telnet Command: Csm Ucf Obj Index Uac
P: Pass. The web access meets the URL Access Control will be passed. Prevent the web access from any IP address. E: Enable the function. The Internet access from any IP address will be blocked. D: Disable the function. Vigor2925 Series User’s Guide...
Page 549 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] [v]Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- Vigor2925 Series User’s Guide...
Page 550: Telnet Command: Csm Ucf Obj Index Wf
Type the index number (1 to 8) for the file extension object. > csm ucf obj 1 wf -s c Profile Index: 1 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] [v] Prevent web access from IP address. Vigor2925 Series User’s Guide...
Page 551: Telnet Command: Csm Wcf
MSG means the content (less than 255 characters) of the message itself. setdefault It means to return to default settings for all of the profile. It means to specify the object profile. INDEX It means to specify the index number of web content filter Vigor2925 Series User’s Guide...
Page 552 Social Networking, Spam Sites,Malware, Botnets, Hacking, Illegal Software, Information Security,Peer-to-eer, Advertisements & Pop-Ups, Arts, Transportation, Compromised, Dating & Personals, , Education, Finance, Government,Health & Medcine, News, Non-profits & NGOs, Personal Sites,Politics, Real Estate, Rligion, Restaurants & Vigor2925 Series User’s Guide...
Page 553: Telnet Command: Csm Dnsf
It means to determine the content of records transmitting to syslog Syslog. P: Pass. Records for the packets passing through DNS filter will be sent to Syslog. B: Block. Records for the packets blocked by DNS filter will Vigor2925 Series User’s Guide...
Page 554: Telnet Command: Ddns Log
Displays the DDNS log. >ddns log > Sets and displays the DDNS time. ddns time <update in minutes> Parameter Description update in minutes Type the value as DDNS time. The range is from 1 to 1440. > ddns time Vigor2925 Series User’s Guide...
Page 555: Telnet Command: Dos
It means to disable the defense function for a specific attack(s). >dos –A The Dos Defense system is Activated >dos –s synflood 50 10 Synflood is enabled! Threshold=50 <pke/sec> timeout=10 <pke/sec> Vigor2925 Series User’s Guide...
Page 556: Telnet Command: Exit
-n <netmask> It means to assign netmask for WAN connection. You have to type 255.255.255.xxx (x is changeable) as the netmask for WAN port. -g <gateway> It means to assign gateway IP for such WAN connection. Vigor2925 Series User’s Guide...
Page 557: Telnet Command: Ip Pubsubnet
Enable Enable the function. Disable Disable the function. > ip pubsubnet disable public subnet disabled! This command allows users to set the public address for your router. ip pubaddr ? ip pubaddr <public subnet IP address> Vigor2925 Series User’s Guide...
Page 558: Telnet Command: Ip Pubmask
This command is used for configuring WAN IP Alias. ip aux add [IP] [Join to NAT Pool] ip aux remove [index] Parameter Description It means to create a new WAN IP address. remove It means to delete an existed WAN IP address. Vigor2925 Series User’s Guide...
Page 559: Telnet Command: Ip Addr
(they should be in the same network segment), the IP address of the PC must be fixed with the same LAN IP address (network segment) set by this command for accessing into the web user interface of the router. Later, modify the start addresses for the DHCP server. Vigor2925 Series User’s Guide...
Page 560: Telnet Command: Ip Nmask
3: enable to accept illegal dest mac address 4: Decline VRRP mac into arp table 5: Accept VRRP mac into arp table status: display the setting status. Available settings will be 10, 20, 30,..2550 seconds. Time Vigor2925 Series User’s Guide...
Page 561: Telnet Command: Ip Dhcpc
-u: update by index number release It means to release current WAN IP address. renew It means to renew the WAN IP address and obtain another new one. status It displays current status of DHCP client. Vigor2925 Series User’s Guide...
Page 562: Telnet Command: Ip Ping
[Host/IP address] [WAN1/WAN2] [Udp/Icmp] Parameter Description IP address It means the target IP address. WAN1/WAN2 It means the WAN port that the above IP address passes through. Udp/Icmp It means the UDP or ICMP. Vigor2925 Series User’s Guide...
Page 563: Telnet Command: Ip Telnet
This command allows users to set the RIP (routing information protocol) of IP. ip rip [0/1/2] Parameter Description 0/1/2 0 means disable; 1 means first subnet and 2 means second subnet. > ip rip 1 %% Set RIP 1st subnet. Vigor2925 Series User’s Guide...
Page 564: Telnet Command: Ip Wanrip
<ifno> 1: WAN1,2: WAN2 3: PVC3,4: PVC4,5: PVC5 -e <0/1> 0: disable, 1: enable Now status: WAN[1] Rip Protocol disable WAN[2] Rip Protocol disable WAN[3] Rip Protocol disable WAN[4] Rip Protocol disable WAN[5] Rip Protocol enable > Vigor2925 Series User’s Guide...
Page 565: Telnet Command: Ip Route
> ip route add 172.16.2.0 255.255.255.0 172.16.2.4 3 static > ip route status Codes: C - connected, S - static, R - RIP, * - default, ~ - private 192.168.1.0/ 255.255.255.0 is directly connected, LAN1 172.16.2.0/ 255.255.255.0 via 172.16.2.4, WAN1 Vigor2925 Series User’s Guide...
Page 566: Telnet Command: Ip Igmp_Proxy
> ip igmp_proxy query 130000 This command is for setting IGMP General Query Interval The default value is 125000 ms Current Setting is:130000 ms > This command allows users to enable or disable IGMP snoop function. ip igmp_snoop enable Vigor2925 Series User’s Guide...
Page 567 > ip igmp_snoop mode ? % ip igmp mode [hw/sw] igmp snooping works on HW mode now. > ip igmp_snoop separate ? % ip igmp separate [on/off] igmp snoop seprate is ON now. igmp packets will be separated by NAT/Bridge. Vigor2925 Series User’s Guide...
Page 568: Telnet Command: Ip Wanaddr
It means the MAC address of the device that you want to specify >ip dmz ? % ip dmz <mac>, now : 00-00-00-00-00-00 > ip dmz 11-22-33-44-55-66 > ip dmz ? % ip dmz <mac>, now : 11-22-33-44-55-66 > Vigor2925 Series User’s Guide...
Page 569: Telnet Command: Ip Dmzswitch
It means to turn off session limit for each IP. default [num] It means to set the default number of session num limit. Defautlp2p [num] It means to set the default number of session num limit for p2p. Vigor2925 Series User’s Guide...
Page 570: Telnet Command: Ip Bandwidth
[add/del] [IP1-IP2][tx][rx][shared] Parameter Description It means to turn on the IP bandwidth limit. It means to turn off the IP bandwidth limit. default [tx_rate][rx_rate] It means to set default tx and rx rate of bandwidth limit. The Vigor2925 Series User’s Guide...
Page 571: Telnet Command: Ip Bindmac
It means to turn on IP bandmac policy. Even the IP is not in the policy table, it can still access into network. It means to turn off all the bindmac policy. strict_on It means that only those IP address in IP bindmac policy table can access into network. Vigor2925 Series User’s Guide...
Page 572 It means to delete all the IP bindmac settings. > ip bindmac add 192.168.1.46 00:50:7f:22:33:55 just for test > ip bindmac show ip bind mac function is turned ON IP : 192.168.1.46 bind MAC : 00-50-7f-22-33-55 Comment : just Vigor2925 Series User’s Guide...
Page 573: Telnet Command: Ip Maxnatuser
It means to list detailed information of profile configuration. > ip lanDNSRes -l % Idx: 7 % State: Enable % Profile: DrayTekFTP % Domain Name: ftp.draytek.com % -------- Address Mapping Table -------- Vigor2925 Series User’s Guide...
Page 574: Telnet Command: Ip6 Addr
0: reply all subnet packets. 1: reply only same subnet packet. It means to update LAN DNS configuration to DNS cache. > ip lanDNSRes -i 1 -n ftp.drayTek.com % Configure Set1's DomainName:ftp.drayTek.com ip lanDNSRes -i 1 -n ftp.drayTek.com >...
Page 575: Telnet Command: Ip6 Dhcp Req_Opt
It means to ask the DNS name. It means to ask NTP. It means to ask NIS. It means to ask NIS name. It means to ask NISP. It means to ask NISP name. It means to ask BCMCS. Vigor2925 Series User’s Guide...
Page 576: Telnet Command: Ip6 Dhcp Client
Interface WAN2 has following DHCPv6 client settings: DHCPv6 client enabled request IA_PD whose IAID equals to 2008 > ip6 dhcp client WAN2 –n 1023456 > ip6 dhcp client WAN2 –a Interface WAN2 has following DHCPv6 client settings: Vigor2925 Series User’s Guide...
Page 577: Telnet Command: Ip6 Dhcp Server
> ip6 dhcp server -x ff02::3 > ip6 dhcp server -a % Interface LAN has following DHCPv6 server settings: DHCPv6 server disabled maximum address of the pool: FF02::3 minimum address of the pool: FF02::1 1st DNS IPv6 Addr: FF02::1 Vigor2925 Series User’s Guide...
Page 578: Telnet Command: Ip6 Internet
<server>= type an IPv6 address for first DNS server. -D <server> It means to set the secondary DNS Server IP. <server>= type an IPv6 address for second DNS server. It means to set IPv6 PPP WAN test mode for DHCP or -t <dhcp/ra/none> Vigor2925 Series User’s Guide...
Page 579: Telnet Command: Ip6 Neigh
Neighbour 2001:2222:3333::1111 successfully added! > ip6 neigh -a I/F ADDR STATE ------------------------------------------------------------------------- LAN FF02::1 33-33-00-00-00-01 CONNECTED WAN2 2001:5C0:1400:B::10B8 00-00-00-00-00-00 CONNECTED WAN2 2001:2222:3333::1111 00-00-00-00-00-00 CONNECTED WAN2 2001:2222:6666::1111 00-00-00-00-00-00 CONNECTED WAN2 :: 00-00-00-00-00-00 CONNECTED LAN :: NONE > Vigor2925 Series User’s Guide...
Page 580: Telnet Command: Ip6 Pneigh
It means the gateway of the router. LAN|WAN1|WAN2|iface# It means to specify LAN or WAN interface for such address. > ip6 route -s FE80::250:7FFF:FE12:500 16 FE80::250:7FFF:FE12:100 LAN Route FE80::250:7FFF:FE12:500/16 successfully added! > ip6 route -a LAN Vigor2925 Series User’s Guide...
Page 581: Telnet Command: Ip6 Ping
Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Packets: Sent = 5, Received = 5, Lost = 0 <% loss> > Vigor2925 Series User’s Guide...
Page 582: Telnet Command: Ip6 Tspc
Type the number (unit: second) you want. It means to show the RADVD configuration. It means RA default test. Vigor2925 Series User’s Guide...
Page 583: Telnet Command: Ip6 Mngt
> ip6 mngt list add 1 FE80::250:7FFF:FE12:1010 128 > ip6 mngt list add 2 FE80::250:7FFF:FE12:1020 128 > ip6 mngt list add 3 FE80::250:7FFF:FE12:2080 128 > ip6 mngt list % IPv6 Access List : Index IPv6 Prefix Prefix Length ======================================== FE80::250:7FFF:FE12:1010 FE80::250:7FFF:FE12:1020 Vigor2925 Series User’s Guide...
Page 584: Telnet Command: Ip6 Online
% Interface : DOWN % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % Tx packets = 0, Tx bytes = 0, Rx packets = 0, Rx bytes = 0 Vigor2925 Series User’s Guide...
Page 585: Telnet Command: Ip6 Aiccu
–p [0/1] Parameter Description –h It is used to display the usage of such command. It is used to show the NTP state. -p <0/1> It is used to specify NTP server for IPv6. 0 – Auto Vigor2925 Series User’s Guide...
Page 586: Telnet Command: Ipf View
[SET_NO] rule [RULE_NO] [Options] Parameter Description Options There are several options provided here, such as -v, -c [SET_NO], -d [SET_NO],… and etc. SET_NO It means to specify the index number (from 1 to 12) of filter set. Vigor2925 Series User’s Guide...
Page 587 > ipf set -d 2 #set data filter start from set 2 Setting saved. > ipf set -v Call Filter: Enable (Start Filter Set = 1) Data Filter: Enable (Start Filter Set = 2) Log Flag : None Actions for packet not matching any rule: Vigor2925 Series User’s Guide...
Page 588: Telnet Command: Ipf Rule
–s u <Address Type> <Start IP Address> <End type, start IP address, end IP address and address mask. IP Address> | <Address u – It means “user defined”. Mask> Address Type - Type the number (representing different Vigor2925 Series User’s Guide...
Page 589 – it means “user defined”. <protocol> – It means TCP(6),UDP(17), TCP/UDP(255). <source_port__value> – 1 – Port OP, range is 0-3. 0:= =, 1:!=, 2:>, 3:< 3 – Port range of the Start Port Number, range is 1-65535. Vigor2925 Series User’s Guide...
Page 590 It means to set code page. Different number represents different code page. 0. None 1. ANSI(1250)-Central Europe 2. ANSI(1251)-Cyrillic 3. ANSI(1252)-Latin I 4. ANSI(1253)-Greek 5. ANSI(1254)-Turkish 6. ANSI(1255)-Hebrew 7. ANSI(1256)-Arabic 8. ANSI(1257)-Baltic 9. ANSI(1258)-Viet Nam 10. OEM(437)-United States 11. OEM(850)-Multilingual Latin I 12. OEM(860)-Portuguese Vigor2925 Series User’s Guide...
Page 591 APP Enforcement : None URL Content Filter : None Load-Balance policy : Auto-select : Disable ------------------------------------------------------------------ CodePage : ANSI(1252)-Latin I Window size : 65535 Session timeout : 1440 DrayTek Banner : Enable ------------------------------------------------------------------ Strict Security Checking Vigor2925 Series User’s Guide...
Page 592: Telnet Command: Ipf Flowtrack
192.168.1.11:59939 ,ifno=3 proto=17, age=93023180(3920), flag=203 ORIGIN>> 192.168.1.11:15073 -> 8.8.8.8: 53 ,ifno=0 REPLY >> 8.8.8.8: 53 -> 192.168.1.11:15073 ,ifno=3 proto=17, age=93025100(2000), flag=203 ORIGIN>> 192.168.1.11: 7247 -> 8.8.8.8: 53 ,ifno=0 REPLY >> 8.8.8.8: 53 -> 192.168.1.11: 7247 ,ifno=3 Vigor2925 Series User’s Guide...
Page 593: Telnet Command: Log
= 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0 Relay agent IP = 0.0.0.0 25:36:49.580 ---->DHCP (WAN-5) Len = 548XID = 0x7880fdd4 Client IP = 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0 Vigor2925 Series User’s Guide...
Page 594: Telnet Command: Mngt Ftpport
This command allows users to set HTTPS port for management. mngt httpsport [Https port] Parameter Description It means to type the number for HTTPS port. The default Https port setting is 443. > mngt httpsport 443 % Set web server port to 443 done. Vigor2925 Series User’s Guide...
Page 595: Telnet Command: Mngt Telnetport
It means to activate FTP server function. disable It means to inactivate FTP server function. > mngt ftpserver enable %% FTP server has been enabled. > mngt ftpserver disable %% FTP server has been disabled. Vigor2925 Series User’s Guide...
Page 596: Telnet Command: Mngt Noping
It means to display a log of ping action, including source MAC and source IP. clearlog It means to clear the log of ping action. > mngt noping off No Ping Packet Out is OFF!! Vigor2925 Series User’s Guide...
Page 597: Telnet Command: Mngt Defenseworm
[status] mngt rmtcfg [enable] mngt rmtcfg [disable] mngt rmtcfg [http/https/ftp/telnet/ssh/tr069] [on/off] Parameter Description status It means to display current setting for your reference. enable It means to allow the system administrators to login from the Internet. Vigor2925 Series User’s Guide...
Page 598: Telnet Command: Mngt Echoicmp
This command allows you to specify that the system administrator can login from a specific host or network. A maximum of three IPs/subnet masks is allowed. mngt accesslist list mngt accesslist add [index][ip addr][mask] mngt accesslist remove [index] mngt accesslist flush Parameter Description Vigor2925 Series User’s Guide...
Page 599: Telnet Command: Mngt Snmp
(max. 23 characters) -n <IP address> It means to set the IPv4 address of the host that will receive the trap community. -T <seconds> It means to set the trap timeout <0~999>. It means to list SNMP setting. Vigor2925 Series User’s Guide...
Page 600: Telnet Command: Msubnet Switch
> mngt snmp -e 1 -g draytek -s DK -m 192.168.1.1 -t trapcom -n 10.20.3.40 -T 88 SNMP Agent Turn on!!! Get Community set to draytek Set Community set to DK Manager Host IP set to 192.168.1.1 Trap Community set to trapcom Notification Host IP set to 10.20.3.40...
Page 601: Telnet Command: Msubnet Nmask
% Dhcp Gateway: 0.0.0.0, Start IP: 0.0.0.10, Pool Count: 50 This command allows you to enable or disable DHCP server for the subnet. msubnet dhcps [2][On/Off] Parameter Description It means LAN interface. 2=LAN2 On/Off On means enabling the DHCP server for the specified LAN interface. Vigor2925 Series User’s Guide...
Page 602: Telnet Command: Msubnet Nat
This command is used to configure an IP address as the gateway used for subnet. msubnet gateway [2] [Gateway IP] Parameter Description It means LAN interface. 2=LAN2 Gateway IP Specify an IP address as the gateway IP. > msubnet gateway 2 192.168.1.13 % Set LAN2 Dhcp Gateway IP done !!! Vigor2925 Series User’s Guide...
Page 603: Telnet Command: Msubnet Ipcnt
% Enable routing between LAN1 and LAN2! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. > msubnet talk % msubnet talk <1/2> <1/2> <On/Off> % where 1:LAN1, 2:LAN2 % Now: LAN1 LAN2 % LAN1 Vigor2925 Series User’s Guide...
Page 604: Telnet Command: Msubnet Startip
% Set LAN2 PPP(IPCP) Start IP done !!! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. > > msubnet pppip % msubnet pppip <2> <Start IP> % Now: LAN2 192.168.2.250 Vigor2925 Series User’s Guide...
Page 605: Telnet Command: Msubnet Nodetype
> msubnet primWINS 2 192.168.3.5 % Set LAN2 Dhcp Primary WINS IP done !!! > msubnet primWINS % msubnet primWINS <2> <WINS IP> % Now: LAN2 192.168.3.5 2.168.3.5; LAN3 0.0.0.0; LAN4 0.0.0.0; LAN5 0.0.0.0; LAN6 0.0.0.0 Vigor2925 Series User’s Guide...
Page 606: Telnet Command: Msubnet Secwins
% msubnet tftp <2> <TFTP server name> % Now: LAN2 > msubnet tftp 2 publish % Set LAN2 TFTP Server Name done !!! > msubnet tftp % msubnet tftp <2> <TFTP server name> % Now: LAN2 publish Vigor2925 Series User’s Guide...
Page 607: Telnet Command: Msubnet Mtu
INDEX -s INVERT object ip obj INDEX -a TYPE [START_IP] [END/MASK_IP] Parameter Description setdefault It means to return to default settings for all profiles. INDEX It means the index number of the specified object profile. Vigor2925 Series User’s Guide...
Page 608 > object ip obj 1 -n marketing > object ip obj 1 -a 1 192.168.1.45 > object ip obj 1 -v IP Object Profile 1 Name :[marketing] Interface:[Any] Address type:[single] Start ip address:[192.168.1.45] End/Mask ip address:[0.0.0.0] Invert Selection:[0] Vigor2925 Series User’s Guide...
Page 609: Telnet Command: Object Ip Grp
The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. > object ip grp 2 -n First IP Group Profile 2 Name :[First] Interface:[Any] Included ip object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] Vigor2925 Series User’s Guide...
Page 610: Telnet Command: Object Ipv6 Obj
Example: object ip obj 8 -i 0 -s INVERT It means to set invert seletion for the object profile. INVERT=0, means disableing the function. INVERT=1, means enabling the function. Example: object ip obj 3 -s 1 Vigor2925 Series User’s Guide...
Page 611: Telnet Command: Object Ipv6 Grp
It means to view the information of the specified group profile. Example: object ip grp 1 -v -n NAME It means to define a name for the IP group. NAME: Type a name with less than 15 characters. Example: object ip grp 8 -n bruce Vigor2925 Series User’s Guide...
Page 612 > object ip grp 2 -i 1 > object ip grp 2 -a 1 2 IP Group Profile 2 Name :[First] Interface:[Lan] Included ip object index: [0:][1] [1:][2] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] [8:][0] [9:][0] [10:][0] [11:][0] Vigor2925 Series User’s Guide...
Page 613: Telnet Command: Object Service Obj
-d CHK [START_P] It means to set destination port check and configure port [END_P] range (1~65565) for TCP/UDP. END_P, type a port number to indicate destination port. Example: object service obj 3 -d 1 100 200 Vigor2925 Series User’s Guide...
Page 614: Telnet Command: Object Service Grp
The service object profiles with index number 1,2,3,4 and 5 will be group under such profile. > object service grp 1 -n Grope_1 Service Group Profile 1 Name :[Grope_1] Included service object index: [0:][0] [1:][0] [2:][0] [3:][0] Vigor2925 Series User’s Guide...
Page 615: Telnet Command: Object Kw
NAME: Type a name with less than 15 characters. -a CONTENTS It means to set the contents for the keyword profile. Example: object kw obj 40 -a test > object kw obj 1 -n children Profile 1 Name :[children] Vigor2925 Series User’s Guide...
Page 616: Telnet Command: Object Fe
1 -e Image FILE_EXTENSION: ".bmp", ".dib", ".gif", ".jpeg", ".jpg", ".jpg2", ".jp2", ".pct", ".pcx", ".pic", ".pict", ".png", ".tif", ".tiff", ".asf", ".avi", ".mov", ".mpe", ".mpeg", ".mpg", ".mp4", ".qt", ".rm", ".wmv", ".3gp", ".3gpp", ".3gpp2", ".3g2", ".aac", ".aiff", ".au", Vigor2925 Series User’s Guide...
Page 617 [ ].bzip2 [ ].bz2 [ ].cab [ ].gz [ ].gzip [ ].rar [ ].sit [ ].zip ------------------------------------------------------------------------- ------ Executation category: [ ].bas [ ].bat [ ].com [ ].exe [ ].inf [ ].pif [ ].reg [ ].scr Vigor2925 Series User’s Guide...
Page 618: Telnet Command: Port
<sec>: Type a number to set the TCP WWW session timeout. It means “TCP SYN” protocol. -s <sec> <sec>: Type a number to set the TCP SYN session timeout. It means to flush all portmaps (useful for diagnostics). -l <List> List all settings. Vigor2925 Series User’s Guide...
Page 619: Telnet Command: Prn
It means to set outbound bandwidth in kbps (Ethernet WAN only). The available setting is from 1 to 100000. It means to set ratio for class index, in %. -r <index:ratio> -u <mode> It means to enable bandwidth control for UDP. Vigor2925 Series User’s Guide...
Page 620 WAN1 class 3 ratio set to 20 WAN1 udp bandwidth control set to enable WAN1 udp bandwidth limit ratio set to 50 WAN1 Outbound TCP ACK Prioritizel set to enable QoS WAN1 set complete; restart QoS > Vigor2925 Series User’s Guide...
Page 621: Telnet Command: Qos Class
– It means the subnet address with start IP address. Please type the subnet and the IP address, for example, “-l 172.16.3.9:255.255.0.0”.0 any – It means Any address. Simple type “-l” to specify any address for this command. -p <DSCP id> Specify the ID. Vigor2925 Series User’s Guide...
Page 622: Telnet Command: Qos Type
Show the rule in the specified class. It means that you can type in several commands in one line. […] > qos class -c 2 -n draytek -a -m 1 -l 192.168.1.50:192.168.1.80 Following setting will set in the class2 class 2 name set to draytek...
Page 623: Telnet Command: Quit
> qos type -a draytek -t 6 -p 510:1330 service name set to draytek service type set to 6:TCP Port type set to Range Service Port set to 510 ~ 1330 > This command can exit the telnet command screen.
Page 624: Telnet Command: Show Dns
Private IP Private Port 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] Vigor2925 Series User’s Guide...
Page 625: Telnet Command: Show Portmap
WAN 1 Status: Disconnected Enable:Yes Line:xDSL Name:tcom Mode:Static IP Up Time:0:00:00 IP:172.16.3.221 IP:172.16.3.2 TX Packets:0 TX Rate:0 RX Packets:0 RX Rate:0 ADSL Information: ADSL Firmware Version:05-04-04-04-00-01 Mode: State:TRAINING TX Block:0 RX Block:0 Corrected Blocks:0 Uncorrected Blocks:0 Vigor2925 Series User’s Guide...
Page 626: Telnet Command: Show Traffic
WAN3 total TX: 0 Bytes ,RX: 0 Bytes WAN4 total TX: 0 Bytes ,RX: 0 Bytes WAN5 total TX: 0 Bytes ,RX: 0 Bytes > This command is used to enable DCHP2 server. srv dhcp dhcp2 [-<command> <parameter> | ... ] Vigor2925 Series User’s Guide...
Page 627: Telnet Command: Srv Dhcp Public
It means to specify an IP address as the starting point in the IP address pool. It means the IP count number. IP counts It means to specify the number of IP addresses in the pool. Vigor2925 Series User’s Guide...
Page 628: Telnet Command: Srv Dhcp Dns1
It means the IP address that you want to use as DNS1. Note: The IP Routed Subnet DNS must be the same as NAT Subnet DNS). > > srv dhcp dns1 lan1 168.95.1.1 % srv dhcp dns1 lan1 <DNS IP address> % Now: 168.95.1.1 Vigor2925 Series User’s Guide...
Page 629: Telnet Command: Srv Dhcp Dns2
This command allows users to specify gateway address for DHCP server. srv dhcp gateway [?] srv dhcp gateway [Gateway IP] Parameter Description It means to display current gateway that you can use. Gateway IP It means to specify a gateway address used for DHCP server. Vigor2925 Series User’s Guide...
Page 630: Telnet Command: Srv Dhcp Ipcnt
It means subnet 1 or 2. Please type 1 or 2. The router will invoke this function according to the subnet 1 or 2 specified here. > srv dhcp relay servip 192.168.1.46 > srv dhcp relay subnet 2 Vigor2925 Series User’s Guide...
Page 631: Telnet Command: Srv Dhcp Startip
> srv dhcp status LAN1 : 192.168.1.1/255.255.255.0, DHCP server: On Default gateway: 192.168.1.1 Index IP Address MAC Address Leased Time HOST ID 192.168.1.12 00-05-5D-E4-D8-EE 118:18:19 A1000351 192.168.1.255 00-00-00-00-00-00 BAD IP 192.168.1.0 00-00-00-00-00-00 BAD IP 192.168.1.1 00-00-00-00-00-00 BAD IP Vigor2925 Series User’s Guide...
Page 632: Telnet Command: Srv Dhcp Leasetime
It means to specify a type for node. 1. B-node 2. P-node 4. M-node 8. H-node > srv dhcp nodetype 1 > srv dhcp nodetype ? %% srv dhcp nodetype <count> %% 1. B-node 2. P-node 4. M-node 8. H-node % Now: 1 Vigor2925 Series User’s Guide...
Page 633: Telnet Command: Srv Dhcp Primwins
It means to remove the IP address settings of second WINS server. > srv dhcp secWINS 192.168.1.180 > srv dhcp secWINS ? %% srv dhcp secWINS <WINS IP address> %% srv dhcp secWINS clear % Now: 192.168.1.180 Vigor2925 Series User’s Guide...
Page 634: Telnet Command: Srv Dhcp Exprecycleip
> srv dhcp tftp TF123 > srv dhcp tftp ? %% srv dhcp tftp <TFTP server name> % Now: TF123 > srv dhcp tftpdel % The TFTP Server Name had been deleted !!! Vigor2925 Series User’s Guide...
Page 635: Telnet Command: Srv Dhcp Option
It means the index number of the option value. > srv dhcp option -e 1 -i 2/r -c 44 -a 192.168.1.10,192.168.1.20 > srv dhcp option -l % state idx interface opt type data % enable 1 LAN2/r 44 Address 192.168.1.10 ,192.168.1.20 Vigor2925 Series User’s Guide...
Page 636: Telnet Command: Srv Nat Addrmapping
--------------current NAT address map settings---------- #rule-set 1 ------------------------ enable: 1 protocol: TCP public IP: #1: 208.228.145.2 private IP: 192.168.1.90 mask: /16 #rule-set 2 ------------------------ enable: 0 protocol: all public IP: #1: 192.168.1.90 private IP: 0.0.0.0 mask: /32 Vigor2925 Series User’s Guide...
Page 637: Telnet Command: Srv Nat Dmz
Srv nat ipsecpass [options] Parameter Description [options] The available commands with parameters are listed below. It means to enable IPSec ESP tunnel passthrough and IKE source port (500) preservation. It means to disable IPSec ESP tunnel passthrough and IKE Vigor2925 Series User’s Guide...
Page 638: Telnet Command: Srv Nat Openport
It means to display current settings. -r <remove> It means to delete the specified open port setting. remove: Type the index number of the profile. It means to return to factory settings for all the open ports -f <flush> Vigor2925 Series User’s Guide...
Page 639: Telnet Command: Srv Nat Portmap
It means to specify the private IP address of the internal host providing the service. pri port It means to specify the private port number of the service offered by the internal host. wan1/wan2 It means to specify WAN interface for the port redirection. Vigor2925 Series User’s Guide...
Page 640 It means the index number for the profiles. The range is from 1 to 20. The available commands with parameters are listed below. [-<command> <parameter> | ... ] […] means that you can type in several commands in one Vigor2925 Series User’s Guide...
Page 641 > srv nat trigger -v Port Trigger Rule status: Index Status Comment TProto TPort IProto IPort ----------------------------------------------------- Enable test 1000 Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Vigor2925 Series User’s Guide...
Page 642: Telnet Command: Srv Nat Showall
0.0.0.0:80 192.168.1.11:100 0.0.0.0:23~83 192.168.1.100:23~83 0.0.0.0 192.168.1.96 R:Port Redirection, O:Open Ports, D:DMZ This command is used to obtain the TX (transmitted) or RX (received) data for each connected switch. switch -i [switch idx_no] [option] switch not_respond 0 Vigor2925 Series User’s Guide...
Page 643: Telnet Command: Switch Status
[-<command> <parameter> | ... ] Parameter Description -e <enable> It is used to disable/enable bonjour service (0: disable, 1: enable). -h <enable> It is used to disable/enable http (web) service (0: disable, 1: enable). Vigor2925 Series User’s Guide...
Page 644: Telnet Command: Sys Cfg
This command displays the history of the commands that you have typed. > sys cmdlog % Commands Log: (The lowest index is the newest !!!) [1] sys cmdlog [2] sys cmdlog ? [3] sys ? [4] sys cfg status [5] sys cfg ? Vigor2925 Series User’s Guide...
Page 645: Telnet Command: Sys Ftpd
> sys domainname wan1 clever > sys domainname wan2 intellegent > sys domainname ? % sys domainname <wan1/wan2> <Domain Name Suffix (max. 39 characters)> % sys domainname <wan1/wan2> clear % Now: wan1 == clever, wan2 ==intelligent > Vigor2925 Series User’s Guide...
Page 646: Telnet Command: Sys Iface
Interface 8 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-06 Interface 9 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-07 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] > Vigor2925 Series User’s Guide...
Page 647: Telnet Command: Sys Name
Description ASCII string It means the password for administrator. The maximum character that you can set is 23. > sys passwd admin123 > This command allows users to restart the router immediately. > sys reboot > Vigor2925 Series User’s Guide...
Page 648: Telnet Command: Sys Autoreboot
This command can turn on TFTP server for upgrading the firmware. > sys tftpd % TFTP server enabled !!! This command can display current country code and wireless region of this device. > sys cc Country Code : 0x 0 [International] Wireless Region Code: 0x30 > Vigor2925 Series User’s Guide...
Page 649: Telnet Command: Sys Version
# of lost by siganture = 0 # of lost by list = 0 This command can turn on or turn off polling buffer for the router. sys pollbuf [on] sys pollbuf [off] Parameter Description It means to turn on pulling buffer. Vigor2925 Series User’s Guide...
Page 650: Telnet Command: Sys Tr069
It means to save the parameters to the flash memory of the router. Inform [event code] It means to inform parameters for tr069 with different event codes. [event code] includes: 0-"0 BOOTSTRAP", 1-"1 BOOT", 2-"2 PERIODIC", Vigor2925 Series User’s Guide...
Page 651 Total content length of parameter is 915 InternetGatewayDevice.LANDeviceNumberOfEntries InternetGatewayDevice.WANDeviceNumberOfEntries InternetGatewayDevice.DeviceInfo. InternetGatewayDevice.ManagementServer. InternetGatewayDevice.Time. InternetGatewayDevice.Layer3Forwarding. InternetGatewayDevice.LANDevice. InternetGatewayDevice.WANDevice. InternetGatewayDevice.Services. InternetGatewayDevice.X_00507F_InternetAcc. InternetGatewayDevice.X_00507F_LAN. InternetGatewayDevice.X_00507F_NAT. InternetGatewayDevice.X_00507F_Firewall. InternetGatewayDevice.X_00507F_Bandwidth. InternetGatewayDevice.X_00507F_Applications. InternetGatewayDevice.X_00507F_VPN. InternetGatewayDevice.X_00507F_VoIP. InternetGatewayDevice.X_00507F_WirelessLAN. InternetGatewayDevice.X_00507F_System. InternetGatewayDevice.X_00507F_Status. InternetGatewayDevice.X_00507F_Diagnostics. --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] Vigor2925 Series User’s Guide...
Page 652: Telnet Command: Sys Sip_Alg
It means license and signature download interface setting. licifno lic_wiz [set/reg/qry] It means the license wizard setting. qry: query service support status set [idx] [trial] [service type] [sp_id] [start_date] [License Key] reg: register service in portal Vigor2925 Series User’s Guide...
Page 653: Telnet Command: Sys Fr_Log
"2015-01-30 10:49:25", "Local User: 141.8.224.25:80 -> 192.168.1.11:17934 (TCP) close connection" ------------------------------------------------------------ "2015-01-30 10:49:24", "Local User (MAC=00-00-00-45-00-00): 192.168.1.11:17935 - > 64.233.187.154:80 (TCP)Web" ------------------------------------------------------------ "2015-01-30 10:49:24", "Local User (MAC=00-00-00-3E-00-00): 192.168.1.11:17934 - > 141.8.224.25:80 (TCP)Web" ------------------------------------------------------------ "2015-01-30 10:49:15", "[H2L][UP][PPTP][@Radius:sh.test1]" ------------------------------------------------------------ Vigor2925 Series User’s Guide...
Page 654: Telnet Command: Testmail
The tmpvirtual server index >>0<< PortMapLeaseDuration >>0<<, PortMapEnabled >>0<< Ftp Example [MICROSOFT] ((1)) InternalClient >>0.0.0.0<<, RemoteHost >>0.0.0.0<< InternalPort >>0<<, ExternalPort >>0<< PortMapProtocol >><NULL><< The tmpvirtual server index >>0<< PortMapLeaseDuration >>0<<, PortMapEnabled >>0<< PortMapProtocol >><NULL><< The tmpvirtual server index >>0<< Vigor2925 Series User’s Guide...
Page 655: Telnet Command: Upnp Service
/upnp/OSInfo.xml controlURL /OSInfo1 eventURL /OSInfoEvent1 uuid:774e9bbe-7386-4128-b627-001daa843464 >>>>> SERVICE TABLE2 <<<<< serviceType urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1 serviceId urn:upnp-org:serviceId:WANCommonIFC1 SCPDURL /upnp/WComIFCX.xml controlURL /upnp?control=WANCommonIFC1 eventURL /upnp?event=WANCommonIFC1 uuid:2608d902-03e2-46a5-9968-4a54ca499148 >>>>> SERVICE TABLE3 <<<<< serviceType urn:schemas-upnp-org:service:WANIPConnection:1 serviceId urn:upnp-org:serviceId:WANIPConn1 SCPDURL /upnp/WIPConn1.xml controlURL /upnp?control=WANIPConn1 eventURL /upnp?event=WANIPConn1 uuid:1f41d0d6-4a64-42da-9593-5e266b10aed2 Vigor2925 Series User’s Guide...
Page 656: Telnet Command: Upnp Subscribe
>>>> (1) serviceType urn:schemas-microsoft-com:service:OSInfo:1 ----- Subscribtion1 ------- sid = 7a2bbdd0-0047-4fc8-b870-4597b34da7fb eventKey =1, ToSendEventKey = 1 expireTime =6926 active =1 DeliveryURLs =<http://192.168.1.113:2869/upnp/eventing/twtnpnsiun> >>>> (2) serviceType urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1 ----- Subscribtion1 ------- sid = d9cd47a5-d9c9-4d3d-8043-d03a82f27983 eventKey =1, ToSendEventKey = 1 Vigor2925 Series User’s Guide...
Page 657: Telnet Command: Upnp Tmpvs
This command is used to specify WAN interface to apply UPnP. upnp wan [n] Parameter Description It means to specify WAN interface to apply UPnP. n=0, it means to auto-select WAN interface. n=1, WAN1 n=2, WAN2 ………. > upnp wan 1 use wan1 now. Vigor2925 Series User’s Guide...
Page 658: Telnet Command: Usb List
This command can make the router to be regarded as a modem but not a router. > vigbrg on %Enable Vigor Bridge Function! This command can disable vigor bridge function. > vigbrg off %Disable Vigor Bridge Function! Vigor2925 Series User’s Guide...
Page 659: Telnet Command: Vigbrg Status
This command can display the existed WLAN connection status for the modem (change from router into bridge modem), including index number, MAC address, Stamp Time, PVC, VLAN port for Vigor Bridge Function. > vigbrg wlanstatus Vigor Bridge: Running WAN mac table: Index MAC Address Stamp Time VLan Port Vigor2925 Series User’s Guide...
Page 660: Telnet Command: Vpn Group
Force subnet LAN2/3/4 to be disabled!! This command allows you to enable VLAN function. vlan on > vlan on VLAN is Enable! This command is used to define the priority for each VLAN profile setting. vlan pri n pri_no Vigor2925 Series User’s Guide...
Page 661: Telnet Command: Vlan Restart
5gs1 5gs2 5gs3 5gs4 subnet ------------------------------------------------------ 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 ------------------------------------------------------------------------- Note: they are only untag for s1/s2/s3/s4/5gs1/5gs2/5gs3/5gs4, but they can join tag vlan with lan ports. > Vigor2925 Series User’s Guide...
Page 662: Telnet Command: Vlan Subnet
> vlan submode status % vlan subnet mode : normal mode > vlan submode on % vlan subnet mode modified to promiscuous mode. > vlan submode status % vlan subnet mode : promiscuous mode Vigor2925 Series User’s Guide...
Page 663: Telnet Command: Vlan Tagged
This command is used to modify and show the scope (reserved 64) of the VLAN IDs used internally by the system. vlan sysvid [show | n] Parameter Description It means to show the scope of VLAN ID used internally. show Vigor2925 Series User’s Guide...
Page 664: Telnet Command: Vpn L2Lset
It means to turn on or off the PFS function. It means phase 1 of IKE. phase1 lifetime It means the lifetime value (in second) for phase 1 and phase phase2 It means phase 2 of IKE. Vigor2925 Series User’s Guide...
Page 665: Telnet Command: Vpn L2Ldrop
It means to set PIN code with secret. <secret> <pin> - Type the code for authentication (e.g, 1234). <secret> - Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6) > vpn dinset 1 Dial-in profile index 1 Vigor2925 Series User’s Guide...
Page 666: Telnet Command: Vpn Subnet
This command allows users to specify a subnet selection for the specified remote dial-in VPN profile. vpn subnet [index] [1/2] Parameter Description <index> It means the index number of the VPN profile. 1 – it means LAN1 <1/2> 2 – it means LAN2. > vpn subnet 1 2 > Vigor2925 Series User’s Guide...
Page 667: Telnet Command: Vpn Setup
It means the name of the profile. <ip> It means the IP address to dial to. It means the user and the password required for the L2TP <usr> <pwd> connection. <nip> <nmask> It means the remote network IP and the mask. Vigor2925 Series User’s Guide...
Page 668: Telnet Command: Vpn Option
<index> <cmd1>=<param1> [<cmd2>=<para2> | ... ] Parameter Description <index> It means the index number of the profile. Available index numbers: 1 ~ 32 For Common Settings <index> It means the index number of the profile. Vigor2925 Series User’s Guide...
Page 669 “ctype= l2” means L2TP(IPSec Policy Must). dialto It means Server IP/Host Name for VPN. (such as draytek.com or 123.45.67.89). ltype It means Link Type. “ltype=0” means “Disable”. “ltype=1” means “64kbps”. “ltype=2” means “128kbps”. “ltype=3” means “BOD”. Vigor2925 Series User’s Guide...
Page 670 Type “off” means any remote IP is allowed to dial in. peerid It means the peer ID for Remote VPN Gateway. Type “draytek” means the word is used as local ID. iname It means Dial-in Username. “iname=admin” means to set username as “admin”.
Page 671 It means to Change default route to this VPN tunnel ( Only single WAN supports this). droute=on/off means to enable/disable the function. > vpn option 1 idle=250 % Change Log.. % Idle Timeout = 250 Vigor2925 Series User’s Guide...
Page 672: Telnet Command: Vpn Mroute
It means to list dial-out settings of the specified profile. It means to list dial-in settings of the specified profile. It means to list Network Settings of the specified profile. <index> It means the index number of the profile. Available index numbers: 1 ~ 32 Vigor2925 Series User’s Guide...
Page 673 % Common Settings % Profile Name : ??? % Profile Status : Disable % Netbios Naming Packet : Pass % Call Direction : Both % Idle Timeout : 300 % PING to keep alive : off > Vigor2925 Series User’s Guide...
Page 674: Telnet Command: Vpn Remote
This command allows users to enable or disable NetBios for Remote Access User Accounts or LAN-to-LAN Profile. vpn NetBios set <H2l/L2l> <index> <Block/Pass> Parameter Description <H2l/L2l> H2l means Remote Access User Accounts. L2l means LAN-to-LAN Profile. Specify which one will be applied by NetBios. Vigor2925 Series User’s Guide...
Page 675: Telnet Command: Vpn Mss
L2TP – 1 ~ 1408 IPSec – 1 ~ 1381 L2TP over IPSec – 1 ~ 1361 SSL Tunnel : 1 ~ 1360 >vpn mss set 1 1400 % VPN TCP maximum segment size (MSS) : PPTP = 1400 Vigor2925 Series User’s Guide...
Page 676: Telnet Command: Vpn Ike
<index> The index number of the profile. <Block/Pass> Set Block/Pass the Multicast Packets. The default is Block. > vpn Multicast set L2l 1 Pass % Lan to Lan Profile Index [1] : % Status Block/Pass: [PASS] Vigor2925 Series User’s Guide...
Page 677: Telnet Command: Vpn Pass2Nd
[off] Parameter Description on/off on – the packets can pass through NAT. off – the packets cannot pass through NAT. > vpn pass2nat on % Packets would go through by NAT when VPN disconnect!! Vigor2925 Series User’s Guide...
Page 678: Telnet Command: Wan Ppp_Mru
For PPTP/L2TP, the maximum number will be 1460. > wan mtu 1100 > wan mtu ? Static IP/DHCP (Max MSS: 1500) PPPoE(Max MSS: 1492) PPTP/L2TP(Max MSS: 1460) % wan ppp_mss <MSS size: 1000 ~ 1500> % Now: 1100 Vigor2925 Series User’s Guide...
Page 679: Telnet Command: Wan Df_Check
WANs. wan forward [on] wan forward [off] Parameter Description on/off It means to enable or disable WAN forward. > wan forward ? %WAN forwarding is Disable! > wan forward on %WAN forwarding is enable! Vigor2925 Series User’s Guide...
Page 680: Telnet Command: Wan Status
[on/off] wan modem backup_wait [value] wan modem pipe [string] wan modem wakeup [on/off/value] wan modem status Parameter Description init [string] It means to set initial modem AT command. string: type text. (default: AT&FE0V1X1&D2&C1S0=0) Vigor2925 Series User’s Guide...
Page 681: Telnet Command: Wan Wimax
31 bytes This command allows you to enable or disable WAN 3G/4G DHCP mode for Vigor router. wan wimax [on/off] Parameter Description It means to enable WAN 3G/4G DHCP mode. Vigor2925 Series User’s Guide...
Page 682: Telnet Command: Wan Detect
It means to show the current status. > wan detect status WAN1: always on WAN2: off WAN3: off WAN4: off WAN5: off > wan detect wan1 target 192.168.1.78 Set OK > wan detect wan1 on Set OK Vigor2925 Series User’s Guide...
Page 683: Telnet Command: Wan Lb
However, only 2 to 9 are available for configuration. status It means to display the whole Bridge status. save It means to save the configuration into flash of Vigor router. enable/disable It means to enable/disable the Multi-VLAN function. Vigor2925 Series User’s Guide...
Page 684: Telnet Command: Wan Multifno
Available settings are: 3=Channel 3 4=Channel 4 5=Channel 5 6=Channel 6 7=Channel 7 8=Channel 8 WAN interface # Type a number to indicate the WAN interface. 1=WAN1 2=WAN2 status It means to display current bridge status. Vigor2925 Series User’s Guide...
Page 685: Telnet Command: Wan Vlan
> wan vlan wan 2 tag 60 %Set tag to 60 for WAN2 > wan vlan wan 1 enable %Enabled VLAN header encap for WAN1 > wan vlan wan 2 enable %Enabled VLAN header encap for WAN2 > wan vlan stat Vigor2925 Series User’s Guide...
Page 686: Telnet Command: Wan Fiber
It means to specify which LAN interface to be applied with such profile. It means to specify which WLAN interface (identified by -s <ssid> SSID number) will be applied with such profile. 1: SSID1 2: SSID2 Vigor2925 Series User’s Guide...
Page 687 It means to disnable such profile. It means to show the content of such command. It means to reset the specified profile. > wptl -e -p 1 -l 1,2 -s 1 -u http://www.draytek.com Profile 1 enable ... [OK] Applied LAN interfaces ... [OK] Applied WLAN interfaces ...
Page 688: Telnet Command: Wl Acl
> > wl acl showmode ssid1: none ssid2: none ssid3: none ssid4: none > wl acl add 00-50-70-ff-12-70 Set Done !! > wl acl add 00-50-70-ff-12-70 ssid1 ssid2 isolate Set Done !! > wl acl show Vigor2925 Series User’s Guide...
Page 689: Telnet Command: Wl Config
[enable] It means to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync field instead of long preamble with 128 bit sync Vigor2925 Series User’s Guide...
Page 690 SSID. 0: disable and 1:enable. upload: It means to configure the rate control for data upload. The unit is kbps. download: It means to configure the rate control for data download. The unit is kbps. Vigor2925 Series User’s Guide...
Page 691 % <Note> Please restart wireless after you set the parameters. > wl config security 1 wpa1x %% Configured Wlan Security Setting: % SSID1 %% Mode: wpa1x %% Wireless card must be reset for configurations to take effect %% (Telnet Command: wl restart) Vigor2925 Series User’s Guide...
Page 692: Telnet Command: Wl Set
This command allows users to activate wireless settings. wl act [En] Parameter Description It means to enable or disable the function of VPN isolation. off: disable on: enable > wl act on % Set Wlan to Enable. Vigor2925 Series User’s Guide...
Page 693: Telnet Command: Wl Scan
0 - display white list 1 - display block list, 2 - display gray/unknown list, 3 - display all list wl scan set wlist 001122aabbcc > wl scan start > wl scan show 3 > > Vigor2925 Series User’s Guide...
Page 694: Telnet Command: Wl Stamgt
It means reconnection time. The unit is minute. > wl stamgt enable 1 % Station Management Status: enabled > wl stamgt set 1 60 60 > wl stamgt show 1 NO. SSID BSSID Connect time Reconnect time Draytek 00:11:22:aa:bb:cc 0d:0:58:26 0d:0:0 Vigor2925 Series User’s Guide...
Page 695: Telnet Command: Wl Iso_Vpn
It means to map to the Ack policy settings of AP WMM. enable It means to enable the WMM for each SSID. 0: disable 1: enable Apsd [value] It means to enable / disable the ASPD(automatic power-save delivery) function. 0: disable 1: enable Vigor2925 Series User’s Guide...
Page 696: Telnet Command: Wl Ht
This command allows you to configure wireless settings. wl ht bw value wl ht gi value wl ht badecline value wl ht autoba value wl ht rdg value wl ht msdu value wl ht txpower value wl ht antenna value Vigor2925 Series User’s Guide...
Page 697: Telnet Command: Wl Restart
> wl ht bw value 1 BW=0 <Note> Please restart wireless after you set new parameters. > wl restart Wireless restart....This command allows you to restart wireless setting. > wl restart Wireless restart....Vigor2925 Series User’s Guide...
Page 698: Telnet Command: Wl Wds
0 – disable the function. hello [value] It means to send hello message to remote end (peer). Value: 1 – enable the function. 0 – disable the function. status It means to display WDS link status for 5GHz connection. Vigor2925 Series User’s Guide...
Page 699: Telnet Command: Wl Btnctl
It is reserved for RD debug. Do not use it. 不知道此功能的作用為何? This command is used to configure parameters related to wireless RF hardware. At present, it is not allowed for end user to operate. It is reserved for RD debug. Do not use it. Vigor2925 Series User’s Guide...
Page 700 It means to display current status of access control. show showmode It means to show the mode for each SSID. clear It means to clear all of the access control settings. > wl dual acl showmode SSID1: None SSID2: None SSID3: None SSID4: None Vigor2925 Series User’s Guide...
Page 701: Telnet Command: Wl Dual Apscan
> wl dual cardmac ? Card MAC: 54:2a:a2:08:67:22 This command allows users to configure general settings and security settings for wireless connection (5GHz). wl dual config enable [value] wl dual config enable show wl dual config mode [value] Vigor2925 Series User’s Guide...
Page 702 However, some original 11b wireless network devices only support long preamble. 0: disable to use long preamble. 1: enable to use long preamble. preamble show It means to display if preamble is enabled or not. Vigor2925 Series User’s Guide...
Page 703 Choose 1, 2, 3 or 4 to specify SSID1, SSID2, SSID3 or SSID4. enable: It means to enable such function. 0: disable and 1:enable. isolate show It means to display the status of wireless isolation. Vigor2925 Series User’s Guide...
Page 704: Telnet Command: Wl Dual Restart
SSID_NUMBER: Type 1, 2, 3 or 4 to specify SSID1, SSID2, [SSID_NUMBER] SSID3 or SSID4. [mode][key][index] mode: Available settings are: disable: No security. wpa1x: WPA/802.1x Only wpa21x: WPA2/802.1x Only wpamix1x: Mixed (WPA+WPA2/802.1x only) wep1x: WEP/802.1x Only wpapsk: WPA/PSK wpa2psk: WPA2/PSK wpamixpsk: Mixed (WPA+WPA2)/PSK wep: Vigor2925 Series User’s Guide...
Page 705: Telnet Command: Wl Dual Stalist
C: Connected, No Encryption. E: Connected, WEP. P: Connected, WPA. A: Connected, WPA2. N: Connecting. This command allows users to configure WDS for wireless connection (5GHz). wl dual wds mode [value] wl dual wds security [value] Vigor2925 Series User’s Guide...
Page 706 It means to display WDS link status for 5GHz connection. status show It means to display current WDS settings. mac add [index addr] add [index addr] – Add the peer MAC entry in Repeater/Bridge WDS MAC table. mac clear/disable/enable clear/disable/enable [index/all]- Clear, disable, enable the Vigor2925 Series User’s Guide...
Page 707 Bridge : Index Enable MAC Address 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 Repeater : Index Enable MAC Address 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 > wl dual wds wep 12345 % <Note> Please restart router after you set the parameters. Vigor2925 Series User’s Guide...
Page 708: Telnet Command: Wl Dual Wps
It means to display current WPS settings. > wl dual wps enable 1 WPS is enabled. > wl dual wps pin 88563337 WPS has triggered by PIN code. The AP will wait for WPS request from your client for 2 minutes... > Vigor2925 Series User’s Guide...
Page 709 > wol fromWan_Setting 1 192.168.1.45 255.255.255.0 % wol fromWan_Setting 1 192.168.1.45 255.255.255.0 The command is used to configure QoS for APP. appqos view appqos enable[0/1] appqos traceable [-v | -e AP_INDEX CLASS | -d AP_INDEX] appqos untraceable appqos show_config [-t |–u] Vigor2925 Series User’s Guide...
Page 710 It means to disable QoS for application(s). show_config [-t |–u] It means to display all of the traceable/untraceable APs and the configuration. > appqos enable 1 APP QoS set to Enable. > appqos traceable -e 68 2 TELNET: ENABLED, QoS Class 2. Vigor2925 Series User’s Guide...

Draytek Vigor2925 Series User Manual

Quick Links

Related Manuals for Draytek Vigor2925 Series

Summary of Contents for Draytek Vigor2925 Series