Draytek VIGOR2925 SERIES User Manual
  1. Manuals
  2. Brands
  3. Draytek Manuals
  4. Wireless Router
  5. Vigor2925 Series
  6. User manual

Draytek VIGOR2925 SERIES User Manual

Hide thumbs Also See for VIGOR2925 SERIES:
1
2
3
4
5
6
Table Of Contents
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
Table of Contents

Advertisement

Quick Links

Download this manual

Advertisement

Table of Contents
loading

Related Manuals for Draytek VIGOR2925 SERIES

Summary of Contents for Draytek VIGOR2925 SERIES

  • Page 2 Vigor2925 Series User’s Guide...
  • Page 3 Vigor2925 Series Dual-WAN Security Router User’s Guide Version: 3.3 Firmware Version: V3.8.2.1 (For future update, please visit DrayTek web site) Date: December 30, 2015 Vigor2925 Series User’s Guide...
  • Page 4 Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.

  • Page 5: Regulatory Information

    Product: Vigor2925 Series Router DrayTek Corp. declares that Vigor2925 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
  • Page 6 Vigor2925 Series User’s Guide...

  • Page 7: Table Of Contents

    2.1.3 For LTE WAN ......................... 51 2.2 Service Activation Wizard...................... 53 2.3 VPN Client Wizard ........................ 56 2.4 VPN Server Wizard ....................... 63 2.5 Wireless Wizard ........................68 2.6 VoIP Wizard........................... 72 2.7 Registering Vigor Router....................... 74 Vigor2925 Series User’s Guide...
  • Page 8 3.15 How to use AP Management function to check AP status and deploy WLAN profile ..153 3.16 CVM Application - How to manage the CPE (router) through Vigor2925 series? .... 157 3.17 CVM Application - How to build the VPN between remote devices and Vigor2925 series? ..............................
  • Page 9 4.10.4 APP QoS ........................352 4.11 Applications ........................355 4.11.1 Dynamic DNS ......................355 4.11.2 LAN DNS / DNS Forwarding ..................358 4.11.3 Schedule........................361 4.11.4 RADIUS/TACACS+ ....................364 4.11.5 Active Directory/ LDAP ....................368 4.11.6 UPnP........................... 371 Vigor2925 Series User’s Guide...
  • Page 10 4.17.2 SMS Inbox ........................472 4.17.3 Send SMS........................474 4.17.4 Router Commands...................... 475 4.17.5 Status.......................... 477 4.18 Wireless LAN(2.4GHz/5GHz) ................... 478 4.18.1 Basic Concepts......................478 4.18.2 General Setup......................481 4.18.3 Security ........................484 4.18.4 Access Control......................486 4.18.5 WPS..........................487 Vigor2925 Series User’s Guide...
  • Page 11 4.22.10 Traffic Graph......................560 4.22.11 Trace Route ......................561 4.22.12 Syslog Explorer......................562 4.22.13 IPv6 TSPC Status..................... 563 4.22.14 High Availability Status ..................... 564 4.22.15 Authentication Information..................566 4.22.16 DoS Flood Table....................... 567 4.23 External Devices ....................... 569 Vigor2925 Series User’s Guide...
  • Page 12 Telnet Command: ip dmzswitch..................... 609 Telnet Command: ip session ....................609 Telnet Command: ip bandwidth ..................... 610 Telnet Command: ip bindmac....................611 Telnet Command: ip maxnatuser................... 613 Telnet Command: ip lanDNSRes ..................613 Telnet Command: ip6 addr ....................614 Vigor2925 Series User’s Guide...
  • Page 13 Telnet Command: object kw ....................655 Telnet Command: object fe....................656 Telnet Command: port ......................658 Telnet Command: portmaptime ..................... 658 Telnet Command: prn ......................659 Telnet Command: qos setup....................659 Telnet Command: qos class ....................661 Vigor2925 Series User’s Guide xiii...
  • Page 14 Telnet Command: sys tftpd....................688 Telnet Command: sys cc ....................... 688 Telnet Command: sys version ....................689 Telnet Command: sys qrybuf....................689 Telnet Command: sys pollbuf ....................689 Telnet Command: sys tr069....................690 Telnet Command: sys sip_alg ....................692 Vigor2925 Series User’s Guide...
  • Page 15 Telnet Command: wan detect....................722 Telnet Command: wan lb....................... 723 Telnet Command: wan mvlan ....................723 Telnet Command: wan multifno ..................... 724 Telnet Command: wan vlan ....................725 Telnet Command: wan fiber....................726 Telnet Command: wptl......................726 Vigor2925 Series User’s Guide...
  • Page 16 Telnet Command: ha show....................761 Telnet Command: ha status....................762 Telnet Command: swm show ....................763 Telnet Command: swm get....................763 Telnet Command: swm post ....................763 Telnet Command: swm auth....................764 Telnet Command: swm extvlan ..................... 764 Vigor2925 Series User’s Guide...

  • Page 17: Introduction

    On the Wireless-equipped models (Vigor2925n/n-plus/Vn/Vn-plus/ac/Vac) each of the wireless SSIDs can also be grouped within one of the VLANs. In addition, Vigor2925 series supports USB interface for connecting USB printer to share printing function or 3G USB modem for network connection.

  • Page 18: Web Configuration Buttons Explanation

    Add new settings for specified item. Edit the settings for the selected item. Delete the selected item with the corresponding settings. Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed explanation. Vigor2925 Series User’s Guide...

  • Page 19: Led Indicators And Connectors

    VPN service is disabled. Blinking Traffic is passing through VPN tunnel. The DMZ function is enabled. The DMZ function is disabled. Blinking The data is transmitting. LED on Connector Left The port is connected. WAN1~ The port is disconnected. Vigor2925 Series User’s Guide...
  • Page 20 USB1~USB2 Connector for a USB device (for 3G/4G USB Modem or printer or Environmental Thermometer). WAN1 Fiber connection (100Mbps) for accessing the Internet. (for Vigor2925F) WAN1~WAN2 Connecter for local network devices or modem for accessing Internet. Vigor2925 Series User’s Guide...
  • Page 21 There are two mounting holes for installing antennas with sockets on Vigor router. Please install them as shown below. Major Signal Transmitted Hole SIM Card Slot Note, if only one antenna shall be installed, please use the mounting hole (major signal transmitted hole) near to the SIM card slot. Vigor2925 Series User’s Guide...
  • Page 22 While installing the SIM card into the card slot, note that back plate of the SIM card slot must be removed first and the direction of card notch must be on the left side. Vigor2925 Series User’s Guide...

  • Page 23: For Vigor2925Ac / Vigor2925N-Plus / Vigor2925N / Vigor2925Fn/ Vigor2925Ln

    Quickly: The data is transmitting. Slowly: LTE device is in dialing up procedure. The Web Content Filter is active. (It is enabled from Firewall >> General Setup). 2.4G/5G/WLAN 2.4G/5G: Wireless access point with bandwidth of 2.4GHz/5GHz is ready. Vigor2925 Series User’s Guide...
  • Page 24 The port is connected with 1000Mbps. The port is connected with 10/100Mbps Left The port is connected. LAN1~ The port is disconnected. LAN5 Blinking The data is transmitting. Right The port is connected with 1000Mbps. The port is connected with 10/100Mbps Vigor2925 Series User’s Guide...
  • Page 25 2.4G (Off) and 5G (On) – pressed and released the button once.  2.4G (On) and 5G (Off) – pressed and released the button twice.  2.4G (Off) and 5G (Off) – pressed and released the button three times. Vigor2925 Series User’s Guide...
  • Page 26 WAN1 (for Vigor2925Fn) WAN1~WAN2 Connecter for local network devices or modem for accessing Internet. LAN1~LAN5 Connecters for local network devices. Connecter for a power adapter. ON/OFF Power Switch. SIM Card Slot Connector for a SIM card. Vigor2925 Series User’s Guide...
  • Page 27 There are two mounting holes for installing antennas with sockets on Vigor router. Please install them as shown below. Major Signal Transmitted Hole SIM Card Slot Note, if only one antenna shall be installed, please use the mounting hole (major signal transmitted hole) near to the SIM card slot. Vigor2925 Series User’s Guide...
  • Page 28 Wrong installation might cause bad signal of wireless connection. Therefore, pay attention to the installation of antennas by referring to the following illustration. Holes for Antennas with Socket Holes for Antennas without Socket Vigor2925 Series User’s Guide...

  • Page 29: For Vigor2925Vac / Vigor2925Vn-Plus

    The port is connected with 1000Mbps. The port is connected with 10/100Mbps Left The port is connected. LAN1~ The port is disconnected. LAN5 Blinking The data is transmitting. Right The port is connected with 1000Mbps. The port is connected with 10/100Mbps Vigor2925 Series User’s Guide...
  • Page 30 Connecter for local network devices or modem for accessing Internet. LAN1~LAN5 Connecters for local network devices. Phone 1/2 Connecter for analog phone(s). Line Connector for PSTN life line. Connecter for a power adapter. Power Switch. ON/OFF Vigor2925 Series User’s Guide...

  • Page 31: Hardware Installation

    Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. (For the hardware connection, we take “n” model as an example.) Vigor2925 Series User’s Guide...
  • Page 32 For the installation of Vigor2829Vn-plus, refer to the following figure: Vigor2925 Series User’s Guide...

  • Page 33: Printer Installation

    You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
  • Page 34 A dialog will appear. Click Add a local printer and click Next. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next. Vigor2925 Series User’s Guide...
  • Page 35 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next. Click Standard and choose Generic Network Card. Vigor2925 Series User’s Guide...
  • Page 36 Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. Type a name for the chosen printer. Click Next. Vigor2925 Series User’s Guide...
  • Page 37 10. Choose Do not share this printer and click Next. 11. Then, in the following dialog, click Finish. Vigor2925 Series User’s Guide...
  • Page 38 12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties. 13. Edit the property of the new printer you have added by clicking Configure Port. Vigor2925 Series User’s Guide...
  • Page 39 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click it.

  • Page 40: Accessing Web Page

    Please type “admin/admin” as the Username/Password and click Login. Notice: If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Now, the Main Screen will appear. Vigor2925 Series User’s Guide...

  • Page 41: Changing Password

    Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type “admin/admin” as Username/Password for accessing into the web user interface with admin mode. Go to System Maintenance page and choose Administrator Password. Vigor2925 Series User’s Guide...

  • Page 42: Introducing Dashboard

    IPv6 Internet Access, Interface (physical connection), Security and Quick Access. Click Dashboard from the main menu on the left side of the main page. A web page with default selections will be displayed on the screen. Refer to the following figure: Vigor2925 Series User’s Guide...

  • Page 43: Virtual Panel

    It means such port is connected (with Giga transmission rate, 1Gbps) physically. Orange It means such port is connected (with 10/100 Mbps) physically. For detailed information about the LED display, refer to 1.3 LED Indicators and Connectors. Vigor2925 Series User’s Guide...

  • Page 44: Name With A Link

    However, some important and common used menu items which can be accessed in a quick way just for convenience. Look at the right side of the Dashboard. You will find a group of common used functions grouped under Quick Access. Vigor2925 Series User’s Guide...
  • Page 45 All of the hosts (including wireless clients) displayed with Host ID, IP Address and MAC address indicates that the traffic would be transmitted through LAN port(s) and then the WAN port. The purpose is to perform the traffic monitor of the host(s). Vigor2925 Series User’s Guide...

  • Page 46: Topology - Switch Management

    Moreover, move the mouse cursor on the icon (e.g., Phone 1, Phone 2, DialPlan and SIP Accounts) displayed on the screen, the system will open related configuration web page immediately. Below shows the topology of switch management: Vigor2925 Series User’s Guide...
  • Page 47 All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions. Vigor2925 Series User’s Guide...

  • Page 48: Web Console

    The functions/settings modified under Web Console also can be reviewed on the web user interface. Click the Web Console icon on the top of the main screen to open the following screen. Vigor2925 Series User’s Guide...

  • Page 49: Config Backup

    Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting. Click the Logout icon to exit the web user interface. Such page displays the physical connection status such as LAN connection status, WAN connection status, and so on. Vigor2925 Series User’s Guide...
  • Page 50 Vigor2925 Series User’s Guide...
  • Page 51 Name – Display the name of the router. Mode - Displays the type of WAN connection (e.g., PPPoE). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. Vigor2925 Series User’s Guide...

  • Page 52: Virtual Wan

    Internet. Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list the purpose of such WAN connection. Vigor2925 Series User’s Guide...

  • Page 53: Saving Configuration

    Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2925 Series User’s Guide...
  • Page 54 This page is left blank. Vigor2925 Series User’s Guide...

  • Page 55: Quick Setup

    If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next. Vigor2925 Series User’s Guide...
  • Page 56 WAN1, WAN2, WAN3/LTE and WAN4 will bring up different configuration page. Refer to the following for detailed information. In which, WAN3 will be treated as USB WAN or LTE WAN according to the USB modem or SIM Card used for accessing Internet. Vigor2925 Series User’s Guide...

  • Page 57: For Wan1/Wan2 (Ethernet)

    ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2925 Series User’s Guide...
  • Page 58 Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. Vigor2925 Series User’s Guide...
  • Page 59 Now, you can enjoy surfing on the Internet. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2925 Series User’s Guide...
  • Page 60 Type the IP address of the server. Server Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2925 Series User’s Guide...
  • Page 61 Now, you can enjoy surfing on the Internet. Choose WAN1/WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2925 Series User’s Guide...
  • Page 62 Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Please type in the IP address information originally provided by your ISP. Then click Next for next step. Vigor2925 Series User’s Guide...
  • Page 63 Click DHCP as the Internet Access type. Simply click Next to continue. Available settings are explained as follows: Item Description Host Name Type the name of the host. Note: The maximum length of the host name you can set is Vigor2925 Series User’s Guide...
  • Page 64 After finished the settings above, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2925 Series User’s Guide...

  • Page 65: For Wan3/Wan4 (Usb)

    Modem Initial String – Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of the string you can set is 47 characters. Vigor2925 Series User’s Guide...
  • Page 66 Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2925 Series User’s Guide...

  • Page 67: For Lte Wan

    Network Mode – Force Vigor router to connect Internet with the mode specified here. If you choose 4G/3G/2G as network mode, the router will choose a suitable one according to the actual wireless signal automatically. APN Name – APN means Access Point Name which is Vigor2925 Series User’s Guide...
  • Page 68 Please type in required information originally provided by your ISP. Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2925 Series User’s Guide...

  • Page 69: Service Activation Wizard

    Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
  • Page 70 When you finish the selection, please click Next. Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from retailing outlets.
  • Page 71 The valid time for the free trial of these services is one month. When all the trial editions for various web content filters had been enabled, the configuration page of Service Activation Wizard will be invalid as shown below. Vigor2925 Series User’s Guide...

  • Page 72: Vpn Client Wizard

    Route Mode/NAT Mode – If the remote network only allows you to dial in with single IP, please choose NAT mode, otherwise please choose Route Mode. There are 64 VPN profiles for users to set. Please choose a LAN-to-LAN Profile Vigor2925 Series User’s Guide...
  • Page 73 In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. Vigor2925 Series User’s Guide...
  • Page 74 When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic:  When you choose IPsec, you will see the following graphic:  When you choose L2TP, you will see the following graphic: Vigor2925 Series User’s Guide...
  • Page 75 When you choose L2TP over IPsec (Nice to Have) or L2TP over IPsec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. Vigor2925 Series User’s Guide...
  • Page 76 You have to configure one certificate at least previously in Certificate Management >> Local Certificate. Otherwise, the setting you choose here will not be effective. IPsec Security Medium - Authentication Header (AH) means data will be Vigor2925 Series User’s Guide...
  • Page 77 Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN Connection Connection status. Management Do another VPN Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. Vigor2925 Series User’s Guide...
  • Page 78 View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2925 Series User’s Guide...

  • Page 79: Vpn Server Wizard

    VPN connection. Please choose a This item is available when you choose Site to Site VPN LAN-to-LAN Profile (LAN-to-LAN) as VPN server mode. There are 64 VPN profiles for users to set. Vigor2925 Series User’s Guide...
  • Page 80 2. After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. Here we take the examples of choosing Site-to-Site VPN as the VPN Server Mode. Vigor2925 Series User’s Guide...
  • Page 81 When you check PPTP, you will see the following graphic:  When you check PPTP & IPsec & L2TP (three types) or PPTP & IPsec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2925 Series User’s Guide...
  • Page 82 Peer IP/VPN Client Type the WAN IP address or VPN client IP address for the remote client. Peer ID Type the ID name for the remote client. The length of the name is limited to 47 characters. Vigor2925 Series User’s Guide...
  • Page 83 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2925 Series User’s Guide...

  • Page 84: Wireless Wizard

    Available settings are explained as follows: Item Description Wireless 2.4GHz Settings Name Type the SSID name of this router for wireless 2.4GHz. The default name is defined with DrayTek. Change the name if required. Vigor2925 Series User’s Guide...
  • Page 85 802.1x authentication. Either 8~63 ASCII characters, such as 012345678(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). Next Click it to get into the next setting page. Vigor2925 Series User’s Guide...
  • Page 86 Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbps. Wireless 5GHz Settings – Such part is available when your Vigor router supports Vigor2925 Series User’s Guide...
  • Page 87 Exit the wireless wizard without saving any changes. 4. After typing the required information, click Next. 5. The following page will display the configuration summary for wireless setting. 6. Click Finish to complete the wireless settings configuration. Vigor2925 Series User’s Guide...

  • Page 88: Voip Wizard

    Password – Type the password for the account registered to your ISP. Use the same Account as phone 1 – If you don’t need to configure Phone 2 settings, simply check this box. Click it to get into the next setting page. Next Vigor2925 Series User’s Guide...
  • Page 89 Cancel Click it to give up the VoIP wizard. 3. After finished the settings above, click Next for viewing summary of such connection. 4. Click Finish. A page of VoIP Wizard Setup OK!!! will appear. Vigor2925 Series User’s Guide...

  • Page 90: Registering Vigor Router

    Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login. Vigor2925 Series User’s Guide...
  • Page 91 When the following page appears, please type in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit. Vigor2925 Series User’s Guide...
  • Page 92 When the following page appears, your router information has been added to the database. After clicking OK, you will see the following page. Your router has been registered to myvigor website successfully. Vigor2925 Series User’s Guide...

  • Page 93: Tutorials And Applications

    TSPC, AICCU, DHCPv6 Client and Static IPv6. Access into the web user interface of Viogr2925. Open WAN>> Internet Access. Choose one of the WAN interfaces as the one supporting IPv6 service. Then, click the IPv6 button of the selected WAN. Vigor2925 Series User’s Guide...
  • Page 94 PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same time Choose PPP and type the information for PPPoE of IPv4. Access into the setting page for IPv6 service, it is not necessary for you to configure anything. Vigor2925 Series User’s Guide...
  • Page 95 Click OK and open Online Status. If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time. Vigor2925 Series User’s Guide...
  • Page 96 Vigor2925 Series User’s Guide...
  • Page 97 (In the following figure, the TSPC information is obtained from http://gogo6.com/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shown as follows: Vigor2925 Series User’s Guide...
  • Page 98 (In the following figure, the AICCU information is obtained from https://www.sixxs.net/main/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
  • Page 99  DHCPv6 Client Choose DHCPv6 Client. Click one of the identity associations and type the IAID number. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
  • Page 100  Static IPv6 Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
  • Page 101 Choose 6in4 Static Tunnel. Type remote endpoint IPv4 address, 6in4 IPv6 Address, LAN Routed Prefix and Tunnel TTL. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
  • Page 102  Choose 6rd. Type IPv4 Border Relay, IPv4 Mask Length, 6rd Prefix and 6rd Prefix Length. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2925 Series User’s Guide...
  • Page 103 In the field of DHCPv6 Server Configuration, when DHCPv6 service is enabled, you can assign available IPv6 address for the client manually. Note: When both mechanisms are enabled, the client can determine which mechanism to be used (e.g., the default mechanism for Windows7 is router advertisement service). Vigor2925 Series User’s Guide...
  • Page 104 IPv4 IP and IPv6 IP services. Its IPv6 address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7. After getting the above message, it means the IPv6 service has been activated successfully. Vigor2925 Series User’s Guide...
  • Page 105 If not, only a steady turtle will be seen. If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to access and utilize. Vigor2925 Series User’s Guide...

  • Page 106: How Can I Get The Files From Usb Storage Device Connecting To Vigor Router

    Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable SMB service. Vigor2925 Series User’s Guide...
  • Page 107 "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2925 Series User’s Guide...
  • Page 108 Now, users in LAN of Vigor2925 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. Vigor2925 Series User’s Guide...

  • Page 109: (Main Mode)

    (in this case, type VPN Server), and check the box of Enable This Profile. For Vigor router will be set as a server, the call direction shall be set as Dial-in and set 0 as Idle Timeout. Vigor2925 Series User’s Guide...
  • Page 110 (e.g., 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote side. Click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 111 (in this case, type VPN Client), and check the box of Enable This Profile. For such Vigor router will be set as a client, the call direction shall be set as Dial-out. Check the box of Always on for a permanent VPN connection. Vigor2925 Series User’s Guide...
  • Page 112 IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the remote side. Click OK to save the settings. Vigor2925 Series User’s Guide...

  • Page 113: How To Optimize The Bandwidth Through Qos Technology

    Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
  • Page 114 In the pop-up window, choose Range Address as the Address Type and type the start IP address and end IP address in relational fields. Click OK to save the settings and exit the window. Click OK again to save the settings. Vigor2925 Series User’s Guide...
  • Page 115 The class rule for VoIP has been set. Click OK to return to previous page. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. Vigor2925 Series User’s Guide...
  • Page 116 10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control. 11. Click OK to save the settings. The class rules for WAN1 are defined as shown below. Vigor2925 Series User’s Guide...

  • Page 117: Qos Setting Example

    Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor2925 Series User’s Guide...
  • Page 118 E-mail using protocol POP3 and SMTP. Click OK to save the settings. Return to previous page. Enter the Name of Index Class #2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. Vigor2925 Series User’s Guide...
  • Page 119 Click Setup link for WAN2. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic influence other application. Click OK. Vigor2925 Series User’s Guide...
  • Page 120 11. Click Add to open the following window. Check the ACT box, first. 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor2925 Series User’s Guide...

  • Page 121: How To Use Landing

    Landing Page is a special feature configured under User Management. It can specify the message, content to be seen or specify which website to be accessed into when users try to access into the Internet by passing the authentication. Here, we take Vigor2925 series router as an example.
  • Page 122 Now you can enable the Landing Page function. Open User Management >> User Profile and click one of the index number (e.g., index number 3) links. In the following page, check the box of Landing page and click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 123 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will see the message of Login Success from the browser you use. Vigor2925 Series User’s Guide...
  • Page 124 In the field of Landing Page, please type the words as below: “ <body stats=1><script language='javascript'> window.location='http://www.draytek.com'</script></body>” Next, enable the Landing Page function. Open User Management -> User Profile and click one of the index number (e.g., index number 3) links. Vigor2925 Series User’s Guide...
  • Page 125 In the following page, check the box of Landing page and click OK to save the settings. Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Vigor2925 Series User’s Guide...
  • Page 126 Click Login. If the logging is successful, you will be directed into the website of www.draytek.com. Vigor2925 Series User’s Guide...

  • Page 127: How To Send A Notification To Specified Phone Number Via Sms Service In Wan Disconnection

    Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider setting. In the following page, type the username and password and set the quota that the router can send the message out. Vigor2925 Series User’s Guide...
  • Page 128 Choose any index number (e.g., Index 1 in this case) to configure conditions for sending the SMS. In the following page, type the name of the profile and check the Disconnected and Reconnected boxes for WAN to work in concert with the topic of this paper. Vigor2925 Series User’s Guide...
  • Page 129 Click OK to save the settings. Later, if one of the WAN connections fails in your router, the system will send out SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully. Vigor2925 Series User’s Guide...
  • Page 130 URL string of the SMS provider and type the username and password. After clicking OK, the new added SMS provider will be added and will be available for you to specify for sending SMS out. Vigor2925 Series User’s Guide...

  • Page 131: How To Create An Account For Myvigor

    The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
  • Page 132 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. Vigor2925 Series User’s Guide...
  • Page 133 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2925 Series User’s Guide...
  • Page 134 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2925 Series User’s Guide...

  • Page 135: Create An Account Via Myvigor Web Site

    11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
  • Page 136 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. Vigor2925 Series User’s Guide...
  • Page 137 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2925 Series User’s Guide...
  • Page 138 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2925 Series User’s Guide...

  • Page 139: How To Configure Certain Computers Accessing To Internet

    Firewall>>Filter Setup is used as the default setting, we have to create a new rule starting from Filter Rule 2 of Set 2. Access into the web user interface of Vigor router. Open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 2 button. Vigor2925 Series User’s Guide...
  • Page 140 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. Vigor2925 Series User’s Guide...
  • Page 141 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 142 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor2925 Series User’s Guide...

  • Page 143: How To Block Facebook Service Accessed By The Users Via Web Content Filter / Url Content Filter

    Benefits: Easily and quickly implement the category/website that you want to block. Note: License is required. URL Content Filter, Benefits: Free, flexible for customize webpage. Note: Manual setting (e.g., one keyword for one website.) Make sure the Web Content Filter (powered by Commtouch) license is valid. Vigor2925 Series User’s Guide...
  • Page 144 Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Enable this profile in Firewall>>General Setup>>Default Rule. Vigor2925 Series User’s Guide...
  • Page 145 In the field of Contents, please type facebook. Configure the settings as the following figure. Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. Vigor2925 Series User’s Guide...
  • Page 146 B. Disallow users to play games on Facebook Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Vigor2925 Series User’s Guide...
  • Page 147 Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. When you finished the above steps, please open Firewall>>General Setup. Vigor2925 Series User’s Guide...
  • Page 148 Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. Vigor2925 Series User’s Guide...

  • Page 149: How To Setup Address Mapping

    We will take an example to introduce how to make use of this feature. Log into the web user interface of Vigor2925. Open WAN>>Internet Access. For WAN1, choose Static or Dynamic IP as the Access Mode and click Details Page. Vigor2925 Series User’s Guide...
  • Page 150 Set main WAN IP address as 202.211.100.10. Click the WAN IP Alias button to configure the other IP address which is 202.211.100.11. Make sure Join IP NAT Pool is not checked. Click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 151 After finished configuration for WAN1, open Load-Balance/Route Policy. Click Index number 1 and 2 to configure the details. After finished the settings, click OK to save the settings respectively. Vigor2925 Series User’s Guide...
  • Page 152 Upon completing the above configuration, you have specified the outgoing IP address(es) for some specific computers. Now, you bind some specific computers to some WAN IP alias for outgoing traffic. Vigor2925 Series User’s Guide...

  • Page 153: How To Setup Load Balance For Packets

    Internet. The PC in LAN1 can send the data to the remote PC through the specified WAN1. Access into web user interface of Vigor2925series. Open Load-Balance/Route Policy>>General Setup. From the following web page, simply click Advance Mode and click index number #1. Vigor2925 Series User’s Guide...
  • Page 154 In the following page, check Enable; set Dest IP Start and Dest IP End with 203.65.1.35 and 203.65.1.35; choose WAN1 as the Interface; click default gateway; do not check Failover To. After finished the above settings, click OK to save the configuration. Vigor2925 Series User’s Guide...
  • Page 155 Now, the packets sent to the remote PC (IP address: 203.65.1.35) will be forced to pass through WAN1. Vigor2925 Series User’s Guide...

  • Page 156: How To Authenticate Clients Via User Management

    With User Management authentication function, before a valid username and password have been correctly supplied, a particular client will not be allowed to access Internet through the router. There are three ways for authentication: Web, Telnet and Alert Tool. Vigor2925 Series User’s Guide...
  • Page 157 Web authentication interface first. Then, the client is trying to access http://www.draytek.com and but brought to the Vigor router. Since this is an SSL connection, some web browsers will display warning messages.
  • Page 158 With Chrome browser, you may get the following warning. Click Proceed anyway. After that, the web authentication window will appear. Input the user name and the password for your account (defined in User Management) and click Login. Vigor2925 Series User’s Guide...
  • Page 159 If the authentication is successful, the client will be redirected to the original web site that he tried to access. In this example, it is http://www.draytek.com . Furthermore, you will get a popped up window as the following. Then you can access the Internet.
  • Page 160 192.168.1.1 with your router’s real IP address, and add the port number if the default management port has been modified. If the authentication is successful, you will get the Welcome Message that is set in the User Management >> General Setup page. Vigor2925 Series User’s Guide...
  • Page 161 With the default setup <body stats=1><script language='javascript'> window.location='http://www.draytek.com'</script></body>, you will be redirected to http://www.draytek.com . You may change it if you want. For example, you will get the following welcome message if you enter Login Successful in the Welcome Message table.
  • Page 162 If SSL Tunnel or SSL Web Proxy is disabled in the VPN profile, a User Management account and a remote dial-in VPN profile can use the same Username, even with different passwords. However, we recommend you to use different usernames for different user profiles in User Management and VPN profiles. Vigor2925 Series User’s Guide...
  • Page 163 Note: Here expired time is “Unlimited” means the Time Quota function is not enabled for this account. After login, this account will not be expired until it is logout. In the Web interface of router, the configuration page of Time Quota is shown as below. Vigor2925 Series User’s Guide...
  • Page 164 You will get the following message. The expired time is shown after you login. After you run out the available time, you can’t use this account any more until the administrator manually adds additional time for you. Vigor2925 Series User’s Guide...
  • Page 165 Any modification to the Firewall policy will break down the connections of all current users. They all have to authenticate again for Internet access.  The administrator may check the current users from User Online Status page. Vigor2925 Series User’s Guide...

  • Page 166: How To Use Dns Filter

    1. Open CSM>>Web Content Filter Profile to set the categories. Make sure WCF License has already been activated. 2. Click Index 1 link to open the following page. Disable all of the categories first. Then, enable Search Engine, Portals, and Social Networking. Vigor2925 Series User’s Guide...
  • Page 167 Block as the Syslog; choose WCF-1 Default. 6. Click OK to save the DNS filter configuration. Now, all settings about blocking search engine and social website are complete. Please try to access into www.google.com (the search engine) to see the result. Vigor2925 Series User’s Guide...
  • Page 168 From the Syslog, we can find out “google” is blocked. Vigor2925 Series User’s Guide...

  • Page 169: How To Use Ap Management Function To Check Ap Status And Deploy Wlan Profile

    Edit button be available. Then, click the Edit button. When the following configuration page appears, make the changes you want and check Apply to All APs. Then, click Next to access into the next page. Vigor2925 Series User’s Guide...
  • Page 170 APs respectively. Such feature will be convenient for people who want to quickly deploy multiple Vigor APs in a large exhibition to reach the goal of “plug and play” and “zero-configuration”. Vigor2925 Series User’s Guide...
  • Page 171 The following page allows you to modify related settings for 2.4G SSID of managed AP. Make the changes you want for 2.4G SSID. Click Next for next page. Vigor2925 Series User’s Guide...
  • Page 172 AP. Continue to make any changes you want. After finished all of the changes, simply click Finish. Now, the AP (represented with VigorAP900 detected by Vigor router will be applied with the settings modified by Vigor router. Vigor2925 Series User’s Guide...

  • Page 173: Cvm Application - How To Manage The Cpe (Router) Through Vigor2925 Series

    To manage CPEs through Vigor2925 series, you have to set URL on CPE first and set username and password for Vigor2925 series. For this section, we use Vigor2860 series as the example. All the CPE configuration will be done through Vigor2925 series.
  • Page 174 In the field of ACS Server, type the URL (IP address with port number) of Vigor2925 series and type the same Username and Password defined on the page of Central VPN Management>>General Setup in Vigor2925 series. Then, click Enable for CPE Client and then click OK to save the settings.
  • Page 175 Open WAN>>Internet Access. Use the drop down list of Access Mode on WAN1 to select MPoA (RFC1483/2684). Then, click Details Page. Click Specify an IP address. Type correct WAN IP address, subnet mask and gateway IP address for your CPE. Then click OK. Vigor2925 Series User’s Guide...
  • Page 176 Note: Reboot the CPE device and re-log into Vigor2925 series. CPE which has registered to Vigor2925 series will be captured and displayed on the page of Central VPN Management>>CPE Management. Return to the web user interface of Vigor2925 series. Open Central VPN Management>>CPE Management. Now there is one CPE (Vigor2860n+) displayed on the screen.

  • Page 177: Cvm Application - How To Build The Vpn Between Remote Devices And Vigor2925 Series

    When a remote device (e.g., Vigor2860n+ in the following figure) is managed by Vigor2925 series, it is easy to build VPN between these two devices. Access into the web user interface of Vigor2925 series. Open Central VPN Management>>VPN Management. Click the device icon (e.g., Vigor2860n+) to display a drop down list. Then, click the PPTP, IPsec or Advanced.
  • Page 178 VPN and Remote Access>>LAN to LAN of the remote device for viewing the detailed information. Note: The profile name is created automatically by the system (Vigor2925, the VPN Server). Do not modify any value in such page to avoid VPN error. Vigor2925 Series User’s Guide...

  • Page 179: Cvm Application - How To Upgrade Cpe Firmware Through Vigor2925 Series

    Vigor2860, as an example, is chosen for Vigor2925 to perform the CPE firmware upgrade remotely in this case. Plug in USB storage disk onto Vigor2925 series via USB interface. Make sure the USB disk has been installed correctly; otherwise, the firmware upgrade will not be successful.
  • Page 180 Select to locate it. Specify the Schedule profile. At last, click Now, a new maintenance profile has been created. Click Now to perform the firmware upgrade immediately for Vigor2860. Wait for several minutes for firmware upgrade. Vigor2925 Series User’s Guide...
  • Page 181 Click Managed Devices List. Click the icon of Vigor2860 and click Edit and view the software version. Another way to check if the firmware upgrade is completed or not, simply open Central VPN Management>>Log & Alert. Vigor2925 Series User’s Guide...
  • Page 182 This page is left blank. Vigor2925 Series User’s Guide...

  • Page 183: Advanced Configuration

    These are known as private IP addresses, and are listed in the following ranges: From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 Vigor2925 Series User’s Guide...
  • Page 184 Besides, 3G/4G USB Modem in WAN3 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G/4G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information.

  • Page 185: General Setup

    Please configure WAN1, WAN2, WAN3 (or LTE) and WAN4 settings. This webpage allows you to set general setup for WAN1, WAN2, WAN3 (or LTE) and WAN4 respectively. For all of the routers except for Vigor2925L and Vigor2925Ln--- For Vigor2925L and Vigor2925Ln---- Vigor2925 Series User’s Guide...
  • Page 186 Display the downstream and upstream rate of such WAN interface. Active Mode Display whether such WAN interface is Active device or backup device. Note: In default, each WAN port is enabled. After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 187 Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the Vigor2925 Series User’s Guide...
  • Page 188 WAN interface disconnects. All of the selected WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 189 Display the physical mode of such WAN interface. Line Speed If your choose According to Line Speed as the Load Balance Mode, please type the line speed for downloading and uploading for such WAN interface. The unit is kbps. Vigor2925 Series User’s Guide...

  • Page 190: Internet Access

    For the router supports multi-WAN function, the users can set different WAN settings (for WAN1/WAN2/WAN3/WAN4) for Internet Access. Due to different Physical Mode for WAN interface, the Access Mode for these connections also varies. Refer to the following figures. Access Mode for Etherenet, Vigor2925 Series User’s Guide...
  • Page 191 This button will open different web page (based on Physical Mode) to setup IPv6 Internet Access Mode for WAN interface. If IPv6 service is active on this WAN interface, the color of “IPv6” will become green. Vigor2925 Series User’s Guide...
  • Page 192 WAN>>Interface Access will be overwritten. DataType – Choose the type (ASCII or Hex) for the data to be stored. Data – Type the content of the data to be processed by the function of DHCP option. Vigor2925 Series User’s Guide...
  • Page 193 Application >> Schedule web page and you can use the number that you have set in that web page. Such function allows you to verify whether network WAN Connection connection is alive or not through ARP Detect or Ping Vigor2925 Series User’s Guide...
  • Page 194 WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Type the additional WAN IP address and check the Enable box. Then Vigor2925 Series User’s Guide...
  • Page 195 If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. To use Static or Dynamic IP as the accessing protocol of the internet, please click the Static or Dynamic IP tab. The following web page will be shown. Vigor2925 Series User’s Guide...
  • Page 196 Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Primary Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. Vigor2925 Series User’s Guide...
  • Page 197 WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Vigor2925 Series User’s Guide...
  • Page 198 Specify a MAC Address: Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. Vigor2925 Series User’s Guide...
  • Page 199 The maximum length of the password you can set is 62 characters. Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be Vigor2925 Series User’s Guide...
  • Page 200 WAN IP Alias - If you have multiple public IP addresses Method(IPCP) and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Vigor2925 Series User’s Guide...
  • Page 201 Specify an IP address – Click this radio button to specify some data.  IP Address – Type the IP address.  Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2925 Series User’s Guide...
  • Page 202 It lists all of the modems supported by such router. 3G /4G USB Modem (PPP Click Enable for activating this function. If you click mode) Disable, this function will be closed and all the settings that you adjusted in this page will be invalid. Vigor2925 Series User’s Guide...
  • Page 203 IP address in this field for pinging. TTL (Time to Live) – Set TTL value of PING operation. Default Click it to return to factory default settings. After finishing all the settings here, please click OK to activate them. Vigor2925 Series User’s Guide...
  • Page 204 Type PIN code of the SIM card that will be used to access SIM PIN code Internet. The maximum length of the PIN code you can set is 19 characters. Vigor2925 Series User’s Guide...
  • Page 205 Primary Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Set TTL value of PING operation. After finishing all the settings here, please click OK to activate them. Vigor2925 Series User’s Guide...
  • Page 206 ISPs. Type the name. The maximum length of the name you can set is 47 characters. UserName Type the username (optional). The maximum length of the name you can set is 47 characters. Vigor2925 Series User’s Guide...
  • Page 207 TTL (Time to Live) – Set TTL value of PING operation.  Ping Interval – Type the interval for the system to execute the PING operation.  Ping Retry – Type the number of times that the system is Vigor2925 Series User’s Guide...
  • Page 208 Such function allows you to verify whether network WAN Connection connection is alive or not through NS Detect or Ping Detect. Detection Mode – Choose Ping Detect or Always On for the system to execute for WAN detection. Vigor2925 Series User’s Guide...
  • Page 209 After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet. Vigor2925 Series User’s Guide...
  • Page 210 IP address or hostname for pinging.  Ping IP/Hostname – Type the IP address/host name in such field.  TTL (Time to Live) – Set TTL value of PING operation After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 211 ID (e.g., T115394). Type the ID offered by Tunnel Broker. Subnet Prefix Type the subnet prefix address obtained from service provider. The maximum length of the prefix you can set is 128 characters. Vigor2925 Series User’s Guide...
  • Page 212 After finished the above settings, click OK to save the settings. – – DHCPv6 client mode would use DHCPv6 protocol to obtain IPv6 address from server. Available settings are explained as follows: Item Description IAID (Identify Type a number as IAID. Association ID) Vigor2925 Series User’s Guide...
  • Page 213 User Management will be ignored. And all of the filter rules defined and enabled in Firewall menu will be activated. Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface. After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 214 Add – Click it to add a new entry. Delete – Click it to remove an existed entry. Display current interface IPv6 address. Current IPv6 Address Table Static IPv6 Gateway IPv6 Gateway Address - Type your IPv6 gateway address Configuration here. Vigor2925 Series User’s Guide...
  • Page 215 User Management will be ignored. And all of the filter rules defined and enabled in Firewall menu will be activated. Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface. After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 216 Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Vigor2925 Series User’s Guide...
  • Page 217 Available settings are explained as follows: Item Description Auto 6rd – Retrieve 6rd prefix automatically from 6rd 6rd Mode service provider. The IPv4 WAN must be set as "DHCP". Static 6rd - Set 6rd options manually. Vigor2925 Series User’s Guide...
  • Page 218 TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode. Vigor2925 Series User’s Guide...

  • Page 219: Multi-Vlan

    Enable - Check this box to enable the port-based bridge function on this channel. P1 ~ P5 – Check the box(es) to build bridge connection on LAN. Click any index (8, 9 and 10) to get the following web page: Vigor2925 Series User’s Guide...
  • Page 220 Moreover, WAN link for Channel 5, 6 and 7 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 5, 6 or 7 to configure your router. Vigor2925 Series User’s Guide...
  • Page 221 The user will be able to select the physical WAN interface the channel shall use here. VLAN Tag – Type the value as the VLAN ID number. General Settings Valid settings are in the range from 1 to 4095. The network Vigor2925 Series User’s Guide...
  • Page 222 ISP Access Setup, IP For other settings, refer to Details Page for PPPoE in Address From ISP, WAN WAN1. IP Network Settings, DNS Server IP Address After finished the above settings, click OK to save the settings. Vigor2925 Series User’s Guide...

  • Page 223: Wan Budget

    Billing cycle day of month settings will need to be configured correctly first in order for some period calculations to be performed correctly. Click WAN1/WAN2/WAN3 or LTE/WAN4 link to open the following web page. Available settings are explained as follows: Item Description Vigor2925 Series User’s Guide...
  • Page 224  Today is day – Specify the day in the cycle as the starting point which Vigor router will reset the traffic record. For example, 3 means the third day of the billing cycle. Vigor2925 Series User’s Guide...
  • Page 225 Send Mail Alert to Administrator is selected. Or, the system will send out SMS message to the administrator if Send SMS messages to Administrator is selected. Vigor2925 Series User’s Guide...

  • Page 226: Lan

    IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2925 Series User’s Guide...
  • Page 227 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2925 Series User’s Guide...

  • Page 228: General Setup

    Such information is set in default and you can not modify it. Details Page - Click it to access into the setting page. Each LAN will have different LAN configuration page. Each LAN must be configured in different subnet. Vigor2925 Series User’s Guide...
  • Page 229 IP address ….. LAN1/LAN2/LAN3/LAN4/LAN5 instead of DNS servers given by the Internet Access server (PPPoE, PPTP, L2TP or DHCP server). Inter-LAN Routing Check the box to link two or more different subnets (LAN and LAN). Vigor2925 Series User’s Guide...
  • Page 230 DHCP request to the specified location. Enable Server - Let the router assign IP address to every host in the LAN. Disable Server – Let you manually assign IP address to every host in the LAN. Vigor2925 Series User’s Guide...
  • Page 231 DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: 194.98.0.1 to this field. The default DNS Server IP address can be found via Online Status: Vigor2925 Series User’s Guide...
  • Page 232 Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...
  • Page 233 Enable Relay Agent - If you want to use another DHCP server in the network other than the Vigor Router’s, you can let Relay Agent help you to redirect the DHCP request to the specified location. Vigor2925 Series User’s Guide...
  • Page 234 DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: 194.98.0.1 to this field. The default DNS Server IP address can be found via Online Status: Vigor2925 Series User’s Guide...
  • Page 235 Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. When you finish the configuration, please click OK to save and exit this page. Open LAN>>General Setup. Click the Details Page button of LAN1. Vigor2925 Series User’s Guide...
  • Page 236 OK to save the settings. Open WAN>>Internet Access. Choose Static or Dynamic IP as Access Mode. Then click Details Page. In the configuration web page, type the settings as follows and click OK to save the settings. Vigor2925 Series User’s Guide...
  • Page 237 Now, a network connection via MPLS (Multiprotocol Label Switching) between LAN2 user and the Branch user is established successfully. Internet is not required for them. Vigor2925 Series User’s Guide...
  • Page 238 Start IP Address - Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 1st IP address of your router is 192.168.1.1, the starting IP address must be 192.168.1.2 or greater, but smaller than Vigor2925 Series User’s Guide...
  • Page 239 Edit – Click it to edit the selected MAC address. Cancel – Click it to cancel the job of adding, deleting and editing. When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...
  • Page 240 WAN Primary Interface Use the drop down list to specify a WAN interface for IPv6. IPv6 Address –Type static IPv6 address for LAN. Static IPv6 Address Prefix Length – Type the fixed value for prefix length. Vigor2925 Series User’s Guide...
  • Page 241 Auto IPv6 Range – The default settings are enabled. If it is disabled, you need to type start and end IPv6 addresses separately. Start IPv6 Address / End IPv6 Address –Type the start and end address for IPv6 server. Vigor2925 Series User’s Guide...
  • Page 242 Extension WAN – Not only the IP address can be obtained from the primary WAN, but also the prefix for IPv6 LAN IP address can be assigned by extension WAN specified here. When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...

  • Page 243: Static Route

    The number (1 to 30) under Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Vigor2925 Series User’s Guide...
  • Page 244 Type the subnet mask for such static route. Use the drop down list to specify an interface for such static Network Interface route. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
  • Page 245 Click any underline of index number to get the following page. Available settings are explained as follows: Item Description Enable Check it to enable this profile. Destination IPv6 Address Type the IP address with the prefix length for this entry. / Prefix Len Vigor2925 Series User’s Guide...
  • Page 246 Click the LAN >> Static Route and click on the Index Number 1. Check the Enable box. Please add a static route as shown below, which regulates all packets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click OK. Vigor2925 Series User’s Guide...
  • Page 247 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Click OK. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2925 Series User’s Guide...

  • Page 248: Vlan

    The multi-subnet can let a small businesses have much better isolation for multi-occupancy applications. Go to LAN page and select VLAN. The following page will appear. Click Enable to invoke VLAN function. Below is an example page in Vigor2925n: Vigor2925 Series User’s Guide...
  • Page 249 Choose one of them to make the selected VLAN mapping to the specified subnet only. For example, LAN1 is specified for VLAN0. It means that PCs grouped under VLAN0 can get the IP address(es) that specified by the subnet. Vigor2925 Series User’s Guide...
  • Page 250 Note: Leave one VLAN untagged at least to prevent from not connecting to Vigor router due to unexpected error. Vigor2925 series features a hugely flexible VLAN system. In its simplest form, each of the Gigabit LAN ports can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated.
  • Page 251 Inter-LAN Routing by checking the box between LAN1 and LAN2. Vigor router supports up to several private IP subnets on LAN. Each can be independent (isolated) or common (able to communicate with each other). This is ideal for departmental or multi-occupancy applications. Vigor2925 Series User’s Guide...

  • Page 252: Bind Ip To Mac

    Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below Select All Click this link to select all the items in the ARP table. Reorder the table based on the IP address. Sort Vigor2925 Series User’s Guide...
  • Page 253 Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. Vigor2925 Series User’s Guide...

  • Page 254: Lan Port Mirror

    Select which ports are necessary to be mirrored for transmitting the packets. Mirrored Rx Port Select which ports are necessary to be mirrored for receiving the packets. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 255: Wired 802.1X

    RADIUS or Local 802.1x) will be used for authenticating LAN user. 802.1x ports After enabling the function, simply specify the LAN port(s) to apply such function. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 256: Web Portal Setup

    Display the number link which allows you to configure the profile. Status Display the content (Disable, URL Redirect or Message) of the profile. Interface Display the applied interface of the profile. Preview Open a preview window according to the configured settings. Vigor2925 Series User’s Guide...
  • Page 257 Position on Screen – The content of notice and the defined button can be shown upside (Top) or downside (Bottom) the text defined for message body.  Button – Define the word (default word is “Continue”) Vigor2925 Series User’s Guide...

  • Page 258: Load-Balance /Route Policy

    Packets will be sent through another Interface or follow another Policy when the original interface goes down (Failover to). Once the original interface resumes service (Failback), the packets will be returned to it immediately.  Other routing. Vigor2925 Series User’s Guide...

  • Page 259: General Setup

    Display the IP address for the start of the destination port. Dest Port End Display the IP address for the end of the destination port. Use Up or Down link to move the order of the policy. Move UP/Move Down Vigor2925 Series User’s Guide...
  • Page 260 Dest IP End - Type the destination IP end for the specified WAN interface. If this field is blank, it means that all the destination IPs will be passed through the WAN interface. 3. Click Next to get the following page. Vigor2925 Series User’s Guide...
  • Page 261 4. After specifying the interface, click Next to get the following page. Available settings are explained as follows: Item Description Force NAT /Force It determines which mechanism that the router will use to Routing forward the packet to WAN. Vigor2925 Series User’s Guide...
  • Page 262 5. After choosing the mechanism, click Next to get the summary page for reference. 6. If there is no error, click Finish to complete wizard setting. Vigor2925 Series User’s Guide...
  • Page 263 To use Advance Mode, do the following steps: 1. Click the Advance Mode radio button. 2. Click any Index X number link (e.g., 1 in this case) to access into the following page. Available settings are explained as follows: Item Description Vigor2925 Series User’s Guide...
  • Page 264 Static Route and Route Policy. The greater the value is, the lower the priority is. Default value for route policy is “200” which means it has higher priority than the default route. Vigor2925 Series User’s Guide...
  • Page 265 Gateway IP – Specific gateway is used only when you want to forward the packets to the desired gateway. Usually, Default Gateway is selected in default. When you finish the configuration, please click OK to save and exit this page. Vigor2925 Series User’s Guide...
  • Page 266 Note: The web user interface will be revised later. Example 1: In the following figure, a LAN to LAN VPN tunnel is built between DrayTek VPN router (e.g., Vigor2925 series) and the remote router. Firewall Router can receive all of the traffic coming from remote PC which wants to access into Internet;...
  • Page 267 To route the packets coming from the Firewall Router back to the remote router, access into the web user interface of the Firewall Router. Then, set “192.168.1.1/24” as the gateway IP address and set “172.16.3.0/24” as the destination IP address. Vigor2925 Series User’s Guide...
  • Page 268 Click any index number (e.g., #1 in this case). In the following web page, check Enable; type “192.168.1.10” as Src IP Range; type “213.57.89.100” as the Destination IP for the remote VPN server; and choose VPN as the Interface setting. Vigor2925 Series User’s Guide...

  • Page 269: Diagnose

    Click OK to save the settings. With the analysis done by such page, possible path (static route, routing table or policy route) of the packets sent out of the router can be traced. Vigor2925 Series User’s Guide...
  • Page 270 Analyze – Click it to perform the job of analyzing. The analyzed result will be shown on the page. If required, click export analysis to export the result as a file. Vigor2925 Series User’s Guide...
  • Page 271 Note that the analysis was based on the current "load-balance/route policy" settings, we do not guarantee it will be 100% the same as the real case. Vigor2925 Series User’s Guide...

  • Page 272: Nat

    192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor2925 Series User’s Guide...

  • Page 273: Port Redirection

    The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor2925 Series User’s Guide...
  • Page 274 Select the WAN IP used for port redirection. There are WAN IP eight WAN IP alias that can be selected and used for port redirection. The default setting is All which means all the incoming data from any port will be redirected to specified Vigor2925 Series User’s Guide...
  • Page 275 80 to avoid conflict, such as 8925. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2925 Series User’s Guide...

  • Page 276: Dmz Host

    Click DMZ Host to open the following page. You can set different DMZ host for each WAN interface. Click the WAN tab to switch into the configuration page for that WAN. Available settings are explained as follows: Item Description Vigor2925 Series User’s Guide...
  • Page 277 WAN1 only. See the following figure. If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN2 interface, you will find them in Aux. WAN IP for your selection. Vigor2925 Series User’s Guide...
  • Page 278 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 279: Open Ports

    Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2925 Series User’s Guide...
  • Page 280 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2925 Series User’s Guide...

  • Page 281: Port Triggering

    TCP: 86400 sec. UDP: 180 sec. IGMP: 10 sec. TCP WWW: 60 sec. TCP SYN: 60 sec. Available settings are explained as follows: Item Description Comment Display the text which memorizes the application of this Vigor2925 Series User’s Guide...
  • Page 282 Check to enable this entry. Choose the predefined service to apply for such trigger Service profile. Comment Type the text to memorize the application of this rule. Triggering Protocol Select the protocol (TCP, UDP or TCP/UDP) for such triggering profile. Vigor2925 Series User’s Guide...
  • Page 283 (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Incoming Port Type the port or port range for the incoming packets. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 284: Hardware Acceleration

    Hardware Acceleration is also called PPA in DrayTek for it is based on Protocol Processing Engine (PPE) of Infineon. It can only support 128 sessions for network traffic (IN & OUT) with implementing three kinds of modes - Disable, Auto and Manual.
  • Page 285 For checking whether the rule of PPA is working or not, a user can login toVigor2925 series by using telnet. User can view how many sessions are transferring in each direction of PPA table after entering “ppa –v”. Vigor2925 Series User’s Guide...

  • Page 286: Firewall

    It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2925 Series User’s Guide...
  • Page 287 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor2925 Series User’s Guide...

  • Page 288: General Setup

    Instinctively as a secure firewall, Vigor router will reject these fragmented packets to prevent attack unless you enable “Accept large incoming fragmented UDP or ICMP Packets”. By checking this box, you can play these kinds of on-line games. If security concern is in higher Vigor2925 Series User’s Guide...
  • Page 289 IPv4 - To prevent remote client accessing into the PCs on LAN, check the box to make the incoming packets via IPv4 being blocked by such router. It is effective only for the packets routed but not for packets translated by NAT. Vigor2925 Series User’s Guide...
  • Page 290 The default setting is 60000. Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Vigor2925 Series User’s Guide...
  • Page 291 Or click the DNS Filter link in this page to create a new profile. Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here. Vigor2925 Series User’s Guide...
  • Page 292 However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 293: Filter Setup

    Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Vigor2925 Series User’s Guide...
  • Page 294 Set the direction of packet flow. It is for Data Filter only. Direction For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other LAN. Vigor2925 Series User’s Guide...
  • Page 295 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Vigor2925 Series User’s Guide...
  • Page 296 The default setting is 60000. Strict –Make the MAC address and IP address settings MAC Bind IP configured in IP Object for Source IP and Destination IP Vigor2925 Series User’s Guide...
  • Page 297 (created in CSM>> Web Content Filter) for applying with this router. Please set at least one profile for anti-virus in CSM>> Web Content Filter web page first. Or choose [Create New] from the drop down list in this page to create Vigor2925 Series User’s Guide...
  • Page 298 Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the Vigor2925 Series User’s Guide...
  • Page 299 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
  • Page 300 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2925 Series User’s Guide...

  • Page 301: Dos Defense

    10 seconds. Enable UDP flood defense Check the box to activate the UDP flood defense function. Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router Vigor2925 Series User’s Guide...
  • Page 302 Check the box to activate the Block SYN fragment function. The Vigor router will drop any packets having SYN flag and more fragment bit set. Block Fraggle Attack Check the box to activate the Block fraggle Attack function. Vigor2925 Series User’s Guide...
  • Page 303 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2925 Series User’s Guide...
  • Page 304 After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 305: User Management

    Note: Filter rules configured under Firewall usually are applied to the host (the one that the router installed) only. With user management, the rules can be applied to every user connected to the router with customized profiles. Vigor2925 Series User’s Guide...

  • Page 306: General Setup

    Firewall>>General Setup and Filter Rule to the users. Authentication page Web Authentication - Choose the protocol for web authentication. Login Page Logo – A logo which can be used as an Vigor2925 Series User’s Guide...

  • Page 307: User Profile

    To set the user profile, please click any index number link to open the following page. Notice that profile 1 (admin) and profile 2 (Dial-In User) are factory default settings. Profile 2 is reserved for future use. Vigor2925 Series User’s Guide...
  • Page 308 When the user passes the authentication, he/she can access Internet via this router with the limitation configured in this user profile. The maximum length of the password you can set is 24 characters. Vigor2925 Series User’s Guide...
  • Page 309 Server Authentication, the internal service offered by RADIUS/Local 802.1X will be invalid immediately. If None is selected, the internal service will be available again. That is, a user will be authenticated by either external server or internal server. Vigor2925 Series User’s Guide...
  • Page 310 You can type in four sets of time schedule for your request. All Schedule Setup the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2925 Series User’s Guide...
  • Page 311 Enable – Check it to use the default setting for time quota and data quota. Default Time Quota – Type the value for the time manually. Default Data Quota – Type the value for the data manually. Check the box to enable security authenticated via RADIUS RADIUS server. Vigor2925 Series User’s Guide...
  • Page 312 Local 802.1X Check the box to enable security authenticated via 802.1X server. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 313: User Group

    All the available user objects that you have created will be shown in this box. Notice that user object, Admin and Dial-In User are factory settings. User defined profiles will be numbered with 3, 4, 5 and so Vigor2925 Series User’s Guide...

  • Page 314: User Online Status

    Profile Display the authority of the account. Last Login Time Display the login time that such user connects to the router last time. Expired Time Display the expired time of the network connection for the user. Vigor2925 Series User’s Guide...

  • Page 315: Objects Settings

    Later, we can select that object/group that can apply it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address). Vigor2925 Series User’s Guide...

  • Page 316: Ip Object

    Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2925 Series User’s Guide...
  • Page 317 Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. Vigor2925 Series User’s Guide...
  • Page 318 After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. Vigor2925 Series User’s Guide...

  • Page 319: Ip Group

    Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2925 Series User’s Guide...

  • Page 320: Ipv6 Object

    You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2925 Series User’s Guide...
  • Page 321 Prefix Len Type the number (e.g., 64) for the prefix length of IPv6 address. Invert Selection If it is checked, all the IPv6 addresses except the ones listed above will be applied later while it is chosen. Vigor2925 Series User’s Guide...

  • Page 322: Ipv6 Group

    Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2925 Series User’s Guide...

  • Page 323: Service Type Object

    Display the profile number that you can configure. Name Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. Vigor2925 Series User’s Guide...
  • Page 324 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 325: Service Type Group

    To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Vigor2925 Series User’s Guide...

  • Page 326: Keyword Object

    Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2925 Series User’s Guide...
  • Page 327 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 328: Keyword Group

    Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2925 Series User’s Guide...

  • Page 329: File Extension Object

    Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2925 Series User’s Guide...
  • Page 330 Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2925 Series User’s Guide...

  • Page 331: Sms/Mail Service Object

    Display the service provider which offers SMS service. To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. Vigor2925 Series User’s Guide...
  • Page 332 Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
  • Page 333 Display the name of this profile. It cannot be modified. Service Provider Type the website of the service provider. Type the URL string in the box under the filed of Service Provider. You have to contact your SMS provider to obtain the exact URL string. Vigor2925 Series User’s Guide...
  • Page 334 Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Vigor2925 Series User’s Guide...
  • Page 335 Username – Type a name for authentication. The maximum length of the name you can set is 31 characters. Password – Type a password for authentication. The maximum length of the password you can set is 31 characters. Vigor2925 Series User’s Guide...

  • Page 336: Notification Object

    Clear all of the settings and return to factory default Set to Factory Default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Settings Display the category selected for such profile. Vigor2925 Series User’s Guide...
  • Page 337 For example, the check box of CPE firmware upgrade fail under the category of Central VPN Management is checked. Once such profile is enabled, Vigor router system will send out notification to the recipient via SMS. Vigor2925 Series User’s Guide...
  • Page 338 3. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 339: Csm Profile

    Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor2925 Series User’s Guide...

  • Page 340: App Enforcement Profile

    Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Others displayed on this page. Each tab will bring out different items with supported versions that you can choose to disallow people using. Vigor2925 Series User’s Guide...
  • Page 341 APP. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Below shows the items which are categorized under Protocol. Vigor2925 Series User’s Guide...
  • Page 342 The items categorized under P2P ----- Vigor2925 Series User’s Guide...
  • Page 343 The items categorized under Others ----- Vigor2925 Series User’s Guide...

  • Page 344: Appe Signature Upgrade

    The APPE Enforcement Profile adopted by Vigor router will be treated as the APPE signature. DrayTek will periodically upgrade versions for all of the APPs supported by Vigor router. However, it might be inconvenient for users to upgrade the APP version one by one. This feature is specially designed to offer a quick method to execute APP version upgrade.
  • Page 345 Upgrade Automatically Scheduled Update - Check the box to make Vigor router upgrading the APPE signature based on the schedule configured here. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 346: Url Content Filter Profile

    Each item is explained as follows: Item Description Set to Factory Default Clear all profiles. Profile Display the number of the profile which allows you to click to set different policy. Name Display the name of the URL Content Filter Profile. Vigor2925 Series User’s Guide...
  • Page 347 For this one, the router will process the packages with the conditions set below for URL first, then Web feature second. Either: Web Feature First –When all the packages Vigor2925 Series User’s Guide...
  • Page 348 If the web pages do not match with the keyword set here, it will be processed with reverse action. Group/Object Selections – The Vigor router provides several frames for users to define keywords and each frame Vigor2925 Series User’s Guide...
  • Page 349 Upload – Check the box to block the file upload by way of web page. File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Vigor2925 Series User’s Guide...

  • Page 350: Web Content Filter Profile

    Please refer to section of creating MyVigor account. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
  • Page 351 Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Click this link to do the verification. Test a site to verify...
  • Page 352 If you have and activate another web content filter license, the items will be changed simultaneously. All of the configuration made for web content filter will be deleted automatically. Therefore, please backup your data before you change the web content filter license. Vigor2925 Series User’s Guide...
  • Page 353 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 354: Dns Filter Profile

    It displays a list of different DNS filter profiles (with specified WCF and UCF). Click the profile link to open the following page. Then, type the name of the profile and specify WCF/UCF based on your requirement. Vigor2925 Series User’s Guide...
  • Page 355 Administration Message Type the words or sentences which will be displayed when a web page is blocked by Vigor router. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 356: Bandwidth Management

    To activate the function of limit session, simply click Enable and set the default session limit. Available settings are explained as follows: Item Description Enable - Click this button to activate the function of limit Session Limit session. Vigor2925 Series User’s Guide...
  • Page 357 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 358: Bandwidth Limit

    Disable - Click this button to close the function of limit bandwidth. Default TX limit - Define the default speed of the upstream for each computer in LAN. Default RX limit - Define the default speed of the Vigor2925 Series User’s Guide...
  • Page 359 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2925 Series User’s Guide...

  • Page 360: Quality Of Service

    The core routers in the backbone will do the same checking before executing treatments in order to ensure service-level consistency throughout the whole QoS-enabled network. Vigor2925 Series User’s Guide...
  • Page 361 WAN interface. Direction – Display which direction that such function will influence. Class 1/Class2/Class 3/Others – Display the bandwidth percentage for each class. UDP Bandwidth Control –Display the UDP bandwidth control is enabled or not. Vigor2925 Series User’s Guide...
  • Page 362 There are four queues allowed for QoS control. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Vigor2925 Series User’s Guide...
  • Page 363 Check this and set the limited bandwidth ratio on the right Control field. This is a protection of TCP application traffic since UDP application traffic such as streaming video will exhaust lots of bandwidth. Outbound TCP ACK The difference in bandwidth between download and upload Vigor2925 Series User’s Guide...
  • Page 364 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2925 Series User’s Guide...
  • Page 365 All the packets of data will be divided with different levels and will be processed according to the level type by the system. Please assign one of the levels of the data for processing with QoS control. Vigor2925 Series User’s Guide...
  • Page 366 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. Vigor2925 Series User’s Guide...
  • Page 367 After finishing all the settings here, please click OK to save the configuration. By the way, you can set up to 10 service types. If you want to edit/delete an existed service type, please select the radio button of that one and click Edit/Delete for modification. Vigor2925 Series User’s Guide...

  • Page 368: App Qos

    By combining the function of QoS (adjustment on Inbound/Outbond bandwidth and bandwidth ratio), Vigor router can perform the bandwidth management for the protocols, streaming, remote control, web HD and so on. Click Bandwidth Management>>APP QoS to open the following page. Vigor2925 Series User’s Guide...
  • Page 369 The protocol listed below is not easy to be traced by Vigor router. Each tab offers different types of protocols to fit your request. Click it to select all of the protocols. Select All Clear All Click it to de-select all of the protocols. Vigor2925 Series User’s Guide...
  • Page 370 Apply – Click it to make the selected action be applied all of the selected protocols immediately. There are many protocols which can be specified with Action different QoS Class. Vigor2925 Series User’s Guide...

  • Page 371: Applications

    Enable the Function and Add a Dynamic DNS Account Assume you have a registered domain name from the DDNS provider, say hostname.dyndns.org, and an account with username: test and password: test. In the DDNS setup menu, check Enable Dynamic DNS Setup. Vigor2925 Series User’s Guide...
  • Page 372 Enable Dynamic Check this box to enable the current account. If you did DNS Account check the box, you will see a check mark appeared on the Active column of the previous web page in step 2). Vigor2925 Series User’s Guide...
  • Page 373 Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. Vigor2925 Series User’s Guide...

  • Page 374: Lan Dns / Dns Forwarding

    FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2925 series will respond the specified private IP address.
  • Page 375 The IP address listed here will be used for mapping with the domain name specified above. In general, one domain name maps with one IP address. If required, you can configure two IP addresses mapping with the same domain name. Vigor2925 Series User’s Guide...
  • Page 376 LAN DNS automatically. Domain Name Type the domain name for such profile. DNS Server IP Type the IP address of the DNS server you want to use for Address DNS forwarding. Click OK button to save the settings. Vigor2925 Series User’s Guide...

  • Page 377: Schedule

    Set to Factory Default Clear all profiles and recover to factory settings. Index Click the number below Index to access into the setting page of schedule. Status Display if this schedule setting is active or inactive. Vigor2925 Series User’s Guide...
  • Page 378 Specify the duration (or period) for the schedule. Idle Timeout How often -Specify how often the schedule will be applied Once -The schedule will be applied just once Weekdays -Specify which days in one week should perform the schedule. Vigor2925 Series User’s Guide...
  • Page 379 Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Vigor2925 Series User’s Guide...

  • Page 380: Radius/Tacacs

    Except for being a built-in RADIUS client, Vigor router also can be operated as a RADIUS server which performs security authentication by itself. This page is used to configure settings for internal RADIUS server. Then LAN user of Vigor router will be authenticated by Vigor router directly. Vigor2925 Series User’s Guide...
  • Page 381 IPv6 Address – Type the IPv6 address of the wired/wireless client. IPv6 Length - Type the prefix length required for the IPv6 address. User Profile During the process of security authentication, user account and user password will be required for identity Vigor2925 Series User’s Guide...
  • Page 382 Simply check this box; all of the user profiles (prepared for RADIUS server authentication) listed in Authentication List will be synchronized for local 802.1X user authentication. After finished the above settings, click OK button to save the settings. Vigor2925 Series User’s Guide...
  • Page 383 Both sides must be configured to use the same shared secret. Re-type the Shared Secret for confirmation. Confirm Shared Secret After finished the above settings, click OK button to save the settings. Vigor2925 Series User’s Guide...

  • Page 384: Active Directory/ Ldap

    Anonymous – Perform a search action first with Anonymous account then do the bind authentication.  Regular Mode– Mostly it is the same with anonymous mode. The different is that, the server will firstly check if you have the search authority. Vigor2925 Series User’s Guide...
  • Page 385 After finished the above settings, click OK button to save the settings. You can configure eight AD/LDAP profiles. These profiles would be used with User Management for different purposes in management. Click any index number link to open the following page. Vigor2925 Series User’s Guide...
  • Page 386 AD/LDAP Server to assist you finish the setup. After finished the above settings, click OK to save and exit this page. A new profile has been created. Vigor2925 Series User’s Guide...

  • Page 387: Upnp

    Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2925 Series User’s Guide...

  • Page 388: Igmp

    This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P5 It indicates the LAN port used for the multicast group. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 389: Wake On Lan

    MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2925 Series User’s Guide...

  • Page 390: Sms / Mail Alert Service

    SMS. Schedule Type the schedule number that the SMS will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
  • Page 391 Schedule Type the schedule number that the notification will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 392: Bonjour

    Below shows an example for applying the bonjour feature that Vigor router can be used as the FTP server. 1. Here, we use Firefox and DNSSD to discover the service in such case. Therefore, just ensure the Bonjour client program and DNSSD for Firefox have been installed on the computer. Vigor2925 Series User’s Guide...
  • Page 393 (DNSSD) and see the following results. 3. Open System Maintenance>>Management. Type a name (e.g., Vigor Router) as the Router Name and click OK. 4. Next, open Applications>>Bonjour. Check the service that you want to use via Bonjour. Vigor2925 Series User’s Guide...
  • Page 394 Vigor router (based on Bonjour protocol) is ready to be used as a printer server, FTP server, SSH Server, Telnet Server, and HTTP Server. 6. Now, any page or document can be printed out through Vigor router (installed with a printer). Vigor2925 Series User’s Guide...

  • Page 395: High Availability

    The high availability of the Vigor2925 Series is designed to avoid single points-of-failure. When failures occur, the failover process moves processing performed by the failed component (the “primary”) to the backup component (the “secondary”). This process remains system-wide resources, recovers partial of failed transactions, and restores the system to normal within a few seconds.
  • Page 396  WAN settings of primary and secondary routers must not be the same.  The Config Sync must be disabled, or you cannot change redundancy method to active-standby. Vigor2925 Series User’s Guide...
  • Page 397 Type a string as the authentication key (maximum 31 characters allowed). It is used for encrypting the DARP to prevent malicious attack. Such interface is used for DARP (DrayTek Address Management Interface Redundancy Protocol) negotiation between routers. Only the interface which is enabled in LAN>>General Setup is available for selection.
  • Page 398 Enable – Check the box to record required information on Syslog. LAN1 ~ LAN5, DMZ Enable – Check the box to enable the interface. Virtual IP - Type the IP address of the router plays the role of Primary device. Vigor2925 Series User’s Guide...
  • Page 399 Config Sync Interval Day / Hour / Minute - Primary router will sync its configuration to secondary router based on the time interval set here. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
  • Page 400 Take the following picture as an example. The upper Vigor2925 is regarded as primary device, the lower Vigor2925 is regarded as secondary device. When primary Vigor2925 Series is broken down, the secondary device could replace the primary role to take over all jobs as soon as possible.

  • Page 401: Vpn And Remote Access

    Secure connection between Teleworker, staff on business trip and main office  Exchange data between remote office and main office  POS between chain store and headquarters Below shows the menu items for VPN and Remote Access. Vigor2925 Series User’s Guide...

  • Page 402: Remote Access Control

    PAP Only - elect this option to force the router to Authentication authenticate dial-in users with the PAP protocol. PAP/CHAP/MS-CHAP/MS-CHAPv2 - Selecting this option means the router will attempt to authenticate dial-in users with the CHAP protocol first. If the dial-in user does Vigor2925 Series User’s Guide...
  • Page 403 PPTP LDAP Profile to create/add some new LDAP profiles you want. While using Radius or If PPP connection will be authenticated via RADIUS server or LDAP profiles, it is necessary to specify the LAN profile LDAP Authentication Vigor2925 Series User’s Guide...

  • Page 404: Ipsec General Setup

    AH it receives. Encapsulating Security Payload (ESP) is a security protocol that provides data confidentiality and protection with optional authentication and replay detection service. Vigor2925 Series User’s Guide...
  • Page 405 High (ESP) - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 406: Ipsec Peer Identity

    Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2925 Series User’s Guide...
  • Page 407 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 408: Remote Dial-In User

    Index page of Remote Dial-in User. User Display the username for the specific dial-in user of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Active Check the box to activate such profile. Vigor2925 Series User’s Guide...
  • Page 409 IPSec Tunnel - Allow the remote dial-in user to make an IPSec VPN connection through Internet. L2TP with IPSec Policy - Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You Vigor2925 Series User’s Guide...
  • Page 410 Secret – Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6). Chose one of the subnet selections for such VPN profile. Subnet Assign Static IP Address – Please type a static IP address for the subnet you specified. Vigor2925 Series User’s Guide...

  • Page 411: Lan To Lan

    L2TP by itself or over IPSec) and corresponding security methods, etc. The router supports up to 64 VPN profiles simultaneously. The following figure shows the summary table. The following figure shows the summary table according to the item (All/Trunk) selected for View. Vigor2925 Series User’s Guide...
  • Page 412 Click to clear all indexes. Name Indicate the name of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Active V – means the profile has been enabled. X – means the profile has not been enabled. Vigor2925 Series User’s Guide...
  • Page 413 LAN-to-LAN connection. Enable this profile - Check here to activate this profile. VPN Dial-Out Through - Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. Vigor2925 Series User’s Guide...
  • Page 414 Idle Timeout: The default value is 300 seconds. If the connection has been idled over the value, the router will drop the connection. Enable PING to keep IPsec tunnel alive – It is used to Vigor2925 Series User’s Guide...
  • Page 415 VJ compression - This field is applicable when you select PPTP or L2TP with or without IPSec policy above. VJ Compression is used for TCP/IP protocol header compression. Normally set to On to improve bandwidth utilization. IKE Authentication Method - This group of fields is Vigor2925 Series User’s Guide...
  • Page 416 MD5 or SHA-1 authentication algorithm. Advanced - Specify mode, proposal and key life of each IKE phase, Gateway, etc. The window of advance setup is shown as below: IKE phase 1 mode -Select from Main mode and Vigor2925 Series User’s Guide...
  • Page 417 Index(1-15) - Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Vigor2925 Series User’s Guide...
  • Page 418  Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.  Must - Specify the IPSec policy to be definitely Vigor2925 Series User’s Guide...
  • Page 419 IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node.  Medium- Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active.  High- Encapsulating Security Payload (ESP) means Vigor2925 Series User’s Guide...
  • Page 420 More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Masks through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. Vigor2925 Series User’s Guide...
  • Page 421 Then specify an IP address. Click Advanced to configure detailed settings if required. Advanced – Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used Vigor2925 Series User’s Guide...
  • Page 422 Virtual IP Mapping – A pop up dialog will appear for you to specify the local IP address and the mapping virtual IP address. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 423: Vpn Trunk Management

    VPN Tunnels disconnected. Users do not need to reconnect with setting TCP/UDP Service Port again. The VPN Load Balance function can keep the transmission for internal data on tunnel stably Vigor2925 Series User’s Guide...
  • Page 424 Dial-in mode (for call direction) in LAN-to-LAN. Type - Display the connection type for that profile, such as IPSec, PPTP, L2TP, L2TP over IPSec (NICE), L2TP over IPSec(MUST) and so on. Member2 - Display the dial-out profile selected from the Vigor2925 Series User’s Guide...
  • Page 425 IPSec(MUST) and so on. Member2 - Display the dial-out profile selected from the Member2 drop down list below. Advanced – This button is only available when there is one or more profiles created in this page. Vigor2925 Series User’s Guide...
  • Page 426 The corresponding members (LAN-to-LAN profiles) grouped in such new VPN TRUNK – VPN Backup mechanism profile will be locked. The profiles in LAN-to-LAN will be displayed in red. VPN TRUNK – VPN Load Balance mechanism profile will be locked. The Vigor2925 Series User’s Guide...
  • Page 427 Enable radio button; type a name for such profile (e.g., 071023); choose one of the LAN-to-LAN profiles from Member1 drop down list; choose one of the LAN-to-LAN profiles from Member2 drop down list; and click Add at last. Vigor2925 Series User’s Guide...
  • Page 428 Peer GRE IP. See the following graphic for an example. Later, on peer side (as VPN Client): please type 192.168.50.100 in the field of My GRE IP and type IP address of the server (192.168.50.200) in the field of Peer GRE IP. Vigor2925 Series User’s Guide...
  • Page 429 (10Mbps/100Mbps) and switch with fixed value ratio (3:7) for packet transmission. If the transmission rate for packets on both sides of the tunnels is the same, the value of Auto Weighted should be 5.5. According to Speed Ratio allows Vigor2925 Series User’s Guide...
  • Page 430 Port also fits the number here, such binding tunnel table can be established. Other means when the source IP, destination IP, destination port and fragment conditions match with the settings specified here with different TCP Service Port/UDP Service Port/ICMP/IGMP, such binding tunnel table can be established. Vigor2925 Series User’s Guide...
  • Page 431 Type Binding Src IP range (Start and End) and Binding Des IP range (Start and End). Choose TCP/UDP, IGMP/ICMP or Other as Binding Protocol. Detailed Settings for Advanced Backup Available settings are explained as follows: Vigor2925 Series User’s Guide...

  • Page 432: Connection Management

    LAN-to-LAN (with Index number and VPN Server IP address). The VPN connection built by General Mode does not support VPN backup function. Backup Mode - This filed displays the profile name saved in VPN TRUNK Management (with Index number and Vigor2925 Series User’s Guide...

  • Page 433: Certificate Management

    Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor2925 Series User’s Guide...
  • Page 434 Then click GENERATE again. Note: Please be noted that “Common Name” must be configured with rotuer’s WAN IP or domain name. After clicking GENERATE, the generated information will be displayed on the window below: Vigor2925 Series User’s Guide...
  • Page 435 Upload Local Certificate It allows users to import the certificate which is generated by Vigor router and signed by CA server. If you have done well in certificate generation, the Status of the certificate will be shown as “OK”. Vigor2925 Series User’s Guide...
  • Page 436 Private Key keys. And the password is needed if the private key is encrypted. REFRESH Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. Vigor2925 Series User’s Guide...

  • Page 437: Trusted Ca Certificate

    CA to save time and provide convenience for general user. Later, such root CA generated by DrayTek server can perform the issuing of local certificate. Note: Root CA can be deleted but not edited. If you want to modify the settings for a Root CA, please delete the one and create another one by clicking Create Root CA.
  • Page 438 For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2925 Series User’s Guide...

  • Page 439: Certificate Backup

    Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Confirm password. Also, you can use Restore to retrieve these two settings to the router whenever you want. Vigor2925 Series User’s Guide...

  • Page 440: Central Vpn Management

    Note: Such menu can manage the CPE connected through WAN only. This page is used to configure settings which will be used by the clients to register to such Vigor router. Click General Settings and IPsec VPN Settings to configure the basic settings for CVM mechanism. Vigor2925 Series User’s Guide...
  • Page 441 Password Type the password for the user. Polling Interval Type the time value (unit is second). The range is from 60 ~ 86400. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
  • Page 442 Encryption Type Choose one of the selections as the encryption type. Local Subnet Type the IP address and subnet mask of local host. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 443: Cpe Management

    All the CPEs managed by Vigor2925 series can be seen with icons from this page Before using such feature, make sure the CVM port has been enabled and configured properly. This page allows you to manage the CPEs connected to Vigor2925 series.
  • Page 444 Delete – To disconnect the management of any CPE, click the CPE icon you want and click the Delete button. Note: Double-clicking the CPE icon also can pop up the Managed Device Detail window. However, you cannot Vigor2925 Series User’s Guide...
  • Page 445 Unmanaged Devices List Any device (CPE) which follows the standard of TR-069 can be configured and can be detected by Vigor2925 series automatically. Only eight remote devices can be managed by Vigor2925 at one time. Therefore, other remote devices detected by Vigor2925 series might not be displayed in such field.
  • Page 446 Click the icon to see the content inside the USB disk. Set to Factory Default Click to clear all indexes. Index Display the number of the profile that you can edit. Display the name of the maintenance profile. Profile Name Vigor2925 Series User’s Guide...
  • Page 447 Check it to enable such profile. The drop down list will display all the CPE devices detected Device Name by Vigor2925 series. Choose the one which will be applied with such new created profile. Action Type There are three actions for you to choose for such profile.
  • Page 448 Click Select to locate the file you want to save, restore or File Name upgrade for CPE. Index in Schedule Vigor2925 series will perform the specified action to the selected CPE based on the schedule configured here. Specify one or two schedule profiles (represented by number) here.

  • Page 449: Vpn Management

    An easy and quick method is offered to configure VPN settings for building VPN connection automatically between Vigor2925 series (treated as VPN server) and other Vigor router (treated as CPE device, i.e., VPN client). Available parameters are listed as follows:...

  • Page 450: Log & Alert

    Vigor2925 series. Action Type Display the action that Vigor2925 series will perform for the managed CPE. Message Display the information for each event. The Alert page offers brief information to identify the CPE connected to Vigor2925 series. Vigor2925 Series User’s Guide...

  • Page 451: Central Ap Management

    This page shows VigorAP’s information about Status, Event Log, Total Traffic or Station Number by displaying VigorAP icon, text and histogram. Just move and click your mouse cursor on Status, Event Log, Total Traffic or Station Number. Corresponding web pages will be open immediately. Vigor2925 Series User’s Guide...

  • Page 452: Status

    Display the firmware version used by the access point. Password Vigor2925 can get related information of the access point by accessing into the web user interface of the access point. This button is used to modify the logging password of the connected access point. Vigor2925 Series User’s Guide...

  • Page 453: Wlan Profile

    It can copy settings from an existing WLAN profile to another WLAN profile. First, you have to check the box of the existing profile as the original profile. Second, click Clone. The following dialog will appear. Vigor2925 Series User’s Guide...
  • Page 454 Simply choose the device you want from Existing Device field. Click >> to move the device to Selected Device field. Then, click OK. The selected WLAN profile will be applied to the selected access point immediately. Later the access point will reboot. Vigor2925 Series User’s Guide...
  • Page 455 1. Check the box on the left side of the selected profile. 2. Click the Edit button to display the following page. 3. After finished the general settings configuration, click Next to open the following page for 2.4G wireless security settings. Vigor2925 Series User’s Guide...
  • Page 456 4. After finished the above web page configuration, click Next to open the following page for 5G wireless security settings. 5. When you finished the above web page configuration, click Finish to exit and return to the first page. The modified WLAN profile will be shown on the web page. Vigor2925 Series User’s Guide...

  • Page 457: Ap Maintenance

    Specify the file and the path which will be used to perform Config Restore or Firmware Upgrade. Display all the available access points managed by Vigor Select Device router. Simply click << or >> to move the device(s) between Select Device and Selected Device areas. Vigor2925 Series User’s Guide...

  • Page 458: Traffic Graph

    The horizontal axis represents time; the vertical axis represents the transmission rate (in kbps). It displays the access point scanned by Vigor router. In which, the APs will be classified with friendly APs, rogue APs and unknown APs in different colors. Vigor2925 Series User’s Guide...
  • Page 459 Specify the access points which are classified under each type. Refresh Min(s) Use the drop down list to specify the time to refresh the web page. Refresh Click such link to refresh the web page immediately. Display the channel used by the detected access point. Vigor2925 Series User’s Guide...
  • Page 460 AP is friendly and which one is Rogue respectively. Follow the steps below to perform the classification of access points. 1. Click the radio button on one of the access points. In this case, DrayTek-LAN-A is selected. 2. Later, some options will appear on the bottom of the page.
  • Page 461 AP, simply choose the one and click Delete. Later, the page will refresh and the one will be classified as Unknown. 3. Click OK to save the settings. The following figure shows the APs classified and displayed in different colors. Vigor2925 Series User’s Guide...

  • Page 462: Event Log

    Time and event log for all of the APs managed by Vigor router will be shown on this page. It is userful for troubleshooting if required. Such page will display the total traffic of data receiving and data transmitting for VigorAPs managed by Vigor router. Vigor2925 Series User’s Guide...

  • Page 463: Station Number

    The purpose is to prevent lots of stations connecting to access point at the same time and causing traffic unbalanced. By Traffic – The operation of load balance will executed according to the traffic configuration in this page. Vigor2925 Series User’s Guide...

  • Page 464: Function Support List

    Click the Client tab to list the AP management functions that the Access Points support under different firmware versions. Click the Server tab to list the AP management functions that Vigor router supports under different firmware versions. Vigor2925 Series User’s Guide...

  • Page 465: Voip

    Then, both parties’ SIP proxies will forward the sequence of messages to caller to establish the session. If you both register to the same SIP Registrar, then it will be illustrated as below: Vigor2925 Series User’s Guide...
  • Page 466 QoS Assurance assists to assign high priority to voice traffic via Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor2925 Series User’s Guide...

  • Page 467: General Setting

    IP of local router), you can check this box to solve this problem. Dynamic RTP Port Start - Specifies the start port for RTP stream. The default value is 10050. Dynamic RTP Port End - Specifies the end port for RTP Vigor2925 Series User’s Guide...
  • Page 468 Note: If the incoming or outgoing calls do not match any entry on the phonebook, the router will try to make the call "being protected". But, if the call ends up "unprotected"(e.g. peer side does not support ZRTP+SRTP), the router will not play out a warning message. Vigor2925 Series User’s Guide...

  • Page 469: Sip Accounts

    Display the codec type for the account. Ring Port Specify which port will ring when receiving a phone call. Show the status for the corresponding SIP account. R means Status such account is registered on SIP server successfully. – Vigor2925 Series User’s Guide...
  • Page 470 Some SIP server allows user to use VoIP function without registering. For such server, please check the box of Call without Registration. Choosing Auto is recommended. The system will select a proper way for your VoIP call. Vigor2925 Series User’s Guide...
  • Page 471 IP address as the NAT transversal support. Nortel – If the soft-switch that you use supports Nortel solution, you can choose this option. Call Forwarding There are four options for you to choose. Disable is to close Vigor2925 Series User’s Guide...
  • Page 472 Single Codec – If the box is checked, only the selected Codec will be applied. The amount of data contained in a single packet. The default Packet Size value is 20 ms, which means the data packet will contain 20 ms voice information. Vigor2925 Series User’s Guide...

  • Page 473: Dialplan

    “speed-dial” Phone Number. There are total 60 index entries in the phonebook for you to store all your friends and family members’ SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor2925 series for setting the phone book.
  • Page 474 And when the VoIP phone is switched into the PSTN phone, the telecom co. might charge you for the connection fee. Please type in backup phone number for this VoIP phone setting. ZRTP+SRTP - It allows users to have encrypted RTP Secure Phone Vigor2925 Series User’s Guide...
  • Page 475 Add - When you choose this mode, the OP number will be added before the match prefix number for calling out through the specific route. Strip - When you choose this mode, the partial or whole Vigor2925 Series User’s Guide...
  • Page 476 VoIP>> Phone Settings. Move UP /Move Down Click the link to move the selected entry up or down. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...
  • Page 477 For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Such control also can be done based on preconfigured schedules. Click any index number to display the call barring setup page. Vigor2925 Series User’s Guide...
  • Page 478 All means all the phone calls will be blocked with such mechanism. Index (1-15) in Schedule Enter the index of schedule profiles to control the call barring according to the preconfigured schedules. Refer to section Applications>>Schedule for detailed configuration. Vigor2925 Series User’s Guide...
  • Page 479 Dial the number typed in this field to forward all the Ans][Act] incoming calls to the specified place while there is no answer of the connected phone. Do Not Disturb [Act] Dial the number typed in this field to invoke the function of Vigor2925 Series User’s Guide...
  • Page 480 PSTN number available for dial whenever you need and type the number in the field of phone number for PSTN relay. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 481: Phone Settings

    SIP account for each phone port. DTMF Relay Display DTMF mode that configured in the advanced settings page of Phone Index. Click the number link for Phone port, you can access into the following page for configuring Phone settings. Vigor2925 Series User’s Guide...
  • Page 482 ID type automatically. Or you can adjust tone settings manually if you choose User Defined. TOn1, TOff1, TOn2 and TOff2 mean the cadence of the tone pattern. TOn1 and TOn2 represent sound-on; TOff1 and TOff2 represent the sound-off. Vigor2925 Series User’s Guide...
  • Page 483 If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Also, you can specify each field for your necessity. It is Vigor2925 Series User’s Guide...
  • Page 484 “+” can be replaced by “00”. Then the above phone number will become 008865972727. When the callee receives such number, he can use re-dial function to dial back to the caller. Vigor2925 Series User’s Guide...

  • Page 485: Status

    ACTIVE-Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. PeerID The present in-call or out-call peer ID (the format may be IP or Domain). Elapse(hh:mm:ss) The format is represented as hours:minutes:seconds. Vigor2925 Series User’s Guide...

  • Page 486: Lte

    SMS from a router to report router status, rebooting router remotely via SMS with taking security into consideration, and so on. This section can guide you to use the SIM card in LTE WAN to perform SMS related operations. Note: This function is used for “L” models only. Vigor2925 Series User’s Guide...

  • Page 487: General Settings

    1 day and 60 days. You can determine the cycle duration by specifying the days and the hours.  Cycle duration: Specify the days to reset the number of SMS sent. For example, 7 means the whole cycle is 7 Vigor2925 Series User’s Guide...

  • Page 488: Sms Inbox

    Description Mark as Read Those messages in "unread" state are showed in bold text. If you want to change messages into "read" state, select them and click the OK button. Checking the checkbox in title will Vigor2925 Series User’s Guide...
  • Page 489 SMS into "read" state, select them and click the OK button. Checking the checkbox in title will select all "unread" SMS in this page. Delete If you want to delete SMS, select them and click the OK Vigor2925 Series User’s Guide...

  • Page 490: Send Sms

    SMS required to send the message. Available settings are explained as follows: Item Description Recipient Number Type the phone number of the recipient. The format can be an international phone number ( +8869123455678) or a general phone Vigor2925 Series User’s Guide...

  • Page 491: Router Commands

    View SMS Outbox Cache Display the record of SMS messages sent from the Router. This page allows the user to set function to reboot Vigor router remotely and get the router status via SMS. Open LTE>>Router Commands. Vigor2925 Series User’s Guide...
  • Page 492 Reply with Router Status Message Enable with Password / Users can get the WAN data usage and basic information about Vigor router (e.g., IP address, MAC address) through the mobile phone by entering the password/PIN specified in this field. Vigor2925 Series User’s Guide...

  • Page 493: Status

    Vigor router with LTE function is capable of accessing into Internet and able to send SMS to specified mobile phone. This page will display basic information about the embedded LTE module and the current LTE connection. Each item is explained as follows: Item Description Vigor2925 Series User’s Guide...

  • Page 494: Wireless Lan(2.4Ghz/5Ghz)

    IEEE 802.11n draft 2 protocol. To boost its performance further, the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps*. Hence, you can finally smoothly enjoy stream music and video. Vigor2925 Series User’s Guide...
  • Page 495 WPA (Wi-Fi Protected Access), the most dominating security mechanism in industry, is separated into two categories: WPA-personal or called WPA Pre-Share Key (WPA/PSK), and WPA-Enterprise or called WPA/802.1x. Vigor2925 Series User’s Guide...
  • Page 496 The following sections explain setting for wireless LAN. Here we take menu items under Wireless LAN (2.4 GHz) as the examples. The differences for the settings between 2.4 GHz and 5 GHz will be pointed out. Vigor2925 Series User’s Guide...

  • Page 497: General Setup

    At present, the router can connect to 11g Only, 11n Only(2.4 GHz), Mixed (11b+11g), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mixed (11b+11g+11n) mode. 5 GHz in “n” and “n-plus” model: At present, the router can connect to 11a Only, 11n Only (5 Vigor2925 Series User’s Guide...
  • Page 498 If you have no idea of choosing the frequency, please select Auto to let system determine for you. 2.4GHz in “n”, “n-plus” and “ac” model: For 5 GHz in “n” and “n-plus” model: Vigor2925 Series User’s Guide...
  • Page 499 Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Vigor2925 Series User’s Guide...

  • Page 500: Security

    PSK value for connection. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Available settings are explained as follows: Item Description Vigor2925 Series User’s Guide...
  • Page 501 Pre-Shared Key (PSK) - Either 8~63 ASCII characters, such as 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, Vigor2925 Series User’s Guide...

  • Page 502: Access Control

    Item Description Enable Mac Address Select to enable the MAC Address filter for wireless LAN Filter identified with SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be Vigor2925 Series User’s Guide...

  • Page 503: Wps

    Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time. He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. Vigor2925 Series User’s Guide...
  • Page 504 Start PBC button or using PIN Code.  On the side of Vigor2925 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card.
  • Page 505 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2925 Series User’s Guide...

  • Page 506: Wds

    Internet through the router /AP with Repeater mode configured.  The packets received from one Vigor router can be repeated to another AP (remotely) through WDS links.  Only Repeater mode can do WDS-to-WDS packet forwarding. Vigor2925 Series User’s Guide...
  • Page 507 The wireless signal from the root router (AP) can be received and extended by other router (AP), therefore the coverage range of wireless signal can be expanded which is convenient for remote wireless stations which require to access Internet via the Virgor router (AP). Vigor2925 Series User’s Guide...
  • Page 508 WEP or Pre-shared key field valid or not. Choose one of the types for the router. When WEP is selected as Security above, Vigor router will use the same WEP key set in Wireless LAN>>Security Settings page. Vigor2925 Series User’s Guide...
  • Page 509 Click Disable if Bridge is set as WDS Mode. Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 510: Advanced Setting

    Channel Bandwidth 20- the router will use 20Mhz for data transmission and receiving between the AP and the stations. 20/40 – the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station Vigor2925 Series User’s Guide...
  • Page 511 Note: * means the real transmission rate depends on the environment of the network. Set the power percentage for transmission signal of access Tx Power point. The greater the value is, the higher intensity of the signal will be. Vigor2925 Series User’s Guide...

  • Page 512: Station Control

    Check the box to enable the station control function. Connection Time / Use the drop down list to choose the duration for the wireless Reconnection Time client connecting /reconnecting to Vigor router. Or, type the duration manually when you choose User defined. Vigor2925 Series User’s Guide...

  • Page 513: Ap Discovery

    This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP which is in the same channel of this router can be found. Please click Scan to discover all the connected APs. Available settings are explained as follows: Item Description Vigor2925 Series User’s Guide...
  • Page 514 AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2925 Series User’s Guide...

  • Page 515: Station List

    WLAN station and click Add to Access Control below. Available settings are explained as follows: Item Description Click this button to refresh the status of station list. Refresh Click this button to add current typed MAC address into Access Control. Vigor2925 Series User’s Guide...

  • Page 516: Ssl Vpn

    Otherwise, choose Self-signed to use the router’s built-in default certificate. The default certificate can be used in SSL VPN server and HTTPS Web Proxy. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 517: Ssl Web Proxy

    Available settings are explained as follows: Item Description Name Type name of the profile. The length of the name is limited to 15 characters. Type the address (function variation or IP address) or path of the proxy server. Vigor2925 Series User’s Guide...

  • Page 518: Ssl Application

    Display the type of the service selected, e.g., VNC/RDP/SMB. Active Display current status (active or inactive) of the selected profile. To create a new SSL application profile: 1. Click number link under Index filed to set detailed configuration. Vigor2925 Series User’s Guide...
  • Page 519 (100%, 80%, 60%) for such application. Screen Size If you choose RDP, you have to choose the screen size for such application. SMB Path If you choose SMB, you have to type the path (e.g., \\ip\directory or \\Computer Name\directory) for SMB Vigor2925 Series User’s Guide...
  • Page 520 3. Enter the required information. 4. After finished the above settings, click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 521: User Account

    With SSL VPN, Vigor2925 series let teleworkers have convenient and simple remote access to central site VPN. The teleworkers do not need to install any VPN software manually. From regular web browser, you can establish VPN connection back to your main office even in a guest network or web cafe.
  • Page 522 Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.  Must -Specify the IPSec policy to be definitely applied on the L2TP connection. Vigor2925 Series User’s Guide...
  • Page 523 Check this box to make the authentication with mOTP One-Time Passwords function. (mOTP) PIN Code – Type the code for authentication (e.g, 1234). Secret – Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6). Vigor2925 Series User’s Guide...
  • Page 524 Local ID - Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 525: User Group

    Click to clear all indexes. Index Display the number link of the profile. Name Display the name of the group profile. Click any index number link to open the following page for detailed configuration. Available settings are explained as follows: Vigor2925 Series User’s Guide...
  • Page 526 If the above three options are enabled, the system will do the authentication based on them in sequence. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 527: Online User Status

    If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into DrayTek SSL VPN portal interface. Next, users can open SSL VPN>> Online Status to view logging status of SSL VPN.

  • Page 528: Usb Application

    Vigor router, please make sure the memory format for the USB storage disk is FAT16 or FAT32. It is recommended for you to use FAT32 for viewing the filename completely (FAT16 cannot support long filename). Vigor2925 Series User’s Guide...
  • Page 529 ; : " < > * + = \ | ?. Workgroup Name – Type a name for the workgroup. Host Name – Type the host name for the router. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 530: Usb User Management

    USB storage disk in anonymity. Later, you can open FTP client software and type the username specified here for accessing into USB storage disk. The length of the name is limited to 11 characters. Vigor2925 Series User’s Guide...
  • Page 531 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB storage disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor2925 Series User’s Guide...

  • Page 532: File Explorer

    Click this icon to add a new folder. Create Current Path Display current folder. Upload Click this button to upload the selected file to the USB storage disk. The uploaded file in the USB diskette can be shared for other user through FTP. Vigor2925 Series User’s Guide...

  • Page 533: Usb Device Status

    FTP server. Username It displays the username that user uses to login to the FTP server. When you insert USB device into the Vigor router, the system will start to find out such device within several seconds. Vigor2925 Series User’s Guide...

  • Page 534: Temperature Sensor

    A USB Thermometer is now available. It complements your installed DrayTek router installations that will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating. During summer in particular, it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures.

  • Page 535: Modem Support List

    Below shows an example of temperature graph: Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router. Vigor2925 Series User’s Guide...

  • Page 536: Smb Client Support List

    SMB Client Support List provides the test status information for applications with file sharing operated under different platforms. Vigor2925 Series User’s Guide...

  • Page 537: System Maintenance

    Below shows the menu items for System Maintenance. The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Vigor2925 Series User’s Guide...
  • Page 538 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. Vigor2925 Series User’s Guide...

  • Page 539: 523

    Wizard – A dialog will appear for you to type the IP address and port number of VigorACS server via HTTP or HTTPS. After clicking OK, related data for ACS Server will be shown on the field of URL. Vigor2925 Series User’s Guide...
  • Page 540 A value of “-1” indicates that no maximum period is specified. Apply Settings to APs This feature is able to apply TR-069 settings (including STUN and ACS server settings) to all of APs managed by Vigor2925 at the same time. Vigor2925 Series User’s Guide...
  • Page 541 VigorAP.  AP Password – Type the password of the VigorAP that you want to apply Vigor2925’s TR-069 settings. After finishing all the settings here, please click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 542: Administrator Password

    This feature allows other user in LAN who can access into the web user interface with the same privilege of the administrator. Local User – Check the box to enable the local user configuration. Local User List – It displays the username of the local user. Vigor2925 Series User’s Guide...
  • Page 543 LDAP Profile Setup. LDAP Profile Setup – It allows you to create a new LDAP profile. When you click OK, the login window will appear. Please use the new password to access into the web user interface again. Vigor2925 Series User’s Guide...

  • Page 544: User Password

    Below shows an example for accessing into User Operation with User Password. 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. Vigor2925 Series User’s Guide...
  • Page 545 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2925 Series User’s Guide...
  • Page 546 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Note: Setting in User Mode can be configured as same as in Admin Mode. Vigor2925 Series User’s Guide...

  • Page 547: Login Page Title

    Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Type words or sentences here. It will be displayed for Welcome Message and bulletin message.
  • Page 548 Below shows an example of login customization with the information typed in Login Description and Bulletin. Vigor2925 Series User’s Guide...

  • Page 549: Configuration Backup

    Click Backup to perform the configuration backup of this router. Support Model List Web configuration file from other Vigor router can be applied to Vigor2925 series. At present, only the configuration file of Vigor2920 is accepted for Vigor2925. Vigor2925 Series User’s Guide...
  • Page 550 The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Vigor2925 Series User’s Guide...
  • Page 551 Click Choose File button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2925 Series User’s Guide...

  • Page 552: Syslog/Mail Alert

    VPN, User Access, WAN, Router/DSL information to Syslog. AlertLog Setup Check Enable to activate function of alert log. AlertLog Port - Type the port number for alert log. The default setting is 514. Vigor2925 Series User’s Guide...
  • Page 553 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2925 Series User’s Guide...
  • Page 554 Vigor2925 Series User’s Guide...

  • Page 555: Time And Date

    Check the box to enable the daylight saving. Such feature is available for certain area. Advanced – Click it to open a pop up dialog. Use the default time setting or set user defined time for your requirement. Vigor2925 Series User’s Guide...

  • Page 556: Snmp

    DES) and authentication method (support MD5 and SHA) for the management needs. Available settings are explained as follows: Item Description Enable SNMP Agent Check it to enable this function. Get Community Set the name for getting community by typing a proper Vigor2925 Series User’s Guide...
  • Page 557 Privacy Algorithm Choose one of the methods listed below as the privacy algorithm. Privacy Password Type a password for privacy. The maximum length of the text is limited to 23 characters. Click OK to save these settings. Vigor2925 Series User’s Guide...

  • Page 558: Management

    Available settings are explained as follows: Item Description Type in the router name provided by ISP. Router Name Default: Disable If it is enabled, the function of auto-logout for web user Auto-Logout interface will be disabled. Vigor2925 Series User’s Guide...
  • Page 559 SSL VPN server of the router had upgraded to TLS1.x protocol. If you are using old browser (eg. IE6.0) or old SmartVPN Client, you may still need to enable SSL 3.0 to make sure you can connect, however, it's not recommended. Vigor2925 Series User’s Guide...
  • Page 560 A maximum of three IPs/subnet masks is allowed. IPv6 Address /Prefix Length- Indicate the IP address(es) allowed to login to the router. After finished the above settings, click OK to save the configuration. Vigor2925 Series User’s Guide...

  • Page 561: Reboot System

    Note: When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2925 Series User’s Guide...

  • Page 562: Firmware Upgrade

    Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com. Click System Maintenance>> Firmware Upgrade to launch the Firmware Upgrade Utility. Choose the right firmware by clicking Browse. Then, click Upgrade. The system will upgrade the firmware of the router automatically.

  • Page 563: Activation

    Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. Below shows the successful activation of Web Content Filter: Vigor2925 Series User’s Guide...

  • Page 564: Internal Service User List

    RADIUS server for the user profile. If you check the box next to such item, all of the user profiles listed in this page will be enabled with RADIUS service enabled vice versa. Vigor2925 Series User’s Guide...
  • Page 565 Note: For the detailed setting (such as IP address, port number) configuration of internal RADIUS, refer to Applications>>RADIUS/TACACS+. For the detailed setting (such as IP address, port number) configuration of Local 802.1X, refer to LAN>>Wired 802.1X and Wireless LAN>>Security. Vigor2925 Series User’s Guide...

  • Page 566: Diagnostics

    Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. Vigor2925 Series User’s Guide...

  • Page 567: Dial-Out Triggering

    (e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2925 Series User’s Guide...

  • Page 568: Routing Table

    Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2925 Series User’s Guide...

  • Page 569: Arp Cache Table

    The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Vigor2925 Series User’s Guide...

  • Page 570: Dhcp Table

    Available settings are explained as follows: Item Description Index It displays the connection item number. IP Address It displays the IP address assigned by this router for specified PC. It displays the MAC address for the specified PC that MAC Address Vigor2925 Series User’s Guide...

  • Page 571: Nat Sessions Table

    It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. Vigor2925 Series User’s Guide...

  • Page 572: Dns Cache Table

    Click OK to enable such function. It means when the TTL value of each DNS query reaches the threshold of the value specified here, the corresponding record will be deleted from router’s Cache automatically. Vigor2925 Series User’s Guide...

  • Page 573: Ping Diagnosis

    Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Ping to Use the drop down list to choose the destination that you want to ping. Vigor2925 Series User’s Guide...

  • Page 574: Data Flow Monitor

    Data Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Vigor2925 Series User’s Guide...
  • Page 575 Click it to cancel the IP address blocking. APP QoS Use the drop down list to change the priority in data transmission for the specified IP address (host). Current /Peak/Speed Current means current transmission rate and receiving rate for WAN interface. Vigor2925 Series User’s Guide...

  • Page 576: Traffic Graph

    WAN1/WAN2/WAN3/WAN4 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2925 Series User’s Guide...

  • Page 577: Trace Route

    Available settings are explained as follows: Item Description IPv4 / IPv6 Click one of them to display corresponding information for Trace through Use the drop down list to choose the interface that you want to ping through. Vigor2925 Series User’s Guide...

  • Page 578: Syslog Explorer

    Click this link to save the data as a file. Click this link to refresh this page manually. Refresh Clear Click this link to clear information on this page. Display Mode There are two modes for you to choose. Vigor2925 Series User’s Guide...

  • Page 579: Ipv6 Tspc Status

    Display the information for each event. IPv6 TSPC status web page could help you to diagnose the connection status of TSPC. If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Vigor2925 Series User’s Guide...

  • Page 580: High Availability Status

    Refresh Click this link to refresh this page manually. All of the routers under the same DARP (DrayTek Address resolution Protocol) group can be viewed in such page. However, only partial information of the router status will be displayed. Vigor routers with the following condtions will be treated as the same DARP group: ...
  • Page 581 Display the time period since the last time to get the newest status of other router (except the primary router). Cick the link of Status, Router Name, IPv4 or Details, the following page will be displayed on the screen. Vigor2925 Series User’s Guide...

  • Page 582: Authentication Information

     Always record the new event – only the newest events will be recorded by the system. Time Display the time the user authenticated by Vigor2925 series. Message Display authentication information done by Vigor2925 series. Vigor2925 Series User’s Guide...

  • Page 583: Dos Flood Table

    Moreover, IP address detected and suspected to attack the network system can be blocked shortly by clicking the Block button shown on pages of SYN Flood, UDP Flood and ICMP Flood. Note: The icon - - means there is something wrong (e.g., attacking the system) with that IP address. Vigor2925 Series User’s Guide...
  • Page 584 IP list in the right frame will be blocked by Vigor system permanatly. Remove – It is used to remove selected IP address from the Blocking IP List. Refresh Click this link to refresh current page. Vigor2925 Series User’s Guide...

  • Page 585: External Devices

    You can change the device name if required or remove the information for off-line device whenever you want. When you finished the configuration, click OK to save it. Note: Only DrayTek products can be detected by this function. Vigor2925 Series User’s Guide...
  • Page 586 This page is left blank. Vigor2925 Series User’s Guide...

  • Page 587: Trouble Shooting

    Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2925 Series User’s Guide...

  • Page 588: Checking If The Network Connection Settings On Your Computer Is Ok Or Not

    Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. Vigor2925 Series User’s Guide...
  • Page 589 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. Vigor2925 Series User’s Guide...
  • Page 590 Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2925 Series User’s Guide...

  • Page 591: Pinging The Router From Your Computer

    Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2925 Series User’s Guide...

  • Page 592: Checking If The Isp Settings Are Ok Or Not

     If the problem of LEDs cannot be solved by the above measures, please contact with the nearest reseller, or send an e-mail to DrayTek FAE for technical support.  Check if the settings offered by ISP are configured well or not.

  • Page 593: Problems For 3G/4G Network Connection

    Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek. Please connect your Notebook with 3G/4G USB Modem to test the connection speed to verify if the problem is caused by Vigor2925.
  • Page 594 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the factory default setting, you can configure the settings for the router again to fit your personal request. Vigor2925 Series User’s Guide...

  • Page 595: Contacting Draytek

    If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor2925 Series User’s Guide...
  • Page 596 This page is left blank. Vigor2925 Series User’s Guide...

  • Page 597: Telnet Command Reference

    If you have changed the default, enter the current IP address of the router. Next, type admin/admin for Account/Password. Then, type ?. You will see a list of valid/common commands depending on the router that your use. Vigor2925 Series User’s Guide...
  • Page 598 For users using previous Windows system (e.g., 2000/XP), simply click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Next, type admin/admin for Account/Password. And, type ? to get a list of valid/common commands Vigor2925 Series User’s Guide...

  • Page 599: Telnet Command: Bpa

    “csm appe prof “ is used to configure the APP Enforcement Profile name. Such profile will be applied in Default Rule of Firewall>>General Setup for filtering. csm appe prof -i INDEX [-v | -n NAME] Parameter Description INDEX It means to specify the index number of CSM profile, from 1 to 32. Vigor2925 Series User’s Guide...

  • Page 600: Telnet Command: Csm Appe Set

    [-a|-i|-p|-t|-m] Parameter Description It means to show All group. It means to show IM group. It means to show P2P group. It means to show PROTOCOL group. It means to show MISC group. Vigor2925 Series User’s Guide...

  • Page 601: Telnet Command: Csm Appe Config

    ACTION: Specify the action of the application, 0 or 1. 0: Block. All of the applications meet the CSM rule will be blocked. 1: Pass. All of the applications meet the CSM rule will be passed. Vigor2925 Series User’s Guide...

  • Page 602: Telnet Command: Csm Ucf

    It means de set the administration message. MSG means the content (less than 255 characters) of the message itself. It means to specify the object for the profile. INDEX It means to specify the index number of CSM profile, from 1 Vigor2925 Series User’s Guide...

  • Page 603: Telnet Command: Csm Ucf Obj Index Uac

    INDEX uac -v csm ucf obj INDEX uac -e csm ucf obj INDEX uac -d csm ucf obj INDEX uac -a P|B csm ucf obj INDEX uac -i E|D csm ucf obj INDEX uac -o KEY_WORD_Object_Index Vigor2925 Series User’s Guide...
  • Page 604 No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- > csm ucf obj 1 uac -a B Profile Index: 1 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] Vigor2925 Series User’s Guide...
  • Page 605 [ ]Enable URL Access Control Action:[block] [v]Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- Vigor2925 Series User’s Guide...

  • Page 606: Telnet Command: Csm Ucf Obj Index Wf

    Type the index number (1 to 8) for the file extension object. > csm ucf obj 1 wf -s c Profile Index: 1 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] [v] Prevent web access from IP address. Vigor2925 Series User’s Guide...

  • Page 607: Telnet Command: Csm Wcf

    MSG means the content (less than 255 characters) of the message itself. setdefault It means to return to default settings for all of the profile. It means to specify the object profile. INDEX It means to specify the index number of web content filter Vigor2925 Series User’s Guide...
  • Page 608 Social Networking, Spam Sites,Malware, Botnets, Hacking, Illegal Software, Information Security,Peer-to-eer, Advertisements & Pop-Ups, Arts, Transportation, Compromised, Dating & Personals, , Education, Finance, Government,Health & Medcine, News, Non-profits & NGOs, Personal Sites,Politics, Real Estate, Rligion, Restaurants & Vigor2925 Series User’s Guide...

  • Page 609: Telnet Command: Csm Dnsf

    It means to determine the content of records transmitting to syslog Syslog. P: Pass. Records for the packets passing through DNS filter will be sent to Syslog. B: Block. Records for the packets blocked by DNS filter will Vigor2925 Series User’s Guide...

  • Page 610: Telnet Command: Ddns Log

    Displays the DDNS log. >ddns log > Sets and displays the DDNS time. ddns time <update in minutes> Parameter Description update in minutes Type the value as DDNS time. The range is from 1 to 1440. > ddns time Vigor2925 Series User’s Guide...

  • Page 611: Telnet Command: Dos

    It means to disable the defense function for a specific attack(s). >dos –A The Dos Defense system is Activated >dos –s synflood 50 10 Synflood is enabled! Threshold=50 <pke/sec> timeout=10 <pke/sec> Vigor2925 Series User’s Guide...

  • Page 612: Telnet Command: Exit

    -n <netmask> It means to assign netmask for WAN connection. You have to type 255.255.255.xxx (x is changeable) as the netmask for WAN port. -g <gateway> It means to assign gateway IP for such WAN connection. Vigor2925 Series User’s Guide...

  • Page 613: Telnet Command: Ip Pubsubnet

    Enable Enable the function. Disable Disable the function. > ip pubsubnet disable public subnet disabled! This command allows users to set the public address for your router. ip pubaddr ? ip pubaddr <public subnet IP address> Vigor2925 Series User’s Guide...

  • Page 614: Telnet Command: Ip Pubmask

    This command is used for configuring WAN IP Alias. ip aux add [IP] [Join to NAT Pool] ip aux remove [index] Parameter Description It means to create a new WAN IP address. remove It means to delete an existed WAN IP address. Vigor2925 Series User’s Guide...

  • Page 615: Telnet Command: Ip Addr

    (they should be in the same network segment), the IP address of the PC must be fixed with the same LAN IP address (network segment) set by this command for accessing into the web user interface of the router. Later, modify the start addresses for the DHCP server. Vigor2925 Series User’s Guide...

  • Page 616: Telnet Command: Ip Nmask

    3: enable to accept illegal dest mac address 4: Decline VRRP mac into arp table 5: Accept VRRP mac into arp table status: display the setting status. Available settings will be 10, 20, 30,..2550 seconds. Time Vigor2925 Series User’s Guide...

  • Page 617: Telnet Command: Ip Dhcpc

    -u: update by index number release It means to release current WAN IP address. renew It means to renew the WAN IP address and obtain another new one. status It displays current status of DHCP client. Vigor2925 Series User’s Guide...

  • Page 618: Telnet Command: Ip Ping

    [Host/IP address] [WAN1/WAN2] [Udp/Icmp] Parameter Description IP address It means the target IP address. WAN1/WAN2 It means the WAN port that the above IP address passes through. Udp/Icmp It means the UDP or ICMP. Vigor2925 Series User’s Guide...

  • Page 619: Telnet Command: Ip Telnet

    This command allows users to set the RIP (routing information protocol) of IP. ip rip [0/1/2] Parameter Description 0/1/2 0 means disable; 1 means first subnet and 2 means second subnet. > ip rip 1 %% Set RIP 1st subnet. Vigor2925 Series User’s Guide...

  • Page 620: Telnet Command: Ip Wanrip

    <ifno> 1: WAN1,2: WAN2 3: PVC3,4: PVC4,5: PVC5 -e <0/1> 0: disable, 1: enable Now status: WAN[1] Rip Protocol disable WAN[2] Rip Protocol disable WAN[3] Rip Protocol disable WAN[4] Rip Protocol disable WAN[5] Rip Protocol enable > Vigor2925 Series User’s Guide...

  • Page 621: Telnet Command: Ip Route

    > ip route add 172.16.2.0 255.255.255.0 172.16.2.4 3 static > ip route status Codes: C - connected, S - static, R - RIP, * - default, ~ - private 192.168.1.0/ 255.255.255.0 is directly connected, LAN1 172.16.2.0/ 255.255.255.0 via 172.16.2.4, WAN1 Vigor2925 Series User’s Guide...

  • Page 622: Telnet Command: Ip Igmp_Proxy

    > ip igmp_proxy query 130000 This command is for setting IGMP General Query Interval The default value is 125000 ms Current Setting is:130000 ms > This command allows users to enable or disable IGMP snoop function. ip igmp_snoop enable Vigor2925 Series User’s Guide...
  • Page 623 > ip igmp_snoop mode ? % ip igmp mode [hw/sw] igmp snooping works on HW mode now. > ip igmp_snoop separate ? % ip igmp separate [on/off] igmp snoop seprate is ON now. igmp packets will be separated by NAT/Bridge. Vigor2925 Series User’s Guide...

  • Page 624: Telnet Command: Ip Wanaddr

    It means the MAC address of the device that you want to specify >ip dmz ? % ip dmz <mac>, now : 00-00-00-00-00-00 > ip dmz 11-22-33-44-55-66 > ip dmz ? % ip dmz <mac>, now : 11-22-33-44-55-66 > Vigor2925 Series User’s Guide...

  • Page 625: Telnet Command: Ip Dmzswitch

    It means to turn off session limit for each IP. default [num] It means to set the default number of session num limit. Defautlp2p [num] It means to set the default number of session num limit for p2p. Vigor2925 Series User’s Guide...

  • Page 626: Telnet Command: Ip Bandwidth

    [add/del] [IP1-IP2][tx][rx][shared] Parameter Description It means to turn on the IP bandwidth limit. It means to turn off the IP bandwidth limit. default [tx_rate][rx_rate] It means to set default tx and rx rate of bandwidth limit. The Vigor2925 Series User’s Guide...

  • Page 627: Telnet Command: Ip Bindmac

    It means to turn on IP bandmac policy. Even the IP is not in the policy table, it can still access into network. It means to turn off all the bindmac policy. strict_on It means that only those IP address in IP bindmac policy table can access into network. Vigor2925 Series User’s Guide...
  • Page 628 It means to delete all the IP bindmac settings. > ip bindmac add 192.168.1.46 00:50:7f:22:33:55 just for test > ip bindmac show ip bind mac function is turned ON IP : 192.168.1.46 bind MAC : 00-50-7f-22-33-55 Comment : just Vigor2925 Series User’s Guide...

  • Page 629: Telnet Command: Ip Maxnatuser

    It means to list detailed information of profile configuration. > ip lanDNSRes -l % Idx: 7 % State: Enable % Profile: DrayTekFTP % Domain Name: ftp.draytek.com % -------- Address Mapping Table -------- Vigor2925 Series User’s Guide...

  • Page 630: Telnet Command: Ip6 Addr

    0: reply all subnet packets. 1: reply only same subnet packet. It means to update LAN DNS configuration to DNS cache. > ip lanDNSRes -i 1 -n ftp.drayTek.com % Configure Set1's DomainName:ftp.drayTek.com ip lanDNSRes -i 1 -n ftp.drayTek.com >...

  • Page 631: Telnet Command: Ip6 Dhcp Req_Opt

    It means to ask the DNS name. It means to ask NTP. It means to ask NIS. It means to ask NIS name. It means to ask NISP. It means to ask NISP name. It means to ask BCMCS. Vigor2925 Series User’s Guide...

  • Page 632: Telnet Command: Ip6 Dhcp Client

    Interface WAN2 has following DHCPv6 client settings: DHCPv6 client enabled request IA_PD whose IAID equals to 2008 > ip6 dhcp client WAN2 –n 1023456 > ip6 dhcp client WAN2 –a Interface WAN2 has following DHCPv6 client settings: Vigor2925 Series User’s Guide...

  • Page 633: Telnet Command: Ip6 Dhcp Server

    > ip6 dhcp server -x ff02::3 > ip6 dhcp server -a % Interface LAN has following DHCPv6 server settings: DHCPv6 server disabled maximum address of the pool: FF02::3 minimum address of the pool: FF02::1 1st DNS IPv6 Addr: FF02::1 Vigor2925 Series User’s Guide...

  • Page 634: Telnet Command: Ip6 Internet

    <server>= type an IPv6 address for first DNS server. -D <server> It means to set the secondary DNS Server IP. <server>= type an IPv6 address for second DNS server. It means to set IPv6 PPP WAN test mode for DHCP or -t <dhcp/ra/none> Vigor2925 Series User’s Guide...

  • Page 635: Telnet Command: Ip6 Neigh

    Neighbour 2001:2222:3333::1111 successfully added! > ip6 neigh -a I/F ADDR STATE ------------------------------------------------------------------------- LAN FF02::1 33-33-00-00-00-01 CONNECTED WAN2 2001:5C0:1400:B::10B8 00-00-00-00-00-00 CONNECTED WAN2 2001:2222:3333::1111 00-00-00-00-00-00 CONNECTED WAN2 2001:2222:6666::1111 00-00-00-00-00-00 CONNECTED WAN2 :: 00-00-00-00-00-00 CONNECTED LAN :: NONE > Vigor2925 Series User’s Guide...

  • Page 636: Telnet Command: Ip6 Pneigh

    It means the gateway of the router. LAN|WAN1|WAN2|iface# It means to specify LAN or WAN interface for such address. > ip6 route -s FE80::250:7FFF:FE12:500 16 FE80::250:7FFF:FE12:100 LAN Route FE80::250:7FFF:FE12:500/16 successfully added! > ip6 route -a LAN Vigor2925 Series User’s Guide...

  • Page 637: Telnet Command: Ip6 Ping

    Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Packets: Sent = 5, Received = 5, Lost = 0 <% loss> > Vigor2925 Series User’s Guide...

  • Page 638: Telnet Command: Ip6 Tspc

    Type the number (unit: second) you want. It means to show the RADVD configuration. It means RA default test. Vigor2925 Series User’s Guide...

  • Page 639: Telnet Command: Ip6 Mngt

    > ip6 mngt list add 1 FE80::250:7FFF:FE12:1010 128 > ip6 mngt list add 2 FE80::250:7FFF:FE12:1020 128 > ip6 mngt list add 3 FE80::250:7FFF:FE12:2080 128 > ip6 mngt list % IPv6 Access List : Index IPv6 Prefix Prefix Length ======================================== FE80::250:7FFF:FE12:1010 FE80::250:7FFF:FE12:1020 Vigor2925 Series User’s Guide...

  • Page 640: Telnet Command: Ip6 Online

    % Interface : DOWN % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % Tx packets = 0, Tx bytes = 0, Rx packets = 0, Rx bytes = 0 Vigor2925 Series User’s Guide...

  • Page 641: Telnet Command: Ip6 Aiccu

    –p [0/1] Parameter Description –h It is used to display the usage of such command. It is used to show the NTP state. -p <0/1> It is used to specify NTP server for IPv6. 0 – Auto Vigor2925 Series User’s Guide...

  • Page 642: Telnet Command: Ipf View

    [SET_NO] rule [RULE_NO] [Options] Parameter Description Options There are several options provided here, such as -v, -c [SET_NO], -d [SET_NO],… and etc. SET_NO It means to specify the index number (from 1 to 12) of filter set. Vigor2925 Series User’s Guide...
  • Page 643 > ipf set -d 2 #set data filter start from set 2 Setting saved. > ipf set -v Call Filter: Enable (Start Filter Set = 1) Data Filter: Enable (Start Filter Set = 2) Log Flag : None Actions for packet not matching any rule: Vigor2925 Series User’s Guide...

  • Page 644: Telnet Command: Ipf Rule

    –s u <Address Type> <Start IP Address> <End type, start IP address, end IP address and address mask. IP Address> | <Address u – It means “user defined”. Mask> Address Type - Type the number (representing different Vigor2925 Series User’s Guide...
  • Page 645 – it means “user defined”. <protocol> – It means TCP(6),UDP(17), TCP/UDP(255). <source_port__value> – 1 – Port OP, range is 0-3. 0:= =, 1:!=, 2:>, 3:< 3 – Port range of the Start Port Number, range is 1-65535. Vigor2925 Series User’s Guide...
  • Page 646 It means to set code page. Different number represents different code page. 0. None 1. ANSI(1250)-Central Europe 2. ANSI(1251)-Cyrillic 3. ANSI(1252)-Latin I 4. ANSI(1253)-Greek 5. ANSI(1254)-Turkish 6. ANSI(1255)-Hebrew 7. ANSI(1256)-Arabic 8. ANSI(1257)-Baltic 9. ANSI(1258)-Viet Nam 10. OEM(437)-United States 11. OEM(850)-Multilingual Latin I 12. OEM(860)-Portuguese Vigor2925 Series User’s Guide...
  • Page 647 APP Enforcement : None URL Content Filter : None Load-Balance policy : Auto-select : Disable ------------------------------------------------------------------ CodePage : ANSI(1252)-Latin I Window size : 65535 Session timeout : 1440 DrayTek Banner : Enable ------------------------------------------------------------------ Strict Security Checking Vigor2925 Series User’s Guide...

  • Page 648: Telnet Command: Ipf Flowtrack

    192.168.1.11:59939 ,ifno=3 proto=17, age=93023180(3920), flag=203 ORIGIN>> 192.168.1.11:15073 -> 8.8.8.8: 53 ,ifno=0 REPLY >> 8.8.8.8: 53 -> 192.168.1.11:15073 ,ifno=3 proto=17, age=93025100(2000), flag=203 ORIGIN>> 192.168.1.11: 7247 -> 8.8.8.8: 53 ,ifno=0 REPLY >> 8.8.8.8: 53 -> 192.168.1.11: 7247 ,ifno=3 Vigor2925 Series User’s Guide...

  • Page 649: Telnet Command: Log

    = 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0 Relay agent IP = 0.0.0.0 25:36:49.580 ---->DHCP (WAN-5) Len = 548XID = 0x7880fdd4 Client IP = 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0 Vigor2925 Series User’s Guide...

  • Page 650: Telnet Command: Mngt Ftpport

    This command allows users to set HTTPS port for management. mngt httpsport [Https port] Parameter Description It means to type the number for HTTPS port. The default Https port setting is 443. > mngt httpsport 443 % Set web server port to 443 done. Vigor2925 Series User’s Guide...

  • Page 651: Telnet Command: Mngt Telnetport

    It means to activate FTP server function. disable It means to inactivate FTP server function. > mngt ftpserver enable %% FTP server has been enabled. > mngt ftpserver disable %% FTP server has been disabled. Vigor2925 Series User’s Guide...

  • Page 652: Telnet Command: Mngt Noping

    It means to display a log of ping action, including source MAC and source IP. clearlog It means to clear the log of ping action. > mngt noping off No Ping Packet Out is OFF!! Vigor2925 Series User’s Guide...

  • Page 653: Telnet Command: Mngt Defenseworm

    [status] mngt rmtcfg [enable] mngt rmtcfg [disable] mngt rmtcfg [http/https/ftp/telnet/ssh/tr069] [on/off] Parameter Description status It means to display current setting for your reference. enable It means to allow the system administrators to login from the Internet. Vigor2925 Series User’s Guide...

  • Page 654: Telnet Command: Mngt Echoicmp

    This command allows you to specify that the system administrator can login from a specific host or network. A maximum of three IPs/subnet masks is allowed. mngt accesslist list mngt accesslist add [index][ip addr][mask] mngt accesslist remove [index] mngt accesslist flush Parameter Description Vigor2925 Series User’s Guide...

  • Page 655: Telnet Command: Mngt Snmp

    (max. 23 characters) -n <IP address> It means to set the IPv4 address of the host that will receive the trap community. -T <seconds> It means to set the trap timeout <0~999>. It means to list SNMP setting. Vigor2925 Series User’s Guide...

  • Page 656: Telnet Command: Msubnet Switch

    > mngt snmp -e 1 -g draytek -s DK -m 192.168.1.1 -t trapcom -n 10.20.3.40 -T 88 SNMP Agent Turn on!!! Get Community set to draytek Set Community set to DK Manager Host IP set to 192.168.1.1 Trap Community set to trapcom Notification Host IP set to 10.20.3.40...

  • Page 657: Telnet Command: Msubnet Nmask

    % Dhcp Gateway: 0.0.0.0, Start IP: 0.0.0.10, Pool Count: 50 This command allows you to enable or disable DHCP server for the subnet. msubnet dhcps [2][On/Off] Parameter Description It means LAN interface. 2=LAN2 On/Off On means enabling the DHCP server for the specified LAN interface. Vigor2925 Series User’s Guide...

  • Page 658: Telnet Command: Msubnet Nat

    This command is used to configure an IP address as the gateway used for subnet. msubnet gateway [2] [Gateway IP] Parameter Description It means LAN interface. 2=LAN2 Gateway IP Specify an IP address as the gateway IP. > msubnet gateway 2 192.168.1.13 % Set LAN2 Dhcp Gateway IP done !!! Vigor2925 Series User’s Guide...

  • Page 659: Telnet Command: Msubnet Ipcnt

    % Enable routing between LAN1 and LAN2! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. > msubnet talk % msubnet talk <1/2> <1/2> <On/Off> % where 1:LAN1, 2:LAN2 % Now: LAN1 LAN2 % LAN1 Vigor2925 Series User’s Guide...

  • Page 660: Telnet Command: Msubnet Startip

    % Set LAN2 PPP(IPCP) Start IP done !!! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. > > msubnet pppip % msubnet pppip <2> <Start IP> % Now: LAN2 192.168.2.250 Vigor2925 Series User’s Guide...

  • Page 661: Telnet Command: Msubnet Nodetype

    > msubnet primWINS 2 192.168.3.5 % Set LAN2 Dhcp Primary WINS IP done !!! > msubnet primWINS % msubnet primWINS <2> <WINS IP> % Now: LAN2 192.168.3.5 2.168.3.5; LAN3 0.0.0.0; LAN4 0.0.0.0; LAN5 0.0.0.0; LAN6 0.0.0.0 Vigor2925 Series User’s Guide...

  • Page 662: Telnet Command: Msubnet Secwins

    % msubnet tftp <2> <TFTP server name> % Now: LAN2 > msubnet tftp 2 publish % Set LAN2 TFTP Server Name done !!! > msubnet tftp % msubnet tftp <2> <TFTP server name> % Now: LAN2 publish Vigor2925 Series User’s Guide...

  • Page 663: Telnet Command: Msubnet Mtu

    INDEX -s INVERT object ip obj INDEX -a TYPE [START_IP] [END/MASK_IP] Parameter Description setdefault It means to return to default settings for all profiles. INDEX It means the index number of the specified object profile. Vigor2925 Series User’s Guide...
  • Page 664 > object ip obj 1 -n marketing > object ip obj 1 -a 1 192.168.1.45 > object ip obj 1 -v IP Object Profile 1 Name :[marketing] Interface:[Any] Address type:[single] Start ip address:[192.168.1.45] End/Mask ip address:[0.0.0.0] Invert Selection:[0] Vigor2925 Series User’s Guide...

  • Page 665: Telnet Command: Object Ip Grp

    The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. > object ip grp 2 -n First IP Group Profile 2 Name :[First] Interface:[Any] Included ip object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] Vigor2925 Series User’s Guide...

  • Page 666: Telnet Command: Object Ipv6 Obj

    Example: object ip obj 8 -i 0 -s INVERT It means to set invert seletion for the object profile. INVERT=0, means disableing the function. INVERT=1, means enabling the function. Example: object ip obj 3 -s 1 Vigor2925 Series User’s Guide...

  • Page 667: Telnet Command: Object Ipv6 Grp

    It means to view the information of the specified group profile. Example: object ip grp 1 -v -n NAME It means to define a name for the IP group. NAME: Type a name with less than 15 characters. Example: object ip grp 8 -n bruce Vigor2925 Series User’s Guide...
  • Page 668 > object ip grp 2 -i 1 > object ip grp 2 -a 1 2 IP Group Profile 2 Name :[First] Interface:[Lan] Included ip object index: [0:][1] [1:][2] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] [8:][0] [9:][0] [10:][0] [11:][0] Vigor2925 Series User’s Guide...

  • Page 669: Telnet Command: Object Service Obj

    -d CHK [START_P] It means to set destination port check and configure port [END_P] range (1~65565) for TCP/UDP. END_P, type a port number to indicate destination port. Example: object service obj 3 -d 1 100 200 Vigor2925 Series User’s Guide...

  • Page 670: Telnet Command: Object Service Grp

    The service object profiles with index number 1,2,3,4 and 5 will be group under such profile. > object service grp 1 -n Grope_1 Service Group Profile 1 Name :[Grope_1] Included service object index: [0:][0] [1:][0] [2:][0] [3:][0] Vigor2925 Series User’s Guide...

  • Page 671: Telnet Command: Object Kw

    NAME: Type a name with less than 15 characters. -a CONTENTS It means to set the contents for the keyword profile. Example: object kw obj 40 -a test > object kw obj 1 -n children Profile 1 Name :[children] Vigor2925 Series User’s Guide...

  • Page 672: Telnet Command: Object Fe

    1 -e Image FILE_EXTENSION: ".bmp", ".dib", ".gif", ".jpeg", ".jpg", ".jpg2", ".jp2", ".pct", ".pcx", ".pic", ".pict", ".png", ".tif", ".tiff", ".asf", ".avi", ".mov", ".mpe", ".mpeg", ".mpg", ".mp4", ".qt", ".rm", ".wmv", ".3gp", ".3gpp", ".3gpp2", ".3g2", ".aac", ".aiff", ".au", Vigor2925 Series User’s Guide...
  • Page 673 [ ].bzip2 [ ].bz2 [ ].cab [ ].gz [ ].gzip [ ].rar [ ].sit [ ].zip ------------------------------------------------------------------------- ------ Executation category: [ ].bas [ ].bat [ ].com [ ].exe [ ].inf [ ].pif [ ].reg [ ].scr Vigor2925 Series User’s Guide...

  • Page 674: Telnet Command: Port

    <sec>: Type a number to set the TCP WWW session timeout. It means “TCP SYN” protocol. -s <sec> <sec>: Type a number to set the TCP SYN session timeout. It means to flush all portmaps (useful for diagnostics). -l <List> List all settings. Vigor2925 Series User’s Guide...

  • Page 675: Telnet Command: Prn

    It means to set outbound bandwidth in kbps (Ethernet WAN only). The available setting is from 1 to 100000. It means to set ratio for class index, in %. -r <index:ratio> -u <mode> It means to enable bandwidth control for UDP. Vigor2925 Series User’s Guide...
  • Page 676 WAN1 class 3 ratio set to 20 WAN1 udp bandwidth control set to enable WAN1 udp bandwidth limit ratio set to 50 WAN1 Outbound TCP ACK Prioritizel set to enable QoS WAN1 set complete; restart QoS > Vigor2925 Series User’s Guide...

  • Page 677: Telnet Command: Qos Class

    – It means the subnet address with start IP address. Please type the subnet and the IP address, for example, “-l 172.16.3.9:255.255.0.0”.0 any – It means Any address. Simple type “-l” to specify any address for this command. -p <DSCP id> Specify the ID. Vigor2925 Series User’s Guide...

  • Page 678: Telnet Command: Qos Type

    Show the rule in the specified class. It means that you can type in several commands in one line. […] > qos class -c 2 -n draytek -a -m 1 -l 192.168.1.50:192.168.1.80 Following setting will set in the class2 class 2 name set to draytek...

  • Page 679: Telnet Command: Quit

    > qos type -a draytek -t 6 -p 510:1330 service name set to draytek service type set to 6:TCP Port type set to Range Service Port set to 510 ~ 1330 > This command can exit the telnet command screen.

  • Page 680: Telnet Command: Show Dns

    Private IP Private Port 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] Vigor2925 Series User’s Guide...

  • Page 681: Telnet Command: Show Portmap

    WAN 1 Status: Disconnected Enable:Yes Line:xDSL Name:tcom Mode:Static IP Up Time:0:00:00 IP:172.16.3.221 IP:172.16.3.2 TX Packets:0 TX Rate:0 RX Packets:0 RX Rate:0 ADSL Information: ADSL Firmware Version:05-04-04-04-00-01 Mode: State:TRAINING TX Block:0 RX Block:0 Corrected Blocks:0 Uncorrected Blocks:0 Vigor2925 Series User’s Guide...

  • Page 682: Telnet Command: Show Traffic

    WAN3 total TX: 0 Bytes ,RX: 0 Bytes WAN4 total TX: 0 Bytes ,RX: 0 Bytes WAN5 total TX: 0 Bytes ,RX: 0 Bytes > This command is used to enable DCHP2 server. srv dhcp dhcp2 [-<command> <parameter> | ... ] Vigor2925 Series User’s Guide...

  • Page 683: Telnet Command: Srv Dhcp Public

    It means to specify an IP address as the starting point in the IP address pool. It means the IP count number. IP counts It means to specify the number of IP addresses in the pool. Vigor2925 Series User’s Guide...

  • Page 684: Telnet Command: Srv Dhcp Dns1

    It means the IP address that you want to use as DNS1. Note: The IP Routed Subnet DNS must be the same as NAT Subnet DNS). > > srv dhcp dns1 lan1 168.95.1.1 % srv dhcp dns1 lan1 <DNS IP address> % Now: 168.95.1.1 Vigor2925 Series User’s Guide...

  • Page 685: Telnet Command: Srv Dhcp Dns2

    This command allows users to specify gateway address for DHCP server. srv dhcp gateway [?] srv dhcp gateway [Gateway IP] Parameter Description It means to display current gateway that you can use. Gateway IP It means to specify a gateway address used for DHCP server. Vigor2925 Series User’s Guide...

  • Page 686: Telnet Command: Srv Dhcp Ipcnt

    It means subnet 1 or 2. Please type 1 or 2. The router will invoke this function according to the subnet 1 or 2 specified here. > srv dhcp relay servip 192.168.1.46 > srv dhcp relay subnet 2 Vigor2925 Series User’s Guide...

  • Page 687: Telnet Command: Srv Dhcp Startip

    > srv dhcp status LAN1 : 192.168.1.1/255.255.255.0, DHCP server: On Default gateway: 192.168.1.1 Index IP Address MAC Address Leased Time HOST ID 192.168.1.12 00-05-5D-E4-D8-EE 118:18:19 A1000351 192.168.1.255 00-00-00-00-00-00 BAD IP 192.168.1.0 00-00-00-00-00-00 BAD IP 192.168.1.1 00-00-00-00-00-00 BAD IP Vigor2925 Series User’s Guide...

  • Page 688: Telnet Command: Srv Dhcp Leasetime

    It means to specify a type for node. 1. B-node 2. P-node 4. M-node 8. H-node > srv dhcp nodetype 1 > srv dhcp nodetype ? %% srv dhcp nodetype <count> %% 1. B-node 2. P-node 4. M-node 8. H-node % Now: 1 Vigor2925 Series User’s Guide...

  • Page 689: Telnet Command: Srv Dhcp Primwins

    It means to remove the IP address settings of second WINS server. > srv dhcp secWINS 192.168.1.180 > srv dhcp secWINS ? %% srv dhcp secWINS <WINS IP address> %% srv dhcp secWINS clear % Now: 192.168.1.180 Vigor2925 Series User’s Guide...

  • Page 690: Telnet Command: Srv Dhcp Exprecycleip

    > srv dhcp tftp TF123 > srv dhcp tftp ? %% srv dhcp tftp <TFTP server name> % Now: TF123 > srv dhcp tftpdel % The TFTP Server Name had been deleted !!! Vigor2925 Series User’s Guide...

  • Page 691: Telnet Command: Srv Dhcp Option

    It means the index number of the option value. > srv dhcp option -e 1 -i 2/r -c 44 -a 192.168.1.10,192.168.1.20 > srv dhcp option -l % state idx interface opt type data % enable 1 LAN2/r 44 Address 192.168.1.10 ,192.168.1.20 Vigor2925 Series User’s Guide...

  • Page 692: Telnet Command: Srv Nat Addrmapping

    --------------current NAT address map settings---------- #rule-set 1 ------------------------ enable: 1 protocol: TCP public IP: #1: 208.228.145.2 private IP: 192.168.1.90 mask: /16 #rule-set 2 ------------------------ enable: 0 protocol: all public IP: #1: 192.168.1.90 private IP: 0.0.0.0 mask: /32 Vigor2925 Series User’s Guide...

  • Page 693: Telnet Command: Srv Nat Dmz

    Srv nat ipsecpass [options] Parameter Description [options] The available commands with parameters are listed below. It means to enable IPSec ESP tunnel passthrough and IKE source port (500) preservation. It means to disable IPSec ESP tunnel passthrough and IKE Vigor2925 Series User’s Guide...

  • Page 694: Telnet Command: Srv Nat Openport

    It means to display current settings. -r <remove> It means to delete the specified open port setting. remove: Type the index number of the profile. It means to return to factory settings for all the open ports -f <flush> Vigor2925 Series User’s Guide...

  • Page 695: Telnet Command: Srv Nat Portmap

    It means to specify the private IP address of the internal host providing the service. pri port It means to specify the private port number of the service offered by the internal host. wan1/wan2 It means to specify WAN interface for the port redirection. Vigor2925 Series User’s Guide...
  • Page 696 It means the index number for the profiles. The range is from 1 to 20. The available commands with parameters are listed below. [-<command> <parameter> | ... ] […] means that you can type in several commands in one Vigor2925 Series User’s Guide...
  • Page 697 > srv nat trigger -v Port Trigger Rule status: Index Status Comment TProto TPort IProto IPort ----------------------------------------------------- Enable test 1000 Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Vigor2925 Series User’s Guide...

  • Page 698: Telnet Command: Srv Nat Showall

    0.0.0.0:80 192.168.1.11:100 0.0.0.0:23~83 192.168.1.100:23~83 0.0.0.0 192.168.1.96 R:Port Redirection, O:Open Ports, D:DMZ This command is used to obtain the TX (transmitted) or RX (received) data for each connected switch. switch -i [switch idx_no] [option] switch not_respond 0 Vigor2925 Series User’s Guide...

  • Page 699: Telnet Command: Switch Status

    [-<command> <parameter> | ... ] Parameter Description -e <enable> It is used to disable/enable bonjour service (0: disable, 1: enable). -h <enable> It is used to disable/enable http (web) service (0: disable, 1: enable). Vigor2925 Series User’s Guide...

  • Page 700: Telnet Command: Sys Cfg

    This command displays the history of the commands that you have typed. > sys cmdlog % Commands Log: (The lowest index is the newest !!!) [1] sys cmdlog [2] sys cmdlog ? [3] sys ? [4] sys cfg status [5] sys cfg ? Vigor2925 Series User’s Guide...

  • Page 701: Telnet Command: Sys Ftpd

    > sys domainname wan1 clever > sys domainname wan2 intellegent > sys domainname ? % sys domainname <wan1/wan2> <Domain Name Suffix (max. 39 characters)> % sys domainname <wan1/wan2> clear % Now: wan1 == clever, wan2 ==intelligent > Vigor2925 Series User’s Guide...

  • Page 702: Telnet Command: Sys Iface

    Interface 8 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-06 Interface 9 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-07 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] > Vigor2925 Series User’s Guide...

  • Page 703: Telnet Command: Sys Name

    Description ASCII string It means the password for administrator. The maximum character that you can set is 23. > sys passwd admin123 > This command allows users to restart the router immediately. > sys reboot > Vigor2925 Series User’s Guide...

  • Page 704: Telnet Command: Sys Autoreboot

    This command can turn on TFTP server for upgrading the firmware. > sys tftpd % TFTP server enabled !!! This command can display current country code and wireless region of this device. > sys cc Country Code : 0x 0 [International] Wireless Region Code: 0x30 > Vigor2925 Series User’s Guide...

  • Page 705: Telnet Command: Sys Version

    # of lost by siganture = 0 # of lost by list = 0 This command can turn on or turn off polling buffer for the router. sys pollbuf [on] sys pollbuf [off] Parameter Description It means to turn on pulling buffer. Vigor2925 Series User’s Guide...

  • Page 706: Telnet Command: Sys Tr069

    It means to save the parameters to the flash memory of the router. Inform [event code] It means to inform parameters for tr069 with different event codes. [event code] includes: 0-"0 BOOTSTRAP", 1-"1 BOOT", 2-"2 PERIODIC", Vigor2925 Series User’s Guide...
  • Page 707 Total content length of parameter is 915 InternetGatewayDevice.LANDeviceNumberOfEntries InternetGatewayDevice.WANDeviceNumberOfEntries InternetGatewayDevice.DeviceInfo. InternetGatewayDevice.ManagementServer. InternetGatewayDevice.Time. InternetGatewayDevice.Layer3Forwarding. InternetGatewayDevice.LANDevice. InternetGatewayDevice.WANDevice. InternetGatewayDevice.Services. InternetGatewayDevice.X_00507F_InternetAcc. InternetGatewayDevice.X_00507F_LAN. InternetGatewayDevice.X_00507F_NAT. InternetGatewayDevice.X_00507F_Firewall. InternetGatewayDevice.X_00507F_Bandwidth. InternetGatewayDevice.X_00507F_Applications. InternetGatewayDevice.X_00507F_VPN. InternetGatewayDevice.X_00507F_VoIP. InternetGatewayDevice.X_00507F_WirelessLAN. InternetGatewayDevice.X_00507F_System. InternetGatewayDevice.X_00507F_Status. InternetGatewayDevice.X_00507F_Diagnostics. --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] Vigor2925 Series User’s Guide...

  • Page 708: Telnet Command: Sys Sip_Alg

    It means license and signature download interface setting. licifno lic_wiz [set/reg/qry] It means the license wizard setting. qry: query service support status set [idx] [trial] [service type] [sp_id] [start_date] [License Key] reg: register service in portal Vigor2925 Series User’s Guide...

  • Page 709: Telnet Command: Sys Fr_Log

    "2015-01-30 10:49:25", "Local User: 141.8.224.25:80 -> 192.168.1.11:17934 (TCP) close connection" ------------------------------------------------------------ "2015-01-30 10:49:24", "Local User (MAC=00-00-00-45-00-00): 192.168.1.11:17935 - > 64.233.187.154:80 (TCP)Web" ------------------------------------------------------------ "2015-01-30 10:49:24", "Local User (MAC=00-00-00-3E-00-00): 192.168.1.11:17934 - > 141.8.224.25:80 (TCP)Web" ------------------------------------------------------------ "2015-01-30 10:49:15", "[H2L][UP][PPTP][@Radius:sh.test1]" ------------------------------------------------------------ Vigor2925 Series User’s Guide...

  • Page 710: Telnet Command: Testmail

    The tmpvirtual server index >>0<< PortMapLeaseDuration >>0<<, PortMapEnabled >>0<< Ftp Example [MICROSOFT] ((1)) InternalClient >>0.0.0.0<<, RemoteHost >>0.0.0.0<< InternalPort >>0<<, ExternalPort >>0<< PortMapProtocol >><NULL><< The tmpvirtual server index >>0<< PortMapLeaseDuration >>0<<, PortMapEnabled >>0<< PortMapProtocol >><NULL><< The tmpvirtual server index >>0<< Vigor2925 Series User’s Guide...

  • Page 711: Telnet Command: Upnp Service

    /upnp/OSInfo.xml controlURL /OSInfo1 eventURL /OSInfoEvent1 uuid:774e9bbe-7386-4128-b627-001daa843464 >>>>> SERVICE TABLE2 <<<<< serviceType urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1 serviceId urn:upnp-org:serviceId:WANCommonIFC1 SCPDURL /upnp/WComIFCX.xml controlURL /upnp?control=WANCommonIFC1 eventURL /upnp?event=WANCommonIFC1 uuid:2608d902-03e2-46a5-9968-4a54ca499148 >>>>> SERVICE TABLE3 <<<<< serviceType urn:schemas-upnp-org:service:WANIPConnection:1 serviceId urn:upnp-org:serviceId:WANIPConn1 SCPDURL /upnp/WIPConn1.xml controlURL /upnp?control=WANIPConn1 eventURL /upnp?event=WANIPConn1 uuid:1f41d0d6-4a64-42da-9593-5e266b10aed2 Vigor2925 Series User’s Guide...

  • Page 712: Telnet Command: Upnp Subscribe

    >>>> (1) serviceType urn:schemas-microsoft-com:service:OSInfo:1 ----- Subscribtion1 ------- sid = 7a2bbdd0-0047-4fc8-b870-4597b34da7fb eventKey =1, ToSendEventKey = 1 expireTime =6926 active =1 DeliveryURLs =<http://192.168.1.113:2869/upnp/eventing/twtnpnsiun> >>>> (2) serviceType urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1 ----- Subscribtion1 ------- sid = d9cd47a5-d9c9-4d3d-8043-d03a82f27983 eventKey =1, ToSendEventKey = 1 Vigor2925 Series User’s Guide...

  • Page 713: Telnet Command: Upnp Tmpvs

    This command is used to specify WAN interface to apply UPnP. upnp wan [n] Parameter Description It means to specify WAN interface to apply UPnP. n=0, it means to auto-select WAN interface. n=1, WAN1 n=2, WAN2 ………. > upnp wan 1 use wan1 now. Vigor2925 Series User’s Guide...

  • Page 714: Telnet Command: Usb List

    This command can make the router to be regarded as a modem but not a router. > vigbrg on %Enable Vigor Bridge Function! This command can disable vigor bridge function. > vigbrg off %Disable Vigor Bridge Function! Vigor2925 Series User’s Guide...

  • Page 715: Telnet Command: Vigbrg Status

    This command can display the existed WLAN connection status for the modem (change from router into bridge modem), including index number, MAC address, Stamp Time, PVC, VLAN port for Vigor Bridge Function. > vigbrg wlanstatus Vigor Bridge: Running WAN mac table: Index MAC Address Stamp Time VLan Port Vigor2925 Series User’s Guide...

  • Page 716: Telnet Command: Vlan Group

    Force subnet LAN2/3/4 to be disabled!! This command allows you to enable VLAN function. vlan on > vlan on VLAN is Enable! This command is used to define the priority for each VLAN profile setting. vlan pri n pri_no Vigor2925 Series User’s Guide...

  • Page 717: Telnet Command: Vlan Restart

    5gs1 5gs2 5gs3 5gs4 subnet ------------------------------------------------------ 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 1:LAN1 ------------------------------------------------------------------------- Note: they are only untag for s1/s2/s3/s4/5gs1/5gs2/5gs3/5gs4, but they can join tag vlan with lan ports. > Vigor2925 Series User’s Guide...

  • Page 718: Telnet Command: Vlan Subnet

    > vlan submode status % vlan subnet mode : normal mode > vlan submode on % vlan subnet mode modified to promiscuous mode. > vlan submode status % vlan subnet mode : promiscuous mode Vigor2925 Series User’s Guide...

  • Page 719: Telnet Command: Vlan Tagged

    This command is used to modify and show the scope (reserved 64) of the VLAN IDs used internally by the system. vlan sysvid [show | n] Parameter Description It means to show the scope of VLAN ID used internally. show Vigor2925 Series User’s Guide...

  • Page 720: Telnet Command: Vpn L2Lset

    It means to turn on or off the PFS function. It means phase 1 of IKE. phase1 lifetime It means the lifetime value (in second) for phase 1 and phase phase2 It means phase 2 of IKE. Vigor2925 Series User’s Guide...

  • Page 721: Telnet Command: Vpn L2Ldrop

    It means to set PIN code with secret. <secret> <pin> - Type the code for authentication (e.g, 1234). <secret> - Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6) > vpn dinset 1 Dial-in profile index 1 Vigor2925 Series User’s Guide...

  • Page 722: Telnet Command: Vpn Subnet

    This command allows users to specify a subnet selection for the specified remote dial-in VPN profile. vpn subnet [index] [1/2] Parameter Description <index> It means the index number of the VPN profile. 1 – it means LAN1 <1/2> 2 – it means LAN2. > vpn subnet 1 2 > Vigor2925 Series User’s Guide...

  • Page 723: Telnet Command: Vpn Setup

    It means the name of the profile. <ip> It means the IP address to dial to. It means the user and the password required for the L2TP <usr> <pwd> connection. <nip> <nmask> It means the remote network IP and the mask. Vigor2925 Series User’s Guide...

  • Page 724: Telnet Command: Vpn Option

    <index> <cmd1>=<param1> [<cmd2>=<para2> | ... ] Parameter Description <index> It means the index number of the profile. Available index numbers: 1 ~ 32 For Common Settings <index> It means the index number of the profile. Vigor2925 Series User’s Guide...
  • Page 725 “ctype= l2” means L2TP(IPSec Policy Must). dialto It means Server IP/Host Name for VPN. (such as draytek.com or 123.45.67.89). ltype It means Link Type. “ltype=0” means “Disable”. “ltype=1” means “64kbps”. “ltype=2” means “128kbps”. “ltype=3” means “BOD”. Vigor2925 Series User’s Guide...
  • Page 726 Type “off” means any remote IP is allowed to dial in. peerid It means the peer ID for Remote VPN Gateway. Type “draytek” means the word is used as local ID. iname It means Dial-in Username. “iname=admin” means to set username as “admin”.
  • Page 727 It means to Change default route to this VPN tunnel ( Only single WAN supports this). droute=on/off means to enable/disable the function. > vpn option 1 idle=250 % Change Log.. % Idle Timeout = 250 Vigor2925 Series User’s Guide...

  • Page 728: Telnet Command: Vpn Mroute

    It means to list dial-out settings of the specified profile. It means to list dial-in settings of the specified profile. It means to list Network Settings of the specified profile. <index> It means the index number of the profile. Available index numbers: 1 ~ 32 Vigor2925 Series User’s Guide...
  • Page 729 % Common Settings % Profile Name : ??? % Profile Status : Disable % Netbios Naming Packet : Pass % Call Direction : Both % Idle Timeout : 300 % PING to keep alive : off > Vigor2925 Series User’s Guide...

  • Page 730: Telnet Command: Vpn Remote

    This command allows users to enable or disable NetBios for Remote Access User Accounts or LAN-to-LAN Profile. vpn NetBios set <H2l/L2l> <index> <Block/Pass> Parameter Description <H2l/L2l> H2l means Remote Access User Accounts. L2l means LAN-to-LAN Profile. Specify which one will be applied by NetBios. Vigor2925 Series User’s Guide...

  • Page 731: Telnet Command: Vpn Mss

    L2TP – 1 ~ 1408 IPSec – 1 ~ 1381 L2TP over IPSec – 1 ~ 1361 SSL Tunnel : 1 ~ 1360 >vpn mss set 1 1400 % VPN TCP maximum segment size (MSS) : PPTP = 1400 Vigor2925 Series User’s Guide...

  • Page 732: Telnet Command: Vpn Ike

    <index> The index number of the profile. <Block/Pass> Set Block/Pass the Multicast Packets. The default is Block. > vpn Multicast set L2l 1 Pass % Lan to Lan Profile Index [1] : % Status Block/Pass: [PASS] Vigor2925 Series User’s Guide...

  • Page 733: Telnet Command: Vpn Pass2Nd

    [off] Parameter Description on/off on – the packets can pass through NAT. off – the packets cannot pass through NAT. > vpn pass2nat on % Packets would go through by NAT when VPN disconnect!! Vigor2925 Series User’s Guide...

  • Page 734: Telnet Command: Wan Ppp_Mru

    For PPTP/L2TP, the maximum number will be 1460. > wan mtu 1100 > wan mtu ? Static IP/DHCP (Max MSS: 1500) PPPoE(Max MSS: 1492) PPTP/L2TP(Max MSS: 1460) % wan ppp_mss <MSS size: 1000 ~ 1500> % Now: 1100 Vigor2925 Series User’s Guide...

  • Page 735: Telnet Command: Wan Df_Check

    WANs. wan forward [on] wan forward [off] Parameter Description on/off It means to enable or disable WAN forward. > wan forward ? %WAN forwarding is Disable! > wan forward on %WAN forwarding is enable! Vigor2925 Series User’s Guide...

  • Page 736: Telnet Command: Wan Status

    [on/off] wan modem backup_wait [value] wan modem pipe [string] wan modem wakeup [on/off/value] wan modem status Parameter Description init [string] It means to set initial modem AT command. string: type text. (default: AT&FE0V1X1&D2&C1S0=0) Vigor2925 Series User’s Guide...

  • Page 737: Telnet Command: Wan Wimax

    31 bytes This command allows you to enable or disable WAN 3G/4G DHCP mode for Vigor router. wan wimax [on/off] Parameter Description It means to enable WAN 3G/4G DHCP mode. Vigor2925 Series User’s Guide...

  • Page 738: Telnet Command: Wan Detect

    It means to show the current status. > wan detect status WAN1: always on WAN2: off WAN3: off WAN4: off WAN5: off > wan detect wan1 target 192.168.1.78 Set OK > wan detect wan1 on Set OK Vigor2925 Series User’s Guide...

  • Page 739: Telnet Command: Wan Lb

    However, only 2 to 9 are available for configuration. status It means to display the whole Bridge status. save It means to save the configuration into flash of Vigor router. enable/disable It means to enable/disable the Multi-VLAN function. Vigor2925 Series User’s Guide...

  • Page 740: Telnet Command: Wan Multifno

    Available settings are: 3=Channel 3 4=Channel 4 5=Channel 5 6=Channel 6 7=Channel 7 8=Channel 8 WAN interface # Type a number to indicate the WAN interface. 1=WAN1 2=WAN2 status It means to display current bridge status. Vigor2925 Series User’s Guide...

  • Page 741: Telnet Command: Wan Vlan

    > wan vlan wan 2 tag 60 %Set tag to 60 for WAN2 > wan vlan wan 1 enable %Enabled VLAN header encap for WAN1 > wan vlan wan 2 enable %Enabled VLAN header encap for WAN2 > wan vlan stat Vigor2925 Series User’s Guide...

  • Page 742: Telnet Command: Wan Fiber

    It means to specify which LAN interface to be applied with such profile. It means to specify which WLAN interface (identified by -s <ssid> SSID number) will be applied with such profile. 1: SSID1 2: SSID2 Vigor2925 Series User’s Guide...
  • Page 743 It means to disnable such profile. It means to show the content of such command. It means to reset the specified profile. > wptl -e -p 1 -l 1,2 -s 1 -u http://www.draytek.com Profile 1 enable ... [OK] Applied LAN interfaces ... [OK] Applied WLAN interfaces ...

  • Page 744: Telnet Command: Wl Acl

    > > wl acl showmode ssid1: none ssid2: none ssid3: none ssid4: none > wl acl add 00-50-70-ff-12-70 Set Done !! > wl acl add 00-50-70-ff-12-70 ssid1 ssid2 isolate Set Done !! > wl acl show Vigor2925 Series User’s Guide...

  • Page 745: Telnet Command: Wl Config

    [enable] It means to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync field instead of long preamble with 128 bit sync Vigor2925 Series User’s Guide...
  • Page 746 SSID. 0: disable and 1:enable. upload: It means to configure the rate control for data upload. The unit is kbps. download: It means to configure the rate control for data download. The unit is kbps. Vigor2925 Series User’s Guide...
  • Page 747 % <Note> Please restart wireless after you set the parameters. > wl config security 1 wpa1x %% Configured Wlan Security Setting: % SSID1 %% Mode: wpa1x %% Wireless card must be reset for configurations to take effect %% (Telnet Command: wl restart) Vigor2925 Series User’s Guide...

  • Page 748: Telnet Command: Wl Set

    This command allows users to activate wireless settings. wl act [En] Parameter Description It means to enable or disable the function of VPN isolation. off: disable on: enable > wl act on % Set Wlan to Enable. Vigor2925 Series User’s Guide...

  • Page 749: Telnet Command: Wl Scan

    0 - display white list 1 - display block list, 2 - display gray/unknown list, 3 - display all list wl scan set wlist 001122aabbcc > wl scan start > wl scan show 3 > > Vigor2925 Series User’s Guide...

  • Page 750: Telnet Command: Wl Stamgt

    It means reconnection time. The unit is minute. > wl stamgt enable 1 % Station Management Status: enabled > wl stamgt set 1 60 60 > wl stamgt show 1 NO. SSID BSSID Connect time Reconnect time Draytek 00:11:22:aa:bb:cc 0d:0:58:26 0d:0:0 Vigor2925 Series User’s Guide...

  • Page 751: Telnet Command: Wl Iso_Vpn

    It means to map to the Ack policy settings of AP WMM. enable It means to enable the WMM for each SSID. 0: disable 1: enable Apsd [value] It means to enable / disable the ASPD(automatic power-save delivery) function. 0: disable 1: enable Vigor2925 Series User’s Guide...

  • Page 752: Telnet Command: Wl Ht

    This command allows you to configure wireless settings. wl ht bw value wl ht gi value wl ht badecline value wl ht autoba value wl ht rdg value wl ht msdu value wl ht txpower value wl ht antenna value Vigor2925 Series User’s Guide...

  • Page 753: Telnet Command: Wl Restart

    > wl ht bw value 1 BW=0 <Note> Please restart wireless after you set new parameters. > wl restart Wireless restart....This command allows you to restart wireless setting. > wl restart Wireless restart....Vigor2925 Series User’s Guide...

  • Page 754: Telnet Command: Wl Wds

    0 – disable the function. hello [value] It means to send hello message to remote end (peer). Value: 1 – enable the function. 0 – disable the function. status It means to display WDS link status for 5GHz connection. Vigor2925 Series User’s Guide...

  • Page 755: Telnet Command: Wl Btnctl

    It is reserved for RD debug. Do not use it. 不知道此功能的作用為何? This command is used to configure parameters related to wireless RF hardware. At present, it is not allowed for end user to operate. It is reserved for RD debug. Do not use it. Vigor2925 Series User’s Guide...
  • Page 756 It means to display current status of access control. show showmode It means to show the mode for each SSID. clear It means to clear all of the access control settings. > wl dual acl showmode SSID1: None SSID2: None SSID3: None SSID4: None Vigor2925 Series User’s Guide...

  • Page 757: Telnet Command: Wl Dual Apscan

    > wl dual cardmac ? Card MAC: 54:2a:a2:08:67:22 This command allows users to configure general settings and security settings for wireless connection (5GHz). wl dual config enable [value] wl dual config enable show wl dual config mode [value] Vigor2925 Series User’s Guide...
  • Page 758 However, some original 11b wireless network devices only support long preamble. 0: disable to use long preamble. 1: enable to use long preamble. preamble show It means to display if preamble is enabled or not. Vigor2925 Series User’s Guide...
  • Page 759 Choose 1, 2, 3 or 4 to specify SSID1, SSID2, SSID3 or SSID4. enable: It means to enable such function. 0: disable and 1:enable. isolate show It means to display the status of wireless isolation. Vigor2925 Series User’s Guide...

  • Page 760: Telnet Command: Wl Dual Restart

    SSID_NUMBER: Type 1, 2, 3 or 4 to specify SSID1, SSID2, [SSID_NUMBER] SSID3 or SSID4. [mode][key][index] mode: Available settings are: disable: No security. wpa1x: WPA/802.1x Only wpa21x: WPA2/802.1x Only wpamix1x: Mixed (WPA+WPA2/802.1x only) wep1x: WEP/802.1x Only wpapsk: WPA/PSK wpa2psk: WPA2/PSK wpamixpsk: Mixed (WPA+WPA2)/PSK wep: Vigor2925 Series User’s Guide...

  • Page 761: Telnet Command: Wl Dual Stalist

    C: Connected, No Encryption. E: Connected, WEP. P: Connected, WPA. A: Connected, WPA2. N: Connecting. This command allows users to configure WDS for wireless connection (5GHz). wl dual wds mode [value] wl dual wds security [value] Vigor2925 Series User’s Guide...
  • Page 762 It means to display WDS link status for 5GHz connection. status show It means to display current WDS settings. mac add [index addr] add [index addr] – Add the peer MAC entry in Repeater/Bridge WDS MAC table. mac clear/disable/enable clear/disable/enable [index/all]- Clear, disable, enable the Vigor2925 Series User’s Guide...
  • Page 763 Bridge : Index Enable MAC Address 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 Repeater : Index Enable MAC Address 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 > wl dual wds wep 12345 % <Note> Please restart router after you set the parameters. Vigor2925 Series User’s Guide...

  • Page 764: Telnet Command: Wl Dual Wps

    It means to display current WPS settings. > wl dual wps enable 1 WPS is enabled. > wl dual wps pin 88563337 WPS has triggered by PIN code. The AP will wait for WPS request from your client for 2 minutes... > Vigor2925 Series User’s Guide...

  • Page 765: Telnet Command: Wol

    % wol fromWan: on > wol fromWan_Setting 1 192.168.1.45 255.255.255.0 % wol fromWan_Setting 1 192.168.1.45 255.255.255.0 The command is used to create new user account profiles. user set [-a|-b|-c|-d|-e|-l|-o|-q|-r|-s|-u] user edit [PROFILE_IDX] [-a|-b|-c|-d|-e|-f|-g|-h|-i|-m|-n|-p|-q|-r|-s|-t|-u|-v|-w|-x|-A|-H|-T|-P|-l] user account [USER_NAME] [-t|-d|-q|-r|-w] Vigor2925 Series User’s Guide...
  • Page 766 Set the phase 2 method for internal RADIUS server. -c [0/1] 1: MSCHAPV2; 0: None. Enable User profile function. Disable User profile function. -f [0/1] Enable or disable the local 802.1x server for such user profile. 1: Enable; Vigor2925 Series User’s Guide...
  • Page 767 Set the log type for the user profile. 0: None 1: Login 2: Event 3: All -P [0/1] Enable or disable the Pop Browser Tracking Window. 0:Disable 1:Enable Enable or disable to set the authentication by Telnet. -T [0/1] Vigor2925 Series User’s Guide...

  • Page 768: Telnet Command: Appqos

    Local 802.1X user : [Disable] phase1 support method: [None] phase2 support method: [None] The command is used to configure QoS for APP. appqos view appqos enable[0/1] appqos traceable [-v | -e AP_INDEX CLASS | -d AP_INDEX] Vigor2925 Series User’s Guide...

  • Page 769: Telnet Command: Nand Bad /Nand Usage

    TELNET: ENABLED, QoS Class 2. “NAND usage” is used to display NAND Flash usage; “nand bad” is used to display NAND Flash bad blocks. nand bad nand usage >nand usage Show NAND Flash Usage: Partition Total Used Available Use% Vigor2925 Series User’s Guide...

  • Page 770: Telnet Command: Apm Show /Clear/Discover/Query

    Clear all clients ... done This command allows to configure wireless profiles to be used in Central AP Management. apm profile clone [from index][to index][[new name] apm profile del [index] apm profile reset apm profile summary Vigor2925 Series User’s Guide...

  • Page 771: Telnet Command: Apm Cache

    WPA+WPA2/PSK x 2 forcarrie DrayTek Disable This command is used to display or remove the information of registered VigorAP, including MAC address, name, and authentication. Up to 30 entries of registered information can be stored and displayed. Vigor2925 Series User’s Guide...

  • Page 772: Telnet Command: Apm Lbcfg

    1 – enable traffic limit, 0 – disable traffic limit. [4] – The forth number means the limit num of station. Available range is 3~64. [5] – The fifth number means the upload limit function. Type Vigor2925 Series User’s Guide...
  • Page 773 3. Enable traffic limit : 0 4. limit Number : 15 5. Upload limit : 0 6. Download limit : 0 7. Enable disassociation by idle time : 0 8. Enable disassociation by Signal strength : 0 Vigor2925 Series User’s Guide...

  • Page 774: Telnet Command: Apm Napdetect

    This command is used to display the AP syslog data coming form VigorAP. apm apsyslog [AP_Index] Parameter Description AP_Index Specify the index number which represents VigorAP. > apm apsyslog 1 8d 02:46:09 syslog: [APM] Send Rogue AP Detection data. 8d 02:53:04 syslog: [APM] Run AP Detection / Discovery. Vigor2925 Series User’s Guide...

  • Page 775: Telnet Command: Apm Syslog

    [AP_Index] Parameter Description AP_Index Specify the index number which represents VigorAP. apm stanum > % Show the APM AP Station Number data. % apm stanum AP_Index. ex : apm stanum 1 Idx Nearby(2.4/5G) Conn(2.4/5G) Vigor2925 Series User’s Guide...

  • Page 776: Telnet Command: Ha Set

    -M: Minute. Setting range is 0/15/30/45. (e.g., ha set -I -M -H: Hour. Setting range is from 0 to 23. (e.g., ha set -I -H 12) -D: Day. Setting range is from 0 to 30. (e.g., ha set -I -D 15) Vigor2925 Series User’s Guide...

  • Page 777: Telnet Command: Ha Show

    : 10 Preempt Mode : Enable Update DDNS : Disable Management Interface : LAN1 Authentication Key : draytek Syslog : OFF [ Index | Enable | Virtual IP ] LAN1 0.0.0.0 LAN2 0.0.0.0 LAN3 0.0.0.0 LAN4 0.0.0.0 Vigor2925 Series User’s Guide...

  • Page 778: Telnet Command: Ha Status

    > ha status -m 0 [Local Router] DrayTek IPv4 : 192.168.1.1 Status State : Down Stable : ! No : ! All WANs Down - Eth Config Sync Status : Not Ready Cached Time : 0 (s) Vigor2925 Series User’s Guide...

  • Page 779: Telnet Command: Swm Show

    Vigor router in LAN. swm get [LAN_port] Parameter Description LAN_port Specify the LAN port number (1 to 5). > swm get 1 Start get cfg from LAN (1) external switch Please wait a few seconds... Result: [OK]. > Vigor2925 Series User’s Guide...

  • Page 780: Telnet Command: Swm Auth

    ===== SWM Auth Records List===== Index Model ----- ------- ------------ ================================ > swm auth clear 1 Clear index (1) swm auth record OK > This command is used to configure port VLAN of VigorSwitch. swm extvlan [LAN_Port][VLAN_idx][Port_Description] Vigor2925 Series User’s Guide...
  • Page 781 System also will select the physical connect port as trunk port and let it join each VLAN group. Before using such command, please use [swm show] to check valid VLAN index firstly. Vigor2925 Series User’s Guide...

Table of Contents