Draytek Vigor2133 User Manual
  1. Manuals
  2. Brands
  3. Draytek Manuals
  4. Network Router
  5. Vigor2133 Vac
  6. User manual

Draytek Vigor2133 User Manual

Vigor2133 series gigabit broadband router
Hide thumbs
1
2
3
Table Of Contents
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
Table of Contents

Advertisement

Quick Links

Advertisement

Table of Contents
loading

Related Manuals for Draytek Vigor2133

Summary of Contents for Draytek Vigor2133

  • Page 2 Vigor2133 Series Gigabit Broadband Router User’s Guide Version: 1.2 Firmware Version: V3.8.8 (For future update, please visit DrayTek web site) Date: April 24, 2018 Vigor2133 Series User’s Guide...
  • Page 3 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com. Firmware & Tools Updates  Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents. More update, please visit www.draytek.com.

  • Page 4: Table Of Contents

    II-1-2-8 Details Page for IPv6 – DHCPv6 Client ..........56 II-1-2-9 Details Page for IPv6 – Static IPv6.............58 II-1-2-10 Details Page for IPv6 – 6in4 Static Tunnel..........59 II-1-2-11 Details Page for IPv6 – 6rd ............61 II-1-3 Multi-VLAN ........................63 II-1-4 WAN Budget........................67 Vigor2133 Series User’s Guide...
  • Page 5 II-5-9 SMS / Mail Alert Service....................136 II-5-9-1 SMS Alert ................136 II-5-9-2 Mail Alert ................137 II-5-10 Bonjour ......................... 138 Application Notes ........................141 A-1 How to use DrayDDNS? ..............141 A-2 How to Configure Customized DDNS?............ 146 Vigor2133 Series User’s Guide...
  • Page 6 IV-1-8 LAN to LAN ........................220 IV-1-9 Connection Management....................230 Application Notes ........................231 A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec Tunnel (Main Mode) ................231 IV-2 SSL VPN ..........................236 Vigor2133 Series User’s Guide...
  • Page 7 VI-1-3 Administrator Password ....................318 VI-1-4 User Password......................320 VI-1-5 Login Page Greeting ..................... 323 VI-1-6 Configuration Backup....................325 VI-1-7 Syslog/Mail Alert ......................329 VI-1-8 Time and Date....................... 332 VI-1-9 SNMP..........................333 VI-1-10 Management ....................... 335 Vigor2133 Series User’s Guide...
  • Page 8 Web User Interface ........................409 VII-1-1 IP Object ........................409 VII-1-2 IP Group........................413 VII-1-3 IPv6 Object........................414 VII-1-4 IPv6 Group ........................416 VII-1-5 Service Type Object..................... 417 VII-1-6 Service Type Group ..................... 419 VII-1-7 Keyword Object......................421 Vigor2133 Series User’s Guide viii...
  • Page 9 VIII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not....472 VIII-4 Pinging the Router from Your Computer ................475 VIII-5 Checking If the ISP Settings are OK or Not ................. 477 Vigor2133 Series User’s Guide...
  • Page 10 VIII-6 Backing to Factory Default Setting If Necessary ..............478 VIII-7 Contacting DrayTek ......................479 Appendix I: VLAN Applications on Vigor Router ................480 Part IX Telnet Commands....................489 Accessing Telnet of Vigor2133 ....................... 490 Index ..........................688 Vigor2133 Series User’s Guide...

  • Page 11: Part I Installation

    This part will introduce Vigor router and guide to install the device in hardware and software.

  • Page 13: Introduction

    Vigor2133 series integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP) with VPN tunnels.

  • Page 14: I-1-1 Indicators And Connectors

    The WAN port is connected with Ethernet cable. Blinking The data is transmitting through WAN port. The WAN port is disconnected. The LAN port is connected. Blinking The data is transmitting. The LAN port is disconnected. Vigor2133 Series User’s Guide...
  • Page 15 Connector for a USB device (for 3G/4G USB Modem or printer). GigaLAN1~LAN4 Connectors for local networked devices. Connector for remote networked devices. Phone2/Phone1 Connector of analog phone for VoIP communication. (for “V” model) ON/OFF Power Switch. Connector for a power adapter. Vigor2133 Series User’s Guide...

  • Page 16: Hardware Installation

    Connect one end of the power cord to the power port of this device. Connect the other end to the wall outlet of electricity. Power on the router. Check the ACT and WAN, LAN LEDs to assure network connection. (For the hardware connection, we take “n” model as an example.) Vigor2133 Series User’s Guide...

  • Page 17: I-2-2 Wall-Mounted Installation

    Vigor2133 has keyhole type mounting slots on the underside. 1. A template is provided on the Vigor2133 packaging box to enable you to space the screws correctly on the wall. 2. Place the template on the wall and drill the holes according to the recommended instruction.

  • Page 18: I-2-3 Installing Usb Printer To Vigor Router

    You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
  • Page 19 A dialog will appear. Click Add a local printer and click Next. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next. Vigor2133 Series User’s Guide...
  • Page 20 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next. Click Standard and choose Generic Network Card. Vigor2133 Series User’s Guide...
  • Page 21 Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. Type a name for the chosen printer. Click Next. Vigor2133 Series User’s Guide...
  • Page 22 10. Choose Do not share this printer and click Next. 11. Then, in the following dialog, click Finish. Vigor2133 Series User’s Guide...
  • Page 23 12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties. 13. Edit the property of the new printer you have added by clicking Configure Port. Vigor2133 Series User’s Guide...
  • Page 24 The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Info Some printers with the fax/scanning or other additional functions are not supported. Vigor router supports printing request from computers via LAN ports but not WAN port. Vigor2133 Series User’s Guide...

  • Page 25: Accessing Web Page

    Please type “admin/admin” as the Username/Password and click Login. Info If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Vigor2133 Series User’s Guide...
  • Page 26 The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor2133 Series User’s Guide...

  • Page 27: Changing Password

    Now, the password has been changed. Next time, use the new password to access the Web user interface for this router. Info Even the password is changed, the Username for logging onto the web user interface is still “admin”. Vigor2133 Series User’s Guide...

  • Page 28: Dashboard

    IPv6 Internet Access, Interface (physical connection), Security and Quick Access. Click Dashboard from the main menu on the left side of the main page. A web page with default selections will be displayed on the screen. Refer to the following figure: Vigor2133 Series User’s Guide...

  • Page 29: I-5-1 Virtual Panel

    For detailed information about the LED display, refer to I-1-1 LED Indicators and Connectors. A name with a link (e.g., Router Name, Current Time, WAN1 and etc.) below means you can click it to open the configuration page for modification. Vigor2133 Series User’s Guide...

  • Page 30: I-5-3 Quick Access For Common Used Menu

    LAN are located on the bottom of this page. Scroll down the page to find them and use them if required. Note that there is a plus ( ) icon located on the left side of LAN/WLAN/VPN/MyVigor. Click it to review the LAN/WLAN/VPN/MyVigor connection(s) used presently. Vigor2133 Series User’s Guide...

  • Page 31: I-5-4 Gui Map

    All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions. Vigor2133 Series User’s Guide...

  • Page 32: I-5-5 Web Console

    Such configuration file can be restored by using System Maintenance>>Configuration Backup. Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting. Vigor2133 Series User’s Guide...

  • Page 33: I-5-7 Logout

    Click this icon to exit the web user interface. Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. Vigor2133 Series User’s Guide...
  • Page 34 WAN interface. RX Packets - Displays the total number of received packets at the WAN interface. RX Rate - Displays the speed of received octets at the WAN interface. Detailed explanation (for IPv6) is shown below: Vigor2133 Series User’s Guide...

  • Page 35: I-5-8-2 Virtual Wan

    Internet. Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, and so on. The field of Application will list the purpose of such WAN connection. Vigor2133 Series User’s Guide...

  • Page 36: Quick Start Wizard

    On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Vigor2133 Series User’s Guide...
  • Page 37 Note: The maximum length of the password you can set is 62 characters. Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2133 Series User’s Guide...
  • Page 38 Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2133 Series User’s Guide...
  • Page 39 Confirm Password Retype the password. WAN IP Configuration Obtain an IP address automatically – the router will get an IP address automatically from DHCP server. Specify an IP address – you have to type relational settings Vigor2133 Series User’s Guide...
  • Page 40 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2133 Series User’s Guide...
  • Page 41 Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Vigor2133 Series User’s Guide...
  • Page 42 Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Click DHCP as the Internet Access type and click the Next button. Vigor2133 Series User’s Guide...
  • Page 43 Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. After finished the settings above, click Next for viewing summary of such connection. Vigor2133 Series User’s Guide...
  • Page 44 Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2133 Series User’s Guide...

  • Page 45: Service Activation Wizard

    “admin/admin” on Username/Password while Logging into the web user interface. Service Activation Wizard is a tool which allows you to activate services without accessing into the server (MyVigor) located on http://myvigor.draytek.com. Info Such function is available only for Admin Mode.
  • Page 46 Cryan 30-day trial is WCF which offers 30-day trial period. After trial, you can purchase DrayTek's prepared Cryan GlobalView WCF package from retailing outlets. DT-APPE, developed by DrayTek, offers a mechanism to upgrade APPE signature automatically. Setting confirmation page will be displayed as follows, please click Activate.

  • Page 47: Registering Vigor Router

    If you haven’t an accessing account, please refer to section Creating an Account for MyVigor to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account. Vigor2133 Series User’s Guide...
  • Page 48 (it appears when you click on the box of Registration Date). Click Add. When the following page appears, your router information has been added to the database. After clicking OK, you will see the following page. Your router has been registered to myvigor website successfully. Vigor2133 Series User’s Guide...

  • Page 49: Part Ii Connectivity

    Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. DNS, LAN DNS, IGMP, UPnP, WOL, RADIUS, SMS. Static Route, Route Policy Vigor2133 Series User’s Guide...

  • Page 50: Wan

    Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP. Vigor2133 Series User’s Guide...

  • Page 51: Web User Interface

    Display whether such WAN interface is Active device or backup device. Load Balance Display if Load Balance feature is enabled or disabled for such WAN interface. Info In default, each WAN port is enabled. Click WAN1 link to get the following page: Vigor2133 Series User’s Guide...
  • Page 52 Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the Vigor2133 Series User’s Guide...
  • Page 53 Tag value – Type the value as the VLAN ID number. The range is from 0 to 4095. Priority – Type the packet priority number for such VLAN. The range is from 0 to 7. After finished the above settings, click OK to save the settings. Vigor2133 Series User’s Guide...

  • Page 54: Ii-1-1-2 Wan3 (Usb)

    Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display Name Type the description for such WAN interface. After finished the above settings, click OK to save the settings. Vigor2133 Series User’s Guide...

  • Page 55: Ii-1-2 Internet Access

    This button allows you to configure DHCP client options. DHCP packets can be processed by adding option number and data information when such function is enabled and configured. Enable – Check the box to enable the function of DHCP Vigor2133 Series User’s Guide...

  • Page 56: Ii-1-2-1 Details Page For Pppoe

    Data – Type the content of the data to be processed by the function of DHCP option. To use PPPoE as the accessing protocol of the internet, please click the PPPoE tab. The following web page will be shown. Available settings are explained as follows: Vigor2133 Series User’s Guide...
  • Page 57 With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.  TTL (Time to Live) – Set TTL value of PING operation.  Ping Interval – Type the interval for the system to execute the PING operation. Vigor2133 Series User’s Guide...
  • Page 58 WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Type the additional WAN Vigor2133 Series User’s Guide...

  • Page 59: Ii-1-2-2 Details Page For Static Or Dynamic Ip

    Available settings are explained as follows: Item Description Enable / Disable Click Enable for activating this function. If you click Disable, this function will be closed and all the settings that you adjusted in this page will be invalid. Vigor2133 Series User’s Guide...
  • Page 60 MTU value such as 1500, 1492, 1484 and etc., automatically. Detect – Click it to detect a suitable MTU value  Accept – After clicking it, the detected value will be  Vigor2133 Series User’s Guide...
  • Page 61 Type in the primary IP address for the router if you want to use Static IP mode. If necessary, type in secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. Vigor2133 Series User’s Guide...

  • Page 62: Ii-1-2-3 Details Page For Pptp/L2Tp

    It means Max Transmit Unit for packet. Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path. Click Detect to open the following dialog. Vigor2133 Series User’s Guide...
  • Page 63 Specify an IP address – Click this radio button to specify some data.  IP Address – Type the IP address.  Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2133 Series User’s Guide...

  • Page 64: Ii-1-2-4 Details Page For Ipv6 - Offline

    The network connection will be on always.  Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as Vigor2133 Series User’s Guide...

  • Page 65: Ii-1-2-6 Details Page For Ipv6 - Tspc

    After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet. Vigor2133 Series User’s Guide...
  • Page 66 IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Vigor2133 Series User’s Guide...

  • Page 67: Ii-1-2-7 Details Page For Ipv6 - Aiccu

    Such function allows you to verify whether network Detection connection is alive or not through Ping Detect. Mode – Choose Always On or Ping Detect for the system to execute for WAN detection.  Ping IP/Hostname – If you choose Ping Detect as Vigor2133 Series User’s Guide...

  • Page 68: Ii-1-2-8 Details Page For Ipv6 - Dhcpv6 Client

    Key ID – Type a value (range from 1 to 65535) which will be used to generate HMAC-MD5 value. Realm – The name (1 to 31 characters) typed here will identify the key which generates HMAC-MD5 value. Vigor2133 Series User’s Guide...
  • Page 69 User Management will be ignored. And all of the filter rules defined and enabled in Firewall menu will be activated. Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface. After finished the above settings, click OK to save the settings. Vigor2133 Series User’s Guide...

  • Page 70: Ii-1-2-9 Details Page For Ipv6 - Static Ipv6

    Update – Click it to modify an existed entry. Delete – Click it to remove an existed entry. Current IPv6 Address Display current interface IPv6 address. Table Static IPv6 Gateway IPv6 Gateway Address - Type your IPv6 gateway address Vigor2133 Series User’s Guide...

  • Page 71: Ii-1-2-10 Details Page For Ipv6 - 6In4 Static Tunnel

    Such mode allows the router to access IPv6 network through IPv4 network. However, 6in4 offers a prefix outside of 2002::0/16. So, you can use a fixed endpoint rather than anycast endpoint. The mode has more reliability. Available settings are explained as follows: Item Description Vigor2133 Series User’s Guide...
  • Page 72 TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode. Vigor2133 Series User’s Guide...

  • Page 73: Ii-1-2-11 Details Page For Ipv6 - 6Rd

    Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Vigor2133 Series User’s Guide...
  • Page 74 After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode. Vigor2133 Series User’s Guide...

  • Page 75: Ii-1-3 Multi-Vlan

    Enable - Check this box to enable the port-based bridge function on this channel. P1 ~ P4 – Check the box(es) to build bridge connection on LAN. To configure a PVC channel, click its channel number. Vigor2133 Series User’s Guide...
  • Page 76 VLAN tag value. Priority – Choose the number to determine the packet priority for such VLAN. The range is from 0 to 7. Open Port-based Bridge The settings here will create a bridge between the LAN ports Vigor2133 Series User’s Guide...
  • Page 77 After finished the above settings, click OK to save the settings and return to previous page. Click any index (7, 8, 9 and 10) to get the following web page: Available settings are explained as follows: Item Description Multi-VLAN Channel Enable – Click it to enable the configuration of this channel. Vigor2133 Series User’s Guide...
  • Page 78 Enable – Click it to enable Bridge mode for such channel. Physical Members – Group the physical ports by checking the corresponding check box(es) for applying the bridge connection. After finished the above settings, click OK to save the settings. Vigor2133 Series User’s Guide...

  • Page 79: Ii-1-4 Wan Budget

    User Defined: The User Defined option in the Criterion and Action tab was used to set up the usage qota. Duration Start and end timestamps of the current cycle. Click WAN1/ WAN3 link to open the following web page. Vigor2133 Series User’s Guide...
  • Page 80 The WAN budget will be reset with an interval of billing cycle. Monthly is default setting. If long period or a short period is required, use Custom. The period of cycle duration is Vigor2133 Series User’s Guide...
  • Page 81 Vigor router will reset the traffic record. For example, “3” means the third day of the cycle duration. After finished the above settings, click OK to save the settings. Vigor2133 Series User’s Guide...
  • Page 82 Which means no data transmission will be carried out. Moreover, the system will send out a warning message to the administrator if Mail Alert is selected. Or, the system will send out SMS message to the administrator if SMS message is selected. Vigor2133 Series User’s Guide...
  • Page 83 2. Go to WAN >> Internet Access, click on IPv6 of the WAN interface that you would like to configure an IPv6 address. 3. Select a Connection Type from the drop-down list, enter the required parameters. Then click OK and reboot the router to apply the settings. Vigor2133 Series User’s Guide...
  • Page 84 5. Furthermore, Network Administrator may test the connectivity of IPv6 from the router by going to Diagnostics >> Ping Diagnosis and selecting "IPv6". Below we will provide some examples of configuring IPv6 with different connection types. Vigor2133 Series User’s Guide...
  • Page 85 Set Connection Type to TSPC. Enter the Username and Password registered at the TSP server. Enter the IP or Domain Name of the TSPC server for Tunnel Broker. Vigor2133 Series User’s Guide...
  • Page 86 Set Connection Type to Static IPv6. Enter the IPv6 address and Prefix Length which provided by the ISP, and click Add. You should see the IPv6 address in Current IPv6 Address Table. Then, specify the IP address of IPv6 Gateway. Vigor2133 Series User’s Guide...
  • Page 87 Set Connection Type to 6in4 Static Tunnel. Enter the tunnel server's IPv4 address in Remote Endpoint IPv4 Address. Enter the router's IPv6 address in 6in4 IPv6 Address. Enter the routed IPv6 prefix in LAN Routed Prefix. Vigor2133 Series User’s Guide...
  • Page 88 IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2133 Series User’s Guide...
  • Page 89 You can group local hosts by physical ports and create up to 8 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2133 Series User’s Guide...
  • Page 90 (LAN1 – LAN4). In addition, different subnets can link for each other by configuring Inter-LAN Routing. At present, LAN1 setting is fixed with NAT mode only. LAN2 – LAN4 can be operated under NAT or Route mode. IP Routed Subnet can be operated under Route mode. Vigor2133 Series User’s Guide...
  • Page 91 LAN1/LAN2/LAN3/LAN4 instead of DNS servers given by the Internet Access server (PPPoE, PPTP, L2TP or DHCP server). Inter-LAN Routing Check the box to link two or more different subnets (LAN and LAN). Inter-LAN Routing allows different LAN subnets to be interconnected or isolated. Vigor2133 Series User’s Guide...
  • Page 92 2 intersecting LANs can communicate with each other. When you finish the configuration, please click OK to save and exit this page. Info To configure a subnet, select its Detials Page button to bring up the LAN Details Page. Vigor2133 Series User’s Guide...
  • Page 93 IP Pool Counts - The maximum number of IP addresses to be handed out by DHCP. The default value is 200. Valid range is between 1 and 253. The actual number of IP addresses available for assignment is the IP Pool Vigor2133 Series User’s Guide...
  • Page 94 If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name immediately. Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. Vigor2133 Series User’s Guide...
  • Page 95 DHCP client. It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network. Disable Server – Let you manually assign IP address to every Vigor2133 Series User’s Guide...
  • Page 96 Secondary IP Address - You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server. The default DNS Server IP address can be found via Online Status: Vigor2133 Series User’s Guide...
  • Page 97 Subnet Mask - The subnet mask, together with the IP Address field, indicates the maximum number of clients allowed on the subnet. (Default: 255.255.255.0/ 24). RIP Protocol Control, Enable – When Enabled, the router will attempt to exchange routing information with neighbouring routers using the Vigor2133 Series User’s Guide...
  • Page 98 When you finish the configuration, please click OK to save and exit this page. There are two configuration pages for each LAN. Click the tab for each type and refer to the following explanations for detailed information. Below shows the settings page for IPv6. Vigor2133 Series User’s Guide...
  • Page 99 Use the drop down list to specify a WAN interface for IPv6. Static IPv6 Address IPv6 Address –Type static IPv6 address for LAN. configuration Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry. Vigor2133 Series User’s Guide...
  • Page 100 IPv6 configuration information, including what is indicated as available when the O-bit is set. DHCPv6 Server Enable Server –Click it to enable DHCPv6 server. DHCPv6 Server could assign IPv6 address to PC according to the Start/End IPv6 address configuration. Vigor2133 Series User’s Guide...
  • Page 101 Hop Limt – The value is required for the device behind the router when IPv6 is in use. Min/Max Interval Time (sec) – It defines the interval (between minimum time and maximum time) for sending RA (Router Advertisement) packets. Vigor2133 Series User’s Guide...
  • Page 102 Default Lifetime (sec) –Within such period of time, Vigor2133 can be treated as the default gateway. Default Preference – It determines the priority of the host behind the router when RA (Router Advertisement) packets are transmitted. MTU – It means Max Transmit Unit for packet. If Auto is selected, the router will determine the MTU value for LAN.
  • Page 103 After making all necessary changes, click Update to save the changes. To delete a DHCP option entry, click on it in Customized List, and then click Delete. Vigor2133 Series User’s Guide...
  • Page 104 The multi-subnet can let a small businesses have much better isolation for multi-occupancy applications. Go to LAN page and select VLAN. The following page will appear. Click Enable to invoke VLAN function. Below is an example page in Vigor2133ac: Vigor2133 Series User’s Guide...
  • Page 105 VLAN (horizontal row) are visible to one another all hosts connected to the same LAN or WLAN interface (vertical column) are visible to  one another if - they belong to the same VLAN, or Vigor2133 Series User’s Guide...
  • Page 106 2 intersecting LANs can communicate with each other. Vigor2133 series features a hugely flexible VLAN system. In its simplest form, each of the Gigabit LAN ports can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated.
  • Page 107 With the Bind IP to MAC feature you can reserve LAN IP addresses for LAN clients. Each reserved IP address is associated with a Media Access Control (MAC) address. Click LAN and click Bind IP to MAC to open the setup page. Vigor2133 Series User’s Guide...
  • Page 108 Click this radio button to invoke this function. However, IP/MAC which is not listed in IP Bind List also can connect to Internet. Disable Click this radio button to disable this function. All the settings on this page will be invalid. Vigor2133 Series User’s Guide...
  • Page 109 Click Backup and enter a filename to back up IP Bind List to a file. Upload From File Click Browse… to select an IP Bind List backup file. Click Restore to restore the backup and overwrite the existing list. Vigor2133 Series User’s Guide...
  • Page 110 PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. Vigor2133 Series User’s Guide...
  • Page 111 Port(s) whose outbound traffic will be forwarded to the mirror port. Mirrored Rx Port Port(s) whose inbound traffic will be forwarded to the mirror port. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 112 Item Description Enable Check the box to enable LAN 802.1x function. 802.1X ports 802.1X authentication will be available for the selected LAN ports. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 113 Hardware Acceleration is also called PPA in DrayTek for it is based on Protocol Processing Engine (PPE) of Infineon. It can only support 128 sessions for network traffic (IN & OUT) with implementing three kinds of modes - Disable, Auto and Manual.
  • Page 114 IP address from the pop-up window. Checking the PPA status For checking whether the rule of PPA is working or not, a user can login to Vigor2133 series by using telnet. User can view how many sessions are transferring in each direction of PPA table after entering “ppa –v”.
  • Page 115 Usually we use the 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Vigor2133 Series User’s Guide...
  • Page 116 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 40 port-mapping entries for the internal hosts. Vigor2133 Series User’s Guide...
  • Page 117 Display the IP address of the internal host providing the service. Status Display if the profile is enabled (v) or not (x). Press any number under Index to access into next page for configuring port redirection. Available settings are explained as follows: Vigor2133 Series User’s Guide...
  • Page 118 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2133 Series User’s Guide...
  • Page 119 Vigor2133 Series User’s Guide...
  • Page 120 Click DMZ Host to open the following page. You can set different DMZ host for each WAN interface. Click the WAN tab to switch into the configuration page for that WAN. Vigor2133 Series User’s Guide...
  • Page 121 If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN interface, you will find them in Aux. WAN IP for your selection. Available settings are explained as follows: Item Description Vigor2133 Series User’s Guide...
  • Page 122 When you have selected one private IP from the above dialog, the IP address will be shown on the screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 123 Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2133 Series User’s Guide...
  • Page 124 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2133 Series User’s Guide...
  • Page 125 After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 126 Display the protocol for the incoming data of such triggering profile. Incoming Port Display the port for the incoming data of such triggering profile. Status Display if the rule is active or de-active. Click the index number link to open the configuration page. Vigor2133 Series User’s Guide...
  • Page 127 (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Incoming Port Type the port or port range for the incoming packets. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 128 Type a port number for SIP or RTSP protocol. Check the box to make correspond protocol message packet from TCP transmit and receive via NAT. Check the box to make correspond protocol message packet from UDP transmit and receive via NAT. Vigor2133 Series User’s Guide...
  • Page 129 FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2133 series will respond the specified private IP address.
  • Page 130 Wake on LAN (WOL) of this router. In addition, such PC must have installed a network card supporting WOL function. By the way, WOL function must be set as “Enable” on the BIOS setting. Vigor2133 Series User’s Guide...
  • Page 131 Check this box to enable DDNS function. Setup Set to Factory Clear all profiles and recover to factory settings. Default View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server. Vigor2133 Series User’s Guide...
  • Page 132 Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. If User-Defined is specified as the service provider, the web page will be changed slightly as follows: Vigor2133 Series User’s Guide...
  • Page 133 WAN IP - If it is selected and the WAN IP of Vigor router  is private, DDNS update will take place right away. Internet IP – If it is selected and the WAN IP of Vigor  router is private, it will be converted to public IP Vigor2133 Series User’s Guide...
  • Page 134 Click OK button to activate the settings. You will see your setting has been saved. Uncheck Enable Dynamic DNS Setup, and click Clear All button to disable the function and clear all accounts from the router. Vigor2133 Series User’s Guide...
  • Page 135 FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2133 series will respond the specified private IP address.
  • Page 136 In general, one domain name maps with one IP address. If required, you can configure two IP addresses mapping with the same domain name. Add – Click it to open a dialog to type the host’s IP address. Vigor2133 Series User’s Guide...
  • Page 137 Type the domain name for such profile. DNS Server IP Address Type the IP address of the DNS server you want to use for DNS forwarding. Click OK button to save the settings. A new LAN DNS profile has been created. Vigor2133 Series User’s Guide...
  • Page 138 DNS inquiry. There are two ways to reply such DNS inquiry. Drop – Discard the packets. Pass – Accept the packets and let them pass through Vigor router. This page is used to configure settings for manually detecting if the domain is secure not. Vigor2133 Series User’s Guide...
  • Page 139 DNS Server Type the IP address of the DNS Server which will diagnose the domain specified above. Diagnose Click it to perform the diagnosis for the domain. Result The diagnosed information will be displayed on such field. Vigor2133 Series User’s Guide...
  • Page 140 System time set Click it to acess into the time setup page (System Maintenance>>Time and Date). Set to Factory Default Clear all profiles and recover to factory settings. Enable Click the box to enable such schedule profile. Vigor2133 Series User’s Guide...
  • Page 141 Start Time (hh:mm) Specify the starting time of the schedule. Duration Time Specify the duration (or period) for the schedule. (hh:mm) End Time (hh:mm) It will be calculated automatically when Start Time and Duration Time are configured well. Vigor2133 Series User’s Guide...
  • Page 142 Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Vigor2133 Series User’s Guide...
  • Page 143 The maximum length of the shared secret you can set is 36 characters. Confirm Shared Secret Re-type the Shared Secret for confirmation. After finished the above settings, click OK button to save the settings. Vigor2133 Series User’s Guide...
  • Page 144 Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2133 Series User’s Guide...
  • Page 145 IGMP Fast Leave Check this box to make the router stop forwarding multicast traffic to a LAN port as soon as it receives a leave message from that port. Each LAN port should have one IGMP host connected. Vigor2133 Series User’s Guide...
  • Page 146 Click this link to renew the working multicast group status. Group ID This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P4 It indicates the LAN port used for the multicast group. Vigor2133 Series User’s Guide...
  • Page 147 MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2133 Series User’s Guide...
  • Page 148 Schedule (1-15) Type the schedule number that the SMS will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 149 Schedule (1-15) Type the schedule number that the notification will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 150 Below shows an example for applying the bonjour feature that Vigor router can be used as the FTP server. 1. Here, we use Firefox and DNSSD to discover the service in such case. Therefore, just ensure the Bonjour client program and DNSSD for Firefox have been installed on the computer. Vigor2133 Series User’s Guide...
  • Page 151 5. Open the DNSSD page again. The available items will be changed as the follows. It means the Vigor router (based on Bonjour protocol) is ready to be used as a printer server, FTP server, SSH Server, Telnet Server, and HTTP Server. Vigor2133 Series User’s Guide...
  • Page 152 6. Now, any page or document can be printed out through Vigor router (installed with a printer). Vigor2133 Series User’s Guide...
  • Page 153 Vigor router supports various DDNS service providers, user can set up user-defined profile to update the DDNS even the service provider is not on the list. Now, DrayTek starts to support our own DDNS service - DrayDDNS. We will provide a domain name for each Vigor Router, this single domain name can record IP addresses of all WAN.
  • Page 154 Tick Enable Dynamic DNS Setup b. Click an available profile index c. Tick Enable Dynamic DNS Account d. Select DrayTek Global (www.drayddns.com) as Service Provider e. Select the WAN you would like to upload the IP to DDNS server f. Click Get domain g.
  • Page 155 Currently, only the domain name is allowed to be modified MyVigor website. We will need to register the router to MyVigor server, and log in to MyVigor website to modify it. Please visit https://myvigor.draytek.com/ or go to Applications >> Dynamic DNS Setup >> DrayDDNS profile and click Edit domain.
  • Page 156 Vigor router will get the modified domain name when the it performs next DDNS updating. We can click Sync domain to accelerate this process. After few seconds, the router will get the new domain name and print it on the profiles list. Vigor2133 Series User’s Guide...
  • Page 157 Vigor2133 Series User’s Guide...
  • Page 158 WAN connection is up. Note that, Username: jo*** Password: jo******** Host name: j*****.changeip.org WAN IP address: 1.169.185.242 Following is the screenshot of editing the HTML script on the browser to update your IP to the DDNS server. Vigor2133 Series User’s Guide...
  • Page 159 DDNS service is running. In this case the IP will be 1.169.185.242. After setting, the Customized DDNS service will be up, and our IP will be updated to the DDNS server. Username: bi******* Password: 88******** Host name: bi*******.3322.org WAN IP address: 111.243.178.53 Vigor2133 Series User’s Guide...
  • Page 160 Set the Provider Host as member.3322.net. Set the Service API as: /dyndns/update?hostname=yourhost.3322.org&myip=###IP###&wildcard=OFF&mx=mail .exchanger.ext&backmx=NO&offline=NO Enter your account and password. After the setting, the Customized DDNS service will be up, and our IP will be updated to the DDNS server automatically. Vigor2133 Series User’s Guide...
  • Page 161 The customized Service Provider is also eligible with the ClouDNS.net. Vigor2133 Series User’s Guide...
  • Page 162 Other routing Specify routing policy to determine the direction of the data transmission. Info For more detailed information about using policy route, refer to Support >>FAQ/Application Notes on www.draytek.com. Vigor2133 Series User’s Guide...
  • Page 163 Viewing Routing Table Displays the routing table for your reference. Index The number (1 to 30) under Index allows you to open next page to set up static route. Enable Check the box to enable such route. Vigor2133 Series User’s Guide...
  • Page 164 1st subnet (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and continuously exchange of IP routing information with different subnets. Vigor2133 Series User’s Guide...
  • Page 165 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Click OK. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2133 Series User’s Guide...
  • Page 166 Item Description Enable Click it to enable this profile. Destination IPv6 Address / Type the IP address with the prefix length for this entry. Prefix Len Gateway IPv6 Address Type the gateway address for this entry. Vigor2133 Series User’s Guide...
  • Page 167 Display the priority value for such route policy profile. Src IP Start Display the IP address for the start of the source IP. Src IP End Display the IP address for the end of the source IP. Vigor2133 Series User’s Guide...
  • Page 168 Dest IP End - Type the destination IP end for the specified WAN interface. If this field is blank, it means that all the destination IPs will be passed through the WAN interface. 3. Click Next to get the following page. Vigor2133 Series User’s Guide...
  • Page 169 It determines which mechanism that the router will use to Routing forward the packet to WAN. 5. After choosing the mechanism, click Next to get the summary page for reference. 6. If there is no error, click Finish to complete wizard setting. Vigor2133 Series User’s Guide...
  • Page 170 IP Range – Define a range of IP address as source / destination IP addresses.  Start - Type an address as the starting IP for such profile.  End - Type an address as the ending IP for such profile. Vigor2133 Series User’s Guide...
  • Page 171 When you finish the configuration, please click OK to save and exit this page. With the analysis done by such page, possible path (static route, routing table or policy route) of the packets sent out of the router can be traced. Vigor2133 Series User’s Guide...
  • Page 172 Protocol - Specify a protocol for diagnosis. Src IP – Type an IP address as the source IP. Dst IP – Type an IP address as the destination IP. Dst Port – Use the drop down list to specify the destination port. Vigor2133 Series User’s Guide...
  • Page 173 If required, click export analysis to export the result as a file. Note that the analysis was based on the current "load-balance/route policy" settings, we do not guarantee it will be 100% the same as the real case. Vigor2133 Series User’s Guide...
  • Page 174 IP Alias button. Check Enable. Enter the WAN IP address. Click OK to save. After setting up the WAN IP Alias, the IP addresses will be shown in the drop-down list of Interface in Route Policy setting. Vigor2133 Series User’s Guide...
  • Page 175 But do not enable this option if you want the traffic only to use a designated IP address. Click OK to save.  After the above configuration, packet source from the range between 192.168.1.20 and 192.168.1.30 sent to the Internet will use the public IP 172.17.1.1. Vigor2133 Series User’s Guide...
  • Page 176 This page is left blank. Vigor2133 Series User’s Guide...
  • Page 177 Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access. Vigor2133 Series User’s Guide...
  • Page 178 802.11ac or 2.4/5 GHz 802.11n WLAN applications. It supports channel operations of 20/40 MHz at 2.4 GHz and 20/40/80 MHz at 5 GHz. Vigor2133 “ac” series router can support data rates up to 1.3 Gbps in 802.11ac 80 MHz channels. Vigor2133 “n” series router supports 802.11n up to 300 Mbps for 40 MHz channel operations.
  • Page 179 LAN for visitors only so they can connect to Internet without hassle of the confidential information leakage. For a more flexible deployment, you may add filters of MAC addresses to isolate users’ access from wired LAN. Vigor2133 Series User’s Guide...
  • Page 180 He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. There are two methods to do network connection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code. Vigor2133 Series User’s Guide...
  • Page 181 On the side of Vigor2133 series which served as an AP, press WPS button once on the  front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card.
  • Page 182 2. The screen of wireless wizard will be shown as follows. This page will be used for internal users in a company or your home. Besides, the settings will change based on different model of Vigor2133 series. In this case, Vigor2133ac is used as an example. Vigor2133 Series User’s Guide...
  • Page 183 Item Description Name Type the SSID name of this router for wireless connection. The default name is defined with DrayTek. Change the name if required. Mode At present, the router can connect to 11a Only, 11n Only, Mixed (11a+11n), and Mixed (11a+11n+11ac) stations simultaneously.
  • Page 184 Check the box to use the same settings configured above. and Security Key as above Next Click it to get into the next setting page. Cancel Exit the wireless wizard without saving any changes. 4. After typing the required information, click Next. Vigor2133 Series User’s Guide...
  • Page 185 5. The following page will display the configuration summary for wireless setting. 6. Click Finish to complete the wireless settings configuration. Vigor2133 Series User’s Guide...
  • Page 186 11n Only (5 GHz), Mixed (11a+11n) and Mixed (11a+11n+11ac) stations simultaneously. Simply choose Mixed (11a+11n+11ac) mode. Note: 802.11b/g operates on 2.4G band, 802.11a operates on 5G band, 802.11n operates on either 2.4G or 5G band, and 802.11ac operates on 5G band only. Vigor2133 Series User’s Guide...
  • Page 187 You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 188 By clicking the Wireless LAN>>Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Available settings are explained as follows: Item Description There are several modes provided for you to choose. Mode Vigor2133 Series User’s Guide...
  • Page 189 PSK specified above. 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, such as 0x4142434445.) 128-Bit - For 128 bits WEP key, either 13 ASCII characters, Vigor2133 Series User’s Guide...
  • Page 190 SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN. For example, they can be grouped under SSID 1 and SSID 2 at the same time if you Vigor2133 Series User’s Guide...
  • Page 191 Available settings are explained as follows: Item Description Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly Vigor2133 Series User’s Guide...
  • Page 192 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2133 Series User’s Guide...
  • Page 193 Only Repeater mode can do WDS-to-WDS packet forwarding. The WDS - Repeater mode is implemented in Vigor router. The application for the WDS-Repeater mode is depicted as below: Click WDS from Wireless LAN menu. The following page will be shown. Vigor2133 Series User’s Guide...
  • Page 194 Yet please disable the unused link to get better performance. If you want to invoke the peer MAC address, remember to check Enable box in the front of the MAC Vigor2133 Series User’s Guide...
  • Page 195 Click Disable if Bridge is set as WDS Mode. Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 196 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync field instead of long preamble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Click Enable to Vigor2133 Series User’s Guide...
  • Page 197 RTS Threshold (1 – 2347) Minimize the collision (unit is bytes) between hidden stations to improve wireless performance. Set the RTS threshold. Do not modify default value if you don’t know what it is, default value is 2347. Vigor2133 Series User’s Guide...
  • Page 198 If conflict is detected, wireless station will be warned and is unable to make network connection. Therefore, changing the country code to ensure successful network connection will be necessary for some clients. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 199 This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP which is in the same channel of this router can be found. Please click Scan to discover all the connected APs. Vigor2133 Series User’s Guide...
  • Page 200 AP’s MAC address on the bottom of the page and click Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2133 Series User’s Guide...
  • Page 201 It is available when Per Station Limit is selected Type a value to define the maximum data traffic (downloading) for each wireless client connecting to Vigor router. After finishing this web page configuration, please click OK to save the settings. Vigor2133 Series User’s Guide...
  • Page 202 (A/B) by controlling TX traffic. In the following figure, Station B(11n) has higher probability to send data packets than Station A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by Station A(slow rate). Vigor2133 Series User’s Guide...
  • Page 203 After finishing this web page configuration, please click OK to save the settings. Info Airtime Fairness function and Bandwidth Limit function should be mutually exclusive. So their webs have extra actions to ensure these two functions are not enabled simultaneously. Vigor2133 Series User’s Guide...
  • Page 204 If dual-band is detected, the AP will let the wireless client connect to less congested wireless LAN, such as 5GHz to prevent from network congestion. Info To make Band Steering work successfully, SSID and security on 2.4GHz also MUST be broadcasted on 5GHz. Vigor2133 Series User’s Guide...
  • Page 205 2.4GHz network connection. Specify the time limit for Vigor router to detect the wireless client. After finishing this web page configuration, please click OK to save the settings. Below shows how Band Steering works. Vigor2133 Series User’s Guide...
  • Page 206 3. Click OK to save the settings. 4. Open Wireless LAN (2.4GHz)>>General Setup and Wireless LAN (5GHz)>> General Setup. Configure SSID as DrayTek2862_BandSteering for both pages. Click OK to save the settings. Same settings for 2.4GHz and 5GHz Vigor2133 Series User’s Guide...
  • Page 207 Security as 12345678 for both pages. Click OK to save the settings. Same value for 2.4GHz and 5GHz 6. Now, Vigor router will let the wireless clients connect to less congested wireless LAN, such as 5GHz to prevent from network congestion. Vigor2133 Series User’s Guide...
  • Page 208 Minimum RSSI - When the signal strength of the wireless station is below the value (dBm) set here and adjacent AP (must be DrayTek AP and support such feature too) with higher signal strength value (defined in the field of With...
  • Page 209 WLAN station and click Add to Access Control below. Available settings are explained as follows: Item Description Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2133 Series User’s Guide...
  • Page 210 This page is left blank. Vigor2133 Series User’s Guide...
  • Page 211 Here Vigor router support digital certificates conforming to standard X.509. Vigor2133 Series User’s Guide...
  • Page 212  Allows employees in branch offices and head office to share the same network resources.  A connection between the remote host and router's LAN network. The host will use an IP address in the local subnet.  Allows employees to access the company's internal resources when they are traveling. Vigor2133 Series User’s Guide...
  • Page 213 Route Mode/NAT Mode – If the remote network only allows you to dial in with single IP, please choose NAT mode, otherwise please choose Route Mode. Please choose a There are 32 VPN profiles for users to set. LAN-to-LAN Profile Vigor2133 Series User’s Guide...
  • Page 214 Info The following descriptions for VPN Type are based on the Route Mode specified in LAN-to-LAN Client Mode Selection. When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: Vigor2133 Series User’s Guide...
  • Page 215 When you choose IPsec, you will see the following graphic: When you choose SSL, you will see the following graphic: Vigor2133 Series User’s Guide...
  • Page 216 Type a name for such profile. The length of the file is limited to 10 characters. Always On Check to enable router always keep VPN connection. Server IP/Host Name Type the IP address of the server or type the host name for Vigor2133 Series User’s Guide...
  • Page 217 After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Vigor2133 Series User’s Guide...
  • Page 218 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2133 Series User’s Guide...
  • Page 219 This item is available after you choose any one of dial-in user account profiles. Next, you have to select suitable dial-in type for the VPN server profile. There are several types provided here (similar to VPN Client Wizard). Vigor2133 Series User’s Guide...
  • Page 220 When you check PPTP/SSL, you will see the following graphic: When you check PPTP & IPsec & L2TP (three types) or PPTP & IPsec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2133 Series User’s Guide...
  • Page 221 Type a name for such profile. The length of the file is limited to 10 characters. User Name This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above. The length of the name is limited to 11 characters. Vigor2133 Series User’s Guide...
  • Page 222 Click this radio button to access VPN and Remote Connection Access>>Connection Management for viewing VPN Management Connection status. Do another VPN Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. Vigor2133 Series User’s Guide...
  • Page 223 LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. Open VPN and Remote Access>>Remote Access Control. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 224 (128-bit) to encrypt the data. Mutual Authentication The Mutual Authentication function is mainly used to (PAP) communicate with other routers or clients who need bi-directional authentication in order to provide stronger security, for example, Cisco routers. So you should enable Vigor2133 Series User’s Guide...
  • Page 225 Select the method(s) to be used for authentication in PPP Methods connection. While using Radius If PPP connection will be authenticated via RADIUS server, it Authentication is necessary to specify the LAN profile for the dial-in user to get IP from. Vigor2133 Series User’s Guide...
  • Page 226 This usually applies to those are remote dial-in user or node Method (LAN-to-LAN) which uses dynamic IP address and IPsec-related VPN connections such as L2TP over IPsec and IPsec tunnel. Certificate for Dial-in –Choose one of the local certificates Vigor2133 Series User’s Guide...
  • Page 227 32 entries of digital certificates for peer dial-in users. Available settings are explained as follows: Item Description Set to Factory Default Click it to clear all indexes. Index Click the number below Index to access into the setting page of IPsec Peer Identity. Vigor2133 Series User’s Guide...
  • Page 228 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 229 Active Check the box to activate such profile. Status Display the access state of the specific dial-in user. The symbol V and X represent the specific dial-in user to be active and inactive, respectively. Vigor2133 Series User’s Guide...
  • Page 230 Nice to Have - Apply the IPsec policy first, if it is  applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.  Must -Specify the IPsec policy to be definitely applied Vigor2133 Series User’s Guide...
  • Page 231 IPsec Policy when you specify the remote node. Check the Medium, DES, 3DES or AES box as the security method. Medium-Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is invoked. You can uncheck it to disable it. Vigor2133 Series User’s Guide...
  • Page 232 X – means the profile has not been enabled. Status Online – means such LAN to LAN profile is in use. Offline – means such LAN to LAN profile isn’t in use even if the profile has been enabled. To edit each profile: Vigor2133 Series User’s Guide...
  • Page 233 VPN connection. Pass – Click this button to let multicast packets pass  through the router.  Block – This is default setting. Click this button to let multicast packets be blocked by the router. Vigor2133 Series User’s Guide...
  • Page 234 Password - This field is applicable when you select PPTP or L2TP with or without IPsec policy above. The length of the password is limited to 15 characters. PPP Authentication - This field is applicable when you Vigor2133 Series User’s Guide...
  • Page 235 AES with Authentication-Use AES encryption  algorithm and apply MD5 or SHA-1 authentication algorithm. Advanced - Specify mode, proposal and key life of each IKE phase, Gateway, etc. The window of advance setup is shown as below: Vigor2133 Series User’s Guide...
  • Page 236 Index(1-15) - Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Vigor2133 Series User’s Guide...
  • Page 237 SSL Tunnel- Allow the remote dial-in user to trigger an  SSL VPN connection through Internet. Specify Remote VPN Gateway - You can specify the IP address of the remote dial-in user or peer ID (should be the Vigor2133 Series User’s Guide...
  • Page 238 IP address here. Do not change the default value if you do not select PPTP or L2TP. Remote Gateway IP - This field is only applicable when you select PPTP or L2TP with or without IPsec policy above. The Vigor2133 Series User’s Guide...
  • Page 239 IP address defined in the Virtual IP Mapping list. After checking the box of IPSec VPN with the Same subnet, the options under TCP/IP Network Settings will be changed as shown below: Vigor2133 Series User’s Guide...
  • Page 240 Translated Type – There are two types for you to choose. Whole Subnet  Specific IP Address  Virtual IP Mapping – A pop up dialog will appear for you to specify the local IP address and the mapping virtual IP address. Vigor2133 Series User’s Guide...
  • Page 241 After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 242 General Mode - This filed displays the profile configured in LAN-to-LAN (with Index number and VPN Server IP address). The VPN connection built by General Mode does not support VPN backup function. Dial - Click this button to execute dial out function. Vigor2133 Series User’s Guide...
  • Page 243 (in this case, type VPN Server), and check the box of Enable This Profile. For Vigor router will be set as a server, the call direction shall be set as Dial-in and set 0 as Idle Timeout. Vigor2133 Series User’s Guide...
  • Page 244 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote side. Vigor2133 Series User’s Guide...
  • Page 245 (in this case, type VPN Client), and check the box of Enable This Profile. For such Vigor router will be set as a client, the call direction shall be set as Dial-out. Check the box of Always on for a permanent VPN connection. Vigor2133 Series User’s Guide...
  • Page 246 IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the remote side. Click OK to save the settings. Vigor2133 Series User’s Guide...
  • Page 247 Open VPN and Remote Access>>Connection Management to check the dial-in connection status (from head office). Vigor2133 Series User’s Guide...
  • Page 248 There are two benefits that SSL VPN provides:  It is not necessary for users to preinstall VPN client software for executing SSL VPN connection.  There are less restrictions for the data encrypted through SSL VPN in comparing with traditional VPN. Vigor2133 Series User’s Guide...

  • Page 249: Web User Interface

    Self-signed to use the router’s built-in default certificate. The default certificate can be used in SSL VPN server and HTTPS Web Proxy. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 250: Iv-2-2 User Account

    With SSL VPN, Vigor2133 series let teleworkers have convenient and simple remote access to central site VPN. The teleworkers do not need to install any VPN software manually. From regular web browser, you can establish VPN connection back to your main office even in a guest network or web cafe.
  • Page 251 VPN connection through Internet. L2TP with IPSec Policy - Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: Vigor2133 Series User’s Guide...
  • Page 252 IPSec Policy when you specify the remote node. Check the Medium, DES, 3DES or AES box as the security method. Medium-Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is Vigor2133 Series User’s Guide...
  • Page 253 Local ID - Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 254: Iv-2-3 Online User Status

    If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into DrayTek SSL VPN portal interface. Next, users can open SSL VPN>> Online Status to view logging status of SSL VPN.

  • Page 255: Certificate Management

    Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor2133 Series User’s Guide...

  • Page 256: Web User Interface

    Click this button to open Generate Certificate Signing Request window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE again. Vigor2133 Series User’s Guide...
  • Page 257 The supported types are PKCS12 Certificate and Certificate with a private key. Click this button to import a saved file as the certification information. There are three types of local certificate supported by Vigor router. Vigor2133 Series User’s Guide...
  • Page 258 Netscape and Microsoft Internet Explorer with their import and export options. Upload Certificate and It is useful when users have separated certificates and private Private Key keys. And the password is needed if the private key is encrypted. Vigor2133 Series User’s Guide...
  • Page 259 Next, access your CA server and enter the page of certificate request, copy the information into it and submit a request. A new certificate will be issued to you by the CA server. You can save it. Click this button to remove the selected certificate. Vigor2133 Series User’s Guide...

  • Page 260: Iv-3-2 Trusted Ca Certificate

    Therefore, Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience for general user. Later, such root CA generated by DrayTek server can perform the issuing of local certificate. Info Root CA can be deleted but not edited.
  • Page 261 Trusted CA Certificate window. For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2133 Series User’s Guide...

  • Page 262: Iv-3-3 Certificate Backup

    Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Confirm password. Also, you can use Restore to retrieve these two settings to the router whenever you want. Vigor2133 Series User’s Guide...

  • Page 263: Part V Security

    It also restricts users in the local network from accessing the Internet. CSM is an abbreviation of Central Security Management which is used to control IM/P2P usage, filter the web content and URL content to reach a goal of security management. Vigor2133 Series User’s Guide...
  • Page 264 It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2133 Series User’s Guide...
  • Page 265 3. ICMP flood attack 11. TCP flag scan 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unassigned Numbers 8. Trace route Vigor2133 Series User’s Guide...

  • Page 266: Web User Interface

    Such page allows you to enable / disable Call Filter and Data Filter, determine general rule for filtering the incoming and outgoing data. Available settings are explained as follows: Item Description Call Filter Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Vigor2133 Series User’s Guide...

  • Page 267: Firewall

    It is effective only for the packets routed but not for packets translated by NAT. Backup Firewall Click Backup to save the firewall configuration. Restore Firewall Click Select to choose a firewall configuration file. Then click Restore to apply the file. Vigor2133 Series User’s Guide...
  • Page 268 The default setting is 60000. Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Vigor2133 Series User’s Guide...
  • Page 269 Please use the drop-down list to choose a codepage. If you do not have any idea of choosing suitable codepage, please open Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the Vigor2133 Series User’s Guide...
  • Page 270 Click Backup to save the firewall configuration. Restore Firewall Click Select to choose a firewall configuration file. Then click Restore to apply the file. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 271: V-1-2 Filter Setup

    Enter filter set comments/description. Maximum length is 23–character long. Direction Display the direction of packet. Src IP / Dst IP Display the IP address of source /destination. Service Type Display the type and port number of the packet. Vigor2133 Series User’s Guide...
  • Page 272 Set the direction of packet flow. It is for Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other LAN. Vigor2133 Series User’s Guide...
  • Page 273 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. 3. Click Next to get the following page. Vigor2133 Series User’s Guide...
  • Page 274 Please set at least one profile in CSM>> Web Content Filter web page first. Or click the DNS Filter link from the drop down list in this page to create a new profile. Block Immediately Packets matching the rule will be dropped immediately. Vigor2133 Series User’s Guide...
  • Page 275 4. After choosing the mechanism, click Next to get the summary page for reference. 5. If there is no error, click Finish to complete wizard setting. Vigor2133 Series User’s Guide...
  • Page 276 ON schedule profiles are applied. Direction Set the direction of packet flow. It is for Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Vigor2133 Series User’s Guide...
  • Page 277 From the IP Group drop down list, choose the one that you want to apply. Or use the IP Object drop down list to choose the object that you want. Service Type Click Edit to access into the following dialog to choose a suitable service type. Vigor2133 Series User’s Guide...
  • Page 278 Block Immediately - Packets matching the rule will be dropped immediately. Pass Immediately - Packets matching the rule will be passed immediately. Block If No Further Match - A packet matching the rule, and that does not match further rules, will be dropped. Vigor2133 Series User’s Guide...
  • Page 279 Syslog/Mail Alert for more detailed information. DNS Filter Select one of the DNS Filter profile settings (created in CSM>>DNS Filter) for applying with this router. Please set at least one profile in CSM>> Web Content Filter web page Vigor2133 Series User’s Guide...
  • Page 280 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
  • Page 281 Strict Security Checking is enabled. If Strict Security Checking is not enabled, then the packets will pass through the router. 3. When you finish the configuration, please click OK to save and exit this page. Vigor2133 Series User’s Guide...

  • Page 282: V-1-3 Dos Defense

    Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router will start to randomly discard the subsequent UDP packets for a period defined in Timeout. The default setting for threshold and timeout are 2000 Vigor2133 Series User’s Guide...
  • Page 283 Activating the DoS/DDoS defense functionality might block some legal packets. For example, when you activate the fraggle attack defense, all broadcast UDP packets coming from the Internet are blocked. Therefore, the RIP packets from the Internet might be dropped. Vigor2133 Series User’s Guide...
  • Page 284 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2133 Series User’s Guide...
  • Page 285 Vigor2133 Series User’s Guide...

  • Page 286: V-1-4 Diagnose

    Src IP Type the IPv4/IPv6 address of the packet’s source. Src Port Type the port number of the packet’s source. Src MAC Type the MAC address of the packet’s source. Vigor2133 Series User’s Guide...
  • Page 287 Simply type 16 HEX characters which represent certain packet (e.g., DNS packet) if you want to set the data transfered with protocol (ICMP/UDP/TCP) which is different to Type setting. Analyze Execute the test and analyze the result. Vigor2133 Series User’s Guide...
  • Page 288 The following figure shows the test result after clicking Analyze. Processing state for the fuctions (MAC Filter, QoS, User management, etc.,) related to the firewall will be displayed by green or red LED. Vigor2133 Series User’s Guide...

  • Page 289: Application Notes

    Firewall>>Filter Setup is used as the default setting, we have to create a new rule starting from Filter Rule 2 of Set 2. Access into the web user interface of Vigor router. Open Firewall>>Filter Setup. Click the Set 2 link, choose Advance Mode and choose the Filter Rule 2 button. Vigor2133 Series User’s Guide...
  • Page 290 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. Vigor2133 Series User’s Guide...
  • Page 291 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. Vigor2133 Series User’s Guide...
  • Page 292 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor2133 Series User’s Guide...

  • Page 293: Central Security Management (Csm)

    Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Info The priority of URL Content Filter is higher than Web Content Filter. Vigor2133 Series User’s Guide...

  • Page 294: Web User Interface

    Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Others displayed on this page. Each tab will bring out different items with supported versions that you can choose to disallow people using. Vigor2133 Series User’s Guide...
  • Page 295 A button under Enable check box allows you to open a pop up window to specify activity for that APP. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Vigor2133 Series User’s Guide...
  • Page 296 Below shows the items which are categorized under Protocol. The items categorized under P2P ----- Vigor2133 Series User’s Guide...
  • Page 297 The items categorized under OTHERS----- Vigor2133 Series User’s Guide...

  • Page 298: V-2-2 Url Content Filter Profile

    You can type the message manually for your necessity. Default Message - You can type the message manually for your necessity or click this button to get the default message which will be displayed on the field of Administration Message. Vigor2133 Series User’s Guide...
  • Page 299 URL Access Control and Web Feature below, such function can determine the priority for the actions executed. For this one, the router will process the packages with the conditions set below for web feature first, then URL second. Vigor2133 Series User’s Guide...
  • Page 300 After specifying keywords, the Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noticed that the more simplified the blocking keyword list is, the more efficiently the Vigor router performs. Vigor2133 Series User’s Guide...
  • Page 301 File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Objects previously for passing or blocking the file downloading. After finishing all the settings, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 302: V-2-3 Web Content Filter Profile

    Please refer to section of creating MyVigor account. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
  • Page 303 Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Test a site to verify Click this link to do the verification.
  • Page 304 Pass - allow accessing into the corresponding webpage with the characters listed on Group/Object Selections. If the web pages do not match with the specified feature set here, they will be processed with the categories listed on the box below. Vigor2133 Series User’s Guide...
  • Page 305 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 306: V-2-4 Dns Filter Profile

    WCF license must be activated first. Otherwise, DNS filter does not have any effect on packets. Available settings are explained as follows: Item Description DNS Filter Profile Table It displays a list of different DNS filter profiles (with Vigor2133 Series User’s Guide...
  • Page 307 Vigor router. You can type the message manually for your necessity or click Default Message button to get the default text displayed on the field of Administration Message. After finishing all the settings, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 308: Application Notes

    The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
  • Page 309 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. Vigor2133 Series User’s Guide...
  • Page 310 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2133 Series User’s Guide...
  • Page 311 8. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2133 Series User’s Guide...
  • Page 312 11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
  • Page 313 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. 5. Now you have created an account successfully. Click START. Vigor2133 Series User’s Guide...
  • Page 314 6. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2133 Series User’s Guide...
  • Page 315 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2133 Series User’s Guide...

  • Page 316: How To Block Facebook Service Accessed By The Users Via Web Content Filter / Url Content Filter

    Benefits: Easily and quickly implement the category/website that you want to block. Note: License is required. URL Content Filter, Benefits: Free, flexible for customize webpage. Note: Manual setting (e.g., one keyword for one website.) Make sure the Web Content Filter (powered by Commtouch) license is valid. Vigor2133 Series User’s Guide...
  • Page 317 Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Enable this profile in Firewall>>General Setup>>Default Rule. Vigor2133 Series User’s Guide...
  • Page 318 In the field of Contents, please type facebook. Configure the settings as the following figure. Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. Vigor2133 Series User’s Guide...
  • Page 319 B. Disallow users to play games on Facebook Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Vigor2133 Series User’s Guide...
  • Page 320 When you finished the above steps, please open Firewall>>General Setup. Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. Vigor2133 Series User’s Guide...
  • Page 321 Vigor2133 Series User’s Guide...
  • Page 322 This page is left blank. Vigor2133 Series User’s Guide...

  • Page 323: Part Vi Management

    Sessions Limit, Bandwidth Limit, and Quality of Servie (QoS). It is a security feature which disallows any IP traffic (except DHCP-related packets) from a particular host until that host has correctly supplied a valid username and password. Vigor2133 Series User’s Guide...

  • Page 324: System Maintenance

    For the system setup, there are several items that you have to know the way of configuration: System Status, TR-069, Administrator Password, User Password, Login Page Greeting, Configuration Backup, Syslog /Mail Alert, Time and Date, Management, Reboot System, Firmware Upgrade and Activation. Below shows the menu items for System Maintenance. Vigor2133 Series User’s Guide...

  • Page 325: Web User Interface

    IP Address - Display the IP address of the LAN interface. Subnet Mask - Display the subnet mask address of the LAN interface. DHCP Server - Display the current status of DHCP server of the LAN Vigor2133 Series User’s Guide...
  • Page 326 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. Vigor2133 Series User’s Guide...
  • Page 327 Choose the interface for the router connecting to ACS server. ACS Server URL/Username/Password – Such data must be typed according to the ACS (Auto Configuration Server) you want to link. Please refer to Auto Configuration Server user’s manual for detailed information. Vigor2133 Series User’s Guide...
  • Page 328 Apply Settings to APs This feature is able to apply TR-069 settings (including STUN and ACS server settings) to all of APs managed by Vigor2133 at the same time. Disable – Related settings will not be applied to VigorAP.
  • Page 329 CPE to detect bandwidth utilization. Line Speed – Set the transmission rate and receiving rate for specified WAN interface. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 330: Vi-1-3 Administrator Password

    Local User List – It displays the username of the local user. User Name – Give a user name for the local user. Password – Type the password for the local user. Confirm Password – Type the password again for Vigor2133 Series User’s Guide...
  • Page 331 It can ensure any user accessing into web user interface of Vigor router through Internet by username/password of “admin/admin”. When you click OK, the login window will appear. Please use the new password to access into the web user interface again. Vigor2133 Series User’s Guide...

  • Page 332: Vi-1-4 User Password

    User Password. 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. Vigor2133 Series User’s Guide...
  • Page 333 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2133 Series User’s Guide...
  • Page 334 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Info Setting in User Mode can be configured as same as in Admin Mode. Vigor2133 Series User’s Guide...

  • Page 335: Vi-1-5 Login

    Enable Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Welcome Message and Type words or sentences here. It will be displayed for Bulletin bulletin message.
  • Page 336 Vigor2133 Series User’s Guide...

  • Page 337: Vi-1-6 Configuration Backup

    Such function can be used to apply the router settings configured by Vigor2132 to Vigor2133. Follow the steps below to backup your configuration. Go to System Maintenance >> Configuration Backup. The following page will be popped-up, as shown below. Available settings are explained as follows:...
  • Page 338 Support Model List Web configuration file from other Vigor router can be applied to Vigor2133 series. At present, only the configuration file of Vigor2132 is accepted for Vigor2133. This field displays model name(s) and firmware which web configuration file saved can be used by such router.
  • Page 339 Info Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Vigor2133 Series User’s Guide...
  • Page 340 Click Choose File button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2133 Series User’s Guide...

  • Page 341: Vi-1-7 Syslog/Mail Alert

    Check Enable to activate function of mail alert. Send a test e-mail - Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail Vigor2133 Series User’s Guide...
  • Page 342 For viewing the Syslog, please do the following: Just set your monitor PC’s IP address in the field of Server IP Address Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. Vigor2133 Series User’s Guide...
  • Page 343 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2133 Series User’s Guide...

  • Page 344: Vi-1-8 Time And Date

    Use the default time setting or set user defined time for your requirement. Automatically Update Select a time interval for updating from the NTP server. Interval Send NTP Request Specify a WAN interface to send NTP request for time Vigor2133 Series User’s Guide...

  • Page 345: Vi-1-9 Snmp

    The maximum length of the text is limited to 23 characters. Manager Host IP (IPv4) Set one host as the manager to execute SNMP function. Please type in IPv4 address to specify certain host. Vigor2133 Series User’s Guide...
  • Page 346 Privacy Algorithm Choose one of the methods listed below as the privacy algorithm. Privacy Password Type a password for privacy. The maximum length of the text is limited to 23 characters. Click OK to save these settings. Vigor2133 Series User’s Guide...

  • Page 347: Vi-1-10 Management

    Type in the router name provided by ISP. Default: Disable If it is enabled, the function of auto-logout for web user Auto-Logout interface will be disabled. The web user interface will be open until you click the Logout icon manually. Vigor2133 Series User’s Guide...
  • Page 348 Device Management Check the box to enable the device management function for Vigor2133. Respond to external device – If it is enabled, Vigor2133 will be regarded as slave device. When the external device (master device) sends request packet to Vigor2133,...
  • Page 349 IPs/subnet masks is allowed. Index in IPv6 Object- Type the index number of the IP object profile. Related IP address will appear automatically. After finished the above settings, click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 350 Vigor router. Index in IP Object- Type the index number of the IP object profile. Related IP address will appear automatically. After finished the above settings, click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 351: Vi-1-11 Panel Control

    Click to refresh the page to display the latest information. Enable LED Select to enable front panel LEDs. Enable Sleep Mode/Turn off LED after _ minutes –  Available when Enable LED is selected. Select this Vigor2133 Series User’s Guide...
  • Page 352 LEDs. Disabling the wireless button will prevent changing the wireless setting when LED Sleep Mode is enabled, and the buttons are primarily used to turn the LEDs on and off. Click the Button tab to get the following page. Vigor2133 Series User’s Guide...
  • Page 353 Click to refresh the page to display the latest information. Port The number corresponds to the USB port number shown on the front panel. Enable Deselect to disable the USB port. The default value is enabled. Vigor2133 Series User’s Guide...
  • Page 354 10Mpbs – Negotiated speed of the LAN port is 10 Mbps. --- – The LAN port is disabled or there is no active device connected. After finished the above settings, click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 355: Vi-1-12 Self-Signed Certificate

    Click Regeneration to open Regenerate Self-Signed Certificate window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE. Vigor2133 Series User’s Guide...
  • Page 356 Vigor2133 Series User’s Guide...

  • Page 357: Vi-1-13 Reboot System

    When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2133 Series User’s Guide...

  • Page 358: Vi-1-14 Firmware Upgrade

    Click System Maintenance>> Firmware Upgrade to proceed to firmware upgrade. Click Select to specify the one you just download. When the above page appears, click Upgrade. The system will upgrade the firmware of the router automatically. Vigor2133 Series User’s Guide...

  • Page 359: Vi-1-15 Activation

    The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. Vigor2133 Series User’s Guide...
  • Page 360 Below shows the successful activation of Web Content Filter: Vigor2133 Series User’s Guide...

  • Page 361: Bandwidth Management

    This is called per-hop-behavior (PHB). The definition of PHB includes Expedited Forwarding (EF), Assured Forwarding (AF), and Best Effort (BE). AF defines the four classes of delivery (or forwarding) classes and three levels of drop precedence in each class. Vigor2133 Series User’s Guide...
  • Page 362 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s effort. Vigor2133 Series User’s Guide...

  • Page 363: Web User Interface

    Available settings are explained as follows: Item Description Session Limit Enable - Click this button to activate the function of limit session. Disable - Click this button to close the function of limit session. Vigor2133 Series User’s Guide...
  • Page 364 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 365: Vi-2-2 Bandwidth Limit

    Default RX limit Per User- Define the default speed of the downstream for each computer in LAN. Limitation List Display a list of specific limitations that you set on this web page. Specific Limitation Start IP - Define the start IP address for limit bandwidth. Vigor2133 Series User’s Guide...
  • Page 366 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2133 Series User’s Guide...

  • Page 367: Vi-2-3 Quality Of Service

    Service Type – Allow to configure detailed settings for the service type. Enable the First Priority When this feature is enabled, the VoIP SIP/UDP packets will be for VoIP SIP/RTP sent with highest priority. SIP UDP Port – Set a port number used for SIP. Vigor2133 Series User’s Guide...
  • Page 368 You can configure general setup for the WAN interface, edit the Class Rule, and edit the Service Type for the Class Rule for your request. Display an online statistics for quality of service for your reference. This feature is available only when the Quality of Service for WAN interface is enabled. Vigor2133 Series User’s Guide...
  • Page 369 This is a protection of TCP application traffic since UDP application traffic such as streaming video will exhaust lots of bandwidth. Outbound TCP ACK The difference in bandwidth between download and upload Prioritize are great in ADSL2+ environment. For the download speed Vigor2133 Series User’s Guide...
  • Page 370 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2133 Series User’s Guide...
  • Page 371 Service Type drop down list. Those types are predefined in factory. Simply choose the one that you want for using by current QoS. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 372 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. Vigor2133 Series User’s Guide...
  • Page 373 For example, in the following illustration, the VoIP packets in LAN go into Vigor router without any header. However, when they go forward to the Server on ISP through Vigor router, all of the packets are tagged with AF (configured in Bandwidth >>QoS>>Class) automatically. Vigor2133 Series User’s Guide...

  • Page 374: Vi-2-4 App Qos

    Each tab offers different types of protocols to fit your request. Untraceable The protocol listed below is not easy to be traced by Vigor router. Each tab offers different types of protocols to fit your request. Vigor2133 Series User’s Guide...
  • Page 375 Apply – Click it to make the selected action be applied all of the selected protocols immediately. Action There are many protocols which can be specified with different QoS Class. Vigor2133 Series User’s Guide...

  • Page 376: Application Notes

    Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
  • Page 377 IP address in relational fields. Click OK to save the settings and exit the window. Click OK again to save the settings. The class rule for VoIP has been set. Click OK to return to previous page. Vigor2133 Series User’s Guide...
  • Page 378 Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. Assuming you get 2MB/512Kb Internet line. You can click the Setup link of WAN1 to set up the bandwidth for different groups among VoIP, IPTV and Data/Email. Vigor2133 Series User’s Guide...
  • Page 379 10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control. 11. Click OK to save the settings. The class rules for WAN1 are defined as shown below. Vigor2133 Series User’s Guide...

  • Page 380: Hotspot Web Portal

    Users could be required to read and agree to terms and conditions, or authenticate themselves, prior to gaining access to the Internet. Other potential uses include the serving of advertisements and promotional materials, and broadcast of public service announcements. Vigor2133 Series User’s Guide...

  • Page 381: Web User Interface

    There are five login modes to choose from for authenticating network clients: Skip Login, Click Through, Social Login, PIN Login, and Social or PIN Login. Each login mode will present a different web page to users when they connect to the network. Vigor2133 Series User’s Guide...
  • Page 382 When users attempt to connect to the Internet for the first time, they will be prompted to enter a mobile number to receive a PIN by SMS. After they have authenticated themselves by entering the PIN, they will be redirected to the landing page, indicating that they have been granted Internet access. Vigor2133 Series User’s Guide...
  • Page 383 This login mode presents both Social Login and PIN Code Login modes to the users, and allows them to select their preferred mode of authentication. Vigor2133 Series User’s Guide...

  • Page 384: Vi-4-1-2 Steps For Configuring A Web Portal Profile

    Click to save the configuration on this page and proceed to the next page. If you have chosen Skip Login as the Login Mode, skip to step 4 Whitelisting below. Otherwise, proceed to configure the login page by following steps 2 and 3. Vigor2133 Series User’s Guide...
  • Page 385 If you have selected a Login Mode that requires authentication, select a background for the login page. Available settings are explained as follows: Vigor2133 Series User’s Guide...
  • Page 386 Enter the text to be shown as the webpage title in the browser. Logo Image The DrayTek Logo will be displayed by default. However, you can enter HTML text or upload an image to replace the default logo. Logo Background...
  • Page 387 Enter the text to be displayed on the accept button Description Accept Button Color Select the color of the accept button from the predefined color list, or select Customize Color and enter the RGB value. Click Preview to preview the selected color. Vigor2133 Series User’s Guide...
  • Page 388 Login as the Login Mode. You will see only settings that are relevant to the selected login mode(s). Settings that are common to Facebook, Google and PIN authentication are: Item Description Welcome Message Enter the text to be displayed as the welcome message. Vigor2133 Series User’s Guide...
  • Page 389 Enter the secret configured for the APP ID entered above. Refer to section A-2 How to create a Google APP ID for Web Portal Authentication for details. If you have selected PIN login, these settings will appear: Vigor2133 Series User’s Guide...
  • Page 390 Preview to preview the selected color. Enter PIN Enter message to be displayed in the PIN textbox to prompt the Description user to enter the PIN. And finally, the save and cancel buttons are always displayed. Vigor2133 Series User’s Guide...
  • Page 391 Click to abort the configuration process and return to the profile summary page. If you have selected PIN Login as the login mode, you will also need to configure the page that is displayed to users when they request a PIN. Vigor2133 Series User’s Guide...
  • Page 392 Enter text for the label of the hyperlink to return to the previous Description page. PIN Code Message Enter text to be displayed as the body text on the page. Default Country Select the default country code to be displayed using the dropdown Code menu. Vigor2133 Series User’s Guide...
  • Page 393 Enter up to 30 destination IP addresses that are allowed to be accessed. Dest Port Enter up to 30 destination protocols and ports that are allowed through the router. Source IP Enter up to 30 source IP addresses that are allowed through the router. Vigor2133 Series User’s Guide...
  • Page 394 Click to save the configuration on this page and proceed to the next page. Cancel Click to abort the configuration process and return to the profile summary page. In this step you can configure advanced options for the Hotspot Web Portal. Vigor2133 Series User’s Guide...
  • Page 395 WLAN – The current Hotspot Web Portal profile will be in effect for the selected WLAN SSIDs. Cancel Click to abort the configuration process and return to the profile summary page. Finish Click to complete the configuration. Vigor2133 Series User’s Guide...

  • Page 396: Application Notes

    4. Switch to YES then click Next on pop-up window. 5. Choose country then type phone number, click Send as Text in Get Confirmation Code. Wait confirmation code message received then enter the confirmation code. Click Register to finish the register process. Vigor2133 Series User’s Guide...
  • Page 397 6. Add a New App. Click on My Apps > Add a New App. Choose Website platform. 7. Click Skip and Create App ID on first use. Type Display Name. Choose Category. Click Create App ID. Vigor2133 Series User’s Guide...
  • Page 398 8. Pops up security check window, select the answer, and then click Submit to finish the process. Vigor2133 Series User’s Guide...
  • Page 399 10. Add Platform on My Apps. Go to Settings then click Add Platform. 11. Choose Website in Select Platform window. 12. Enter the Site URL as http://portal.draytek.com. (Note: If you change http port in the vigor, please add http port in URLs. For example, we use 8080 as http port and we'll put http://portal.draytek.com:8080).
  • Page 400 13. Set up Client OAuth. Go to Settings >> Advanced >>Client OAuth Settings, enter "http://portal.draytek.com" in Valid OAuth redirect URIs, and save changes. 14. Go to My Apps>>Status & Review, and switch available status to YES to activate the APP.
  • Page 401 Vigor2133 Series User’s Guide...

  • Page 402: How To Create Google App For Web Portal Authentication

    Google account then click Create project. Type project name then click Create. 2. On Dashboard, choose Use Google APIs. 3. Edit Auth Consent screen. Go to Credentials > Auth consent screen. Enter your email, product name and other optional item then click on Save. Vigor2133 Series User’s Guide...
  • Page 403 Create. (Note: If you change http port in the vigor, please add http port in URLs. For example, we use 8080 as http port and we'll put http://portal.draytek.com:8080). 6. Get client ID and client secret. Such information will be used in Vigor Router's Web Portal Setup page.

  • Page 404: Central Management (Ap)

    Vigor2133 can manage the access points supporting AP management via Central AP Management. AP Map is helpful to determine the best location for VigorAP in a room. A floor plan of a room is required to be uploaded first. By dragging and dropping available VigorAP icon from the list...

  • Page 405: Web User Interface

    But, now no one connects to the access point. The number displayed on the left side means 2.4GHz; and the number displayed on the right side means 5GHz. AP List Display the number of the AP around the device. Vigor2133 Series User’s Guide...
  • Page 406 Display the firmware version used by the access point. Password Vigor2133 can get related information of the access point by accessing into the web user interface of the access point. This button is used to modify the logging password of the connected access point.

  • Page 407: Vi-4-2 Wlan Profile

    Renamed as. Last, click Apply to save the settings on this dialog. The new profile has been created with the settings coming from the original profile. To AP Click it to apply the selected wireless profile to the specified Access Point. Vigor2133 Series User’s Guide...
  • Page 408 If required, these settings also can be applied to Vigor router. Select and check one of wireless profiles and click this button to apply the settings onto the WI-Fi wireless settings configured for such Vigor router. Vigor2133 Series User’s Guide...
  • Page 409 1. Select the WLAN profile (index number 1 to 5) you want to edit. 2. Click the index number link to display the following page. Info The function of Auto Provision is available for the default WLAN profile. Vigor2133 Series User’s Guide...
  • Page 410 3. After finished the general settings configuration, click Next to open the following page for 2.4G wireless security settings. Vigor2133 Series User’s Guide...
  • Page 411 4. After finished the above web page configuration, click Next to open the following page for 5G wireless security settings. 5. When you finished the above web page configuration, click Finish to exit and return to the first page. The modified WLAN profile will be shown on the web page. Vigor2133 Series User’s Guide...

  • Page 412: Vi-4-3 Ap Maintenance

    Config Backup can be performed to one AP at one time. Others functions (e.g., Config Restore, Firmware Upgrade, Remote Reboot can be performed to more than one AP at one time by using Vigor2133. Available settings are explained as follows:...

  • Page 413: Vi-4-4 Traffic Graph

    LAN-B, daily or weekly for viewing data transmission chart. Click Refresh to renew the graph at any time. The horizontal axis represents time; the vertical axis represents the transmission rate (in kbps). Info Enabling/Disabling such function will also enable/disable the External Devices function. Vigor2133 Series User’s Guide...

  • Page 414: Vi-4-5 Load Balance

    Download Limit – Use the drop down list to specify the traffic limit for downloading. Action When Threshold Stop accepting new connections – When the number of Exceeded stations or the traffic reaches the threshold defined in this Vigor2133 Series User’s Guide...

  • Page 415: Vi-4-6 Function Support List

    Click the Client tab to list the AP management functions that the Access Points support under different firmware versions. Click the Server tab to list the AP management functions that Vigor router supports under different firmware versions. Vigor2133 Series User’s Guide...

  • Page 416: Central Management (External Devices)

    From this web page, check the box of External Device Auto Discovery. Later, all the available devices will be displayed in this page with icons and corresponding information. You can change the device name if required or remove the information for off-line device whenever you want. Vigor2133 Series User’s Guide...
  • Page 417 When you finished the configuration, click OK to save it. Info Only DrayTek products can be detected by this function. Vigor2133 Series User’s Guide...
  • Page 418 This page is left blank. Vigor2133 Series User’s Guide...

  • Page 419: Part Vii Others

    USB device connected on Vigor router can be regarded as a server or WAN interface. By way of Vigor router, clients on LAN can access, write and read data stored in USB storage disk with different applications. Vigor2133 Series User’s Guide...

  • Page 420: Objects Settings

    Define objects such as IP address, service type, keyword, file extension and others. These pre-defined objects can be applied in CSM. Vigor2133 Series User’s Guide...

  • Page 421: Web User Interface

    Later, we can select that object/group that can apply it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions. Vigor2133 Series User’s Guide...
  • Page 422 Type a string of the IP object that you want to search. Index Display the profile number that you can configure. Name Display the name of the object profile. Address Display the IP address configured for the object profile. Vigor2133 Series User’s Guide...
  • Page 423 IP address. If you choose LAN/DMZ/RT/VPN as the Interface here, and choose LAN/DMZ/RT/VPN as the direction setting in Edit Filter Rule, then all the IP addresses specified with LAN/DMZ/RT/VPN interface will be opened for you to choose in Edit Filter Rule page. Vigor2133 Series User’s Guide...
  • Page 424 If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. Vigor2133 Series User’s Guide...

  • Page 425: Vii-1-2 Ip Group

    To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Vigor2133 Series User’s Guide...

  • Page 426: Vii-1-3 Ipv6 Object

    You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2133 Series User’s Guide...
  • Page 427 Invert Selection If it is checked, all the IPv6 addresses except the ones listed above will be applied later while it is chosen. After finishing all the settings, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 428: Vii-1-4 Ipv6 Group

    Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2133 Series User’s Guide...

  • Page 429: Vii-1-5 Service Type Object

    You can set up to 96 sets of Service Type Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2133 Series User’s Guide...
  • Page 430 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. Vigor2133 Series User’s Guide...

  • Page 431: Vii-1-6 Service Type Group

    This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. Vigor2133 Series User’s Guide...
  • Page 432 Objects Setting>>Service Type Object will be shown in this box. Selected Service Type Click >> button to add the selected IP objects in this box. Objects After finishing all the settings, please click OK to save the configuration. Vigor2133 Series User’s Guide...

  • Page 433: Vii-1-7 Keyword Object

    You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2133 Series User’s Guide...
  • Page 434 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 435 Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2133 Series User’s Guide...
  • Page 436 All the files with the extension names specified in these profiles will be processed according to the chosen action. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2133 Series User’s Guide...
  • Page 437 Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2133 Series User’s Guide...
  • Page 438 Display the service provider which offers SMS service. To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. Vigor2133 Series User’s Guide...
  • Page 439 Type the number of the credit that you purchase from the service provider chosen above. Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. Vigor2133 Series User’s Guide...
  • Page 440 10 to make customized SMS service. The profile name for Index 9 and Index 10 are fixed. You can click the number (e.g., #9) under Index column for configuration in details. Available settings are explained as follows: Vigor2133 Series User’s Guide...
  • Page 441 Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Vigor2133 Series User’s Guide...
  • Page 442 31 characters. Password – Type a password for authentication. The maximum length of the password you can set is 31 characters. Sending Interval Define the interval for the system to send the SMS out. Vigor2133 Series User’s Guide...
  • Page 443 You can set an object with different monitoring situation. To set a new profile, please do the steps listed below: 1. Open Object Setting>>Notification Object, and click the number (e.g., #1) under Index column for configuration in details. Vigor2133 Series User’s Guide...
  • Page 444 Display the types that will be monitored. Status Display the status for the category. You can check the box to be monitored. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2133 Series User’s Guide...
  • Page 445 Display the number link of the string profile. String Display the string defined. Clear Choose the string that you want to remove. Then click this check box to delete the selected string. Below shows an example to apply string object (in Route Policy): Vigor2133 Series User’s Guide...
  • Page 446 Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider setting. In the following page, type the username and password and set the quota that the router can send the message out. Vigor2133 Series User’s Guide...
  • Page 447 Reconnected boxes for WAN to work in concert with the topic of this paper. After finished the settings, click OK to return to previous page. You have finished the configuration of the notification object profile setting. Vigor2133 Series User’s Guide...
  • Page 448 Click OK to save the settings. Later, if one of the WAN connections fails in your router, the system will send out SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully. Vigor2133 Series User’s Guide...
  • Page 449 URL string of the SMS provider and type the username and password. After clicking OK, the new added SMS provider will be added and will be available for you to specify for sending SMS out. Vigor2133 Series User’s Guide...
  • Page 450 Vigor router and username/password created in USB Application>>USB User Management on the client software. Then, the client can use the FTP site (USB storage disk) or share the SMB service through Vigor router. Vigor2133 Series User’s Guide...
  • Page 451 FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage disk at one time. Default Charset - At present, Vigor router supports four types of character sets. Default Charset is for English based file name. Vigor2133 Series User’s Guide...
  • Page 452 USB storage disk must type the same username and password configured in this page. Before adding or modifying settings in this page, please insert a USB storage disk first. Otherwise, an error message will appear to warn you. Click index number to access into configuration page. Vigor2133 Series User’s Guide...
  • Page 453 ON, you cannot type any new folder name in this field. Only “/” can be used in such case. You can click to open the following dialog to add any new folder which can be specified as the Home Folder. Vigor2133 Series User’s Guide...
  • Page 454 Click this icon to return to the upper directory. Back Click this icon to add a new folder. Create Current Path Display current folder. Upload Click this button to upload the selected file to the USB Vigor2133 Series User’s Guide...
  • Page 455 FTP server. Username It displays the username that user uses to login to the FTP server. When you insert USB device into the Vigor router, the system will start to find out such device within several seconds. Vigor2133 Series User’s Guide...
  • Page 456 A USB Thermometer is now available. It complements your installed DrayTek router installations which will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating. During summer in particular, it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures.
  • Page 457 Enable Syslog Alarm - The temperature log will be recorded on Syslog if it is enabled. Upper temperature limit/Lower temperature limit - Type the upper limit and lower limit for the system to send out temperature alert. Below shows an example of temperature graph: Vigor2133 Series User’s Guide...
  • Page 458 Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router. Vigor2133 Series User’s Guide...
  • Page 459 SMB Client Support List provides the test status information for applications with file sharing operated under different platforms. Vigor2133 Series User’s Guide...
  • Page 460 Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable SMB service. Vigor2133 Series User’s Guide...
  • Page 461 "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2133 Series User’s Guide...
  • Page 462 Return to USB Application >> USB Disk Status. The information for FTP server will be shown as below. Now, users in LAN of Vigor2133 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User...
  • Page 463 This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Vigor2133 Series User’s Guide...
  • Page 464 Backing to factory default setting if necessary.  If all above stages are done and the router still cannot run normally, it is the time for you to contact your dealer or DrayTek technical support for advanced help. Vigor2133 Series User’s Guide...
  • Page 465 (e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2133 Series User’s Guide...
  • Page 466 Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2133 Series User’s Guide...
  • Page 467 Available settings are explained as follows: Item Description Show Specify LAN and VLAN to display related information. In default, this page will display all of the information about LAN and VLAN. Refresh Click it to reload the page. Vigor2133 Series User’s Guide...
  • Page 468 This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2133 Series User’s Guide...
  • Page 469 It displays the MAC address for the specified PC that DHCP assigned IP address for it. Leased Time It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. Vigor2133 Series User’s Guide...
  • Page 470 It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. Vigor2133 Series User’s Guide...
  • Page 471 Click OK to enable such function. It means when the TTL value of each DNS query reaches the threshold of the value specified here, the corresponding record will be deleted from router’s Cache automatically. Vigor2133 Series User’s Guide...
  • Page 472 Type the IPv6 address that you want to ping. Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. Vigor2133 Series User’s Guide...
  • Page 473 Description Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Vigor2133 Series User’s Guide...
  • Page 474 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2133 Series User’s Guide...
  • Page 475 WAN1/WAN2/WAN3/LTE/WAN4 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2133 Series User’s Guide...
  • Page 476 Use the drop down list to choose the protocol that you want to ping through. Host/IP Address It indicates the IP address of the host. Trace Host/IP Address It indicates the IPv6 address of the host. Vigor2133 Series User’s Guide...
  • Page 477 Always record the new event – only the newest events will be recorded by the system. Time Display the time of the event occurred. Message Display the information for each event. This page displays the syslog recorded on the USB storage disk. Vigor2133 Series User’s Guide...
  • Page 478 If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Available settings are explained as follows: Item Description Refresh Click this link to refresh this page manually. Vigor2133 Series User’s Guide...
  • Page 479 Moreover, IP address detected and suspected to attack the network system can be blocked shortly by clicking the Block button shown on pages of SYN Flood, UDP Flood and ICMP Flood. Info The icon - - means there is something wrong (e.g., attacking the system) with that IP address. Vigor2133 Series User’s Guide...
  • Page 480 IP list in the right frame will be blocked by Vigor system permanatly. Remove – It is used to remove selected IP address from the Blocking IP List. Refresh Click this link to refresh current page. Vigor2133 Series User’s Guide...
  • Page 481 It is available when Analyze multiple packets.. is selected as Mode. Select – Click the download link to get a blank example file. Then, click such button to select that blank “.csv” file for saving the result of analysis. Vigor2133 Series User’s Guide...
  • Page 482 If required, click export analysis to export the result as a file. Note that the analysis was based on the current "load-balance/route policy" settings, we do not guarantee it will be 100% the same as the real case. Vigor2133 Series User’s Guide...
  • Page 483 Turn on the router. Make sure the Activity LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “I-2 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2133 Series User’s Guide...
  • Page 484 Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. Vigor2133 Series User’s Guide...
  • Page 485 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. Vigor2133 Series User’s Guide...
  • Page 486 Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2133 Series User’s Guide...
  • Page 487 Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2133 Series User’s Guide...
  • Page 488 Vigor2133 Series User’s Guide...
  • Page 489  If the problem of LEDs cannot be solved by the above measures, please contact with the nearest reseller, or send an e-mail to DrayTek FAE for technical support.  Check if the settings offered by ISP are configured well or not.
  • Page 490 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the factory default setting, you can configure the settings for the router again to fit your personal request. Vigor2133 Series User’s Guide...
  • Page 491 If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor2133 Series User’s Guide...
  • Page 492 VLAN helps you to solve these situations, and DrayTek’s products support bellow two popular types:...
  • Page 493 P1 and P2 are doing NAT flow to access to the internet, but P3 and P4 will forward the packets between WAN and LAN ports directly. So far, there are two kinds of open system on Vigor router. One is DrayOS, which is DrayTek owned, and another is Linux-like which customized by DrayTek from OpenWRT. Here DrayOS system is going to be introduced to you because it is the most stable and superfast booting system in DrayTek products.
  • Page 494 Vigor2133 Series User’s Guide...
  • Page 495  Multi Subnet (VLAN of LAN) Vigor2133 Series User’s Guide...
  • Page 496 Port-based is able to extend the wired ports by installing a cheaper dumb switch as many as you need, but Tag-based offers you a flexible and well-managed network. The networks are isolated, secured and reduce the broadcasting storm effectively in each of networks with VLAN.  Guest Network Vigor2133 Series User’s Guide...
  • Page 497 Tag enabled.  Triple Play (Multi-WAN) NAT mode with VLAN Following settings, the set-top box (STB) is able to attach with any LAN port. Video streaming which your ISP provided will be played on your monitor. Vigor2133 Series User’s Guide...
  • Page 498 Vigor2133 Series User’s Guide...
  • Page 499 Set-top box (STB) or the other kinds of media devices are able to attach with Port4 or Port5 of LAN. Those devices that attached with Port4 or Port5 are able to access the services network directly which your ISP provided. Vigor2133 Series User’s Guide...
  • Page 500 This page is left blank. Vigor2133 Series User’s Guide...
  • Page 501 Vigor2133 Series User’s Guide...
  • Page 502 If you have changed the default, enter the current IP address of the router. Next, type admin/admin for Account/Password. Then, type ?. You will see a list of valid/common commands depending on the router that your use. Vigor2133 Series User’s Guide...
  • Page 503 For users using previous Windows system (e.g., 2000/XP), simply click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Next, type admin/admin for Account/Password. And, type ? to get a list of valid/common commands. Vigor2133 Series User’s Guide...
  • Page 504 Type “csm appe set –I 1 –v IM”, the system will list all of the index numbers of the applications categorized under IM. > csm appe set -i 1 -e 1 Profile 1 - : AIM is enabled. Vigor2133 Series User’s Guide...
  • Page 505 Advance abbreviation: : M, F, G, C, and O ------------------------------------------------------------------- OTHERS TUNNEL DNSCrypt Disable OTHERS TUNNEL DynaPass Disable OTHERS TUNNEL FreeU Disable OTHERS TUNNEL HTTP Proxy Disable OTHERS TUNNEL HTTP Tunnel Disable OTHERS TUNNEL Hamachi Disable Vigor2133 Series User’s Guide...
  • Page 506 Vigor router specifies WAN interface automatically. Specify the WAN interface for signature downloading. > csm appe interface wan1 Download interface is set as "WAN1" now. > csm appe interface auto Download interface is set as "auto-selected" now. Vigor2133 Series User’s Guide...
  • Page 507 It means to specify the index number of CSM profile, from 1 to 8. It means to set the profile name. PROFILE_NAME It means to specify the name of the profile (less than 16 characters) Set the priority (defined by the number specified in VALUE) for the profile. Vigor2133 Series User’s Guide...
  • Page 508 P: Pass. The web access meets the URL Access Control will be passed. Prevent the web access from any IP address. E: Enable the function. The Internet access from any IP address will be blocked. D: Disable the function. Set the keyword object. Vigor2133 Series User’s Guide...
  • Page 509 Priority Select : [Bundle : Pass] ----------------------------------------------- URL Access Control [ ]Enable URL Access Control Action:[block] [v]Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- Vigor2133 Series User’s Guide...
  • Page 510 File Extension Object Index : [0] Profile Name : [] [V] Cookie [ ] Proxy [ ] Upload It means to configure the settings regarding to web control filter (wcf). csm wcf show csm wcf look Vigor2133 Series User’s Guide...
  • Page 511 KEY_WORD_Object_Index Specify the index number of the object profile. Set the keyword group. KEY_WORD_Group_Index Specify the index number of the group profile. It means to set the action for the black and white list. E:Enable, D:Disable, Vigor2133 Series User’s Guide...
  • Page 512 Transportation, Compromised, Dating & Personals, , Education, Finance, Government,Health & Medcine, News, Non-profits & NGOs, Personal Sites,Politics, Real Estate, Rligion, Restaurants & Dining,Shopping, Translators, General, Cults,Greetig cards, Image Sharing, Network Errors, Parked Domains, Private IP Addresses) Vigor2133 Series User’s Guide...
  • Page 513 INDEX -n PROFILE_NAME csm dnsf profile_edit INDEX -l N|P|B|A csm dnsf profile_edit INDEX -w WCF_PROFILE csm dnsf profile_edit INDEX -u UCF_PROFILE csm dnsf profile_edit INDEX -c CACHE_TIME csm dnsf profile_setdefault csm dnsf local_bw [value] Vigor2133 Series User’s Guide...
  • Page 514 (0=mask, 1=single, 2=any, 3=range, 4=group). g [item number][group index]: select group index (1 ~ 192) for group and objects type. o [item number][object index]: select object index (1~ 32) for group and objects type. s: show config setting Vigor2133 Series User’s Guide...
  • Page 515 > ddns time 1000 ddns time <update in minutes> Valid: 1 ~ 1440 %Now: 1000 This command allows users to configure the settings for DoS defense system. dos [-V | D | A] dos [-s ATTACK_F [THRESHOLD][ TIMEOUT]] Vigor2133 Series User’s Guide...
  • Page 516 […] means that you can type in several commands in one line. -M n M means to set Internet Access Mode (Mandatory) and n means different modes (represented by 0 – 3) n=0: Offline n=1: PPPoE Vigor2133 Series User’s Guide...
  • Page 517 Set PPP Password (max. 62 characters) for USB PPP mode. -e n Set PPP Authentication Type for USB PPP mode. n= 0: PAP/CHAP (default), 1: PAP Only -q n Set the first schedule for USB PPP mode. Vigor2133 Series User’s Guide...
  • Page 518 WAN1 Internet Mode set to PPPoE/PPPoA WAN1 Username set to link1 WAN1 Password set successful WAN1 PPP Authentication Type set to PAP/CHAP This command allows users to enable or disable the public subnet for your router. ip pubsubnet <Enable/Disable> Vigor2133 Series User’s Guide...
  • Page 519 Display an IP address which allows users set as the public subnet mask. public subnet IP address Specify a subnet mask. The system will set the one that you specified as the public subnet mask. > ip pubmask ? Vigor2133 Series User’s Guide...
  • Page 520 Where IP = Auxiliary WAN IP Address. Join to NAT Pool = 0 or 1. Index = The Index number of table. Now auxiliary WAN1 IP Address table: Index no. Status IP address NAT IP pool ---------------------------------------------------- Disable 0.0.0.0 Yes Enable 192.168.1.65 Vigor2133 Series User’s Guide...
  • Page 521 ARP displays the matching condition for IP and MAC address. ip arp add [IP address] [MAC address] [LAN or WAN] ip arp del [IP address] [LAN or WAN] ip arp flush ip arp status ip arp accept [0/1/2/3/4/5/status] Vigor2133 Series User’s Guide...
  • Page 522 -e [1 or 0] -w [wan unmber] -c [option number] –x [option value] ip dhcpc option -e [1 or 0] -w [wan unmber] -c [option number] –a [option value] ip dhcpc option -u [idx unmber] ip dhcpc release [wan number] Vigor2133 Series User’s Guide...
  • Page 523 Receive reply from 192.168.1.1, time<1ms Receive reply from 192.168.1.1, time<1ms Receive reply from 192.168.1.1, time<1ms Receive reply from 192.168.1.1, time<1msReceive reply from 192.168.1.1, time<1ms Packets: Sent = 5, Received = 5, Lost = 0 (0% loss) Vigor2133 Series User’s Guide...
  • Page 524 Type the WAN or LAN IP address of the remote device. Port Type a port number (e.g., 23). Available settings: 0 ~65535. > ip telnet 172.17.3.252 23 > This command allows users to set the RIP (routing information protocol) of IP. ip rip [0/1/2] Parameter Description Vigor2133 Series User’s Guide...
  • Page 525 0/1/2 0 means disable; 1 means first subnet and 2 means second subnet. > ip rip 1 %% Set RIP LAN1. Vigor2133 Series User’s Guide...
  • Page 526 Valid ex:ip wanrip <ifno> -e <0/1> <ifno> 1: WAN1 3: PVC3,4: PVC4,5: PVC5 -e <0/1> 0: disable, 1: enable Now status: WAN[1] Rip Protocol disable WAN[2] Rip Protocol disable WAN[3] Rip Protocol disable WAN[4] Rip Protocol enable WAN[5] Rip Protocol enable Vigor2133 Series User’s Guide...
  • Page 527 > ip route add 172.16.2.0 255.255.255.0 172.16.2.4 3 static > ip route status Codes: C - connected, S - static, R - RIP, * - default, ~ - private 192.168.1.0/ 255.255.255.0 is directly connected, LAN1 172.16.2.0/ 255.255.255.0 via 172.16.2.4, WAN1 Vigor2133 Series User’s Guide...
  • Page 528 Current Setting is:130000 ms > This command allows users to enable or disable IGMP snoop function. ip igmp_snoop enable ip igmp_snoop disable ip igmp_snoop status ip igmp_snoop txquery ip igmp_snoop chkleave ip igmp_snoop separate Parameter Description Vigor2133 Series User’s Guide...
  • Page 529 > ip igmp_snoop disable %% ip igmp snooping [enable|disable|status], IGMP Snooping is Disabled. > ip igmp_snoop separate ? % ip igmp separate [on/off] igmp snoop seprate is ON now. igmp packets will be separated by NAT/Bridge. Vigor2133 Series User’s Guide...
  • Page 530 This command allows users to set maximum session limit number for the specified IP; set message for exceeding session limit and set how many seconds the IP session block works. ip session on ip session off ip session default [num] ip session defaultp2p [num] ip session status ip session show Vigor2133 Series User’s Guide...
  • Page 531 Current default session number is 100 This command allows users to set maximum bandwidth limit number for the specified IP. ip bandwidth on ip bandwidth off ip bandwidth default [tx_rate][rx_rate] ip bandwidth status ip bandwidth show Vigor2133 Series User’s Guide...
  • Page 532 This command allows users to set IP-MAC binding for LAN host. ip bindmac on ip bindmac off ip bindmac [strict_on][strict_off] ip bindmac subnet [all/set LAN_Index/unset LAN_Index/clear/show] ip bindmac show ip bindmac add [IP][MAC][Comment] ip bindmac del [IP]/all Parameter Description Vigor2133 Series User’s Guide...
  • Page 533 > ip bindmac show ip bind mac function is turned OFF ip bind mac function is STRICT OFF Show all IP Bind MAC entries. IP : 192.168.1.46 bind MAC : 00-50-7f-22-33-55 HOST ID : (null) Comment : just Vigor2133 Series User’s Guide...
  • Page 534 IP address. ip_range: Indicates a range of IP addresses. ip_subnet: Indicates the IP subnet. domain: Indicates the domain name. -3 [any/range] Specify the destination port mode. Range: Indicate a range of port number. Vigor2133 Series User’s Guide...
  • Page 535 NO_FAILOVER, Default_WAN, Policy1 ~ Policy10 LAN1 ~ LAN4 IP_Routed_Subnet, VPN_PROFILE_1 ~ VPN_PROFILE_32, WAN_1_IP_ALIAS_1 ~ WAN_2_IP_ALIAS_32 -b [value] It means “failback”. Value: Available settings include, 0: Disable the function of “failback”. 1: Enable the function of “failback”. Vigor2133 Series User’s Guide...
  • Page 536 : type the index number which represents the address mapping profile. -e <0/1> It means to enable or disable the function of LAN DNS or DNS Forwarding Profile. 0: disable 1: enable Vigor2133 Series User’s Guide...
  • Page 537 0: reply all subnet packets. 1: reply only same subnet packet. It means to update LAN DNS configuration to DNS cache. > ip lanDNSRes -i 1 -n ftp.drayTek.com % Configure Set1's DomainName:ftp.drayTek.com > ip lanDNSRes -i 1 -n ftp.drayTek.com > ip lanDNSRes -i 1 -a 172.16.2.10 -s 1 >...
  • Page 538 -p <profile name> Set profile name for LAN DNS. Reset the settings for selected profile. > ip dnsforward -i 1 -n ftp.drayTek.com % Configure Set1's DomainName:ftp.drayTek.com > ip dnsforward -i 1 -a 172.16.1.1 % Configure Set1's IP:172.16.1.1 > ip dnsforward -i 1 -l...
  • Page 539 > ip6 dhcp req_opt WAN2 -r 1 > ip6 dhcp req_opt WAN2 -a % Interface WAN2 is set to request following DHCPv6 options: sip name > This command allows you to use DHCPv6 protocol to obtain IPv6 address from server. Vigor2133 Series User’s Guide...
  • Page 540 > ip6 dhcp client WAN2 –a Interface WAN2 has following DHCPv6 client settings: DHCPv6 client enabled request IA_NA whose IAID equals to 2008 > system reboot This command allows you to configure DHCPv6 server. ip6 dhcp server [-<command> <parameter>| ... ] Vigor2133 Series User’s Guide...
  • Page 541 It means to set key ID (1~65535) in delayed protocol. > ip6 dhcp server -d FF02::1 > ip6 dhcp server -i ff02::1 > ip6 dhcp server -x ff02::3 > ip6 dhcp server -a % Interface LAN has following DHCPv6 server settings: Vigor2133 Series User’s Guide...
  • Page 542 -s <server> It means to set 6in4 remote endpoint IPv4 address. -I <IPv6 Addr> It means to set the IPv6 address for 6in4 connection. -P n It means to set IPv6 WAN prefix length for 6in4 connection. Vigor2133 Series User’s Guide...
  • Page 543 It means to Enable RIPng. On = 1, Off = 0 > ip6 internet -W 2 -M 2 -u 88886666 -p draytek123456 –s amsterdam.freenet6.net This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. > system reboot Vigor2133 Series User’s Guide...
  • Page 544 > ip6 neigh -s 2001:2222:3333::1111 00:50:7F:11:ac:22:WAN1 Neighbour 2001:2222:3333::1111 successfully added! > ip6 neigh -a I/F ADDR STATE -------------------------------------------------------------------------- LAN1 2001:2222:3333::1111 IN_TIMER LAN4 :: NONE LAN3 :: NONE LAN1 :: NONE LAN2 :: NONE DMZ :: NONE > Vigor2133 Series User’s Guide...
  • Page 545 It means the gateway of the router. LAN1|LAN2|...|LAN4|WAN1| It means to specify LAN or WAN interface for such address. WAN2| USB|VPN1|...|VPN32 > ip6 route -s FE80::250:7FFF:FE12:500 16 FE80::250:7FFF:FE12:100 LAN1 Route FE80::250:7FFF:FE12:500/16 successfully added! > ip6 route -a LAN1 Vigor2133 Series User’s Guide...
  • Page 546 Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Packets: Sent = 5, Received = 5, Lost = 0 <% loss> > Vigor2133 Series User’s Guide...
  • Page 547 > ip6 tspc 1 Local Endpoint v4 Address : 111.243.177.223 Local Endpoint v6 Address : 2001:05c0:1400:000b:0000:0000:0000:10b9 Router DNS name : 8886666.broker.freenet6.net Remote Endpoint v4 Address :81.171.72.11 Remote Endpoint v6 Address : 2001:05c0:1400:000b:0000:0000:0000:10b8 Tspc Prefixlen : 56 Tunnel Broker: Amsterdam.freenet.net Vigor2133 Series User’s Guide...
  • Page 548 121:logo 121, 124:logo 124.. It means to reload Config and send RA for subnets. It means to view MTU on all interfaces. > ip6 radvd LAN1 -V % [LAN1] setting ! Default Lifetime : 0 seconds Vigor2133 Series User’s Guide...
  • Page 549 % IPv6 Remote Management : telnet : off, http : on, https : off, ssh : off, ping : off This command allows you to check the online status of IPv6 LAN /WAN. ip6 online [WAN1|WAN2|USB] Vigor2133 Series User’s Guide...
  • Page 550 It means to display the AICCU status. > ip6 aiccu -i 1 -s Status: Idle This command allows you to set IPv6 settings for NTP (Network Time Protocols) server. ip6 ntp –h ip6 ntp –v ip6 ntp –p [0/1] Vigor2133 Series User’s Guide...
  • Page 551 -o n It means to enable Other option(O-bit) flag. (O-bit is redundant when management is DHCPv6) n=0: Disable n=1: Enable. -e n It means to add an extension WAN. n: 1: WAN1, 2: WAN2, ... x: WANx. Vigor2133 Series User’s Guide...
  • Page 552 [ifno: 0, enable: 0] % Static IP(1) : ::/0 [ifno: 0, enable: 0] % Static IP(2) : ::/0 [ifno: 0, enable: 0] % Static IP(3) : ::/0 [ifno: 0, enable: 0] % DNS1 : 2001:4860:4860::8888 % DNS2 : 2001:4860:4860::8844 Vigor2133 Series User’s Guide...
  • Page 553 This command allows you to set IPv6 settings ip6 Bandwidth [on/off/default tx_rate rx_rate/status/show] ip6 Bandwidth [add/del] [IP1-IP2] [tx][rx][shared] Parameter Description It means to turn on bandwidth limit for each IP. It means to turn off bandwidth limit for each IP. Vigor2133 Series User’s Guide...
  • Page 554 It means to clear a filter rule’s statistics. It means to clear IP filter’s gross statistics. > ipf view -V -c -d ipf: IP Filter: v3.3.1 (1824) Kernel: IP Filter: v3.3.1 Running: yes Log Flags: 0x80947278 = nonip Default: pass all, Logging: available Vigor2133 Series User’s Guide...
  • Page 555 It means to accept large incoming fragmented UDP or ICMP packets. 0:Disable, 1:Enable -t [VALUE] It means to enable Transparent Mode. -E [VALUE] It means to set the session limitation max count. VALUE : 0-32000 -Q [VALUE] It means to set the QoS class. Vigor2133 Series User’s Guide...
  • Page 556 [v] Enable Strict Security Firewall > This command is used to set filter rule for firewall. ipf rule s r [-<command> <parameter> | ... ipf rule s r -v Parameter Description Such word means Filter Set, range form 1~12. Vigor2133 Series User’s Guide...
  • Page 557 Set Any Address => -d u 2 Set Range Address => -d u 3 192.168.1.10 192.168.1.15 -S o:g <obj> It means to specify Service Type object and IP group. o – indicates “object”. g – indicates “group” Vigor2133 Series User’s Guide...
  • Page 558 <index> – Available settings range from 0 ~ 8. “0” means no profile will be applied. <log flag> - Enable (1) the log; disable (0) the log -w<index><log flag> It means to specify which web content filter profile will be applied. Vigor2133 Series User’s Guide...
  • Page 559 > ipf rule 2 1 -e 1 -M "Your Comments" -s "o 1" -d "o 2" -S "o 1" -F "1 1" > ipf rule 2 1 -v Filter Set 2 Rule 1: Status : Enable Comments: Your Comments Index(1-15) in Schedule Setup: <null>, <null>, <null>, <null> Vigor2133 Series User’s Guide...
  • Page 560 It means to specify IP address (e.g,, -i 192.168.2.55). -p[value] It means to type a port number (e.g., -p 1024). Available settings are 0 ~ 65535. -t [value] It means to specify a protocol (e.g., -t tcp). Vigor2133 Series User’s Guide...
  • Page 561 It means to show this usage help. It means to show PPP/MP log. It means to show all logs saved in the log buffer. It means to show WAN log. It means to show packet body hex dump. Vigor2133 Series User’s Guide...
  • Page 562 % Set FTP server port to 21 done. This command allows users to set HTTP port for management. mngt httpport [Http port] Parameter Description Http port It means to enter the number for HTTP port. The default setting is Vigor2133 Series User’s Guide...
  • Page 563 % Set Telnet server port to 23 done. This command allows users to set SSH port for management. mngt sshport [ssh port] Parameter Description ssh port It means to type the number for SSH port. The default setting is > mngt sshport 23 Vigor2133 Series User’s Guide...
  • Page 564 It means to delete a TCP port for block. viewlog It means to display a log of defense worm packet, including source MAC and source IP. clearlog It means to remove the log of defense worm packet. Vigor2133 Series User’s Guide...
  • Page 565 %% FTP server has been enabled. This command allows users to manage accessing into Vigor router through LAN port. mngt lanaccess -e [0/1] –s [value] –i [value] mngt lanaccess –I mngt lanaccess –E mngt lanaccess –f Vigor2133 Series User’s Guide...
  • Page 566 - Specific IP(IP object:0) is disabled - LAN 3: enabled - Specific IP(IP object:0) is disabled - LAN 4: disabled - Specific IP(IP object:0) is disabled - IP Routed Subnet: disabled - Specific IP(IP object:0) is disabled Vigor2133 Series User’s Guide...
  • Page 567 It means to remove all the settings in the access list. > mngt accesslist add 1 1 %% Set OK. > mngt accesslist list %% Access list : [Index] [IP Object Index] [IP/CIDR or StartIP ~ EndIP] ========================================================================== Please setting index=1 for IP Object Vigor2133 Series User’s Guide...
  • Page 568 -T <seconds> It means to set the trap timeout <0~999>. It means to list SNMP setting. > mngt snmp -e 1 -g draytek -s DK -m 192.168.1.20,192.168.5.192/26,10.20.3.40/24 -t trapcom -n 192.168.1.20,10.20.3.40 -T 88 SNMP Agent Turn on!!! Get Community set to draytek Set Community set to DK Manager Host IP set to 192.168.1.20,192.168.5.192/26,10.20.3.40/24...
  • Page 569 [2/3/4][IP address] Parameter Description 2/3/4 It means LAN interface. 2=LAN2 3=LAN3 4=LAN4 IP address Type the subnet mask address for the specified LAN interface. > msubnet nmask 2 255.255.0.0 % Set LAN2 subnet mask done !!! Vigor2133 Series User’s Guide...
  • Page 570 > msubnet dhcps 3 off % LAN3 Subnet DHCP Server disabled! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. This command is used to configure the subnet for NAT or Routing usage. Vigor2133 Series User’s Guide...
  • Page 571 % Set LAN2 Dhcp Gateway IP done !!! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. This command is used to defined the total number allowed for each LAN interface. msubnet ipcnt [2/3/4] [IP counts] Vigor2133 Series User’s Guide...
  • Page 572 % msubnet talk <1/2/3/4> <1/2/3/4> <On/Off> % where 1:LAN1, 2:LAN2, 3:LAN3, 4:LAN4 % Now: LAN1 LAN2 LAN3 LAN4 % LAN1 % LAN2 % LAN3 % LAN4 > This command is used to configure a starting IP address for DCHP. Vigor2133 Series User’s Guide...
  • Page 573 Please use "sys reboot" command to reboot the router. > msubnet pppip ? % msubnet pppip <2/3/4> <Start IP> % Now: LAN2 192.168.2.250; LAN3 192.168.3.200; LAN4 192.168.4.200 This command is used to specify the type for node which is required by DHCP option. Vigor2133 Series User’s Guide...
  • Page 574 This command is used to configure primary WINS server. msubnet primWINS [2/3/4] [WINS IP] Parameter Description 2/3/4 It means LAN interface. 2=LAN2 3=LAN3 4=LAN4 WINS IP Type the IP address as the WINS IP. > msubnet primWINS ? % msubnet primWINS <2/3/4> <WINS IP> Vigor2133 Series User’s Guide...
  • Page 575 [2/3/4] [TFTP server name] Parameter Description 2/3/4 It means LAN interface. 2=LAN2 3=LAN3 4=LAN4 TFTP server name Type a name to indicate the TFTP server. > msubnet tftp ? % msubnet tftp <2/3/4> <TFTP server name> Vigor2133 Series User’s Guide...
  • Page 576 >msubnet mtu LAN1 1492 Current Settings: LAN1 MTU: 1492 (Bytes) LAN2 MTU: 1500 (Bytes) LAN3 MTU: 1500 (Bytes) LAN4 MTU: 1500 (Bytes) IP Routed Subnet MTU: 1500 (Bytes) This command is used to create an IP object profile. Vigor2133 Series User’s Guide...
  • Page 577 Type an IP address (different with START_IP) as the end IP address. > object ip obj 1 -n marketing > object ip obj 1 -a 1 192.168.1.45 > object ip obj 1 -v IP Object Profile 1 Name :[marketing] Interface:[Any] Vigor2133 Series User’s Guide...
  • Page 578 The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. > object ip grp 2 -n First IP Group Profile 2 Name :[First] Interface:[Any] Included ip object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] Vigor2133 Series User’s Guide...
  • Page 579 [9:][0] [10:][0] [11:][0] > object ip grp 2 -a 1 2 IP Group Profile 2 Name :[First] Interface:[Lan] Included ip object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] [8:][0] [9:][0] [10:][0] [11:][0] Set ok! Vigor2133 Series User’s Guide...
  • Page 580 Type an IPv6 address (different with START_IP) as the end IPv6 address or the prefix length of the IPv6 address. > obj ipv6 obj 9 -n bruce Setting saved. > obj ipv6 obj 3 -s 1 Setting saved. Vigor2133 Series User’s Guide...
  • Page 581 The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. > object ipv6 grp 8 -n bruce IPv6 Group Profile 8 Name :[bruce] Included ip object index: [0:][0] [1:][0] [2:][0] Vigor2133 Series User’s Guide...
  • Page 582 PROTOCOL =6, means TCP PROTOCOL =17, means UDP PROTOCOL =58, means ICMPv6 PROTOCOL =255, means TCP/UDP Other values mean other protocols. Example: object service obj 8 -p 1 It means the check action for the port setting. Vigor2133 Series User’s Guide...
  • Page 583 It means the index number of the specified group profile. It means to view the information of the specified group profile. Example: object service grp 1 –v -n NAME It means to define a name for the service group. Vigor2133 Series User’s Guide...
  • Page 584 INDEX –a CONTENTS object kw obj INDEX -c Parameter Description setdefault It means to return to default settings for all profiles. show PAGE It means to show the contents of the specified profile. PAGE: type the page number. Vigor2133 Series User’s Guide...
  • Page 585 It means to define a name for the file extension object profile. NAME: Type a name with less than 15 characters. It means to enable the specific CATEGORY or FILE_EXTENSION. It means to disable the specific CATEGORY or FILE_EXTENSION Vigor2133 Series User’s Guide...
  • Page 586 [ ].arj [ ].bzip2 [ ].bz2 [ ].cab [ ].gz [ ].gzip [ ].rar [ ].sit [ ].zip ------------------------------------------------------------------------- Executation category: [ ].bas [ ].bat [ ].com [ ].exe [ ].inf [ ].pif [ ].reg [ ].scr Vigor2133 Series User’s Guide...
  • Page 587 It means to define a password for the SMS object profile. Type a password that the sender can use to register to selected SMS provider. -q [Quota] Type the number of the credit that you purchase from the service provider. Vigor2133 Series User’s Guide...
  • Page 588 It means the index number (from 1 to 10) of the specified mail object profile. It means to view the information of the specified mail object profile. -n [Profile Name] It means to define a name for the mail object profile. Vigor2133 Series User’s Guide...
  • Page 589 This command is used to create notification object profile. object noti show object noti setdefault object noti obj INDEX -v object noti obj INDEX -n Profile Name object mail obj INDEX –e Category Status object mail obj INDEX –d Category Status Vigor2133 Series User’s Guide...
  • Page 590 [ ]CPE Offline (這個項目應該要取消，2133 網頁上沒有此功能) CVM Alert [ ]CPE Config Backup Fail [v]CPE Config Restore Fail [ ]CPE Firmware Fpgrade Fail [ ]CPE VPN Profile Setup Fail This command is used to create schedule object profile. Vigor2133 Series User’s Guide...
  • Page 591 If the [option] set Weekdays, then must select which days of Week. example: To select Sunday, Monday, Thursday, type [date] : 1-28 [cycle_days] : 1-30 If the [option] set cycle days, then must select which days to do cycle schedule example: To select cycle 10 days: Vigor2133 Series User’s Guide...
  • Page 592 [enable,disable] [1, 2, 3, 4, all] port status port sniff [on,off,port,txrx,restart,status] port 8021x [enable,disable,status,addport,delport] port jumbo port wanfc port spoof [on, off, stat] port mac_flush Parameter Description 1, 2, 3, 4, all It means the number of LAN port. Vigor2133 Series User’s Guide...
  • Page 593 It means to flush all portmaps (useful for diagnostics). -l <List> List all settings. > portmaptime -t 86400 -u 300 -i 10 > portmaptime -l ------ Current setting ------ TCP Timeout : 86400 sec. UDP Timeout : 300 sec. IGMP Timeout : 10 sec. Vigor2133 Series User’s Guide...
  • Page 594 % You need to set the Manual mode first ! %TWO way accleration is disable > ppa -v % PPA mode is Auto %PPA Protocol TCP 1, UDP 0 %PPA two way disable %PPA time is 10 %PPA range is 192 %PPA LAN entries 0 Vigor2133 Series User’s Guide...
  • Page 595 The available setting is from 1 to 100000. -o <bandwidth> It means to set outbound bandwidth in kbps (Ethernet WAN only). The available setting is from 1 to 100000. -r <index:ratio> It means to set ratio for class index, in %. Vigor2133 Series User’s Guide...
  • Page 596 […] means that you can type in several commands in one line. Type it to display the usage of this command. -c <no> Specify the inde number for the class. Available value for <no> contains 1, 2 and 3. The default setting is Vigor2133 Series User’s Guide...
  • Page 597 Show the rule in the specified class. […] It means that you can type in several commands in one line. > qos class -c 2 -n draytek -a -m 1 -l 192.168.1.50:192.168.1.80 Following setting will set in the class2 class 2 name set to draytek...
  • Page 598 It means service port. The typing format must be [start:end] (ex., 510:330). List user defined types. “no” means the index number. Available numbers are 1~40. > qos type -a draytek -t 6 -p 510:1330 service name set to draytek service type set to 6:TCP Port type set to Range Service Port set to 510 ~ 1330 >...
  • Page 599 Index Status WAN1 aux IP Private IP ---------------------------------------------------- Disable 0.0.0.0 Disable 192.168.1.56 WAN2 DMZ mapping status: Index Status WAN2 aux IP Private IP ---------------------------------------------------- Disable 0.0.0.0 WAN3 DMZ mapping status: Index Status WAN3 aux IP Private IP ---------------------------------------------------- Disable 0.0.0.0 Vigor2133 Series User’s Guide...
  • Page 600 % LAN4 Primary DNS: [Not set] % LAN4 Secondary DNS: [Not set] This command displays current status of open port setting. > show openport Index Status Comment Local IP Address ******************************************************** Enable TEST 192.168.1.110 Total 1 items listed. Vigor2133 Series User’s Guide...
  • Page 601 Level1: It will be applied when the NAT sessions are smaller than 25% of the default setting. Level2: It will be applied when the NAT sessions are smaller than the eighth of the default setting. > show pmtime Level0 TCP=86400001 UDP=300001 ICMP=10001 Level1 TCP=600000 UDP=90000 ICMP=7000 Level2 TCP=60000 UDP=30000 ICMP=5000 Vigor2133 Series User’s Guide...
  • Page 602 Mode:PPPoE Up Time:0:00:00 IP:--- GW IP:--- TX Packets:0 TX Rate(bps):0 RX Packets:0 RX Rate(bps):0 WAN 2 Status: Disconnected Enable:Yes Line:Ethernet Name: Mode:DHCP Client Up Time:0:00:00 IP:--- GW IP:--- TX Packets:0 TX Rate(bps):0 RX Packets:0 RX Rate(bps):0 Vigor2133 Series User’s Guide...
  • Page 603 [interface] Parameter Description reset It means to reset the transmitted/received bytes to Zero. interface It means to specify WAN1 interface for displaying related statistics. > show statistic WAN1 total TX: 0 Bytes ,RX: 0 Bytes > Vigor2133 Series User’s Guide...
  • Page 604 [LAN or LANWAN] Allow to access into SMB server by LAN or borth LAN and WAN. > smb setting enable SMB service is enabled. > smb setting set access LAN Allow SMB access from LAN only. > Vigor2133 Series User’s Guide...
  • Page 605 [MAC Addr XX-XX-XX-XX-XX-XX/all/ALL] Parameter Description start It means the starting point of the IP address pool for the DHCP server. IP address It means to specify an IP address as the starting point in the IP address pool. Vigor2133 Series User’s Guide...
  • Page 606 It means the IP address that you want to use as DNS1. Note: The IP Routed Subnet DNS must be the same as NAT Subnet DNS). > srv dhcp dns1 lan1 168.95.1.1 % srv dhcp dns1 lan1 <DNS IP address> % Now: 168.95.1.1 Vigor2133 Series User’s Guide...
  • Page 607 It means to use auto settings acquired from ISP. > srv dhcp frcdnsmanl on % Domain name server now is using manual settings! > srv dhcp frcdnsmanl off % Domain name server now is using auto settings! Vigor2133 Series User’s Guide...
  • Page 608 This function allows users to turn on DHCP server. It needs rebooting router, please type "sys reboot" command to reboot router. This command allows users to set DHCP relay setting. srv dhcp relay servip [server ip] srv dhcp relay subnet [index] Vigor2133 Series User’s Guide...
  • Page 609 ID and so on. > srv dhcp status LAN1 : DHCP Server On IP Pool: 192.168.1.10 ~ 192.168.1.209 Default Gateway: 192.168.1.1 ------------------------------------------------------------------------- ------- Index IP Address MAC Address Leased Time HOST ID ------------------------------------------------------------------------- ------- LAN1 Vigor2133 Series User’s Guide...
  • Page 610 It means to specify a type for node. 1. B-node 2. P-node 4. M-node 8. H-node > srv dhcp nodetype 1 > srv dhcp nodetype ? %% srv dhcp nodetype <count> %% 1. B-node 2. P-node 4. M-node 8. H-node % Now: 1 Vigor2133 Series User’s Guide...
  • Page 611 It means to remove the IP address settings of second WINS server. > srv dhcp secWINS 192.168.1.180 > srv dhcp secWINS ? %% srv dhcp secWINS <WINS IP address> %% srv dhcp secWINS clear % Now: 192.168.1.180 Vigor2133 Series User’s Guide...
  • Page 612 > srv dhcp tftp TF123 > srv dhcp tftp ? %% srv dhcp tftp <TFTP server name> % Now: TF123 > srv dhcp tftpdel % The TFTP Server Name had been deleted !!! Vigor2133 Series User’s Guide...
  • Page 613 > srv dhcp option -u 2 -i 1 -c 60 -v class_id > srv dhcp option -l % state idx interface opt type data % enable 1 LAN1/2 SIAddr 8.8.8.8 % enable 2 LAN1 60 ASCII class_id % enable 3 LAN2/r 44 Address 192.168.1.10 ,192.168.1.20 Vigor2133 Series User’s Guide...
  • Page 614 Parameter Description [options] The available commands with parameters are listed below. It means to enable IPSec ESP tunnel passthrough and IKE source port (500) preservation. It means to disable IPSec ESP tunnel passthrough and IKE source Vigor2133 Series User’s Guide...
  • Page 615 It means to return to factory settings for all the open ports profiles. > srv nat openport 1 1 -a 1 -c games -i 192.168.1.56 -w 1 1 -p TCP -s 23 -e > Set WAN Port ok!! Vigor2133 Series User’s Guide...
  • Page 616 It means to remove the selected port redirection setting. disable [idx] It means to inactivate the selected port redirection setting. enable [idx] It means to activate the selected port redirection setting. flush It means to clear all the port mapping settings. Vigor2133 Series User’s Guide...
  • Page 617 This command allows users to view NAT Port Redirection Running Table. > srv nat status NAT Port Redirection Running Table: Index Protocol Public Port Private IP Private Port 192.168.1.11 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Vigor2133 Series User’s Guide...
  • Page 618 > srv nat trigger 1 -c test -e 1 -s 2 -p 1 -t 85 -P 2 -i 190 > srv nat trigger view Port Trigger Rule status: Index Status Comment TProto TPort IProto IPort ----------------------------------------------------- Enable test Disable Disable Disable Disable Vigor2133 Series User’s Guide...
  • Page 619 R:Port Redirection, O:Open Ports, D:DMZ This command is used to obtain the TX (transmitted) or RX (received) data for each connected switch. switch -i [switch idx_no] [option] Parameter Description switch idx_no It means the index number of the switch profile. Vigor2133 Series User’s Guide...
  • Page 620 Enable the option of "No Respond to External Device packets". > switch not_respond 1 slave not respond! > This command is used to turn on the auto discovery for external devices. > switch on Enable Extrnal Device auto discovery! Vigor2133 Series User’s Guide...
  • Page 621 Extern Device status query is Enable > switch query off Extern Device status query is Disable > switch syslog on External Device syslog is Enable This command is used for RD engineer to access into test mode of Vigor router. Vigor2133 Series User’s Guide...
  • Page 622 It is used to disable/enable bonjour service (0: disable, 1: enable). wlan It is used to disable/enable http (web) service (0: disable, 1: enable). on/off On – enable the button function. Off – disable the button function. Vigor2133 Series User’s Guide...
  • Page 623 [6] sys board button def on [7] sys cfg ? [8] sys cfg status [9] sys / [10] sys cmdlog ? [11] sys cmdlog This command displays current status of FTP server. sys ftpd on sys ftpd off Parameter Description Vigor2133 Series User’s Guide...
  • Page 624 Status: UP IP Address: 192.168.1.1 Netmask: 0xFFFFFF00 (Private) IP Address: 0.0.0.0 Netmask: 0xFFFFFFFF MAC: 00-50-7F-00-00-00 Interface 4 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-02 Interface 5 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 Vigor2133 Series User’s Guide...
  • Page 625 > sys name ? % sys name <wan1> <ASCII string (max. 39 characters)> % sys name <wan1 > clear % Now: wan1 == drayrouter Note: Such name can be used to recognize router’s identification in SysLog dialog. Vigor2133 Series User’s Guide...
  • Page 626 > sys autoreboot 2 autoreboot is ON autoreboot time is 2 hour(s) This command allows users to save current settings to FLASH. Usually, current settings will be saved in SRAM. Yet, this command will save the file to FLASH. Vigor2133 Series User’s Guide...
  • Page 627 # of maximum = 0 # of flowstate = 32000 # of lost by siganture = 0 # of lost by list = 0 This command can turn on or turn off polling buffer for the router. Vigor2133 Series User’s Guide...
  • Page 628 [off] Parameter Description It means to turn on the bridge task for improving the triple play quality. It means to turn off the bridge task. > sys britask on % bridge task is ON, now Vigor2133 Series User’s Guide...
  • Page 629 9-"M Reboot" port [port num] It means to change tr069 listen port number. cert_auth [on/off] on: turn on certificate-based authentication. off: turn off certificate-based authentication. > sys tr069 get Int. nextlevel Total number of parameter is 24 Vigor2133 Series User’s Guide...
  • Page 630 > sys sip_alg ? Usage: sys alg <command> <parameter> -e: enable ALG (0:disable, 1:enable) Current ALG status -ALG Master Switch: Disabled This command can turn on/off ALG (Application Layer Gateway) for SIP. sys sip_alg <command> <parameter> Vigor2133 Series User’s Guide...
  • Page 631 -t: enable listen along TCP path (0:disable, 1:enable) -v: show rtp and rtcp portmap information of RTSP ALG Current RTSP ALG status -ALG Master Switch: Enabled -RTSP ALG: Enabled -Listen along UDP path: Yes -Listen along TCP path: Yes -Listening Port: 85 Vigor2133 Series User’s Guide...
  • Page 632 -s – Display license status. dev_chg It means to change the device key. dev_key It means to show device key. > sys license licifno License and Signature download interface setting: licifno [AUTO/WAN#] Ex: licifno wan1 Download interface is "auto-selected" now. Vigor2133 Series User’s Guide...
  • Page 633 - 1 ~ 12 th weekday – 1 ~ 5, 9: last week day in week - 0:Sun, 1:Mon, 2:Tue, 3:Wed, 4:Thu, 5: Fri, 6:Sat hour – 0 ~ 23 e.g, sys daylightsave -z 3 1 6 14 Vigor2133 Series User’s Guide...
  • Page 634 -i <IP address> Define the IP address of the Syslog server. -d <port number> Define the port number (1 ~ 65535) as the destination port. -u <1/0> Enable (1) or disable (0) Syslog Save to USB Disk. Vigor2133 Series User’s Guide...
  • Page 635 "6 <0/1>" : Set Enable/Disable Mail Alert of the Reboot Debug Log. Reset Mail Alert Setting to factory default. Show Current Mail Alert Setting. -R <0/1> Set Mail Alert Reboot Debug Log Mode. 0: Limited Mode, 1: Unlimited Mode. Vigor2133 Series User’s Guide...
  • Page 636 > sys mailalert -v ------ Current setting for Mail Alert ------ Mail Alert: Enable SMTP Server IP Address: 172.16.3.168 SMTP Server Port: 886 Alert Mail Reciver E-maiil Address: john@draytek.com Mail Return E-mail Address: Use SSL: Disable SMTP Authentication: Disable Username for SMTP Authentication: Password for SMTP Authentication: Mail Alert for DoS Attack: Enable.
  • Page 637 68 - GMT+10:00 Vladivostok 69 - GMT+10:00 Guam, Port Moresby 70 - GMT+11:00 Magadan, Solomon Is. 71 - GMT+11:00 New Caledonia 72 - GMT+12:00 Fiji, Kamchatka, Marshall Is. 73 - GMT+12:00 Auckland, Wellington > sys time zone 8 Vigor2133 Series User’s Guide...
  • Page 638 > sys dashboard -1 1 -2 0 System Information enabled IPv4 LAN Information disabled This command is used to display current settings for sending test mail. > testmail Send out test mail Mail Alert:[Disable] SMTP_Server:[0.0.0.0] Mail to:[] Return-Path:[] Vigor2133 Series User’s Guide...
  • Page 639 ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- This command can display the information of the UPnP service. UPnP service must be enabled first. > upnp on UPNP start. > upnp service >>>>> SERVICE TABLE1 <<<<< Vigor2133 Series User’s Guide...
  • Page 640 Vigor> upnp tmpvs ****************** Temp virtual server status **************** ((0)) real_addr >>192.168.1.10<<, pseudo_addr >>172.16.3.229<< real_port >>0<<, pseudo_port >>0<< hit_portmap_index >>0<< The protocol >>TCP<< time >>0<< ((1)) real_addr >>0.0.0.0<<, pseudo_addr >>0.0.0.0<< real_port >>0<<, pseudo_port >>0<< hit_portmap_index >>0<< Vigor2133 Series User’s Guide...
  • Page 641 [Index] usb user list Parameter Description Add a new user profile. Delete an existed user profile. enable Enable a user profile. disable Disable a user profile. list Display all of the user profile. Vigor2133 Series User’s Guide...
  • Page 642 Enable (1) or disable (0) the firewall functions. > vigbrg set -v 4 -w 1 -l 1 -e 1 [WAN1] IPv4 bridge is enable. Set subnet[LAN1] This command can show whether the Vigor Bridge Function is enabled or disabled. Vigor2133 Series User’s Guide...
  • Page 643 Index MAC Address Stamp Time VLan Port This command allows you to set VLAN group. You can set four VLAN groups. Please run vlan restart command after you change any settings. vlan group id [set/set_ex] [p1/p2/p3/p4/s1/s2/s3/s4] Vigor2133 Series User’s Guide...
  • Page 644 > vlan on VLAN is Enable! This command is used to define the priority for each VLAN profile setting. vlan pri n pri_no Parameter Description It means VLAN ID number. n=VLAN ID number (from 0 to 7). Vigor2133 Series User’s Guide...
  • Page 645 Note: they are only untag for s1/s2/s3/s4, but they can join tag vlan with lan ports. Permit untagged device in P1 to access router: ON. This command is used to configure the LAN interface used by the VLAN group. vlan subnet group_id [1/2/3/4] Parameter Description Vigor2133 Series User’s Guide...
  • Page 646 It allows the incoming of untagged packets even all VLAN are tagged. unlimited off: It does not allows the incoming of untagged packets. [p1_untag] [on/off] P1_untag on: It allows the incoming of untagged packets form LAN port 1. Vigor2133 Series User’s Guide...
  • Page 647 > vlan sysvid 200 You have set system VLAN ID to range: 200 ~ 263, We recommend that you reboot the system now. > vlan sysvid show The system VLAN ID is in range: 200 ~ 263 Vigor2133 Series User’s Guide...
  • Page 648 <list index> <on/off> vpn dinset <list index> username <USERNAME> vpn dinset <list index> password <PASSWORD> vpn dinset <list index> motp <on/off> vpn dinset <list index> pin_secret <pin> <secret> vpn dinset <list index> timeout <0~9999> Vigor2133 Series User’s Guide...
  • Page 649 It means to set the LAN subnet for the VPN profile. 0:LAN1 1:LAN2 2:LAN3 3:LAN4 4:DMZ assignip <on/off> It means to enable the assignment for static IP address. on: enable off: disable. smdoe <on/off> It means to enable the function of Specify Remote Node. on: enable Vigor2133 Series User’s Guide...
  • Page 650 > vpn dinset 1 on % set profile active > vpn dinset 1 motp on % Enable Mobile OTP mode!> > vpn dinset 1 pin_secret 1234 e759bb6f0e94c7ab4fe6 > vpn dinset 1 Dial-in profile index 1 Profile Name: ??? Vigor2133 Series User’s Guide...
  • Page 651 <index> <name> l2tp_out <ip> <usr> <pwd> <nip> <nmask> Command of Dial-In vpn setup <index> <name> dialin <ip> <usr> <pwd> <key> <nip> <nmask> Parameter Description For PPTP Dial-Out <index> It means the index number of the profile. Vigor2133 Series User’s Guide...
  • Page 652 > vpn setup 1 name1 dialin 1.2.3.4 vigor 1234 abc 192.168.1.0 255.255.255.0 % Profile Change Log ... % Profile Index : 1 % Profile Name : name1 % Username : vigor % Password : 1234 % Pre-share Key : abc Vigor2133 Series User’s Guide...
  • Page 653 “ctype=t” means PPTP. “ctype=s” means IPSec. “ctype= l” means L2TP(IPSec Policy None). “ctype= l1” means L2TP(IPSec Policy Nice to Have). “ctype= l2” means L2TP(IPSec Policy Must). dialto It means Server IP/Host Name for VPN. (such as draytek.com or Vigor2133 Series User’s Guide...
  • Page 654 Type “off” means any remote IP is allowed to dial in. peerid It means the peer ID for Remote VPN Gateway. Type “draytek” means the word is used as local ID. iname It means Dial-in Username. “iname=admin” means to set username as “admin”.
  • Page 655 This command allows users to list, add or delete static routes for a certain LAN to LAN VPN profile. vpn mroute <index> list vpn mroute <index> add <network ip>/<mask> vpn mroute <index> del <network ip>/<mask> Parameter Description Vigor2133 Series User’s Guide...
  • Page 656 % Profile Name : ??? % Profile Status : Disable % Netbios Naming Packet : Pass % Call Direction : Both % Idle Timeout : 300 % PING to keep alive : off % Dial-out Settings Vigor2133 Series User’s Guide...
  • Page 657 – enable VPN remote setting. off – disable VPN remote setting. > vpn remote PPTP on Set PPTP VPN Service : On Please restart the router!! This command allows users to enable second subnet IP as VPN server IP. Vigor2133 Series User’s Guide...
  • Page 658 % Remote Dial In Profile Index [1] : % NetBios Block/Pass: [PASS] This command allows users to configure the maximum segment size (MSS) for different TCP types. vpn mss show vpn mss default vpn mss set <connection type> <TCP maximum segment size range> Vigor2133 Series User’s Guide...
  • Page 659 # of free L-Buffer=95, minimum=94, leak=1 # of free M-Buffer=529, minimum=529 leak=3 # of free S-Buffer=1199, minimum=1198, leak=1 # of free Msgid-Buffer=1024, minimum=1024 This command allows users to pass or block the multi-cast packet via VPN. Vigor2133 Series User’s Guide...
  • Page 660 This command allows users to determine if the packets passing through by NAT or not when the VPN tunnel disconnects. vpn pass2nat [on] vpn pass2nat [off] Parameter Description on/off on – the packets can pass through NAT. off – the packets cannot pass through NAT. Vigor2133 Series User’s Guide...
  • Page 661 VPN profile 1 enable, % translated LAN1 to Virtual subnet: 10.10.10.0 This command allows users to adjust the size of PPP LCP MRU. It is used for specific network. wan ppp_mru <WAN interface number> <MRU size > Vigor2133 Series User’s Guide...
  • Page 662 Static IP/DHCP (Max MSS: 1500) PPPoE(Max MSS: 1492) PPTP/L2TP(Max MSS: 1460) % wan ppp_mss <MSS size: 1000 ~ 1500> % Now: 1100 This command allows you to configure the DNS server. wan dns <wan_no> <dns_select> <ipv4_addr> Vigor2133 Series User’s Guide...
  • Page 663 This command allows you to disable wan connection. > wan enable WAN %WAN1 enabled. This command allows you to enable or disable the function of WAN forwarding. The packets are allowed to be transmitted between different WANs. wan forward [on] Vigor2133 Series User’s Guide...
  • Page 664 (for Static IP or DHCP or PPPoE mode), Router pings specified IP addresses to detect the WAN connection. wan detect <wan1> <on/off/always_on> wan detect <wan1> <off> -t <time> wan detect <wan1> <off> -i <Interval> wan detect <wan1> target <ip addr> wan detect <wan1> ttl <1-255> Vigor2133 Series User’s Guide...
  • Page 665 1 and 255. The unit is times. retry : Type a number. status It means to show the current status. > DrayTek> wan detect status WAN1: off, send time=30, Interval = 5 WAN2: off, send time=30, Interval = 5 WAN3: off, send time=30, Interval = 5...
  • Page 666 # There are 4 (?) channels including VLAN and PVC. Available channel range: 4 ~ 10. WAN interface # Type a number to indicate the WAN interface. 1=WAN1 status It means to display current bridge status. Vigor2133 Series User’s Guide...
  • Page 667 -I [Host/IP address] Specify the IPv4 target to detect. If can be an IPv4 address or domain name. Host/IP address: Type the IP address/domain name of the target. -s [mtu_size] Set the MTU size base for Discovery. Vigor2133 Series User’s Guide...
  • Page 668 [ssid1 ssid2 ssid3 ssid4] [white/black] wl acl show wl acl showmode wl acl clean Parameter Description enable [ssid1 ssid2 ssid3 It means to enable the settings for SSID1, SSID2, SSID3 and SSID4. ssid4] Vigor2133 Series User’s Guide...
  • Page 669 [number] wl config preamble [enable] wl config txburst [enable] wl config ssid [ssid_num enable ssid_name [hidden_ssid]] wl config security [SSID_NUMBER] [mode] wl config ratectl [ssid_num enable upload download ] Vigor2133 Series User’s Guide...
  • Page 670 It means to set the rate control for the specified SSID. upload download] ssid_num: Choose 1, 2, 3 or 4 to specify SSID1, SSID2, SSID3 or SSID4. enable: It means to enable the function of the rate control for the Vigor2133 Series User’s Guide...
  • Page 671 40%* more (by enabling Tx Burst). It is active only when both sides of Access Point and Station (in wireless client) invoke this function at the same time. 0: disable the function. 1: enable the function. Vigor2133 Series User’s Guide...
  • Page 672 – It means to set scanning time. Time value (2~5 second) must be added in the end. e.g., wl scan set time 5 Remove white list/block list. e.g., wl scan del wlist 001122aabbcc filter Set which filter you want. Vigor2133 Series User’s Guide...
  • Page 673 % Station Management Status: enabled > wl stamgt set 1 60 60 > wl stamgt show 1 NO. SSID BSSID Connect time Reconnect time Draytek 00:11:22:aa:bb:cc 0d:0:58:26 0d:0:0 This command allows users to activate the function of VPN isolation. Vigor2133 Series User’s Guide...
  • Page 674 QueIdx Aifsn Cwmin Cwmax Txop ACM wl wmm bss QueIdx Aifsn Cwmin Cwmax Txop ACM wl wmm ack Que0_Ack Que1_Ack Que2_Ack Que3_Ack wl wmm enable SSID0 SSID1 SSID2 SSID3 wl wmm apsd value wl wmm show Vigor2133 Series User’s Guide...
  • Page 675 > wl wmm show Enable WMM: SSID0 =1, SSID1 =0,SSID2 =1,SSID3 =0 APSD=0 QueIdx=0: APAifsn=3,APCwmin=4,APCwmax=6, APTxop=0,APACM=0 QueIdx=1: APAifsn=7,APCwmin=4,APCwmax=10, APTxop=0,APACM=0 QueIdx=2: APAifsn=1,APCwmin=3,APCwmax=4, APTxop=94,APACM=0 QueIdx=3: APAifsn=1,APCwmin=2,APCwmax=3, APTxop=47,APACM=0 QueIdx=0: BSSAifsn=3,BSSCwmin=4,BSSCwmax=10, BSSTxop=0,BSSACM=0 QueIdx=1: BSSAifsn=7,BSSCwmin=4,BSSCwmax=10, BSSTxop=0,BSSACM=0 QueIdx=2: BSSAifsn=2,BSSCwmin=3,BSSCwmax=4, BSSTxop=94,BSSACM=0 QueIdx=3: BSSAifsn=2,BSSCwmin=2,BSSCwmax=3, BSSTxop=47,BSSACM=0 AckPolicy[0]=0: AckPolicy[1]=0,AckPolicy[2]=0,AckPolicy[3]=0 Vigor2133 Series User’s Guide...
  • Page 676 The value you can type is 0 (for mixed mode) and 1 (for green field). > wl ht bw value 1 BW=0 <Note> Please restart wireless after you set new parameters. > wl restart Wireless restart....Vigor2133 Series User’s Guide...
  • Page 677 It means to enable or disable the AP function. Value: 1 – enable the function. 0 – disable the function. hello [value] It means to send hello message to remote end (peer). Value: 1 – enable the function. Vigor2133 Series User’s Guide...
  • Page 678 This command is used to configure parameters related to wireless RF hardware. At present, it is not allowed for end user to operate. This command allows you to configure the external or internal server used by Vigor router for wireless authentication. wl set8021x –t [0/1] wl set8021x –v Vigor2133 Series User’s Guide...
  • Page 679 > wl artfns enable 1 > wl artfns trg_num 3 > wl artfns show airtime fairness: enable trg_num: 3 > This command allows the user to configure wireless (5GHz) access control settings. wl dual acl enable [ssid1 ssid2 ssid3 ssid4] Vigor2133 Series User’s Guide...
  • Page 680 Set Done !! > wl_acl show ----------Enable Mac Address Filter--------- ssid1: dis ssid2: dis ssid3: dis ssid4: dis ----------MAC Address Filter---------- Index Attribute MAC Address Associated SSIDs 00:50:70:ff:12:80 ssid1 ssid2 s: Isolate the station from LAN Vigor2133 Series User’s Guide...
  • Page 681 [number] wl_dual config channel show wl_dual config preamble [enable] wl_dual config preamble show wl_dual config ssid [ssid_num enable ssid_name] wl_dual config ssid hide [ssid_num enable] wl_dual config ssid show wl_dual config ratectl [ssid_num enable upload download] Vigor2133 Series User’s Guide...
  • Page 682 It means to configure the rate control for data download. The unit is kbps. (example: wl dual config ratectl 1 1 25 25) ratectl show It means to display the data transmission rate (upload and download) for SSID1, SSID2, SSID3 and SSID4. Vigor2133 Series User’s Guide...
  • Page 683 DrayTek_5G_Guest This command allows you to restart wireless setting (5GHz). > wl_dual restart 5G wireless restart....This command allows users to configure security settings for the wireless connection (5GHz). wl_dual security[SSID_NUMBER] [mode][key][index] wl_dual security show Vigor2133 Series User’s Guide...
  • Page 684 This command is used to display the wireless station which accessing Internet via Vigor2120. wl dual stalist > wl_dual stalist 5G Wireless Station List : Index Status IP Address MAC Address Associated with Status Codes : Vigor2133 Series User’s Guide...
  • Page 685 12345678 ap [value] It means to enable or disable the AP function. Value: 1 – enable the function. 0 – disable the function. hello [value] It means to send hello message to remote end (peer). Vigor2133 Series User’s Guide...
  • Page 686 > wl_dual wds wep 12345 % <Note> Please restart router after you set the parameters. This command allows users to configure WPS for wireless connection (5GHz). wl_dual wps enable [value] wl dual wps pbc wl_dual wps pin [code] Vigor2133 Series User’s Guide...
  • Page 687 [key] – WPA Mixed Pre-shared Key will be used. Keys must start with 0x to be identified as a Hexadecimal number key. WPA keys must be in 8~63 ASCII string or 64 Hexadecimal digit format. Vigor2133 Series User’s Guide...
  • Page 688 Display current status (enable or disable) and triggering client number for airtime fairness function. status Display whether the function of airtime fairness is enabled or disabled. > wl_dual artfns show airtime fairness for 5G: disable trg_num: 2 > wl_dual artfns status Vigor2133 Series User’s Guide...
  • Page 689 Idx - Specify the index number of client profiles. show Display the status of RADIUS server. enable_dot1x [0/1] Enable (1) or disable (0) the 802.1X Authentication function of RADIUS Server. Default is disabled. set_dot1x_phase1 Set the phase1 method for 802.1X authentication of RADIUS server. Vigor2133 Series User’s Guide...
  • Page 690 Internet through the use of the WoL packet. ip address - It means the WAN IP address. mask - It means the mask of the IP address. > wol fromWan on > wol fromWan_Setting 1 192.168.1.45 255.255.255.0 > Vigor2133 Series User’s Guide...
  • Page 691 -u user [user name] Unblock specifies user or IP address. -u ip [ ip address] user name – type the user name that you want to unblock. ip address –– type the IP address that you want to unblock. Vigor2133 Series User’s Guide...
  • Page 692 0: None 1: LDAP 2: Radius 3: TACAS e.g., -x 2 -l [Param] Set Log Type. 0:None, 1:Login, 2:Event, 3:All -p [Param] Set Pop Browser Tracking Window. 0:Disable, 1:Enable -T [Param] Set Authentication by Telnet. 0:Disable, Vigor2133 Series User’s Guide...
  • Page 693 It means to display current status of APP QoS. enable[0/1] It means to enable or disable the function of APP QoS. 0:Disable 1:Enable traceable/ untraceable The APPs are divided into traceable and untraceable based on their Vigor2133 Series User’s Guide...
  • Page 694 Show NAND Flash Bad Blocks: Block Address Partition 1020 0x07f80000 unused 1021 0x07fa0000 unused 1022 0x07fc0000 unused 1023 0x07fe0000 unused The apm command(s) is use to display, remove, discover or query the information of VigorAP registered to Vigor2133. Vigor2133 Series User’s Guide...
  • Page 695 It is used to query any VigorAP which has been registered to APM (Central AP Management) in Vigor2133. Information related to the registered AP will be send back to Vigor2133 for updating the web page of Central AP Management. > apm clear ? Clear all clients ...
  • Page 696 Parameter Description show It means to display the information related to VigorAP registered Vigor2133. clear It means to remove the information related to VigorAP registered Vigor2133. > apm cache show Name Auth ------------ -------------------- -------------------- > Vigor2133 Series User’s Guide...
  • Page 697 0 – kbps [11]Enter RSSI threshold (-200 ~ -50 dbm) > apm lbcfg set 1 1 1 32 100 200 1 1 1 0 -200 > apm lbcfg show apm LoadBalance Config : 1. Enable LoadBalance : 1 Vigor2133 Series User’s Guide...
  • Page 698 Data from AP" 2015-11-04 12:24:56", "[APM] [VigorAP900_01daa902080] Get Rogue AP Detection Data from AP Success" 2015-11-04 12:34:21", "[APM] [VigorAP900_01daa902080] Get Rogue AP Detection Data from AP" 2015-11-04 12:34:57", "[APM] [VigorAP900_01daa902080] Get Rogue AP Detection Data from AP Success" Vigor2133 Series User’s Guide...
  • Page 699 Set the backup time. n : 1 ~ 168 hours -m n Set the firmware backup mode. 1: Backup after timeout. 0: Backup after upgrade. Backup the firmware manually and immediately. > backupmode -b Do Firmware backup now!!!. Vigor2133 Series User’s Guide...
  • Page 700 Apply the Class Rule, 102 Connection Type, 122 APSD Capable, 176 Connectivity, 39 ARP Cache Table, 431 Country Code, 176 ARP Detect, 45, 47 CSM, 266 ARP Table, 95 CSV file, 388, 390 Auth Type, 122 Vigor2133 Series User’s Guide...
  • Page 701 Gateway IP Address, 48, 80, 82 DHCPv6 (Stateful), 86 General Mode, 215 DHCPv6 Server, 87 General Setup, 41 Diagnostics, 428, 429 Get Community, 316 Dial-out Triggering, 429 Green Field, 175 Digital Signature, 190, 204 Group ID, 133 Display Name, 42, 43 Vigor2133 Series User’s Guide...
  • Page 702 Mail Alert, 136 IPv4 Mask Length, 63 Mail Extender, 122 IPv6 Address, 59 Mail Service, 136 IPv6 Gateway Address, 59 Main Screen, 15 IPv6 Group, 393 Management, 295, 318 IPv6 Neighbour Table, 432 Manually ULA Prefix, 87 Vigor2133 Series User’s Guide...
  • Page 703 Password, 45, 48, 50, 54, 55 Provider Host, 121 Password Strength, 166, 303 Psec Peer Identity, 200 Path MTU Discovery, 45, 48, 50 Public IP Adderss, 40 Peer ID, 195 Public Port, 107 Physical Connection, 22 Vigor2133 Series User’s Guide...
  • Page 704 Station List, 157, 182 Self-signed, 222 Stations (STA), 156 Self-Signed Certificate, 321 Status, 372 Sensor, 420 Strict Bind, 95 Server Address, 50 Strict Security Checking, 256 Server Certificate, 222 Strict Security Firewall, 243 Server IP Address, 130 Vigor2133 Series User’s Guide...
  • Page 705 WAN IP Alias, 46, 48, 51 Unique Local Address (ULA) configuration, 87 WAN IP Network Settings, 48, 51 UPnP, 118, 131 WAN Outbound Bandwidth, 335 URL Access Control, 273 WAN Setup, 67 URL Content Filter, 245, 266 WAN Type, 64 Vigor2133 Series User’s Guide...
  • Page 706 Web Content Filter Profile, 275 Wizard Mode, 248 Web Feature, 274 WLAN Isolation, 157 Web Portal Setup, 98, 177 WLAN Profile, 374 WEP, 157, 166 WMM Capable, 175 white/black list, 167 WPA, 157, 166 Wildcard, 122 WPS, 158, 168 Vigor2133 Series User’s Guide...

This manual is also suitable for:

Vigor2133acVigor2133n

Table of Contents