Draytek Vigor2862 Series User Manual
  1. Manuals
  2. Brands
  3. Draytek Manuals
  4. Firewall
  5. Vigor2862 Series
  6. User manual

Draytek Vigor2862 Series User Manual

Vdsl2 security firewall
Hide thumbs Also See for Vigor2862 Series:
1
2
3
Table Of Contents
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
Table of Contents

Advertisement

Quick Links

Advertisement

Table of Contents
loading

Related Manuals for Draytek Vigor2862 Series

Summary of Contents for Draytek Vigor2862 Series

  • Page 2 Vigor2862 Series VDSL2 Security Firewall User’s Guide Version: 1.5 Firmware Version: V3.9.0 (For future update, please visit DrayTek web site) Date: January 18, 2019 Vigor2862 Series User’s Guide...
  • Page 3 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com. Firmware & Tools Updates  Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents. http://www.DrayTek.com...

  • Page 4: Table Of Contents

    II-1-2-1 Details Page for PPPoE in WAN1 (Physical Mode: VDSL2) ......77 II-1-2-2 Details Page for MPoA/Static or Dynamic IP in WAN1 (Physical Mode: VDSL2) 80 II-1-2-3 Details Page for PPPoE/PPPoA in WAN1 (Physical Mode: ADSL) ....84 Vigor2862 Series User’s Guide...
  • Page 5 Web User Interface ........................175 II-4-1 Port Redirection......................175 II-4-2 DMZ Host ........................179 II-4-3 Open Ports ........................182 II-4-4 Port Triggering........................ 184 II-4-5 ALG..........................186 II-5 Applications ..........................187 Web User Interface ........................189 II-5-1 Dynamic DNS ......................... 189 Vigor2862 Series User’s Guide...
  • Page 6 A-3 How to use a Public IP on LAN ............267 A-4 Introduction to Load Balance/Route Policy ..........272 II-7 LTE ............................275 Web User Interface ........................276 II-7-1 General Settings......................276 II-7-1-1 SMS Quota ................276 II-7-1-2 SMS Inbox/Outbox ..............277 Vigor2862 Series User’s Guide...
  • Page 7 IV-1-5 Phone Settings......................342 IV-1-6 Status ..........................346 IV-1-7 Diagnostics........................348 IV-1-7-1 Caller ID ................348 IV-1-7-2 Tone ..................348 Part V VPN ........................349 V-1 VPN and Remote Access ......................350 Web User Interface ........................351 Vigor2862 Series User’s Guide...
  • Page 8 A-1 How to Configure Certain Computers Accessing to Internet ......448 VI-2 Central Security Management (CSM) ..................452 Web User Interface ........................453 VI-2-1 APP Enforcement Profile ....................453 VI-2-2 APPE Signature Upgrade ..................... 455 Vigor2862 Series User’s Guide viii...
  • Page 9 VII-2-4 APP QoS........................530 Application Notes ........................532 A-1 How to Optimize the Bandwidth through QoS Technology ......532 VII-3 User Management ......................... 537 Web User Interface ........................538 VII-3-1 General Setup ......................538 VII-3-2 User Profile ........................540 Vigor2862 Series User’s Guide...
  • Page 10 VII-5-4 Log & Alert ........................599 Application Notes ........................600 A-1 CVM Application - How to manage the CPE (router) through Vigor2862 series? . 600 A-2 CVM Application - How to build the VPN between remote devices and Vigor2862 series? ..................... 604 A-3 CVM Application - How to upgrade CPE firmware through Vigor2862 series? ..

  • Page 11: Wlan Profile

    A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN Disconnection ..................681 VIII-2 USB Application ........................685 Web User Interface ........................686 VIII-2-1 USB General Settings....................686 VIII-2-2 USB User Management ....................687 Vigor2862 Series User’s Guide...
  • Page 12 XI-5 Checking If the ISP Settings are OK or Not................731 XI-6 Problems for 3G/4G Network Connection ................732 XI-7 Backing to Factory Default Setting If Necessary ..............733 XI-8 Contacting DrayTek ........................ 734 Appendix I: VLAN Applications on Vigor Router ................735 Part X Telnet Commands....................743 Accessing Telnet of Vigor2862 .......................
  • Page 13 Index ..........................962 Vigor2862 Series User’s Guide xiii...

  • Page 15: Part I Installation

    This part will introduce Vigor router and guide to install the device in hardware and software.

  • Page 17: Introduction

    Vigor2862 series is a VDSL2 router. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly, and offers several protocols (such as IPsec/PPTP/L2TP) with VPN tunnels.

  • Page 18: I-1-1 Indicators And Connectors

    (e.g., no SIM card, SIM pin error, SIM deactivated, and etc.). Blinking Slowly: LTE device is in dialing up. Quickly: The data is transmitting. The VPN tunnel is active. VPN services are disabled Blinking Traffic is passing through VPN tunnel. The DMZ function is enabled. Vigor2862 Series User’s Guide...
  • Page 19 P5 / WAN2 Connecter for local network devices or modem for accessing Internet. USB 1~2 Connecter for a USB device (for 3G/4G USB Modem or printer or thermometer). Connecter for a power adapter. Power Switch. ON/OFF Vigor2862 Series User’s Guide...

  • Page 20: I-1-1-2 Vigor2862N/Vigor2862Ac/Vigor2862Bn/ Vigor2862Ln / Vigor2862Lac

    The Web Content Filter is active. (It is enabled from Firewall >> General Setup). WCF is disabled. LTE device is connected and ready for use. LTE device is not detected, or has serious problem (e.g., no SIM card, SIM pin error, SIM deactivated, and etc.). Vigor2862 Series User’s Guide...
  • Page 21 The port is connected with 10/100Mbps Left The port is connected. P5 / The port is disconnected. WAN2 Blinking The data is transmitting. Right The port is connected with 1000Mbps. The port is connected with 10/100Mbps Vigor2862 Series User’s Guide...
  • Page 22 DSL / DSL 1/2 Connecter for accessing the Internet. LAN P1~P4 Connecters for local network devices. P5 / WAN2 Connecter for local network devices or modem for accessing Internet. Connecter for a power adapter. ON/OFF Power Switch. Vigor2862 Series User’s Guide...

  • Page 23: I-1-1-3 Vigor2862Vac

    The port is connected with 10/100Mbps Left The port is connected. P5 / The port is disconnected. WAN2 Blinking The data is transmitting. Right The port is connected with 1000Mbps. The port is connected with 10/100Mbps Vigor2862 Series User’s Guide...
  • Page 24 Internet. USB 1~2 Connecter for a USB device (for 3G/4G USB Modem or printer or thermometer). Phone 1/2 Connecter for analog phone(s). Line Connector for PSTN life line. Connecter for a power adapter. ON/OFF Power Switch. Vigor2862 Series User’s Guide...

  • Page 25: I-1-2 Notes For Antenna Installation (For "L" Model)

    Please install them as shown below. Major Signal Transmitted Hole SIM Card Slot Extension Base Note, if only one antenna shall be installed, please use the mounting hole (major signal transmitted hole) near to the SIM card slot. Vigor2862 Series User’s Guide...
  • Page 26 Wrong installation might cause bad signal of wireless connection. Therefore, pay attention to the installation of antennas by referring to the following illustration. SMA jack for LTE Antenna (with extension base) SMA jack for WLAN Antenna Vigor2862 Series User’s Guide...

  • Page 27: Hardware Installation

    Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. (For the hardware connection, we take “ac” model as an example.) Vigor2862 Series User’s Guide...

  • Page 28: I-2-2 Wall-Mounted Installation

    Fit screws into the wall using the appropriate type of wall plug. Info The recommended drill diameter shall be 6.5mm (1/4”). When you finished about procedure, the router has been mounted on the wall firmly. Vigor2862 Series User’s Guide...

  • Page 29: I-2-3 Installing Usb Printer To Vigor Router

    You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
  • Page 30 A dialog will appear. Click Add a local printer and click Next. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next. Vigor2862 Series User’s Guide...
  • Page 31 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next. Click Standard and choose Generic Network Card. Vigor2862 Series User’s Guide...
  • Page 32 Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. Type a name for the chosen printer. Click Next. Vigor2862 Series User’s Guide...
  • Page 33 10. Choose Do not share this printer and click Next. 11. Then, in the following dialog, click Finish. Vigor2862 Series User’s Guide...
  • Page 34 12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties. 13. Edit the property of the new printer you have added by clicking Configure Port. Vigor2862 Series User’s Guide...
  • Page 35 The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Info Some printers with the fax/scanning or other additional functions are not supported. Vigor router supports printing request from computers via LAN ports but not WAN port. Vigor2862 Series User’s Guide...

  • Page 36: Accessing Web Page

    Please type “admin/admin” as the Username/Password and click Login. Info If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Vigor2862 Series User’s Guide...
  • Page 37 The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor2862 Series User’s Guide...

  • Page 38: Changing Password

    Enter the login password (the default is “admin”) on the field of Old Password. Type New Password and Confirm Password. Then click OK to continue. Info The maximum length of the password you can set is 23 characters. Vigor2862 Series User’s Guide...
  • Page 39 Now, the password has been changed. Next time, use the new password to access the Web user interface for this router. Info Even the password is changed, the Username for logging onto the web user interface is still “admin”. Vigor2862 Series User’s Guide...

  • Page 40: Dashboard

    IPv6 Internet Access, Interface (physical connection), Security and Quick Access. Click Dashboard from the main menu on the left side of the main page. A web page with default selections will be displayed on the screen. Refer to the following figure: Vigor2862 Series User’s Guide...

  • Page 41: I-5-1 Virtual Panel

    LAN port is disconnected. 1 ~ 4 Green LAN port is connected at 10/100 Mbps. Orange LAN port is connected at 1 Gbps. For detailed information about the LED display, refer to I-1-1 LED Indicators and Connectors. Vigor2862 Series User’s Guide...

  • Page 42: I-5-2 Name With A Link

    A name with a link (e.g., Router Name, Current Time, WAN1~4 and etc.) below means you can click it to open the configuration page for modification. Vigor2862 Series User’s Guide...

  • Page 43: I-5-3 Quick Access For Common Used Menu

    In addition, quick access for VPN security settings such as Remote Dial-in User and LAN to LAN are located on the bottom of this page. Scroll down the page to find them and use them if required. Vigor2862 Series User’s Guide...

  • Page 44: I-5-4 Gui Map

    All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions. Vigor2862 Series User’s Guide...

  • Page 45: I-5-5 Web Console

    The functions/settings modified under Web Console also can be reviewed on the web user interface. Click the Web Console icon on the top of the main screen to open the following screen. Vigor2862 Series User’s Guide...

  • Page 46: I-5-6 Config Backup

    There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup. Click this icon to exit the web user interface. Vigor2862 Series User’s Guide...

  • Page 47: I-5-8 Online Status

    Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. Vigor2862 Series User’s Guide...
  • Page 48 TX Rate - Displays the speed of transmitted octets at the WAN interface. RX Packets - Displays the total number of received packets at the WAN interface. RX Rate - Displays the speed of received octets at the WAN Vigor2862 Series User’s Guide...

  • Page 49: I-5-8-2 Virtual Wan

    Internet. Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list the purpose of such WAN connection. Vigor2862 Series User’s Guide...

  • Page 50: Quick Start Wizard

    WAN1; if Ethernet interface is used, please choose WAN2; if 3G USB modem is used, please choose WAN3 or WAN4. Then click Next for next step. WAN1, WAN2, WAN3 and WAN4 will bring up different configuration page. Refer to the following for detailed information. Vigor2862 Series User’s Guide...

  • Page 51: I-6-1 For Wan1 (Adsl/Vdsl2)

    ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. In addition, the field of For ADSL Only will be available only when ADSL is detected. Then click Next for next step. Vigor2862 Series User’s Guide...
  • Page 52 Type the subnet mask. Default Gateway Type the IP address as the default gateway. Primary DNS Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Vigor2862 Series User’s Guide...
  • Page 53 Note: The maximum length of the password you can set is 62 characters. Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2862 Series User’s Guide...
  • Page 54 After finished the above settings, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2862 Series User’s Guide...
  • Page 55 Type the IP address if Fixed IP is enabled. Subnet Mask Type the subnet mask. Default Gateway Type the IP address as the default gateway. Primary DNS Type in the primary IP address for the router. Vigor2862 Series User’s Guide...
  • Page 56 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2862 Series User’s Guide...

  • Page 57: I-6-2 For Wan2 (Ethernet)/(Wireless 2.4G)

    On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Vigor2862 Series User’s Guide...
  • Page 58 Note: The maximum length of the user name you can set is 63 characters. Password Assign a valid password provided by the ISP. Note: The maximum length of the password you can set is 62 characters. Vigor2862 Series User’s Guide...
  • Page 59 Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2862 Series User’s Guide...
  • Page 60 Assign a specific valid user name provided by the ISP. Note: The maximum length of the user name you can set is 63 characters. Password Assign a valid password provided by the ISP. Note: The maximum length of the password you can set is 62 Vigor2862 Series User’s Guide...
  • Page 61 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2862 Series User’s Guide...
  • Page 62 Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Vigor2862 Series User’s Guide...
  • Page 63 Choose WAN2 as the WAN Interface and choose Ethernet as the Physical Mode. Click the Next button. The following page will be open for you to specify Internet Access Type. Click DHCP as the Internet Access type. Simply click Next to continue. Vigor2862 Series User’s Guide...
  • Page 64 Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. After finished the settings above, click Next for viewing summary of such connection. Vigor2862 Series User’s Guide...
  • Page 65 Click the Next button. The following page will be open for you to specify Internet Access Type. Click Static IP as the Internet Access Type. Simply click Next to continue. Available settings are explained as follows: Item Description WAN IP Type the IP address. Vigor2862 Series User’s Guide...
  • Page 66 WPA2 client and the encryption key should be entered in PSK. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2862 Series User’s Guide...
  • Page 67 Click the AP Discovery button to choose your Wireless AP. You can also set the Wireless AP information directly and skip the next 2 steps. Click the Scan button of the popup window and wait for a few seconds. Select your Wireless AP and click the Add to button. Vigor2862 Series User’s Guide...
  • Page 68 Pass Phrase. Then click Next for next step. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2862 Series User’s Guide...
  • Page 69 Wireless LAN (2.4GHz) would be also modified. Security Mode The mode to connect to the Wireless AP. Disable – The Router connects to the wireless AP  Vigor2862 Series User’s Guide...
  • Page 70 Click the AP Discovery button to choose your Wireless AP. You can also set the Wireless AP information directly and skip the next 2 steps. Click the Scan button of the popup window and wait for a few seconds. Vigor2862 Series User’s Guide...
  • Page 71 Pass Phrase. Then click Next for next step. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2862 Series User’s Guide...

  • Page 72: I-6-3 For Wan3/Wan4 (Usb)

    15 characters. Modem Initial String – Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of Vigor2862 Series User’s Guide...
  • Page 73 Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2862 Series User’s Guide...

  • Page 74: Service Activation Wizard

    Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
  • Page 75 DT-APPE, developed by DrayTek, offers a mechanism to upgrade APPE signature automatically. DT-DDNS, developed by DrayTek, offers one year free charge service of dynamic DNS service for internal use. Setting confirmation page will be displayed as follows, please click Activate.

  • Page 76: Registering Vigor Router

    Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login. Vigor2862 Series User’s Guide...
  • Page 77 Agreement regarding user rights carefully while creating a user account. The following page will be displayed after you logging in MyVigor. Type a nickname for the router, then click Add. When the following page appears, your router information has been added to the database. Vigor2862 Series User’s Guide...
  • Page 78 After clicking OK, you will see the following page. Your router has been registered to myvigor website successfully. Vigor2862 Series User’s Guide...

  • Page 79: Part Ii Connectivity

    PC in the local area network. DNS, LAN DNS, IGMP, LDAP, UpnP, IGMP, WOL, RADIUS, SMS, Bonjour Static Route, Load-Balance/Route Policy Vigor2862 Series User’s Guide...
  • Page 80 Vigor2862 Series User’s Guide...

  • Page 81: Wan

    Users can use LAN ports on the router to access Internet. Also, they can access Internet via 802.11(a/b/g/n/ac) wireless standard, and enjoy the powerful firewall, bandwidth management, and VPN features of Vigor2862n series. Vigor2862 Series User’s Guide...
  • Page 82 Besides, 3G/4G USB Modem in WAN3/WAN4 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G/4G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information.

  • Page 83: Web User Interface

    WAN interface as policy. It is the default setting. Sesseion Based- All of the WAN interfaces will be used (as out-going WAN) for passing through new sessions to get better transmission speed. Though good speed test result for Vigor2862 Series User’s Guide...

  • Page 84: Ii-1-1-1 Wan1(Adsl/Vdsl2)

    Vigor router will detect the physical line is connected by ADSL or VDSL2 automatically. Therefore, this page allows you to configure settings for ADSL and VDSL2 at one time. That is, it is not necessary for you to configure different profile settings for ADSL and VDSL2 respectively. Vigor2862 Series User’s Guide...
  • Page 85 Default or contact the dealer for assistance. Line Speed (Kpbs) If your choose According to Line Speed as the Load Balance Mode in previous page, please type the line speed for downloading and uploading for such WAN interface. The unit is kbps. Vigor2862 Series User’s Guide...
  • Page 86 Tag value – Type the value as the VLAN ID number. The range is form 0 to 4095. Priority – Type the packet priority number for such VLAN. The range is from 0 to 7. After finished the above settings, click OK to save the settings. Vigor2862 Series User’s Guide...

  • Page 87: Ii-1-1-2 Wan2 (Ethernet)/(Wireless 2.4G/5G)

    If your choose According to Line Speed as the Load Balance Mode, please type the line speed for downloading and uploading for such WAN interface. The unit is kbps. Active Mode Choose Always On to make the WAN2 connection being Vigor2862 Series User’s Guide...
  • Page 88 Tag value – Type the value as the VLAN ID number. The range is form 0 to 4095. Priority – Type the packet priority number for such VLAN. The range is from 0 to 7. After finished the above settings, click OK to save the settings. Vigor2862 Series User’s Guide...

  • Page 89: Ii-1-1-3 Wan3/Lte/Wan4 (Usb)

    If your choose According to Line Speed as the Load Balance Mode, please type the line speed for downloading and uploading for such WAN interface. The unit is kbps. Active Mode Choose Always On to make the WAN2 connection being Vigor2862 Series User’s Guide...
  • Page 90 WAN interface disconnects. All of the selected WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. After finished the above settings, click OK to save the settings. Vigor2862 Series User’s Guide...

  • Page 91: Ii-1-2 Internet Access

    WAN1, WAN2, WAN3 or LTE, WAN4) for Internet Access. Due to different Physical Mode for WAN interface, the Access Mode for these connections also varies. Refer to the following figures for examples. Access Mode for ADSL/VDSL2, Access Mode for Etherenet, Access Mode for LTE, Access Mode for USB, Vigor2862 Series User’s Guide...
  • Page 92 DHCP option will be seen in DHCP reply packets. Interface – Specify the WAN interface(s) that will be overwritten by such function. WAN5 ~ WAN7 can be located under WAN>>Multi-PVC/VLAN. Option Number – Type a number for such function. Vigor2862 Series User’s Guide...

  • Page 93: Ii-1-2-1 Details Page For Pppoe In Wan1 (Physical Mode: Vdsl2)

    ADSL Modem Setting It is not necessary to configure settings in these fields for modem settings are prepared for ADSL only. ISP Access Setup Enter your allocated username, password and authentication Vigor2862 Series User’s Guide...
  • Page 94 MTU reduce size by– It determines the decreasing size  of MTU value. For example, the number specified in this field is “8”. The maximum MTU size is “1500”. After clicking the “detect” button, the system will Vigor2862 Series User’s Guide...
  • Page 95 Host PC) to access into Internet. For Wireless LAN – It is available for n model. If you check this box, PCs on the same wireless network can use another set of PPPoE session (different with the Host PC) to access Vigor2862 Series User’s Guide...
  • Page 96 To use MPoA/Static or Dynamic IP as the accessing protocol of the Internet, select MPoA/Static or Dynamic IP from the WAN>>Internet Access >>WAN1 page. The following web page will appear. Available settings are explained as follows: Vigor2862 Series User’s Guide...
  • Page 97 WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. Vigor2862 Series User’s Guide...
  • Page 98 It means Max Transmit Unit for packet. Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path. Click Detect to open the following dialog. Vigor2862 Series User’s Guide...
  • Page 99 You can use Default MAC Address or specify another MAC address for your necessity. Specify a MAC Address – Type in the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor2862 Series User’s Guide...

  • Page 100: Ii-1-2-2 Details Page For Mpoa/Static Or Dynamic Ip In Wan1 (Physical Mode: Vdsl2) 80 Ii-1-2-3 Details Page For Pppoe/Pppoa In Wan1 (Physical Mode: Adsl)

    Protocol - Drop down the list to choose the one (PPPoE or PPPoA) provided by ISP. If you have already used Quick Start Wizard to set the protocol, then it is not necessary for you to change any settings in this group. Vigor2862 Series User’s Guide...
  • Page 101 It means Max Transmit Unit for packet. Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path. Click Detect to open the following dialog. Vigor2862 Series User’s Guide...
  • Page 102 WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Vigor2862 Series User’s Guide...
  • Page 103 MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor2862 Series User’s Guide...
  • Page 104 Multi-PVC channel - The selections displayed here are determined by the page of Internet Access >>Multi PVCs. Select M-PVCs Channel means no selection will be chosen. Encapsulation - Drop down the list to choose the type Vigor2862 Series User’s Guide...
  • Page 105 WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. Vigor2862 Series User’s Guide...
  • Page 106 It means Max Transmit Unit for packet. Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path. Click Detect to open the following dialog. Vigor2862 Series User’s Guide...
  • Page 107 You can use Default MAC Address or specify another MAC address for your necessity. Specify a MAC Address – Type in the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor2862 Series User’s Guide...

  • Page 108: Ii-1-2-4 Details Page For Mpoa/Static Or Dynamic Ip In Wan1 (Physical Mode: Adsl) .88 Ii-1-2-5 Details Page For Pppoe In Wan2 (Physical Mode: Ethernet)

    Such function allows you to verify whether network WAN Connection connection is alive or not through ARP Detect or Ping Detect. Detection Mode – Choose ARP Detect or Ping Detect for the system to Vigor2862 Series User’s Guide...
  • Page 109 ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. Vigor2862 Series User’s Guide...

  • Page 110: Ii-1-2-6 Details Page For Static Or Dynamic Ip In Wan2 (Physical Mode: Ethernet)

    If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. To use Static or Dynamic IP as the accessing protocol of the internet, please click the Static or Dynamic IP tab. The following web page will be shown. Vigor2862 Series User’s Guide...
  • Page 111 Enable DHCP Client Identifier: Check the box to specify username and password as the DHCP client identifier for some ISP.  Username: Type a name as username. The maximum length of the user name you can set is Vigor2862 Series User’s Guide...
  • Page 112 Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path. Click Detect to open the following dialog.  Path MTU to – Type the IP address as the specific transmit path. Vigor2862 Series User’s Guide...
  • Page 113 MAC address for access authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. After finishing all the settings here, please click OK to activate them. Vigor2862 Series User’s Guide...

  • Page 114: Ii-1-2-7 Details Page For Pptp/L2Tp In Wan2 (Physical Mode: Ethernet)

    It means Max Transmit Unit for packet. Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit Vigor2862 Series User’s Guide...
  • Page 115 Specify an IP address – Click this radio button to specify some data.  IP Address – Type the IP address.  Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2862 Series User’s Guide...

  • Page 116: Ii-1-2-8 Details Page For Static Or Dynamic Ip In Wan2 (Physical Mode: Wireless 2.4G)

    Gateway IP Address - Type the gateway IP address. WAN Connection Such function allows you to verify whether network Detection connection is alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect, Ping Detect or Always On for Vigor2862 Series User’s Guide...
  • Page 117 ABCDEFGHIJKLM (or 26 hexadecimal digits leading by 0x, such as 0x4142434445464748494A4B4C4D). WEP keys – Four keys can be entered here, but only one  key can be selected at a time. The keys can be entered Vigor2862 Series User’s Guide...

  • Page 118: Ii-1-2-9 Details Page For 3G/4G Usb Modem (Ppp Mode) In Wan3/Wan4

    Internet Access from WAN menu. Then, select 3G/4G USB Modem (PPP mode) for WAN3. The following web page will be shown. Available settings are explained as follows: Item Description Modem Support List It lists all of the modems supported by such router. Vigor2862 Series User’s Guide...
  • Page 119 Applications >> Schedule setup. The default setting of this field is blank and the function will always work. WAN Connection Such function allows you to verify whether network Detection connection is alive or not through PPP Detect or Ping Detect. Vigor2862 Series User’s Guide...

  • Page 120: Ii-1-2-10 Details Page For 3G/4G Usb Modem (Dhcp Mode) In Wan3/Wan4

    To use 3G/4G USB Modem (DHCP mode) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select 3G/4G USB Modem (DHCP mode) for WAN3/WAN4. The following web page will be shown. Available settings are explained as follows: Item Description Vigor2862 Series User’s Guide...
  • Page 121 Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always Vigor2862 Series User’s Guide...

  • Page 122: Ii-1-2-11 Details Page For 3G/4G Usb Modem (Dhcp Mode) In Lte Wan

    To use 3G/4G USB Modem (DHCP mode) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select 3G/4G USB Modem (DHCP mode) for LTE. The following web page will be shown. Vigor2862 Series User’s Guide...
  • Page 123 ISPs will drop connections if there is no traffic within certain periods of time. Check Enable PING to keep alive box to activate this function. Enable PING to Keep alive – If you enable the PING function, Vigor2862 Series User’s Guide...
  • Page 124 Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path. Click Choose IP to open the following dialog.  Path MTU to – Type the IP address as the specific transmit path. Vigor2862 Series User’s Guide...

  • Page 125: Ii-1-2-12 Details Page For Ipv6 - Offline In Wan1/Wan2/Wan3/Wan4

    62 characters. After finishing all the settings here, please click OK to activate them. – – When Offline is selected, the IPv6 connection will be disabled. – – Available settings are explained as follows: Item Description Vigor2862 Series User’s Guide...

  • Page 126: Ii-1-2-14 Details Page For Ipv6 - Tspc In Wan1/Wan2/Wan3/Wan4

    After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet. Vigor2862 Series User’s Guide...
  • Page 127 IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Vigor2862 Series User’s Guide...

  • Page 128: Ii-1-2-15 Details Page For Ipv6 - Aiccu In Wan1/Wan2/Wan3/Wan4

    The maximum length of the prefix you can set is 128 characters. WAN Connection Such function allows you to verify whether network Detection connection is alive or not through Ping Detect. Mode – Choose Always On or Ping Detect for the system to Vigor2862 Series User’s Guide...

  • Page 129: Ii-1-2-16 Details Page For Ipv6 - Dhcpv6 Client In Wan1/Wan2

    ID, realm and secret information specified in these fields. Key ID – Type a value (range from 1 to 65535) which will be used to generate HMAC-MD5 value. Vigor2862 Series User’s Guide...

  • Page 130: Ii-1-2-17 Details Page For Ipv6 - Static Ipv6 In Wan1/Wan2

    Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface. After finished the above settings, click OK to save the settings. – – This type allows you to setup static IPv6 address for WAN interface. Vigor2862 Series User’s Guide...
  • Page 131 Ping Detect. Mode – Choose Always On or Ping Detect for the system to execute for WAN detection. Always On means no detection will be executed. The network connection will be on always. Vigor2862 Series User’s Guide...

  • Page 132: Ii-1-2-18 Details Page For Ipv6 - 6In4 Static Tunnel In Wan1/Wan2

    However, 6in4 offers a prefix outside of 2002::0/16. So, you can use a fixed endpoint rather than anycast endpoint. The mode has more reliability. Available settings are explained as follows: Item Description Remote Endpoint IPv4 Type the static IPv4 address for the remote server. Vigor2862 Series User’s Guide...
  • Page 133 TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode. Vigor2862 Series User’s Guide...

  • Page 134: Ii-1-2-19 Details Page For Ipv6 - 6Rd In Wan1/Wan2

    CE IPv4 addresses within a given 6rd domain. It may be any value between 0 and 32. 6rd Prefix Type the 6rd IPv6 address. 6rd Prefix Length Type the IPv6 prefix length for the 6rd IPv6 prefix in number of bits. Vigor2862 Series User’s Guide...
  • Page 135 TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode. Vigor2862 Series User’s Guide...

  • Page 136: Ii-1-3 Multi-Pvc/Vlan

    Channel Display the number of each channel. Channels 5 ~ 10 are configurable. Enable Display whether the settings in this channel are enabled (Yes) or not (No). To configure a PVC channel, click its channel number. Vigor2862 Series User’s Guide...
  • Page 137 VPI - (Available when WAN Type is ADSL) Virtual Path Identifier. Contact your ISP or carrier for the appropriate value. VCI - (Available when WAN Type is ADSL) Virtual Channel Identifier. Contact your ISP or carrier for the appropriate Vigor2862 Series User’s Guide...
  • Page 138  ARP Detect - The router broadcasts an ARP request every 5 seconds. If no response is received within 30 seconds, the WAN connection is deemed to have failed. Vigor2862 Series User’s Guide...
  • Page 139 No - Virtual WAN IP address will be assigned by the ISP’s PPPoE/PPPoA server. MPoA Obtain an IP address automatically – Select this option if the router is to receive IP configuration information from a DHCP Vigor2862 Series User’s Guide...
  • Page 140 Static IP mode. If necessary, type in secondary IP address for necessity in the future. After finished the above settings, click OK to save the settings and return to previous page. Vigor2862 Series User’s Guide...
  • Page 141 Protocol - (Available when WAN Type is ADSL) Access protocol used for the ADSL connection. Contact your ISP or carrier for the appropriate setting.  PPPoA: Point-to-Point over ATM.  PPPoE: Point-to-Point over Ethernet.  MPoA: Multiprotocol over ATM. Vigor2862 Series User’s Guide...
  • Page 142 After finished the above settings, click OK to save the settings. Such configuration is applied to upstream packets. Such information will be provided by ISP. Please contact with your ISP for detailed information. Vigor2862 Series User’s Guide...
  • Page 143 If you wish to have this PVC channel use the same ADSL connection settings of another PVC channel, select that channel from the dropdown box. After finished the above settings, click OK to save the settings. Vigor2862 Series User’s Guide...

  • Page 144: Ii-1-4 Wan Budget

    Actions to be taken once the quota is reached. Shutdown – WAN will be disabled. Mail Alert – Email will be sent to the administrator. Time cycle Reset frequency of the usage data. Monthly – The Monthly option in the Criterion and Action Vigor2862 Series User’s Guide...
  • Page 145 Some ISP might apply for the network limitation based on the traffic limit per month. This setting is to offer a mechanism of resetting the traffic record every month. Data quota resets on day … – You can determine the starting day in one month. Vigor2862 Series User’s Guide...
  • Page 146 Vigor router will reset the traffic record. For example, “3” means the third day of the cycle duration. After finished the above settings, click OK to save the settings. Vigor2862 Series User’s Guide...

  • Page 147: Ii-1-4-2 Status

    Which means no data transmission will be carried out. Moreover, the system will send out a warning message to the administrator if Mail Alert is selected. Or, the system will send out SMS message to the administrator if SMS message is selected. Vigor2862 Series User’s Guide...

  • Page 148: Application Notes

    (STB), directly to the service provider via a specific LAN port; the other is opening a virtual WAN interface and doing NAT for the application. Go to WAN >> Multi-PVC/VLAN, click on a channel to configure. Vigor2862 Series User’s Guide...
  • Page 149 STB. Click OK to save the configuration, the configuration will be displayed on the main page. And now you may connect the STB to the Bridged port to use the IPTV service. Vigor2862 Series User’s Guide...
  • Page 150 Go to WAN >> Multi-PVC/VLAN, click on channel 5, 6 or 7 to configure. Vigor2862 Series User’s Guide...
  • Page 151 Click OK to save the profile and reboot the router to apply the settings. After the router restart, go to Online Status >> Virtual WAN to make sure the WAN interface is up and has obtained an IP address. Vigor2862 Series User’s Guide...
  • Page 152 Now, you may use the virtual WAN interface for applications such as IGMP Proxy, this can be done by selecting the WAN interface as "PVC/VLAN". Vigor2862 Series User’s Guide...

  • Page 153: Load Balancing And Failover For Multi-Wan Vigor Routers

    The default load balance weight is determined based on the peak bandwidth detected on each WAN interface, but Network Administrator may also use "According to Line Speed Mode" to define the maximum bandwidth which will affect the weight (click here to learn more). Vigor2862 Series User’s Guide...
  • Page 154 Failover Mode, set Active Mode to "Failover", and for Active When, choose the conditions about when should this interface be activated. Info Router determines if a WAN is disconnected or not according to "WAN Connection Detection" settings in WAN >> Internet Access. Vigor2862 Series User’s Guide...

  • Page 155: How To Configure Ipv6 On Wan Interface

    2. Go to WAN >> Internet Access, click on IPv6 of the WAN interface that you would like to configure an IPv6 address. 3. Select a Connection Type from the drop-down list, enter the required parameters. Then click OK and reboot the router to apply the settings. Vigor2862 Series User’s Guide...
  • Page 156 5. Furthermore, Network Administrator may test the connectivity of IPv6 from the router by going to Diagnostics >> Ping Diagnosis and selecting "IPv6". Below we will provide some examples of configuring IPv6 with different connection types. Vigor2862 Series User’s Guide...
  • Page 157 Set Connection Type to TSPC. Enter the Username and Password registered at the TSP server. Enter the IP or Domain Name of the TSPC server for Tunnel Broker. Vigor2862 Series User’s Guide...
  • Page 158 Set Connection Type to Static IPv6. Enter the IPv6 address and Prefix Length which provided by the ISP, and click Add. You should see the IPv6 address in Current IPv6 Address Table. Then, specify the IP address of IPv6 Gateway. Vigor2862 Series User’s Guide...
  • Page 159 Set Connection Type to 6in4 Static Tunnel. Enter the tunnel server's IPv4 address in Remote Endpoint IPv4 Address. Enter the router's IPv6 address in 6in4 IPv6 Address. Enter the routed IPv6 prefix in LAN Routed Prefix. Vigor2862 Series User’s Guide...

  • Page 160: Lan

    IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2862 Series User’s Guide...
  • Page 161 You can group local hosts by physical ports and create up to 8 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2862 Series User’s Guide...

  • Page 162: Web User Interface

    (LAN1 – LAN8). In addition, different subnets can link for each other by configuring Inter-LAN Routing. At present, LAN1 setting is fixed with NAT mode only. LAN2 – LAN8 can be operated under NAT or Route mode. IP Routed Subnet can be operated under Route mode. Vigor2862 Series User’s Guide...
  • Page 163 IPv6 – Click it to access into the settings page of IPv6. DHCP Server Option DHCP packets can be processed by adding option number and data information when such function is enabled. Vigor2862 Series User’s Guide...

  • Page 164: Ii-2-1-1 Details Page For Lan1 - Ethernet Tcp/Ip And Dhcp Setup

    IPv6 Setup. Click the tab for each type and refer to the following explanations for detailed information. Available settings are explained as follows: Item Description Network Configuration For NAT Usage, IP Address - This is the IP address of the router. (Default: 192.168.1.1). Vigor2862 Series User’s Guide...
  • Page 165 LAN that relays all traffic coming into and going out of the LAN. The gateway is normally the router, and therefore the Gateway IP Address should be identical to the IP Address in the Vigor2862 Series User’s Guide...
  • Page 166 Private IP addresses can be assigned automatically to LAN clients using Dynamic Host Configuration Protocol (DHCP), or manually assigned. The DHCP server can either be the router (the most common case), or a separate server, that hands out IP addresses to DHCP clients. Vigor2862 Series User’s Guide...
  • Page 167 192.168.1.10 as the Start IP Address, 50 as the IP Pool Counts (enough for the current number of DHCP clients, plus room for future expansion), and use addresses greater than 192.168.1.100 for static assignment. Vigor2862 Series User’s Guide...

  • Page 168: Ii-2-1-2 Details Page For Lan2 ~ Lan8 And Dmz

    LAN that relays all traffic coming into and going out of the LAN. The gateway is normally the router, and therefore the Gateway IP Address should be identical to the IP Address in the Vigor2862 Series User’s Guide...
  • Page 169 Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. When you finish the configuration, please click OK to save and exit this page. Vigor2862 Series User’s Guide...

  • Page 170: Ii-2-1-3 Details Page For Ip Routed Subnet

    DHCP server to assign IP addresses to. The default is 50 and the maximum is 253. Lease Time - Enter the time to determine how long the IP address assigned by DHCP server can be used. Vigor2862 Series User’s Guide...
  • Page 171 Edit – Click it to edit the selected MAC address. Cancel – Click it to cancel the job of adding, deleting and editing. When you finish the configuration, please click OK to save and exit this page. Vigor2862 Series User’s Guide...

  • Page 172: Ii-2-1-4 Details Page For Lan Ipv6 Setup

    Check the box to enable the configuration of LAN 1 IPv6 Setup. WAN Primary Interface Use the drop down list to specify a WAN interface for IPv6. Static IPv6 Address IPv6 Address –Type static IPv6 address for LAN. Vigor2862 Series User’s Guide...
  • Page 173 Start/End IPv6 address configuration. Disable Server –Click it to disable DHCPv6 server. Auto IPv6 range – After check the box, Vigor router will assign the IPv6 range automatically. Start IPv6 Address / End IPv6 Address –Type the start and Vigor2862 Series User’s Guide...
  • Page 174 Default Preference – It determines the priority of the host behind the router when RA (Router Advertisement) packets are transmitted. MTU – It means Max Transmit Unit for packet. If Auto is Vigor2862 Series User’s Guide...

  • Page 175: Ii-2-1-5 Advanced Dhcp Options

    Shows all the DHCP options that have been configured in the system. Enable If selected, DHCP option entry is enabled. If unselected, DHCP option entry is disabled. Interface LAN interface(s) to which this entry is applicable. Vigor2862 Series User’s Guide...
  • Page 176 After making all necessary changes, click Update to save the changes. To delete a DHCP option entry, click on it in Customized List, and then click Delete. Vigor2862 Series User’s Guide...

  • Page 177: Ii-2-2 Vlan

    The multi-subnet can let a small businesses have much better isolation for multi-occupancy applications. Go to LAN page and select VLAN. The following page will appear. Click Enable to invoke VLAN function. Below is an example page in Vigor2862ac: Vigor2862 Series User’s Guide...
  • Page 178 VLAN functionality, you will still be able to access the router via the Web UI, and telnet and SSH shells to adjust the configuration. Info Leave one VLAN untagged at least to prevent from not connecting to Vigor router due to unexpected error. Vigor2862 Series User’s Guide...
  • Page 179 2 intersecting LANs can communicate with each other. Vigor2862 series features a hugely flexible VLAN system. In its simplest form, each of the Gigabit LAN ports can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated.
  • Page 180 Click OK. Open LAN>>General Setup. If you want to let the clients in both groups communicate with each other, simply activate Inter-LAN Routing by checking the box between LAN1 and LAN2. Vigor2862 Series User’s Guide...
  • Page 181 (isolated) or common (able to communicate with each other). This is ideal for departmental or multi-occupancy applications. Info As for the VLAN applications, refer to “Appendix I: VLAN Application on Vigor Router” for more detailed information. Vigor2862 Series User’s Guide...

  • Page 182: Ii-2-3 Bind Ip To Mac

    Strict Bind Check the box to block the connection of the IP/MAC which is not listed in IP Bind List. LAN clients will be assigned IP addresses according to the Vigor2862 Series User’s Guide...
  • Page 183 It displays a list for the IP bind to MAC information. Backup IP Bind List Click Backup and enter a filename to back up IP Bind List to a file. Upload From File Click Browse… to select an IP Bind List backup file. Click Vigor2862 Series User’s Guide...
  • Page 184 PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. Vigor2862 Series User’s Guide...

  • Page 185: Ii-2-4 Lan Port Mirror

    Port(s) whose outbound traffic will be forwarded to the mirror port. Mirrored Rx Port Port(s) whose inbound traffic will be forwarded to the mirror port. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 186: Ii-2-5 Wired 802.1X

    Local 802.1X service is enabled for the profiles. 802.1X ports 802.1X authentication will be available for the selected LAN ports. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 187: Hardware Acceleration

    Hardware Acceleration is also called PPA in DrayTek for it is based on Protocol Processing Engine (PPE) of Infineon. It can only support 128 sessions for network traffic (IN & OUT) with implementing three kinds of modes - Disable, Auto and Manual.
  • Page 188 IP address from the pop-up window. Checking the PPA status For checking whether the rule of PPA is working or not, a user can login to Vigor2862 series by using telnet. User can view how many sessions are transferring in each direction of PPA table after entering “ppa –v”.
  • Page 189 Vigor2862 Series User’s Guide...

  • Page 190: Nat

    Usually we use the 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Vigor2862 Series User’s Guide...

  • Page 191: Web User Interface

    The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 40 port-mapping entries for the internal hosts. Vigor2862 Series User’s Guide...
  • Page 192 Source IP Display the IP object of the source IP. Private IP Display the IP address of the internal host providing the service. Press any number under Index to access into next page for configuring port redirection. Vigor2862 Series User’s Guide...
  • Page 193 IP address in the first box (as the starting point). The second one will be assigned automatically later. Private Port Specify the private port number of the service offered by the internal host. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 194 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2862 Series User’s Guide...

  • Page 195: Ii-4-2 Dmz Host

    Click DMZ Host to open the following page. You can set different DMZ host for each WAN interface. Click the WAN tab to switch into the configuration page for that WAN. Vigor2862 Series User’s Guide...
  • Page 196 WAN1 only. See the following figure. If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN2 interface, you will find them in Aux. WAN IP for your selection. Vigor2862 Series User’s Guide...
  • Page 197 When you have selected one private IP from the above dialog, the IP address will be shown on the screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 198: Ii-4-3 Open Ports

    Display the private IP address of the local host offering the service. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2862 Series User’s Guide...
  • Page 199 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2862 Series User’s Guide...

  • Page 200: Ii-4-4 Port Triggering

    "default" durations are shown below and these duration values can be modified via telnet commands. TCP: 86400 sec. UDP: 180 sec. IGMP: 10 sec. TCP WWW: 60 sec. TCP SYN: 60 sec. Available settings are explained as follows: Vigor2862 Series User’s Guide...
  • Page 201 Click the index number link to open the configuration page. Available settings are explained as follows: Item Description Enable Check to enable this entry. Service Choose the predefined service to apply for such trigger profile. Vigor2862 Series User’s Guide...

  • Page 202: Ii-4-5 Alg

    Type a port number for SIP or RTSP protocol. Check the box to make correspond protocol message packet from TCP transmit and receive via NAT. Check the box to make correspond protocol message packet from UDP transmit and receive via NAT. Vigor2862 Series User’s Guide...

  • Page 203: Applications

    FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2862 series will respond the specified private IP address.
  • Page 204 Wake on LAN (WOL) of this router. In addition, such PC must have installed a network card supporting WOL function. By the way, WOL function must be set as “Enable” on the BIOS setting. Vigor2862 Series User’s Guide...

  • Page 205: Web User Interface

    Open Applications>>Dynamic DNS. In the DDNS setup menu, check Enable Dynamic DNS Setup. Available settings are explained as follows: Item Description Enable Dynamic DNS Check this box to enable DDNS function. Setup Vigor2862 Series User’s Guide...
  • Page 206 Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. If User-Defined is specified as the service provider, the web page will be changed slightly as follows: Vigor2862 Series User’s Guide...
  • Page 207 Type the IP address or the domain name of the host which provides related service. Note that such option is available when Customized is selected as Service Provider. Service API Type the API information obtained from DDNS server. Note that such option is available when Customized is Vigor2862 Series User’s Guide...
  • Page 208 Click OK button to activate the settings. You will see your setting has been saved. DrayDDNS, a new DDNS service developed by DrayTek, can record multiple WAN IP (IPv4) on single domain name. It is convenient for users to use and easily to set up. Each Vigor Router is available to register one domain name.
  • Page 209 2). Service Provider Choose DrayTek Global as the service provider. Wizard – This button is available when DrayTek Global is selected as Service Provider. To activate the DrayTek’s DDNS service, click it to enable license issued by DrayTek through Wizards>>Service Activation Wizard.
  • Page 210 Click the Index number you want to delete and then click Clear All button to delete the account. Vigor2862 Series User’s Guide...

  • Page 211: Ii-5-2 Lan Dns / Dns Forwarding

    FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2862 series will respond the specified private IP address.
  • Page 212 In general, one domain name maps with one IP address. If required, you can configure two IP addresses mapping with the same domain name. Add – Click it to open a dialog to type the host’s IP address. Vigor2862 Series User’s Guide...
  • Page 213 Type the domain name for such profile. DNS Server IP Address Type the IP address of the DNS server you want to use for DNS forwarding. Click OK button to save the settings. A new LAN DNS profile has been created. Vigor2862 Series User’s Guide...

  • Page 214: Ii-5-3 Dns Security

    Sometime, Vigor router might encounter packets from bogus DNS inquiry. There are two ways to reply such DNS inquiry. Drop – Discard the packets. Pass – Accept the packets and let them pass through Vigor router. Vigor2862 Series User’s Guide...

  • Page 215: Ii-5-3-2 Domain Diagnose

    DNS Server Type the IP address of the DNS Server which will diagnose the domain specified above. Diagnose Click it to perform the diagnosis for the domain. Result The diagnosed information will be displayed on such field. Vigor2862 Series User’s Guide...

  • Page 216: Ii-5-4 Schedule

    System time set Click it to acess into the time setup page (System Maintenance>>Time and Date). Set to Factory Default Clear all profiles and recover to factory settings. Enable Click the box to enable such schedule profile. Vigor2862 Series User’s Guide...
  • Page 217 Start Time (hh:mm) Specify the starting time of the schedule. Duration Time Specify the duration (or period) for the schedule. (hh:mm) End Time (hh:mm) It will be calculated automatically when Start Time and Duration Time are configured well. Vigor2862 Series User’s Guide...
  • Page 218 Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Vigor2862 Series User’s Guide...

  • Page 219: Ii-5-5 Radius/Tacacs

    Shared Secret - The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. The maximum length of the shared secret you can set Vigor2862 Series User’s Guide...

  • Page 220: Ii-5-5-2 Internal Radius

    Except for being a built-in RADIUS client, Vigor router also can be operated as a RADIUS server which performs security authentication by itself. This page is used to configure settings for internal RADIUS server. Then LAN user of Vigor router will be authenticated by Vigor router directly. Vigor2862 Series User’s Guide...
  • Page 221 Set a port number for internal RADIUS server. RADIUS Client Access List Allow to configure that clients under specified domain (IPv4 and IPv6) must be authenticated with the specified shared secret. Enable - Check to enable RADIUS client feature. Vigor2862 Series User’s Guide...
  • Page 222 Simply check this box; all of the user profiles (prepared for RADIUS server authentication) listed in Authentication List will be synchronized for local 802.1X user authentication. After finished the above settings, click OK button to save the settings. Vigor2862 Series User’s Guide...

  • Page 223: Ii-5-5-3 External Tacacs

    Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. After finished the above settings, click OK button to save the settings. Vigor2862 Series User’s Guide...

  • Page 224: Ii-5-6 Active Directory/Ldap

    Check the box to use the port number specified for SSL. Regular DN Type this setting if Regular Mode is selected as Bind Type. Regular Password Specify a password if Regular Mode is selected as Bind Type. Vigor2862 Series User’s Guide...

  • Page 225: Ii-5-6-2 Active Directory / Ldap Profiles

    LDAP server. Name Sometimes, you may forget the Distinguished Name since it’s too long. Then you may click the button to list all the account information on the AD/LDAP Server to assist you finish the setup. Vigor2862 Series User’s Guide...
  • Page 226 After finished the above settings, click OK to save and exit this page. A new profile has been created. Vigor2862 Series User’s Guide...

  • Page 227: Ii-5-7 Upnp

    Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2862 Series User’s Guide...

  • Page 228: Ii-5-8 Igmp

    IGMP Snooping Check this box to enable this function. Multicast traffic will be forwarded to ports that have members of that group. Disabling IGMP snooping will make multicast traffic treated in the same manner as broadcast traffic. Vigor2862 Series User’s Guide...

  • Page 229: Ii-5-8-2 Working Group

    Click this link to renew the working multicast group status. Group ID This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P4 It indicates the LAN port used for the multicast group. Vigor2862 Series User’s Guide...

  • Page 230: Ii-5-9 Wake On Lan

    MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2862 Series User’s Guide...

  • Page 231: Ii-5-10 Sms / Mail Alert Service

    Schedule (1-15) Type the schedule number that the SMS will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 232: Ii-5-10-2 Mail Alert

    Schedule (1-15) Type the schedule number that the notification will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 233: Ii-5-11 Bonjour

    Below shows an example for applying the bonjour feature that Vigor router can be used as the FTP server. 1. Here, we use Firefox and DNSSD to discover the service in such case. Therefore, just ensure the Bonjour client program and DNSSD for Firefox have been installed on the computer. Vigor2862 Series User’s Guide...
  • Page 234 5. Open the DNSSD page again. The available items will be changed as the follows. It means the Vigor router (based on Bonjour protocol) is ready to be used as a printer server, FTP server, SSH Server, Telnet Server, and HTTP Server. Vigor2862 Series User’s Guide...
  • Page 235 6. Now, any page or document can be printed out through Vigor router (installed with a printer). Vigor2862 Series User’s Guide...

  • Page 236: Ii-5-12 High Availability

    In a matter of seconds the system returns to normal operation. In order to set up High Availability, at least 2 DrayTek routers have to be configured in the following manner: Enable High Availability on both the primary and secondary routers.
  • Page 237 WAN settings of the primary and secondary routers are  identical. Note: When Hot-Standby is used, the wireless LAN function on secondary router will be “disabled” directlly. Clients can not connect to the secondary Vigor2862 Series User’s Guide...
  • Page 238 >> General Setup page) have higher priority. Authentication Key Enter an authentication key up to 31 characters long. This is used to encrypt the DARP (DrayTek Address Redundancy Protocol) traffic to guard against malicious attacks. Protocol Select the IP protocol to be used for DARP.

  • Page 239: Ii-5-12-2 Config Sync

    When you finish the configuration, please click OK to save and exit this page. When the configuration method is set to “Hot Standby”, the following settings will not be synchronized: WAN (user selectable)   LAN IPv6  router name  admin and user passwords  Vigor2862 Series User’s Guide...
  • Page 240 Vigor2862 is the secondary device. When the primary Vigor2862 breaks down, the secondary device assumes the role of the primary device by taking over all responsibilities as soon as possible. However, when the primary device recovers, the secondary device will once again be the standby device. Vigor2862 Series User’s Guide...

  • Page 241: Ii-5-13 Local 802.1X General Setup

    Make the enabling/disabling setting for both Internal RADIUS and Local 802.1X synchronize for all of the user profiles (User Management>>User Profile). For example, if Local 802.1x is configured as Enabled (checked), the Internal RADIUS will be configured as Enabled too. Vigor2862 Series User’s Guide...
  • Page 242 Click it to save the settings. Clear Click it to remove previous setting configuration. Cancel Click it to give up all settings configuration. When you finish the configuration, please click OK to save and exit this page. Vigor2862 Series User’s Guide...

  • Page 243: Application Notes

    High Availability provides hardware redundancy to the LAN clients. DrayTek Router has two modes for High Availability feature: Hot-Standby and Active-Standby. In Hot-Standby Mode, Primary and Secondary router share the same WAN source. Usually, only the Primary is online. When Primary goes down, Secondary comes up and use the same WAN line to dial up, and continue to provide Internet service to LAN clients.
  • Page 244 Enable Configuration Sync and set the Sync Interval. Default is every 15 minutes. Configure High Availability on the secondary router. Mind that the Priority should be lower than the primary router. Besides priority, all other settings should be the same. Vigor2862 Series User’s Guide...
  • Page 245 IP with lower number on the Primary one. Gateway IP is the same with LAN IP, and the note in parentheses indicates that the gateway IP provided to LAN clients will be replaced by the Virtual IP. Vigor2862 Series User’s Guide...
  • Page 246 If your primary router is already settled please proceed to the next step. Here we configure the WAN as the representative example. Vigor2862 Series User’s Guide...
  • Page 247 We may check the High Availability status by visiting the Status page. For the first time the two routers link up, we can see they are syncing the configuration from the primary to the secondary (showing "Progressing" on the secondary router): Vigor2862 Series User’s Guide...
  • Page 248 WAN due to the primary router in the High Availability group is working, so as a secondary router it doesn't need to be online now. You may also check other configurations on your secondary router. Vigor2862 Series User’s Guide...
  • Page 249 11. Now the routers are set, if you have WCF license, you may create a group on MyVigor so these routers can share the same license. First, login to myvigor.draytek.com, find High Availability Settings on left hand side and click Add New...
  • Page 250 Failover Occurred: the WAN of the primary router goes down and the secondary router takes over, Configuration Sync Failed: the configuration sync between primary and secondary router fails, Router Unstable: one of the routers becomes unstable. Vigor2862 Series User’s Guide...

  • Page 251: How To Use Drayddns

    Vigor router supports various DDNS service providers, user can set up user-defined profile to update the DDNS even the service provider is not on the list. Now, DrayTek starts to support our own DDNS service - DrayDDNS. We will provide a domain name for each Vigor Router, this single domain name can record IP addresses of all WAN.
  • Page 252 Tick Enable Dynamic DNS Setup b. Click an available profile index c. Tick Enable Dynamic DNS Account d. Select DrayTek Global (www.drayddns.com) as Service Provider e. Select the WAN you would like to upload the IP to DDNS server f. Click Get domain g.
  • Page 253 Currently, only the domain name is allowed to be modified MyVigor website. We will need to register the router to MyVigor server, and log in to MyVigor website to modify it. Please visit https://myvigor.draytek.com/ or go to Applications >> Dynamic DNS Setup >> DrayDDNS profile and click Edit domain.
  • Page 254 Vigor router will get the modified domain name when the it performs next DDNS updating. We can click Sync domain to accelerate this process. After few seconds, the router will get the new domain name and print it on the profiles list. Vigor2862 Series User’s Guide...
  • Page 255 Vigor2862 Series User’s Guide...

  • Page 256: How To Implement The Ldap/Ad Authentication For User Management

    Create LDAP server profiles. Click the Active Directory /LDAP tab to open the profile web page and click any one of the index number link. If we have two groups “RD1” and “SHRD” on LDAP server, we can configure two LDAP server profiles with different Group Distinguished Name. Vigor2862 Series User’s Guide...
  • Page 257 Click OK to save the settings above. Open User Management>>General Setup. Select User-Based as the Mode option. Vigor2862 Series User’s Guide...
  • Page 258 Then open VPN and Remote Access>>PPP General Setup to check the profile(s) that will be authenticated with LDAP server. After above configurations, users belong to either “rd1” or “shrd” group can access Internet after inputting their credentials on LDAP server. Vigor2862 Series User’s Guide...

  • Page 259: How To Configure Customized Ddns

    WAN connection is up. Note that, Username: jo*** Password: jo******** Host name: j*****.changeip.org WAN IP address: 1.169.185.242 Following is the screenshot of editing the HTML script on the browser to update your IP to the DDNS server. Vigor2862 Series User’s Guide...
  • Page 260 DDNS service is running. In this case the IP will be 1.169.185.242. After setting, the Customized DDNS service will be up, and our IP will be updated to the DDNS server. Username: bi******* Password: 88******** Host name: bi*******.3322.org Vigor2862 Series User’s Guide...
  • Page 261 Set the Provider Host as member.3322.net. Set the Service API as: /dyndns/update?hostname=yourhost.3322.org&myip=###IP###&wildcard=OFF&mx=mail .exchanger.ext&backmx=NO&offline=NO Enter your account and password. After the setting, the Customized DDNS service will be up, and our IP will be updated to the DDNS server automatically. Vigor2862 Series User’s Guide...
  • Page 262 The customized Service Provider is also eligible with the ClouDNS.net. Vigor2862 Series User’s Guide...

  • Page 263: Routing

    Other routing Specify routing policy to determine the direction of the data transmission. Info For more detailed information about using policy route, refer to Support >>FAQ/Application Note on www.draytek.com. Vigor2862 Series User’s Guide...

  • Page 264: Web User Interface

    Check the box to enable the static route profile. Destination Address Displays the destination address of the static route. Set to Factory Default Clear all of the settings and return to factory default settings. Viewing Routing Table Displays the routing table for your reference. Vigor2862 Series User’s Guide...
  • Page 265 1st subnet (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and continuously exchange of IP routing information with different subnets. Vigor2862 Series User’s Guide...
  • Page 266 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Click OK. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2862 Series User’s Guide...
  • Page 267 Item Description Enable Click it to enable this profile. Destination IPv6 Address / Type the IP address with the prefix length for this entry. Prefix Len Gateway IPv6 Address Type the gateway address for this entry. Vigor2862 Series User’s Guide...
  • Page 268 Network Interface Use the drop down list to specify an interface for this static route. When you finish the configuration, please click OK to save and exit this page. Vigor2862 Series User’s Guide...

  • Page 269: Ii-6-2 Load-Balance /Route Policy

    Display the IP address for the end of the destination port. Move UP/Move Down Use Up or Down link to move the order of the policy. Wizard Mode Allow to configure frequently used (simple and basic) settings of route policy via three setting pages. Vigor2862 Series User’s Guide...
  • Page 270 IPs will be passed through the WAN interface. Country Object – Specify a country object. All the IPs coming from the country (countries) specified in the object will be passed through the WAN interface. 3. Click Next to get the following page. Vigor2862 Series User’s Guide...
  • Page 271 It determines which mechanism that the router will use to Routing forward the packet to WAN. 5. After choosing the mechanism, click Next to get the summary page for reference. 6. If there is no error, click Finish to complete wizard setting. Vigor2862 Series User’s Guide...
  • Page 272 Any – Any IP can be treated as the source IP. IP Range – Define a range of IP address as source IP addresses.  Start - Type an address as the starting IP for such Vigor2862 Series User’s Guide...
  • Page 273 Choose Force NAT or Force Routing. Failover to – Check this button to lead the data passing through specific interface (WAN/LAN/VPN/Route Policy) automatically when the selected interface (defined in Send Vigor2862 Series User’s Guide...

  • Page 274: Diagnose For Route Policy

    When you finish the configuration, please click OK to save and exit this page. The button of Diagnose located below the Load-Balance /Route Policy profile is used to trace possible path of the packets sent out of the router. Vigor2862 Series User’s Guide...
  • Page 275 Specify the nature of the packets to be analyzed by Vigor router. Protocol - Specify a protocol for diagnosis. Src IP – Type an IP address as the source IP. Dst IP – Type an IP address as the destination IP. Vigor2862 Series User’s Guide...
  • Page 276 If required, click export analysis to export the result as a file. Note that the analysis was based on the current "load-balance/route policy" settings, we do not guarantee it will be 100% the same as the real case. Vigor2862 Series User’s Guide...

  • Page 277: Ii-6-3 Bgp

    Set the time interval to do reconnection. Router ID Specify the LAN subnet for the router. Neighbor Enable Check the box to enable the basic BGP function for neighboring router. Index Click the index number link to configure neighbor profile. Vigor2862 Series User’s Guide...

  • Page 278: Ii-6-3-1 Static Network

    Check the box to enable the configuration for the selected index entry. IP Address Type the IP address for a router. Subnet Mask Use the drop down list to specify a subnet mask for the IP address. Vigor2862 Series User’s Guide...

  • Page 279: Application Notes

    Check Enable.  Enter the WAN IP address.   Click OK to save. After setting up the WAN IP Alias, the IP addresses will be shown in the drop-down list of Interface in Route Policy setting. Vigor2862 Series User’s Guide...
  • Page 280 But do not enable this option if you want the traffic only to use a designated IP address. Click OK to save.  After the above configuration, packet source from the range between 192.168.1.20 and 192.168.1.30 sent to the Internet will use the public IP 172.17.1.1. Vigor2862 Series User’s Guide...

  • Page 281: How To Use Destination Domain Name In A Route Policy

    Or you may click Select, and use a string that is pre-defined in Objects Settings >> String Object as the domain name. Click Add too add more domain names, we can set up to 5 domain names in one route policy. Vigor2862 Series User’s Guide...
  • Page 282 If you manually enter the domain name in a route policy, after clicking OK to apply the route policy, those domain names will be given a number. That means the router has automatically created string objects for those domain names, so that they can be used in other route policies or other functions. Vigor2862 Series User’s Guide...

  • Page 283: How To Use A Public Ip On Lan

    (Note: If it is necessary to specify an IP address manually, remember that subnet mask for WAN interface should be larger than that of LAN interface.) Now we have two methods to configure it IP Routed LAN  Vigor2862 Series User’s Guide...
  • Page 284 Configure a fixed IP/Subnet Mask on the host b. Set up DHCP IP Pool, enable Use LAN Port, and connect the host to the router on the specified LAN port (which is port 1 and 2 in this example) Vigor2862 Series User’s Guide...
  • Page 285 Set up a VLAN for LAN2 Subnet. c. Specify the LAN ports that belongs to LAN2 subnet (which is port 5 and 6 in this example), note that these are the ports to which the host should connect. Vigor2862 Series User’s Guide...
  • Page 286 For DHCP Server Configuration, we may either:  Disable DHCP Server, and manually set a fixed IP/Subnet Mask on the host.  Enable DHCP Server, and set up the DHCP IP pool according to IP range which the ISP provides. Vigor2862 Series User’s Guide...
  • Page 287 If none of the above helps, please change the host's Gateway IP from Vigor Router's IP (211.100.200.153) to the IP Gateway IP (211.100.200.158), and connect the PC to the ISP Modem directly and see if it can work. Vigor2862 Series User’s Guide...

  • Page 288: Introduction To Load Balance/Route Policy

    Select a Protocol. b. Enter the Source IP address range, the Source IP could be a single address if the Start and End are the same. c. Enter the Destination IP address range. d. Select the Destination Port. Vigor2862 Series User’s Guide...
  • Page 289 Therefore, Failback option is recommended if Administrator want the traffic go via the primary interface as soon as possible. Vigor2862 Series User’s Guide...
  • Page 290 Priority: Administrator may set priority between 1 and 249 for this Route policy,  where smaller number indicates higher priority. When two policies are having the same priority, the first (according to the policy index order) matched policy will be implemented. Vigor2862 Series User’s Guide...

  • Page 291: Lte

    SMS from a router to report router status, rebooting router remotely via SMS with taking security into consideration, and so on. This section can guide you to use the SIM card in LTE WAN to perform SMS related operations. Info This function is used for “L” models only. Vigor2862 Series User’s Guide...

  • Page 292: Web User Interface

    Monthly This setting is to offer a mechanism of resetting the number of SMS sent record every month. SMS quota resets on day XX at XX … –You can determine the Vigor2862 Series User’s Guide...

  • Page 293: Ii-7-1-2 Sms Inbox/Outbox

    Vigor router will reset the number of SMS sent. For example, 3 means the third day of the duration cycle. Such page allows you to determine which policy shall be used for SMS inbox/outbox. Vigor2862 Series User’s Guide...

  • Page 294: Ii-7-2 Sms Inbox

    Details If you want to read the full content of the message, click the View link of that message to open the following page. It will change the message into "read" state. Vigor2862 Series User’s Guide...
  • Page 295 If you want to read the full content of the message of the SMS, click the index link of that SMS to open the following page. It will change all SMS of the message into "read" state. Vigor2862 Series User’s Guide...
  • Page 296 Message Content - Display the full content of the message. OK - Return to previous page. Delete - Click it to delete all SMS of this message and return to previous page. Next - Click it to see the content of next SMS index. Vigor2862 Series User’s Guide...

  • Page 297: Ii-7-3 Send Sms

    The total number of characters that you can type in this field is 1024. Send Message Click it to send this SMS message to the recipient immediately. View SMS Outbox Cache Display the record of SMS messages sent from the Router. Vigor2862 Series User’s Guide...

  • Page 298: Ii-7-4 Router Commands

    Go to LTE>>Router Commands to get the following page. Available settings are explained as follows: Item Description Reboot on SMS Message Enable with Password / To reboot Vigor router remotely via SMS, please check such box and type the password/PIN number (treated as Vigor2862 Series User’s Guide...
  • Page 299 SMS. SMS messages per status Display the total number of the type for status response. response Display the total number of SMS required to send the status message which contains the current selected Message Contents. Vigor2862 Series User’s Guide...

  • Page 300: Ii-7-5 Status

    Base station information. Mobile Network Code / Location Area Code / Cell ID : Signal Signal strength of LTE connection. Active Channel Frequency of LTE connection. Interference with 2.4GHz Whether the current LTE frequency causes interference with Vigor2862 Series User’s Guide...
  • Page 301 Whether the SMS service of the LTE SIM card is ready. SMS Loading Whether the received SMS messages in the LTE SIM card have been loaded to the Router. New SMS The number of unread SMS in SMS Inbox. Vigor2862 Series User’s Guide...
  • Page 302 This page is left blank. Vigor2862 Series User’s Guide...

  • Page 303: Part Iii Wireless Lan

    Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access. Vigor2862 Series User’s Guide...

  • Page 304: Wireless Lan (2.4Ghz/5Ghz)

    SSID as identification, located channel etc. Vigor router supports four SSID settings for wireless connections. Each SSID can be defined with different name and download/upload rate for selecting by stations connected to the router wirelessly. Vigor2862 Series User’s Guide...
  • Page 305 Internet without hassle of the confidential information leakage. For a more flexible deployment, you may add filters of MAC addresses to isolate users’ access from wired LAN. It will display all the stations in your wireless network and the status of their connection. Vigor2862 Series User’s Guide...
  • Page 306 In some countries, there are restrictions on DFS channels as well. We will implement country code to restrict uncertified channels. WPS (Wi-Fi Protected Setup) provides easy procedure to make network connection between wireless station and wireless access point (vigor router) with the encryption of WPA and WPA2. Vigor2862 Series User’s Guide...

  • Page 307: Web User Interface

    2. The screen of wireless wizard will be shown as follows. This page will be used for internal users in a company or your home. Besides, the settings will change based on different model of Vigor2862 series. In this case, Vigor2862ac is used as an example. Available settings are explained as follows:...
  • Page 308 Description Wireless 2.4GHz Settings Name Type the SSID name of this router for wireless 2.4GHz. The default name is defined with DrayTek. Change the name if required. Mode At present, the router can connect to 11b Only, 11g Only, 11n Only (2.4GHz), Mixed (11b+11g), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously.
  • Page 309 Default value is 30,000 kbps. Wireless 5GHz Settings Enable/Disable Click it to enable or disable settings in this page. Use the same SSID Check the box to use the same settings configured above. and Security Key as Vigor2862 Series User’s Guide...
  • Page 310 Exit the wireless wizard without saving any changes. 4. After typing the required information, click Next. 5. The following page will display the configuration summary for wireless setting. 6. Click Finish to complete the wireless settings configuration. Vigor2862 Series User’s Guide...

  • Page 311: Iii-1-2 General Setup

    11n Only(5 GHz), Mixed (11a+11n), and Mixed (11a+11n+11ac) stations simultaneously. Simply choose Mixed (11a+11n+11ac) mode. In which, 802.11b/g operates on 2.4G band, 802.11a operates on 5G band, 802.11n operates on either 2.4G or 5G band, and 802.11ac operates on 5G band only. Vigor2862 Series User’s Guide...
  • Page 312 Enable Special SSID Selected SSID (2 /3 /4) will be forced up /down based on the Schedule Profiles schedule profile used. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 313: Iii-1-3 Security

    PSK value for connection. By clicking the Wireless LAN>>Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Available settings are explained as follows: Item Description Vigor2862 Series User’s Guide...
  • Page 314 (represented with the word of weak, medium or strong) of the PSK specified above. EAPOL Key Retry - The default setting is "Enable". It can make sure that the key will be installed and used once in Vigor2862 Series User’s Guide...

  • Page 315: Iii-1-4 Access Control

    MAC addresses into a black list, or only let them be able to connect by inserting their MAC addresses into a white list. In the Access Control web page, users may configure the white/black list modes used by each SSID and the MAC addresses applied to their lists. Vigor2862 Series User’s Guide...
  • Page 316 Upload From File Restore wireless access control settings and applied onto this device. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 317: Iii-1-5 Wps

    He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. There are two methods to do network connection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code. Vigor2862 Series User’s Guide...
  • Page 318 For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security, you will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again. Vigor2862 Series User’s Guide...
  • Page 319 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2862 Series User’s Guide...

  • Page 320: Iii-1-6 Wds

    In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Vigor2862 Series User’s Guide...
  • Page 321 Available settings are explained as follows: Item Description Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Vigor2862 Series User’s Guide...
  • Page 322 Disable to cancel this function. Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 323: Iii-1-7 Advanced Setting

    The default setting is Enable. Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync field instead of long preamble with Vigor2862 Series User’s Guide...
  • Page 324 If conflict is detected, wireless station will be warned and is unable to make network connection. Therefore, changing the country code to ensure successful network connection will be necessary for some clients. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 325: Iii-1-8 Station Control

    SSID will be listed on Station Control List. Hotspot Web Portal Click it to access in to Hotspot Web Portal page for modifying the settings if required. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 326: Iii-1-9 Bandwidth Management

    It is available when Per Station Limit is selected Type a value to define the maximum data traffic (downloading) for each wireless client connecting to Vigor2862. After finishing this web page configuration, please click OK to save the settings. Vigor2862 Series User’s Guide...

  • Page 327: Iii-1-10 Ap Discovery

    AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2862 Series User’s Guide...

  • Page 328: Iii-1-11 Airtime Fairness

    (A/B) by controlling TX traffic. In the following figure, Station B(11n) has higher probability to send data packets than Station A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by Station A(slow rate). Vigor2862 Series User’s Guide...
  • Page 329 After finishing this web page configuration, please click OK to save the settings. Info Airtime Fairness function and Bandwidth Limit function should be mutually exclusive. So their webs have extra actions to ensure these two functions are not enabled simultaneously. Vigor2862 Series User’s Guide...

  • Page 330: Iii-1-12 Band Steering

    If dual-band is detected, the AP will let the wireless client connect to less congested wireless LAN, such as 5GHz to prevent from network congestion. Info To make Band Steering work successfully, SSID and security on 2.4GHz also MUST be broadcasted on 5GHz. Vigor2862 Series User’s Guide...
  • Page 331 2.4GHz network connection. Specify the time limit for Vigor router to detect the wireless client. After finishing this web page configuration, please click OK to save the settings. Below shows how Band Steering works. Vigor2862 Series User’s Guide...
  • Page 332 3. Click OK to save the settings. 4. Open Wireless LAN (2.4GHz)>>General Setup and Wireless LAN (5GHz)>> General Setup. Configure SSID as DrayTek2862_BandSteering for both pages. Click OK to save the settings. Same settings for 2.4GHz and 5GHz Vigor2862 Series User’s Guide...
  • Page 333 Security as 12345678 for both pages. Click OK to save the settings. Same value for 2.4GHz and 5GHz 6. Now, Vigor router will let the wireless clients connect to less congested wireless LAN, such as 5GHz to prevent from network congestion. Vigor2862 Series User’s Guide...

  • Page 334: Iii-1-13 Roaming

    Minimum RSSI - When the signal strength of the wireless station is below the value (dBm) set here and adjacent AP (must be DrayTek AP and support such feature too) with higher signal strength value (defined in the field of With...

  • Page 335: Iii-1-14 Station List

    MCS, Venfor, Approx. Distance, SSID, Visit Time and so on). Available settings are explained as follows: Item Description Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2862 Series User’s Guide...
  • Page 336 This page is left blank. Vigor2862 Series User’s Guide...

  • Page 337: Part Iv Voip

    Voice over IP network (VoIP) enables you to use your broadband Internet connection to make toll quality voice calls over the Internet. Vigor2862 Series User’s Guide...
  • Page 338 Then, both parties’ SIP proxies will forward the sequence of messages to caller to establish the session. If you both register to the same SIP Registrar, then it will be illustrated as below: Vigor2862 Series User’s Guide...
  • Page 339 Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor2862 Series User’s Guide...

  • Page 340: Voip

    ISP which offers the VoIP service for your router. SIP Port – Use the default setting (5060). Set Account quickly Account Number/Name – Type the account number/name registered to your ISP. Password – Type the password for the account registered to Vigor2862 Series User’s Guide...
  • Page 341 Click it to get into the next setting page. Cancel Click it to give up the VoIP wizard. 3. After finished the settings above, click Next for viewing summary of such connection. 4. Click Finish. A page of VoIP Wizard Setup OK!!! will appear. Vigor2862 Series User’s Guide...

  • Page 342: Iv-1-2 General Settings

    (ZRTP+SRTP). Check this box to have secure call. Enable SAS Voice Prompt - If it is enabled, SAS prompt will be heard for both ends every time. If it is disabled, no SAS prompt will be heard any more. Vigor2862 Series User’s Guide...
  • Page 343 After the connection established, vigor router A will NOT send SAS voice prompt to vigor router A and vigor router B will NOT send the SAS voice prompt to vigor router B. Even no voice prompt, but the RTP traffic is still secured until the call ends. Vigor2862 Series User’s Guide...
  • Page 344 If the incoming or outgoing calls do not match any entry on the phonebook, the router will try to make the call "being protected". But, if the call ends up "unprotected"(e.g. peer side does not support ZRTP+SRTP), the router will not play out a warning message. Vigor2862 Series User’s Guide...

  • Page 345: Iv-1-3 Sip Accounts

    Display the codec type for the account. Ring Port Specify which port will ring when receiving a phone call. Status Show the status for the corresponding SIP account. R means such account is registered on SIP server successfully. – means Vigor2862 Series User’s Guide...
  • Page 346 Some SIP server allows user to use VoIP function without registering. For such server, please check the box of Call without Registration. Choosing Auto is recommended. The system will select a proper way for your VoIP call. Vigor2862 Series User’s Guide...
  • Page 347 Stun – Choose this option if there is Stun server provided for your router. Manual – Choose this option if you want to specify an external IP address as the NAT transversal support. Nortel – If the soft-switch that you use supports Nortel Vigor2862 Series User’s Guide...
  • Page 348 Single Codec – If the box is checked, only the selected Codec will be applied. Packet Size The amount of data contained in a single packet. The default value is 20 ms, which means the data packet will contain 20 ms voice information. Vigor2862 Series User’s Guide...
  • Page 349 If not, the router will do something to save the bandwidth for other using. Click On to invoke this function; click off to close the function. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 350: Iv-1-4 Dialplan

    SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor2926 series for setting the phone book. Click any index number to display the dial plan setup page. Vigor2862 Series User’s Guide...
  • Page 351 If the incoming or outgoing calls do not match any entry on the phonebook, the router will try to make the call "being protected". But, if the call ends up "unprotected"(e.g. peer side does not support ZRTP+SRTP), the router will not play out a warning message. Vigor2862 Series User’s Guide...

  • Page 352: Iv-1-4-2 Digit Map

    VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” will be changed to “88631111111” and sent to SIP server. Vigor2862 Series User’s Guide...
  • Page 353 VoIP>> Phone Settings. Move UP /Move Down Click the link to move the selected entry up or down. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 354: Iv-1-4-3 Call Barring

    SIP accounts. Such control also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Such control also can be done based on preconfigured schedules. Vigor2862 Series User’s Guide...
  • Page 355 All means all the phone calls will be blocked with such mechanism. Index (1-15) in Schedule Enter the index of schedule profiles to control the call barring according to the preconfigured schedules. Refer to section Applications>>Schedule for detailed configuration. Vigor2862 Series User’s Guide...

  • Page 356: Iv-1-4-4 Regional

    Dial the number typed in this field to forward all the Ans][Act] incoming calls to the specified place while there is no answer of the connected phone. Do Not Disturb [Act] Dial the number typed in this field to invoke the function of DND. Vigor2862 Series User’s Guide...

  • Page 357: Iv-1-4-5 Pstn Setup

    PSTN number available for dial whenever you need and type the number in the field of Phone number for PSTN relay. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 358: Iv-1-5 Phone Settings

    You can click the number below the Index field to change SIP account for each phone port. DTMF Relay – Display DTMF mode that configured in the advanced settings page of Phone Index. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 359 Click hook flash to pick up the waiting phone call. Call Transfer Check this box to invoke this function. Click hook flash to initiate another phone call. When the phone call connection succeeds, hang up the phone. The other two sides can Vigor2862 Series User’s Guide...
  • Page 360 Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Vigor2862 Series User’s Guide...
  • Page 361 This function is very useful when the network traffic congestion occurs and it still can remain the accuracy of DTMF tone.  SIP INFO- Choose this one then the Vigor will capture Vigor2862 Series User’s Guide...

  • Page 362: Iv-1-6 Status

    Specify the interval of refresh time to obtain the latest VoIP calling information. The information will update immediately when the Refresh button is clicked. Port It shows current connection status for Phone(s) ports. Status It shows the VoIP connection status. Vigor2862 Series User’s Guide...
  • Page 363 Accumulation for the times of in call. Out Calls Accumulation for the times of out call. Miss Calls Accumulation for the times of missing call. Speaker Gain The volume of present call. Display logs of VoIP calls. Vigor2862 Series User’s Guide...

  • Page 364: Iv-1-7 Diagnostics

    VoIP Diagnostics is used for diagnosing if VoIP phone failure is caused by different tone or caller ID. Vigor2862 Series User’s Guide...

  • Page 365: Part V Vpn

    Here Vigor router support digital certificates conforming to standard X.509. Vigor2862 Series User’s Guide...

  • Page 366: Vpn And Remote Access

     Allows employees in branch offices and head office to share the same network resources.  A connection between the remote host and router's LAN network. The host will use an IP address in the local subnet.  Allows employees to access the company's internal resources when they are traveling. Vigor2862 Series User’s Guide...

  • Page 367: Web User Interface

    Item Description LAN-to-LAN Client Choose the client mode. Mode Selection Route Mode/NAT Mode – If the remote network only allows you to dial in with single IP, please choose NAT mode, otherwise please choose Route Mode. Vigor2862 Series User’s Guide...
  • Page 368 Info The following descriptions for VPN Type are based on the Route Mode specified in LAN-to-LAN Client Mode Selection. When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: Vigor2862 Series User’s Guide...
  • Page 369 When you choose IPsec, you will see the following graphic: When you choose SSL, you will see the following graphic: Vigor2862 Series User’s Guide...
  • Page 370 When you choose L2TP over IPsec (Nice to Have) or L2TP over IPsec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. Vigor2862 Series User’s Guide...
  • Page 371 Pre-Shared Key- Specify a key for IKE authentication. Confirm Pre-Shared Key-Confirm the pre-shared key. Digital Signature Click Digital Signature to invoke this function. (X.509) Peer ID – Choose the peer ID selection from the drop down list. Vigor2862 Series User’s Guide...
  • Page 372 After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Available settings are explained as follows: Vigor2862 Series User’s Guide...
  • Page 373 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2862 Series User’s Guide...
  • Page 374 This item is available after you choose any one of dial-in user account profiles. Next, you have to select suitable dial-in type for the VPN server profile. There are several types provided here (similar to VPN Client Wizard). Vigor2862 Series User’s Guide...
  • Page 375 When you check PPTP/SSL, you will see the following graphic: When you check PPTP & IPsec & L2TP (three types) or PPTP & IPsec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2862 Series User’s Guide...
  • Page 376 The length of the name is limited to 11 characters. Password This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above. The length of the name is limited to 11 characters. Vigor2862 Series User’s Guide...
  • Page 377 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote Access>>LAN to LAN for viewing detailed configuration. Vigor2862 Series User’s Guide...
  • Page 378 LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. Open VPN and Remote Access>>Remote Access Control. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 379 In addition, the remote dial-in user will use 40-bit to perform encryption prior to using 128-bit for encryption. In other words, if 128-bit MPPE encryption method is not available, then 40-bit encryption scheme will be applied to encrypt the data. Vigor2862 Series User’s Guide...
  • Page 380 If PPP connection will be authenticated via RADIUS server or LDAP Authentication LDAP profiles, it is necessary to specify the LAN profile for the dial-in user to get IP from. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 381 AH it receives. Encapsulating Security Payload (ESP) is a security protocol that provides data confidentiality and protection with optional authentication and replay detection service. Available settings are explained as follows: Item Description Vigor2862 Series User’s Guide...
  • Page 382 To use digital certificate for peer authentication in either LAN-to-LAN connection or Remote User Dial-In connection, here you may edit a table of peer certificate for selection. As shown below, the router provides 32 entries of digital certificates for peer dial-in users. Vigor2862 Series User’s Guide...
  • Page 383 Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2862 Series User’s Guide...
  • Page 384 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 385 UDP Port – Enter a number. Enable TCP Check the box to enable TCP port setting for OpenVPN. TCP Port – Enter a number. Cipher Algorithm Two encryptions are supported, AES128 and AES256. HMAC Algorithm The HMAC algorithm only supports SHA1/SHA256. Vigor2862 Series User’s Guide...
  • Page 386 Client cert Each client in an OpenVPN connection must have its certificate and private key. Enter the certificate file name obtained from 3rd party provider Client key Enter the private key file name obtained from 3rd party Vigor2862 Series User’s Guide...
  • Page 387 Export The settings in this page can be saved as a file after clicking such button. Later, the downloaded file can be imported to the VPN client for building OpenVPN connection. Vigor2862 Series User’s Guide...
  • Page 388 Click to clear all indexes. Index Click the number below Index to access into the setting page of Remote Dial-in User. Enable Check it to enable such account profile. User Display the username for the specific dial-in user of the Vigor2862 Series User’s Guide...
  • Page 389 Name and Password of remote dial-in user below. IPsec Tunnel - Allow the remote dial-in user to make an IPsec VPN connection through Internet. IPsec XAuth – Allow the remote dial-in user to make an IPsec Vigor2862 Series User’s Guide...
  • Page 390 IKE Authentication This group of fields is applicable for IPsec Tunnels and L2TP Method with IPsec Policy when you specify the IP address of the remote node. The only exception is Digital Signature (X.509) Vigor2862 Series User’s Guide...
  • Page 391 Local ID (Optional)- Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 392 Click the number link to access into the setting page of a VPN profile. Enable Check it to enable such LAN to LAN profile. Name Indicate the name of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Vigor2862 Series User’s Guide...
  • Page 393 Click each index to edit each profile and you will get the following page. Each LAN-to-LAN profile includes 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. Vigor2862 Series User’s Guide...
  • Page 394 WAN1 Only: Only establish VPN if WAN2 down - If  WAN2 failed, the router will use WAN1 for VPN connection.  WAN2 Only: Only establish VPN if WAN1 down - If WAN1 failed, the router will use WAN2 for VPN connection. Netbios Naming Packet Vigor2862 Series User’s Guide...
  • Page 395 L2TP with IPsec Policy - Build a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPsec. Select from below: None: Do not apply the IPsec policy. Accordingly, the  Vigor2862 Series User’s Guide...
  • Page 396 MD5 or SHA-1 authentication algorithm.  3DES without Authentication-Use triple DES encryption algorithm and not apply any authentication scheme.  3DES with Authentication-Use triple DES encryption algorithm and apply MD5 or SHA-1 authentication algorithm.  AES without Authentication-Use AES encryption Vigor2862 Series User’s Guide...
  • Page 397 Schedule Profile - Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Vigor2862 Series User’s Guide...
  • Page 398 SSL VPN connection through Internet. Specify Remote VPN Gateway - You can specify the IP address of the remote dial-in user or peer ID (should be the same with the ID setting in dial-in type) by checking the box. Vigor2862 Series User’s Guide...
  • Page 399 VPN tunnel by using the characteristic of GRE. Even hacker can decipher IPsec encryption, he/she still cannot ask LAN site to do data transmission with any information. Such Vigor2862 Series User’s Guide...
  • Page 400 (Routing Information Protocol) packets. You can enable/disable one of direction here. Herein, we provide four options: TX/RX Both, TX Only, RX Only, and Disable. From first subnet to remote network, you have to do - If Vigor2862 Series User’s Guide...
  • Page 401 VPN router. Translated Type – There are two types for you to choose. Whole Subnet  Specific IP Address  Virtual IP Mapping – A pop up dialog will appear for you to Vigor2862 Series User’s Guide...
  • Page 402 IP address and the mapping virtual IP address. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 403 The TCP Session transmitted by using VPN TRUNK-VPN Load Balance mechanism will not be lost due to one of VPN Tunnels disconnected. Users do not need to reconnect with setting TCP/UDP Service Port again. The VPN Load Balance function can keep the transmission for internal data on tunnel stably Vigor2862 Series User’s Guide...
  • Page 404 Type - Display the connection type for that profile, such as IPsec, PPTP, L2TP, L2TP over IPsec (NICE), L2TP over IPsec(MUST) and so on. Member2 - Display the dial-out profile selected from the Member2 drop down list below. Vigor2862 Series User’s Guide...
  • Page 405 IPsec(MUST) and so on. Member2 - Display the dial-out profile selected from the Member2 drop down list below. Advanced – This button is only available when there is one or more profiles created in this page. Vigor2862 Series User’s Guide...
  • Page 406 Therefore, you can choose any one of members under VPN Load Balance for dialing out. – – For there is one Tunnel created and connected successfully, to keep the load balance effect between two tunnels, auto-dial will be executed within two seconds. Vigor2862 Series User’s Guide...
  • Page 407 If the router will be used as the VPN Server (i.e., with virtual address 192.168.50.200). Please type 192.168.50.200 in the field of My GRE IP. Type IP address (192.168.50.100) of the client in the field of Peer GRE IP. See the following graphic for an example. Vigor2862 Series User’s Guide...
  • Page 408 IP address of the server (192.168.50.200) in the field of Peer GRE IP. After setting profiles for load balance, you can choose any one of them and click Advance for more detailed configuration. The windows for advanced load balance and backup are different. Refer to the following explanation: Vigor2862 Series User’s Guide...
  • Page 409 VPN Load Balance Policy Below shows the algorithm for Load Balance. Edit – Click this radio button for assign a blank table for configuring Binding Tunnel. Insert after – Click this radio button to adding a new binding Vigor2862 Series User’s Guide...
  • Page 410 TCP Service Port/UDP Service Port/ICMP/IGMP, such binding tunnel table can be established. Detail Information This field will display detailed information for Binding Tunnel Policy. Below shows a successful binding tunnel policy for load balance: Vigor2862 Series User’s Guide...
  • Page 411 Binding Protocol. Available settings are explained as follows: Item Description Profile Name List the backup profile name. ERD Mode ERD means “Environment Recovers Detection”. Normal – choose this mode to make all dial-out VPN TRUNK Vigor2862 Series User’s Guide...
  • Page 412 Resume – when VPN connection breaks down or disconnects, Member 1 will be the top priority for the system to do VPN connection. Detail Information This field will display detailed information for Environment Recovers Detection. Vigor2862 Series User’s Guide...
  • Page 413 Dial - Click this button to execute dial out function. Refresh Seconds - Choose the time for refresh the dial information among 5, 10, and 30. Refresh - Click this button to refresh the whole connection status. Vigor2862 Series User’s Guide...
  • Page 414 Aggressive mode instead. Create a Dial-In profile for VPN user, go to VPN and Remote Access >> LAN to LAN, click on an available index to add a new profile. Set up the dial-in profile. Vigor2862 Series User’s Guide...
  • Page 415 Click on IKE Pre-Shared Key and enter the Pre-shared Key. Select the IPsec Security Method that are allowed to use. In TCP/IP Network Settings, enter VPN Client's LAN network in Remote Network IP and Remote Network Mask. Click OK to save the profile. Vigor2862 Series User’s Guide...
  • Page 416 Create a Dial-out profile to VPN server: Go to VPN and Remote Access >> LAN to LAN, click on an available index to add a new profile. Setup the dial-out profile. In Common Settings, Enter a Profile Name. Enable this profile. Set Call Direction to Dial-Out. In Dial-out Setting, Vigor2862 Series User’s Guide...
  • Page 417 Make sure phase 1 and phase 2 proposal are using the security methods which are accepted by VPN server. Click OK to save. In TCP/IP Network Settings, enter VPN Server's LAN Network in Remote Network IP and Remote Network Mask. Click OK to save the profile. Vigor2862 Series User’s Guide...
  • Page 418 To initiate the VPN connection, go to VPN and Remote Access >> Connection Management on VPN Client. Select the profile to VPN Sever and click Dial. If all the settings are matched, the VPN will be established, and the statistics will be displayed on the same page. Vigor2862 Series User’s Guide...
  • Page 419 Routers by the following topology. Go to VPN and Remote Access >> IPsec General Setup. Input Pre-shared Key and Confirm Pre-Shared Key. Click OK. Go to VPN and Remote Access >> LAN to LAN and click an available index. Vigor2862 Series User’s Guide...
  • Page 420 Go to VPN and Remote Access >> LAN to LAN and click an available index. Give a Profile Name. Check Enable this profile. Select Dial-Out as Call Direction. Select IPsec Tunnel with IKEv2 in Dial-Out Settings. Vigor2862 Series User’s Guide...
  • Page 421 Remote Network Mask. Click OK to save the profile. To initiate the VPN connection, go to VPN and Remote Access >> Connection Management. Select the VPN profile and click Dial. After VPN is established successfully, the VPN connection status will be shown below. Vigor2862 Series User’s Guide...
  • Page 422 In short,  It is not necessary for users to preinstall VPN client software for executing SSL VPN connection.  There are less restrictions for the data encrypted through SSL VPN in comparing with traditional VPN. Vigor2862 Series User’s Guide...
  • Page 423 Self-signed to use the router’s built-in default certificate. The selected certificate can be used in SSL VPN server and HTTPS Web Proxy. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 424 With SSL VPN, Vigor2862 series let teleworkers have convenient and simple remote access to central site VPN. The teleworkers do not need to install any VPN software manually. From regular web browser, you can establish VPN connection back to your main office even in a guest network or web cafe.
  • Page 425 (e.g., e759bb6f0e94c7ab4fe6). Allowed Dial-In Type Select the VPN protocols that this user is allowed to use. PPTP - Allow the remote dial-in user to establish VPN connections with the PPTP protocol. You should set the User Vigor2862 Series User’s Guide...
  • Page 426 (Remote Client IP in Specify Remote Node above). Digital Signature (X.509) can be used with IPSec tunnels regardless of the IP address of the remote node is specified or not. Pre-Shared Key - Select this checkbox to enable Pre-shared Vigor2862 Series User’s Guide...
  • Page 427 Local ID - Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 428 Set to Factory Default Click to clear all profiles. Index Click the profile index to display its detail setting page. Enable Check the box to enable such profile. Name Display the name of the group profile. Vigor2862 Series User’s Guide...
  • Page 429 If more than one authentication method is selected, the system will perform user authentication by applying selected authentication methods in the order listed. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 430 If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into DrayTek SSL VPN portal interface. Next, users can open SSL VPN>> SSL Portal Online User to view logging status of SSL VPN.
  • Page 431 Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor2862 Series User’s Guide...
  • Page 432 Click this button to open Generate Certificate Signing Request window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE again. Vigor2862 Series User’s Guide...
  • Page 433 The supported types are PKCS12 Certificate and Certificate with a private key. Click this button to import a saved file as the certification information. There are three types of local certificate supported by Vigor router. Vigor2862 Series User’s Guide...
  • Page 434 Netscape and Microsoft Internet Explorer with their import and export options. Upload Certificate and It is useful when users have separated certificates and private Private Key keys. And the password is needed if the private key is encrypted. Vigor2862 Series User’s Guide...
  • Page 435 Next, access your CA server and enter the page of certificate request, copy the information into it and submit a request. A new certificate will be issued to you by the CA server. You can save it. Click this button to remove the selected certificate. Vigor2862 Series User’s Guide...
  • Page 436 Therefore, Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience for general user. Later, such root CA generated by DrayTek server can perform the issuing of local certificate. Info Root CA can be deleted but not edited.
  • Page 437 Trusted CA Certificate window. For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2862 Series User’s Guide...
  • Page 438 Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Confirm password. Also, you can use Restore to retrieve these two settings to the router whenever you want. Vigor2862 Series User’s Guide...
  • Page 439 It also restricts users in the local network from accessing the Internet. CSM is an abbreviation of Central Security Management which is used to control IM/P2P usage, filter the web content and URL content to reach a goal of security management. Vigor2862 Series User’s Guide...
  • Page 440 It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2862 Series User’s Guide...
  • Page 441 3. ICMP flood attack 11. TCP flag scan 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unassigned Numbers 8. Trace route Vigor2862 Series User’s Guide...
  • Page 442 UDP packets. Click Firewall and click General Setup to open the general setup page. Such page allows you to enable / disable Call Filter and Data Filter, determine general rule for filtering the incoming and outgoing data. Vigor2862 Series User’s Guide...
  • Page 443 It is effective only for the packets routed but not for packets translated by NAT. Backup Firewall Click Backup to save the firewall configuration. Restore Firewall Click Select to choose a firewall configuration file. Then click Restore to apply the file. Vigor2862 Series User’s Guide...
  • Page 444 The default setting is 70000. Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Vigor2862 Series User’s Guide...
  • Page 445 CSM>> Web Content Filter web page first. Or click the DNS Filter link in this page to create a new profile. Advance Setting Click Edit to open the following window. However, it is Vigor2862 Series User’s Guide...
  • Page 446 Click Backup to save the firewall configuration. Restore Firewall Click Select to choose a firewall configuration file. Then click Restore to apply the file. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 447 Enter filter set comments/description. Maximum length is 23–character long. Direction Display the direction of packet. Src IP / Dst IP Display the IP address of source /destination. Service Type Display the type and port number of the packet. Vigor2862 Series User’s Guide...
  • Page 448 Note: RT means routing domain for 2nd subnet or other LAN. Source/Destination IP To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Type and type them in this dialog. Vigor2862 Series User’s Guide...
  • Page 449 Log box. It will be sent to Syslog server. Please refer to section Syslog/Mail Alert for more detailed information. Web Content Filter - Select one of the Web Content Filter profile settings (created in CSM>> Web Content Filter) for Vigor2862 Series User’s Guide...
  • Page 450 Block Immediately Packets matching the rule will be dropped immediately. 4. After choosing the mechanism, click Next to get the summary page for reference. 5. If there is no error, click Finish to complete wizard setting. Vigor2862 Series User’s Guide...
  • Page 451 ON schedule profiles are applied. Direction Set the direction of packet flow. It is for Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Vigor2862 Series User’s Guide...
  • Page 452 From the IP Group drop down list, choose the one that you want to apply. Or use the IP Object drop down list to choose the object that you want. Service Type Click Edit to access into the following dialog to choose a suitable service type. Vigor2862 Series User’s Guide...
  • Page 453 Block Immediately - Packets matching the rule will be dropped immediately. Pass Immediately - Packets matching the rule will be passed immediately. Block If No Further Match - A packet matching the rule, and that does not match further rules, will be dropped. Vigor2862 Series User’s Guide...
  • Page 454 Please set at least one profile for choosing in CSM>> URL Content Filter web page first. Or choose [Create New] from the drop down list in this page to create a new profile. For troubleshooting needs, you can specify to Vigor2862 Series User’s Guide...
  • Page 455 Please use the drop-down list to choose a codepage. If you do not have any idea of choosing suitable codepage, please open Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Vigor2862 Series User’s Guide...
  • Page 456 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
  • Page 457 By default, the threshold and timeout values are set to 2000 packets per second and 10 seconds, respectively. That means, when 2000 packets per second received, they will be regarded as “attack event” and the session will be paused for 10 seconds. Vigor2862 Series User’s Guide...
  • Page 458 The Vigor router will drop any packets having SYN flag and more fragment bit set. Block Fraggle Attack Check the box to activate the Block fraggle Attack function. Any broadcast UDP packets received from the Internet is blocked. Vigor2862 Series User’s Guide...
  • Page 459 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2862 Series User’s Guide...
  • Page 460 After finishing all the settings here, please click OK to save the configuration. Click the Spoofing Defense tab to open the setup page. Vigor2862 Series User’s Guide...
  • Page 461 Src IP Type the IPv4/IPv6 address of the packet’s source. Src Port Type the port number of the packet’s source. Src MAC Type the MAC address of the packet’s source. Vigor2862 Series User’s Guide...
  • Page 462 Simply type 16 HEX characters which represent certain packet (e.g., DNS packet) if you want to set the data transfered with protocol (ICMP/UDP/TCP) which is different to Type setting. Analyze Execute the test and analyze the result. Vigor2862 Series User’s Guide...
  • Page 463 The following figure shows the test result after clicking Analyze. Processing state for the fuctions (MAC Filter, QoS, User management, etc.,) related to the firewall will be displayed by green or red LED. Vigor2862 Series User’s Guide...
  • Page 464 Firewall>>Filter Setup is used as the default setting, we have to create a new rule starting from Filter Rule 2 of Set 2. Access into the web user interface of Vigor router. Open Firewall>>Filter Setup. Click the Set 2 link, choose Advance Mode and choose the Filter Rule 2 button. Vigor2862 Series User’s Guide...
  • Page 465 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. Vigor2862 Series User’s Guide...
  • Page 466 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. Vigor2862 Series User’s Guide...
  • Page 467 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor2862 Series User’s Guide...
  • Page 468 Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Info The priority of URL Content Filter is higher than Web Content Filter. Vigor2862 Series User’s Guide...
  • Page 469 Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Profile Display the number of the profile which allows you to click to set different policy. Name Display the name of the APP Enforcement Profile. Vigor2862 Series User’s Guide...
  • Page 470 Check the box to select the application to be blocked by Vigor router. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Vigor2862 Series User’s Guide...
  • Page 471 The APPE Enforcement Profile adopted by Vigor router will be treated as the APPE signature. DrayTek will periodically upgrade versions for all of the APPs supported by Vigor router. However, it might be inconvenient for users to upgrade the APP version one by one. This feature is specially designed to offer a quick method to execute APP version upgrade.
  • Page 472 Upgrade and wait for the system completing the process. Upgrade Automatically Scheduled Update - Check the box to make Vigor router upgrading the APPE signature based on the schedule configured here. After finishing all the settings, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 473: Vi-2-3 Url Content Filter Profile

    Item Description Set to Factory Default Clear all profiles. Profile Display the number link of the profile which allows you to click to set different policy. Name Display the name of the URL Content Filter Profile. Vigor2862 Series User’s Guide...
  • Page 474 URL Access Control and Web Feature below, such function can determine the priority for the actions executed. For this one, the router will process the packages with the conditions set below for web feature Vigor2862 Series User’s Guide...
  • Page 475 After specifying keywords, the Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noticed that the more simplified the blocking keyword list is, the more efficiently the Vigor router performs. Vigor2862 Series User’s Guide...
  • Page 476 Upload – Check the box to block the file upload by way of web page. After finishing all the settings, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 477: Vi-2-4 Web Content Filter Profile

    Please refer to section of creating MyVigor account. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
  • Page 478 You need to specify a server for categorize searching when you type URL in browser based on the web content filter profile. Find more- Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Setup Test Server It is recommended for you to use the default setting, auto-selected.
  • Page 479 Therefore, please backup your data before you change the web content filter license. Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. The maximum length of the name you can set is 15 characters. Vigor2862 Series User’s Guide...
  • Page 480 If the web pages do not match with the specified feature set here, it will be processed with reverse action. After finishing all the settings, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 481: Vi-2-5 Dns Filter Profile

    For DNS filter must use the WCF service profile to filter the packets, therefore WCF license must be activated first. Otherwise, DNS filter does not have any effect on packets. Available settings are explained as follows: Vigor2862 Series User’s Guide...
  • Page 482 Vigor router. You can type the message manually for your necessity or click Default Message button to get the default text displayed on the field of Administration Message. After finishing all the settings, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 483: Application Notes

    The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
  • Page 484 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. The system will ask if you are 16 years old or over.  If yes, click I am 16 or over. Vigor2862 Series User’s Guide...
  • Page 485  If not, click I am under 16 years old to get the following page. Then, click I and my legal guardian agree. 5. After reading the terms of service/privacy policy, click Agree. 6. In the following page, enter your personal information in this page and then click Continue. Vigor2862 Series User’s Guide...
  • Page 486 9. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com. 10. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2862 Series User’s Guide...
  • Page 487 11. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password. 12. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2862 Series User’s Guide...

  • Page 488: Content Filter

    Note: Manual setting (e.g., one keyword for one website.) Make sure the Web Content Filter (powered by Commtouch) license is valid. Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Vigor2862 Series User’s Guide...
  • Page 489 A. Block the web page containing the word of “Facebook” Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type facebook. Configure the settings as the following figure. Vigor2862 Series User’s Guide...
  • Page 490 Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. When you finished the above steps, click OK. Then, open Firewall>>General Setup. Vigor2862 Series User’s Guide...
  • Page 491 B. Disallow users to play games on Facebook Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Vigor2862 Series User’s Guide...
  • Page 492 When you finished the above steps, please open Firewall>>General Setup. Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. Vigor2862 Series User’s Guide...

  • Page 493: Part Vii Management

    Sessions Limit, Bandwidth Limit, and Quality of Servie (QoS). It is a security feature which disallows any IP traffic (except DHCP-related packets) from a particular host until that host has correctly supplied a valid username and password. Vigor2862 Series User’s Guide...

  • Page 494: System Maintenance

    System Status, TR-069, Administrator Password, User Password, Login Page Greeting, Configuration Backup, Syslog /Mail Alert, Time and Date, Management, Reboot System, Firmware Upgrade, Activation, Internal Service User List and Dashboard Control. Below shows the menu items for System Maintenance. Vigor2862 Series User’s Guide...

  • Page 495: Web User Interface

    IP Address - Display the IP address of the LAN interface. Subnet Mask - Display the subnet mask address of the LAN interface. DHCP Server - Display the current status of DHCP server of the LAN Vigor2862 Series User’s Guide...
  • Page 496 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. Vigor2862 Series User’s Guide...

  • Page 497: Vii-1-2 Tr-069

    TR-069 device through an Auto Configuration Server e.g., VigorACS. Available settings are explained as follows: Item Description Tr069 Click Enable to activate the settings on this page. ACS Server On Choose the interface for the router connecting to ACS server. Vigor2862 Series User’s Guide...
  • Page 498 Specify STUN Settings to APs – If you want to apply specific STUN settings (not the STUN Settings configured for Vigor2862) to VigorAPs to meet specific requirements, simply check this box. Then, enter the server IP address, server Vigor2862 Series User’s Guide...
  • Page 499 CPE to detect bandwidth utilization. Line Speed – Set the transmission rate and receiving  rate for specified WAN interface. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 500: Vii-1-3 Administrator Password

    Old Password - Type in the old password. The factory default setting for password is “admin”. New Password – Define the basic password. The length of the password is limited to 23 characters. Confirm Password – Enter the basic password again for Vigor2862 Series User’s Guide...
  • Page 501 Enter the PIN code and secret settings for one-time usage. 2-Step Authentication via SMS Profile and/or Mail Profile – Click it to use authentication code as the advanced authentication method. The authentication code will be sent out based on the Vigor2862 Series User’s Guide...

  • Page 502: Vii-1-4 User Password

    After checking this box, you can access into the web user simple web configuration interface with the password typed here for simple web configuration. The settings on simple web user interface will be different with full web user interface accessed by using the Vigor2862 Series User’s Guide...
  • Page 503 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2862 Series User’s Guide...
  • Page 504 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Info Setting in User Mode can be configured as same as in Admin Mode. Vigor2862 Series User’s Guide...

  • Page 505: Vii-1-5 Login

    Enable Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Welcome Message and Type words or sentences here. It will be displayed for Bulletin bulletin message.
  • Page 506 Below shows an example of login customization with the information typed in Login Description and Bulletin. Vigor2862 Series User’s Guide...

  • Page 507: Vii-1-6 Configuration Backup

    File button to specify a file to be restored or click USB Storage (if a USB storage disk connected) to choose the configuration file. Restore configuration except the login password – Check the box to restore the configuration file except the login password. Vigor2862 Series User’s Guide...
  • Page 508 Support Model List Web configuration file from other Vigor router can be applied to Vigor2862 series. At present, the configuration file of Vigor2860 is accepted for Vigor 2862. This field displays model name(s) and firmware which web configuration file saved can be used by such router.
  • Page 509 Info Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up as shown below. Vigor2862 Series User’s Guide...
  • Page 510 Click Choose File button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2862 Series User’s Guide...

  • Page 511: Vii-1-7 Syslog/Mail Alert

    Check Enable to activate function of mail alert. Send a test e-mail - Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail Vigor2862 Series User’s Guide...
  • Page 512 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2862 Series User’s Guide...

  • Page 513: Vii-1-8 Time And Date

    Advanced – Click it to open a pop up dialog. Use the default time setting or set user defined time for your requirement. Automatically Update Select a time interval for updating from the NTP server. Vigor2862 Series User’s Guide...

  • Page 514: Vii-1-9 Snmp

    The SNMPv3 is more secure than SNMP through the encryption method (support AES and DES) and authentication method (support MD5 and SHA) for the management needs. Available settings are explained as follows: Item Description Enable SNMP Agent Check it to enable this function. Then, enable SNMPV1 Vigor2862 Series User’s Guide...
  • Page 515 Privacy Algorithm Choose one of the methods listed below as the privacy algorithm. Privacy Password Type a password for privacy. The maximum length of the text is limited to 23 characters. Click OK to save these settings. Vigor2862 Series User’s Guide...

  • Page 516: Vii-1-10 Management

    Available settings are explained as follows: Item Description Router Name Type in the router name provided by ISP. Default: Disable If it is enabled, the function of auto-logout for web user Auto-Logout interface will be disabled. Vigor2862 Series User’s Guide...
  • Page 517 Vigor system will unblock that IP and allow it to access into Vigor router again. Blocked IP List – Open another web page which displays current blocked IPs. TLS/SSL Encryption Setup Enable SSL 3.0/1.0/1.1/1.2 – Check the box to enable the Vigor2862 Series User’s Guide...
  • Page 518 Vigor2862. After finished the above settings, click OK to save the configuration. Available settings are explained as follows: Item Description Management Access Allow management from the Internet - Enable the checkbox Vigor2862 Series User’s Guide...
  • Page 519 Vigor router. Index in IP Object- Type the index number of the IP object profile. Related IP address will appear automatically. After finished the above settings, click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 520: Vii-1-11 Panel Control

    Wake up LED button on this page. When LEDs are lit, they can be put to sleep by briefly pressing the Factory Reset button, or by clicking the LED sleep immediately button on this page. Vigor2862 Series User’s Guide...
  • Page 521 Available settings are explained as follows: Item Description Refresh Click to refresh the page to display the latest information. Enable Factory Reset The default value is Enabled. Button Deselect to disable the reset function of the factory reset Vigor2862 Series User’s Guide...
  • Page 522 After finished the above settings, click OK to save the configuration. The 4 LAN ports can be individually enabled or disabled. When a LAN port is disabled, attached devices will not be recognized by the router. Vigor2862 Series User’s Guide...
  • Page 523 10Mpbs – Negotiated speed of the LAN port is 10 Mbps. --- – The LAN port is disabled or there is no active device connected. After finished the above settings, click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 524: Vii-1-12 Self-Signed Certificate

    Click Regeneration to open Regenerate Self-Signed Certificate window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE. Vigor2862 Series User’s Guide...
  • Page 525 Vigor2862 Series User’s Guide...

  • Page 526: Vii-1-13 Reboot System

    When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2862 Series User’s Guide...

  • Page 527: Vii-1-14 Firmware Upgrade

    Vigor router. Choose the one you need and click Download. After that, click Select to specify the one you just download. Then, click Upgrade. The system will upgrade the firmware of the router automatically. Vigor2862 Series User’s Guide...

  • Page 528: Vii-1-15 Firmware Backup

    Simply specify the condition to run the firmware backup and click OK to save the settings. This function is used to upgrade modem code if you find built-in modem code is not suitable for Vigor router. Contact with your dealer for further assistance if required. Vigor2862 Series User’s Guide...

  • Page 529: Vii-1-17 Activation

    Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. Below shows the successful activation of Web Content Filter: Vigor2862 Series User’s Guide...
  • Page 530 Vigor2862 Series User’s Guide...

  • Page 531: Vii-1-18 Internal Service User List

    For the detailed setting (such as IP address, port number) configuration of internal RADIUS, refer to Applications>>RADIUS/TACACS+. For the detailed setting (such as IP address, port number) configuration of Local 802.1X, refer to LAN>>Wired 802.1X and Wireless LAN>>Security. Vigor2862 Series User’s Guide...

  • Page 532: Vii-1-19 Dashboard Control

    There are nine groups of setting information which can be displayed on Dashboard as a reference for administrator/user. Except for Front Panel and System Information, the settings information regarding to the groups listed on this page can be hidden if required. Vigor2862 Series User’s Guide...

  • Page 533: Bandwidth Management

    This is called per-hop-behavior (PHB). The definition of PHB includes Expedited Forwarding (EF), Assured Forwarding (AF), and Best Effort (BE). AF defines the four classes of delivery (or forwarding) classes and three levels of drop precedence in each class. Vigor2862 Series User’s Guide...
  • Page 534 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s effort. Vigor2862 Series User’s Guide...

  • Page 535: Web User Interface

    Description Session Limit Enable - Click this button to activate the function of limit session. Disable - Click this button to close the function of limit session. Default Max Session - Defines the default maximum session Vigor2862 Series User’s Guide...
  • Page 536 All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 537: Vii-2-2 Bandwidth Limit

    Specific Limitation IP – All the IPs within the range defined will be restricted by bandwidth limit defined by TX Limit and RX Limit below. Start IP - Define the start IP address for limit  Vigor2862 Series User’s Guide...
  • Page 538 Schedule Profile - You can type in four sets of time schedule for your request. All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page. Vigor2862 Series User’s Guide...

  • Page 539: Vii-2-3 Quality Of Service

    (Class 1 to Class 3) class rules can be adjusted for your necessity. In which, the “Others” field is used for the packets which are not suitable for the three class rules. Status – Display the online statistics of WAN interface. Vigor2862 Series User’s Guide...
  • Page 540 Edit link to access into next page for configuration. Display an online statistics for quality of service for your reference. This feature is available only when the Quality of Service for WAN interface is enabled. Vigor2862 Series User’s Guide...
  • Page 541 ISP to maximize the QoS performance. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one. Vigor2862 Series User’s Guide...
  • Page 542 Class. In this case, “Test” is used as the name of Class Index #1. For adding a new rule, click Add to open the following page. Available settings are explained as follows: Item Description Check this box to invoke these settings. Vigor2862 Series User’s Guide...
  • Page 543 By the way, you can set up to 20 rules for one Class. If you want to edit an existed rule, please select the radio button of that one and click Edit to open the rule edit page for modification. Vigor2862 Series User’s Guide...
  • Page 544 Service Name Type in a new service for your request. The maximum length of the name you can set is 11 characters. Service Type Choose the type (TCP, UDP or TCP/UDP or other) for the new service. Vigor2862 Series User’s Guide...
  • Page 545 For example, in the following illustration, the VoIP packets in LAN go into Vigor router without any header. However, when they go forward to the Server on ISP through Vigor router, all of the packets are tagged with AF (configured in Bandwidth >>QoS>>Class) automatically. Vigor2862 Series User’s Guide...

  • Page 546: Vii-2-4 App Qos

    Click Disable to deactivate APP QoS function. Traceable The protocol listed below is traceable by Vigor router. Each tab offers different types of protocols to fit your request. Untraceable The protocol listed below is not easy to be traced by Vigor router. Vigor2862 Series User’s Guide...
  • Page 547 Apply – Click it to make the selected action be applied all of the selected protocols immediately. Action There are many protocols which can be specified with different QoS Class. Vigor2862 Series User’s Guide...

  • Page 548: Application Notes

    Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
  • Page 549 Check the box of ACT. Click Edit to specify the local address. In the pop-up window, choose Range Address as the Address Type and type the start IP address and end IP address in relational fields. Click OK to save the settings and exit the window. Vigor2862 Series User’s Guide...
  • Page 550 Click OK again to save the settings. The class rule for VoIP has been set. Click OK to return to previous page. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. Vigor2862 Series User’s Guide...
  • Page 551 Assuming you get 2MB/512Kb Internet line. You can check Enable of WAN1 to set up the bandwidth for different groups among VoIP, IPTV and Data/Email. 10. Enter 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Vigor2862 Series User’s Guide...
  • Page 552 11. Click the WAN1 link and check the box of Enable UDP Bandwidth Control. 12. Click OK to save the settings. The class rules for WAN1 are defined as shown below. Vigor2862 Series User’s Guide...

  • Page 553: User Management

    Filter rules configured under Firewall usually are applied to the host (the one that the router installed) only. With user management, the rules can be applied to every user connected to the router with customized profiles. Vigor2862 Series User’s Guide...

  • Page 554: Web User Interface

    User-Based - If you choose such mode, the router will apply the filter rules configured in User Management>>User Profile to the users. Rule-Based –If you choose such mode, the router will apply the filter rules configured in Firewall>>General Setup and Vigor2862 Series User’s Guide...
  • Page 555 Landing Page Type the information to be displayed on the first web page when the LAN user accessing into Internet via such router. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...

  • Page 556: Vii-3-2 User Profile

    To set the user profile, please click any index number link to open the following page. Notice that profile 1 (admin) and profile 2 (Dial-In User) are factory default settings. Profile 2 is reserved for future use. Vigor2862 Series User’s Guide...
  • Page 557 When the user passes the authentication, he/she can access Internet via this router with the limitation configured in this user profile. The maximum length of the password you can set is 24 Vigor2862 Series User’s Guide...
  • Page 558 Time of login/log out, block/unblock for the user(s) can be sent to and displayed in Syslog. Please choose any one of the log items to take down relational records for the user(s). Vigor2862 Series User’s Guide...
  • Page 559 Next, the user can access Internet through any browser on Windows. Note that Alert Tool can be downloaded from DrayTek web site. Telnet – If it is selected, the user can use Telnet command to perform the authentication job.
  • Page 560 Check the box to enable security authenticated via internal RADIUS server. Local 802.1X Check the box to enable security authenticated via internal 802.1X server. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 561 All the available user objects that you have created will be shown in this box. Notice that user object, Admin and Dial-In User are factory settings. User defined profiles will be numbered with 3, 4, 5 and so on. Vigor2862 Series User’s Guide...
  • Page 562 Profile Display the authority of the account. Last Login Time Display the login time that such user connects to the router last time. Expired Time Display the expired time of the network connection for the user. Vigor2862 Series User’s Guide...
  • Page 563 Display the idle timeout setting for such profile. Action Block - can avoid specified user accessing into Internet. Unblock – allow the user to access into Internet. Logout – the user will be logged out forcefully. Vigor2862 Series User’s Guide...
  • Page 564 If a LAN client who hasn’t passed the authentication opens an external web site in his  browser, he will be redirected to the router’s Web authentication interface first. Then, the client is trying to access http://www.draytek.com and but brought to the Vigor Vigor2862 Series User’s Guide...
  • Page 565 With Microsoft Internet Explorer, you may get the following warning message.  Please press Continue to this website (not recommended). With Mozilla Firefox, you may get the following warning message. Select I  Understand the Risks. Vigor2862 Series User’s Guide...
  • Page 566 If the authentication is successful, the client will be redirected to the original web site that he tried to access. In this example, it is http://www.draytek.com . Furthermore, you will get a popped up window as the following. Then you can access the Internet.
  • Page 567 192.168.1.1 with your router’s real IP address, and add the port number if the default management port has been modified. If the authentication is successful, you will get the Welcome Message that is set in the User Management >> General Setup page. Vigor2862 Series User’s Guide...
  • Page 568 With the default setup <body stats=1><script language='javascript'> window.location='http://www.draytek.com'</script></body>, you will be redirected to http://www.draytek.com . You may change it if you want. For example, you will get the following welcome message if you enter Login Successful in the Welcome Message table.
  • Page 569 If SSL Tunnel or SSL Web Proxy is disabled in the VPN profile, a User Management account and a remote dial-in VPN profile can use the same Username, even with different passwords. However, we recommend you to use different usernames for different user profiles in User Management and VPN profiles. Vigor2862 Series User’s Guide...
  • Page 570 Here expired time is “Unlimited” means the Time Quota function is not enabled for this account. After login, this account will not be expired until it is logout. In the Web interface of router, the configuration page of Time Quota is shown as below. Vigor2862 Series User’s Guide...
  • Page 571 You will get the following message. The expired time is shown after you login. After you run out the available time, you can’t use this account any more until the administrator manually adds additional time for you. Vigor2862 Series User’s Guide...
  • Page 572 Any modification to the Firewall policy will break down the connections of all current users. They all have to authenticate again for Internet access. Info 2 The administrator may check the current users from User Online Status page. Vigor2862 Series User’s Guide...
  • Page 573 Landing Page is a special feature configured under User Management. It can specify the message, content to be seen or specify which website to be accessed into when users try to access into the Internet by passing the authentication. Here, we take Vigor2862 series router as an example.
  • Page 574 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will see the message of Login Success from the browser you use. Vigor2862 Series User’s Guide...
  • Page 575 Next, enable the Landing Page function. Open User Management -> User Profile and click one of the index number (e.g., index number 3) links. In the following page, check the box of Landing page and click OK to save the settings. Vigor2862 Series User’s Guide...
  • Page 576 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will be directed into the website of www.draytek.com. Vigor2862 Series User’s Guide...
  • Page 577 Click the index number link to view or update the profile settings. Enable Check the box to enable the profile. Comments Shows the description of the profile. Login Mode Shows the login mode used by the profile. See the section Login Mode for details. Vigor2862 Series User’s Guide...
  • Page 578 The following page will appear when users attempt to access the Internet for the first time via the router. After authenticating themselves using either a Facebook or Google account, they will be directed to the landing page and be granted access to the Internet. Vigor2862 Series User’s Guide...
  • Page 579 PIN, they will be redirected to the landing page, indicating that they have been granted Internet access. This login mode presents both Social Login and PIN Code Login modes to the users, and allows them to select their preferred mode of authentication. Vigor2862 Series User’s Guide...
  • Page 580 Click the index link (e.g., #1) of the selected profile to display the following page. Available settings are explained as follows: Item Description Enable this profile Check to enable this profile. Comments Enter a brief description to identify this profile. Choose Login Select the desired Login Mode. Vigor2862 Series User’s Guide...
  • Page 581 If you have chosen Skip Login as the Login Mode, skip to step 4 Whitelisting below. Otherwise, proceed to configure the login page by following steps 2 and 3. If you have selected a Login Mode that requires authentication, select a background for the login page. Vigor2862 Series User’s Guide...
  • Page 582 Available settings are explained as follows: Item Description Choose Login Select either Color Background or Image Background as the login Vigor2862 Series User’s Guide...
  • Page 583 Enter the text to be shown as the webpage title in the browser. Logo Image The DrayTek Logo will be displayed by default. However, you can enter HTML text or upload an image to replace the default logo. Logo Background...
  • Page 584 Preview to preview the selected color. Save and Next Click to save the configuration on this page and proceed to the next page. Cancel Click to abort the configuration process and return to the profile summary page. Vigor2862 Series User’s Guide...
  • Page 585 Enter the text to be displayed as the welcome message. Terms and Enter the text to be displayed as the Terms and Conditions Conditions hyperlink text. Description Terms and Enter the text to be displayed in the Terms and Conditions pop-up Conditions Content window. Vigor2862 Series User’s Guide...
  • Page 586 Enter the secret configured for the APP ID entered above. Refer to section A-2 How to create a Google APP ID for Web Portal Authentication for details. If you have selected PIN login, these settings will appear: Vigor2862 Series User’s Guide...
  • Page 587 Preview to preview the selected color. Enter PIN Enter message to be displayed in the PIN textbox to prompt the Description user to enter the PIN. And finally, the save and cancel buttons are always displayed. Vigor2862 Series User’s Guide...
  • Page 588 Click to abort the configuration process and return to the profile summary page. If you have selected PIN Login as the login mode, you will also need to configure the page that is displayed to users when they request a PIN. Vigor2862 Series User’s Guide...
  • Page 589 Enter text for the label of the hyperlink to return to the previous Description page. PIN Code Message Enter text to be displayed as the body text on the page. Default Country Select the default country code to be displayed using the dropdown Code menu. Vigor2862 Series User’s Guide...
  • Page 590 Enter up to 30 destination IP addresses that are allowed to be accessed. Dest Port Enter up to 30 destination protocols and ports that are allowed through the router. Source IP Enter up to 30 source IP addresses that are allowed through the router. Vigor2862 Series User’s Guide...
  • Page 591 Click to save the configuration on this page and proceed to the next page. Cancel Click to abort the configuration process and return to the profile summary page. In this step you can configure advanced options for the Hotspot Web Portal. Vigor2862 Series User’s Guide...
  • Page 592 WLAN – The current Hotspot Web Portal profile will be in effect for the selected WLAN SSIDs. Cancel Click to abort the configuration process and return to the profile summary page. Finish Click to complete the configuration. Vigor2862 Series User’s Guide...
  • Page 593 Information for the users accessing into Internet via Hotsport Web Portal will be displayed and recorded in this page. Click the MAC address link for certain user, information page related to the selected device will be shown as the following page. Vigor2862 Series User’s Guide...
  • Page 594 Devices; and historical information for device login will be shown on the field of Login History. In addition, to forcefully log out a selected device, simply check the one you want to logout and click the Log Out Device button. Vigor2862 Series User’s Guide...
  • Page 595 Backup and clean up all user info, and start a new record – Vigor router system will backup all existed information on the USB disk onto the host and clean up the information from USB disk. Later, it will start a new record. Vigor2862 Series User’s Guide...
  • Page 596 4. Switch to YES then click Next on pop-up window. 5. Choose country then type phone number, click Send as Text in Get Confirmation Code. Wait confirmation code message received then enter the confirmation code. Click Register to finish the register process. Vigor2862 Series User’s Guide...
  • Page 597 6. Add a New App. Click on My Apps > Add a New App. Choose Website platform. 7. Click Skip and Create App ID on first use. Type Display Name. Choose Category. Click Create App ID. Vigor2862 Series User’s Guide...
  • Page 598 8. Pops up security check window, select the answer, and then click Submit to finish the process. Vigor2862 Series User’s Guide...
  • Page 599 10. Add Platform on My Apps. Go to Settings then click Add Platform. 11. Choose Website in Select Platform window. 12. Enter the Site URL as http://portal.draytek.com. (Note: If you change http port in the vigor, please add http port in URLs. For example, we use 8080 as http port and we'll put http://portal.draytek.com:8080).
  • Page 600 13. Set up Client OAuth. Go to Settings >> Advanced >>Client OAuth Settings, enter "http://portal.draytek.com" in Valid OAuth redirect URIs, and save changes. 14. Go to My Apps>>Status & Review, and switch available status to YES to activate the APP.
  • Page 601 Vigor2862 Series User’s Guide...
  • Page 602 Google account then click Create project. Type project name then click Create. 2. On Dashboard, choose Use Google APIs. 3. Edit Auth Consent screen. Go to Credentials > Auth consent screen. Enter your email, product name and other optional item then click on Save. Vigor2862 Series User’s Guide...
  • Page 603 Create. (Note: If you change http port in the vigor, please add http port in URLs. For example, we use 8080 as http port and we'll put http://portal.draytek.com:8080). 6. Get client ID and client secret. Such information will be used in Vigor Router's Web Portal Setup page.
  • Page 604 Vigor2862 can build virtual private network (VPN) between itself and any other TR-069 CPE by the function of central VPN management. In addition, it can be treated as a server (called CVM server) which can manage TR-069 CPE for periodical firmware upgrade, configuration backup and restoring configuration. Vigor2862 Series User’s Guide...
  • Page 605 CVM WAN interface For Vigor router can manage only the client from WAN interface, therefore you have to specify which interface will be used for such function. If you choose MANUALLY, you have to specify WAN IP address. Vigor2862 Series User’s Guide...
  • Page 606 Encryption Type Choose one of the selections as the encryption type. Local Subnet Type the IP address and subnet mask of local host. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 607 All the CPEs managed by Vigor2862 series can be seen with icons from this page. Before using such feature, make sure the CVM port has been enabled and configured properly. This page allows you to manage the CPEs connected to Vigor2862 series.
  • Page 608 Delete – To disconnect the management of any CPE, click the CPE icon you want and click the Delete button. Double-clicking the CPE icon also can pop up the Managed Device Detail window. However, you cannot modify any data on the window. Vigor2862 Series User’s Guide...
  • Page 609 Only eight remote devices can be managed by Vigor2862 at one time. Therefore, other remote devices detected by Vigor2862 series might not be displayed in such field. Add – Move the selected device from Unmanaged Devices List to Managed Devices List.
  • Page 610 USB disk connecting to Vigor2862, such message will be displayed in this field. Click the icon to see the content inside the USB disk. Set to Factory Default Click to clear all indexes. Index Display the number of the profile that you can edit. Vigor2862 Series User’s Guide...
  • Page 611 Type the name of the maintenance profile. Device Name The drop down list will display all the CPE devices detected by Vigor2862 series. Choose the one which will be applied with such new created profile. Router Name/ It displays the name and model of Vigor router.
  • Page 612 Specify a file name is this field to save the configuration file when Config Backup is selected as Action Type. Schedule Profile Vigor2862 series will perform the specified action to the selected CPE based on the schedule configured here. Specify one or two schedule profiles (represented by number) here.
  • Page 613 Vigor2862 Series User’s Guide...
  • Page 614 An easy and quick method is offered to configure VPN settings for building VPN connection automatically between Vigor2862 series (treated as VPN server) and other Vigor router (treated as CPE device, i.e., VPN client). Available parameters are listed as follows:...
  • Page 615 Once the device is managed (controlled) by Vigor2862 series, it will be displayed on such screen automatically. If not, refer to sections “How to manage the CPE (router) through Vigor2862?” for more detailed information. & & This page offers brief information to identify the CPE connected to Vigor2862 series.
  • Page 616 To manage CPEs through Vigor2862 series, you have to set URL on CPE first and set username and password for Vigor2862 series. For this section, we use Vigor2850 series as the example. All the CPE configuration will be done through Vigor2850 series.
  • Page 617 In the field of ACS Server, type the URL (IP address with port number) of Vigor2862 series and type the same Username and Password defined on the page of Central VPN Management>>General Setup in Vigor2862 series. Then, click Enable for CPE Client and then click OK to save the settings.
  • Page 618 Open WAN>>Internet Access. Use the drop down list of Access Mode on WAN1 to select MPoA (RFC1483/2684). Then, click Details Page. Click Specify an IP address. Type correct WAN IP address, subnet mask and gateway IP address for your CPE. Then click OK. Vigor2862 Series User’s Guide...
  • Page 619 Info Reboot the CPE device and re-log into Vigor2862 series. CPE which has registered to Vigor2862 series will be captured and displayed on the page of Central VPN Management>>CPE Management. Return to the web user interface of Vigor2862 series. Open Central VPN Management>>VPN Management. Now there is one CPE displayed on the field of Unmanaged Devices List.
  • Page 620 When a remote device is managed by Vigor2862 series, it is easy to build VPN between these two devices. Access into the web user interface of Vigor2862 series. Open Central Management>> VPN >>CPE Management. Click the device icon (marked with ) and click the PPTP/IPsec button.
  • Page 621 VPN and Remote Access>>LAN to LAN of the remote device for viewing the detailed information. Note: The profile name is created automatically by the system. Do not modify any value in such page to avoid VPN error. Vigor2862 Series User’s Guide...
  • Page 622 Vigor2850, as an example, is chosen for Vigor2862 to perform the CPE firmware upgrade remotely in this case. Plug in USB storage disk onto Vigor2862 series via USB interface. Make sure the USB disk has been installed correctly, otherwise, the firmware upgrade will not be successful.
  • Page 623 Select to locate it. Specify the Schedule profile. At last, click OK. Now, a new maintenance profile has been created. Click Now to perform the firmware upgrade immediately for Vigor2850. Wait for several minutes for firmware upgrade. Vigor2862 Series User’s Guide...
  • Page 624 Click Managed Devices List. Click the icon of Vigor2850 and click Edit and view the software version. Another way to check if the firmware upgrade is completed or not, simply open Central VPN Management>>Log & Alert. Vigor2862 Series User’s Guide...
  • Page 625 The parameters configured for Load Balance can help to distribute the traffic for all of the access points registered to Vigor router. Thus, the bandwidth will not be occupied by certain access points. Vigor2862 Series User’s Guide...
  • Page 626 This page shows VigorAP’s information about Status, Event Log, Total Traffic or Station Number by displaying VigorAP icon, text and histogram. Just move and click your mouse cursor on Status, Event Log, Total Traffic or Station Number. Corresponding web pages will be open immediately. Vigor2862 Series User’s Guide...
  • Page 627 Display the firmware version used by the access point. Password Vigor2862 can get related information of the access point by accessing into the web user interface of the access point. This button is used to modify the logging password of the connected access point. Vigor2862 Series User’s Guide...
  • Page 628 Renamed as. Last, click Apply to save the settings on this dialog. The new profile has been created with the settings coming from the original profile. To AP Click it to apply the selected wireless profile to the specified Access Point. Vigor2862 Series User’s Guide...
  • Page 629 If required, these settings also can be applied to Vigor router. Select and check one of wireless profiles and click this button to apply the settings onto the WI-Fi wireless settings configured for such Vigor router. Vigor2862 Series User’s Guide...
  • Page 630 1. Select the WLAN profile (index number 1 to 5) you want to edit. 2. Click the index number link to display the following page. Vigor2862 Series User’s Guide...
  • Page 631 Info The function of Auto Provision is available for the default WLAN profile. 3. After finished the general settings configuration, click Next to open the following page for 2.4G wireless security settings. Vigor2862 Series User’s Guide...
  • Page 632 4. After finished the above web page configuration, click Next to open the following page for 5G wireless security settings. 5. When you finished the above web page configuration, click Finish to exit and return to the first page. The modified WLAN profile will be shown on the web page. Vigor2862 Series User’s Guide...
  • Page 633 AP, reboot the selected AP remotely and perform the factory reset for the selected AP. File/Path Specify the file and the path which will be used to perform Config Restore or Firmware Upgrade. Vigor2862 Series User’s Guide...
  • Page 634 Display the total number of VigorAP configured. Clients Display the number of clients accessing Internet through the VigorAP. Dimension(m) Display the width and length of the AP map. View Click it to review the layout for the selected AP map. Vigor2862 Series User’s Guide...
  • Page 635 PNG are supported) for floor plan. Cancel Click it to cancel the configuration. Next Click it to go to the next configuration page. Click Next. In the web page of Dimension, set dimension for the map. Vigor2862 Series User’s Guide...
  • Page 636 The values for length and width will be displayed on the web page. Click Next to open the web page of Planning. Available APs detected by Vigor router will be displayed on the upper end. Vigor2862 Series User’s Guide...
  • Page 637 Select the AP you need; drag and drop an AP icon from upper end to the map on the bottom. Check the box of Show AP Coverage and choose 2.4GHz or 5GHz of wireless signal for the AP located on the floor plan. Vigor2862 Series User’s Guide...
  • Page 638 Adjust the AP on the map to find out which place can have the best wireless coverage. At last, click Save. Vigor2862 Series User’s Guide...
  • Page 639 LAN-B, daily or weekly for viewing data transmission chart. Click Refresh to renew the graph at any time. The horizontal axis represents time; the vertical axis represents the transmission rate (in kbps). Info Enabling/Disabling such function will also enable/disable the External Devices function. Vigor2862 Series User’s Guide...
  • Page 640 Vigor2862 will be used to detect other access points and send the scanned results to Vigor2862. Later, the scanned result will be displayed on this page. Local WLAN Detection – The router will detect all the access Vigor2862 Series User’s Guide...
  • Page 641 AP is friendly and which one is Rogue respectively. Follow the steps below to perform the classification of access points. 1. Click the radio button on one of the access points. In this case, DrayTek-LAN-A is selected. 2. Later, some options will appear on the bottom of the page.
  • Page 642 AP, simply choose the one and click Delete. Later, the page will refresh and the one will be classified as Unknown. 3. Click OK to save the settings. The following figure shows the APs classified and displayed in different colors. Vigor2862 Series User’s Guide...
  • Page 643 Time and event log for all of the APs managed by Vigor router will be shown on this page. It is userful for troubleshooting if required. Such page will display the total traffic of data receiving and data transmitting for VigorAPs managed by Vigor router. Vigor2862 Series User’s Guide...
  • Page 644 (2.4G WLAN or 5G WLAN) used by wireless clients to access into Internet through VigorAP. The parameters configured for Load Balance can help to distribute the traffic for all of the access points registered to Vigor router. Thus, the bandwidth will not be occupied by certain access points. Vigor2862 Series User’s Guide...
  • Page 645 All APs – All APs shall be applied with the load balance. Specific APs – The function of load balance will be applied to the AP specified in this field. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 646 List the AP management functions that the Access Points support under different firmware versions. Vigor2862 Series User’s Guide...
  • Page 647 Edit button be available. Then, click the Edit button. When the following configuration page appears, make the changes you want and check Apply to All APs. Then, click Next to access into the next page. Vigor2862 Series User’s Guide...
  • Page 648 “plug and play” and “zero-configuration”. The following page allows you to modify related settings for 2.4G SSID of managed AP. Make the changes you want for 2.4G SSID. Click Next for next page. Vigor2862 Series User’s Guide...
  • Page 649 AP. Continue to make any changes you want. After finished all of the changes, simply click Finish. Now, the AP (represented with AP800_00507F6EE4980) detected by Vigor router will be applied with the settings modified by Vigor router. Vigor2862 Series User’s Guide...
  • Page 650 Before checking the switch status, go to Central Management>>External Device to enable External Device Auto Discovery. Wait for the system to display available device(s). Later, open Central Management>>Switch>>Status. Available VigorSwitch to be managed by such router will be listed under the New Switch List. Vigor2862 Series User’s Guide...
  • Page 651 Add New Such button will appear only when there is more than one switch connected to Vigor2862. The one under New Switch List is allowed to be managed under current used group. Simply click Add New. Vigor2862 Series User’s Guide...
  • Page 652 Such page displays the hierarchy of VigorSwitch(es) managed under Vigor2862. Please note that, Shutdown Port is available for LAN port of VigorSwitch connects to a LAN device. When it is checked, after clicking OK, the network connection between that device and VigorSwitch will be terminated. Vigor2862 Series User’s Guide...
  • Page 653 This page will show general information, such as name, group, IP address, MAC address, model and password of VigorSwitch only when it connects to Vigor2862 series. By clicking the index number link, a profile setting page for that switch will be shown. Note that each profile represents one VigorSwitch.
  • Page 654 Note, if there is only one VigorSwitch connected and managed by Vigor2862 series, then such field is unavailable. Login Password Display the original login password for the VigorSwitch. However, if Group Password (in Central Management >>Switch>>Group) is configured with other string, then such...
  • Page 655 Item Description Description If required, type a brief description to explain the device connected to VigorSwitch via the LAN port. Port Control Disable Port – The port (e.g, Port 2 in this case) which is used Vigor2862 Series User’s Guide...
  • Page 656 Through the common password setting, it is not necessary for the system administrator to remember various login passwords to access into different VigorSwitch devices. Click any index number link to create a new switch group. Vigor2862 Series User’s Guide...
  • Page 657 Group Password Type a password that administrator can use to access into the managed VigorSwitch connecting to Vigor2862 series. All of the switches under the same group can be accessed into via such group password. Existing Switch Display all of the VigorSwitch devices connecting to Vigor2862.
  • Page 658 Click it to immediately perform the action (configuration backup, configuration restore, remote reboot and factory reset) on the device(s) listed in Selected Device. Cancel Click it to cancel the setting changes. Vigor2862 Series User’s Guide...
  • Page 659 This page is used to define the name of alert, level of alert (in color), and determine to record the data in the database, or send a notification message to the user based on the level. Available settings are explained as follows: Item Description Alert and Log Check it to enable this feature. Vigor2862 Series User’s Guide...
  • Page 660 Enable – Check it to enable alert mechanism for VigorSwitch. Port Alert Enable - Check it to enable alert mechanism for each port of VigorSwitch. Click the Switch Name link (e.g., G2260 in this case) to get detailed settings. Vigor2862 Series User’s Guide...
  • Page 661 Alert Setup. Port Alert Port – Available Ethernet ports for the selected VigorSwitch (e.g., G2260 in this case) will be shown on this page. Each port can be confgiured with different alert level for diffent alert event. Vigor2862 Series User’s Guide...
  • Page 662 OK – Click it to save the configuration. Log related to the items selected above will be shown in Alert Logs list. Alert Logs This area displays logs (level name, time, type, switch, port, and incident) related to VigorSwitch managed by Vigor router. Vigor2862 Series User’s Guide...
  • Page 663 Backup and clean up all user infor, and start a new record - Only the newest events will be recorded by the system. After finished the settings, click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 664 This page lists all models of VigorSwitch which can be managed by Vigor2862 via Central Management>>Switch. Vigor2862 Series User’s Guide...
  • Page 665 From this web page, check the box of External Device Auto Discovery. Later, all the available devices will be displayed in this page with icons and corresponding information. You can change the device name if required or remove the information for off-line device whenever you want. Vigor2862 Series User’s Guide...
  • Page 666 When you finished the configuration, click OK to save it. Info Only DrayTek products can be detected by this function. Vigor2862 Series User’s Guide...
  • Page 667 USB device connected on Vigor router can be regarded as a server or WAN interface. By way of Vigor router, clients on LAN can access, write and read data stored in USB storage disk with different applications. Vigor2862 Series User’s Guide...
  • Page 668 Define objects such as IP address, service type, keyword, file extension and others. These pre-defined objects can be applied in CSM. Vigor2862 Series User’s Guide...
  • Page 669 Later, we can select that object/group for applying it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions. Vigor2862 Series User’s Guide...
  • Page 670 Type a string of the IP object that you wan to search. Index Display the profile number that you can configure. Name Display the name of the object profile. Address Display the IP address configured for the object profile. Vigor2862 Series User’s Guide...
  • Page 671 IP or IP range for WAN or LAN/DMZ/RT/VPN or any IP address. If you choose LAN/DMZ/RT/VPN as the Interface here, and choose LAN/DMZ/RT/VPN as the direction setting in Edit Filter Rule, then all the IP addresses Vigor2862 Series User’s Guide...
  • Page 672 If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. Vigor2862 Series User’s Guide...
  • Page 673 Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2862 Series User’s Guide...
  • Page 674 You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2862 Series User’s Guide...
  • Page 675 Type the start IPv6 address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Prefix Length Type the number (e.g., 64) for the prefix length of IPv6 address. Vigor2862 Series User’s Guide...
  • Page 676 Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2862 Series User’s Guide...
  • Page 677 Objects chosen above will be shown in this box. Selected IPv6 Objects Click >> button to add the selected IPv6 objects in this box. After finishing all the settings, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 678 You can set up to 96 sets of Service Type Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2862 Series User’s Guide...
  • Page 679 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. Vigor2862 Series User’s Guide...
  • Page 680 This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. Vigor2862 Series User’s Guide...
  • Page 681 Objects Setting>>Service Type Object will be shown in this box. Selected Service Type Click >> button to add the selected IP objects in this box. Objects After finishing all the settings, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 682 You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2862 Series User’s Guide...
  • Page 683 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 684 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Vigor2862 Series User’s Guide...
  • Page 685 All the files with the extension names specified in these profiles will be processed according to the chosen action. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2862 Series User’s Guide...
  • Page 686 Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2862 Series User’s Guide...
  • Page 687 Display the service provider which offers SMS service. To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. Vigor2862 Series User’s Guide...
  • Page 688 Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 689 Display the name of this profile. It cannot be modified. Service Provider Type the website of the service provider. Type the URL string in the box under the filed of Service Provider. You have to contact your SMS provider to obtain the exact URL string. Vigor2862 Series User’s Guide...
  • Page 690 Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Vigor2862 Series User’s Guide...
  • Page 691 Username – Type a name for authentication. The maximum length of the name you can set is 31 characters. Password – Type a password for authentication. The maximum length of the password you can set is 31 characters. Vigor2862 Series User’s Guide...
  • Page 692 You can set an object with different monitoring situation. To set a new profile, please do the steps listed below: 1. Open Object Setting>>Notification Object, and click the number (e.g., #1) under Index column for configuration in details. Vigor2862 Series User’s Guide...
  • Page 693 Central VPN Management is checked. Once such profile is enabled, Vigor router system will send out notification to the recipient via SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 694 Display the number link of the string profile. String Display the string defined. Clear Choose the string that you want to remove. Then click this check box to delete the selected string. Below shows an example to apply string object (in Route Policy): Vigor2862 Series User’s Guide...
  • Page 695 (refer to the following figure for example). To set a new profile, please do the steps listed below: 1. Open Object Setting>>Country Object, and click the number (e.g., #1) under Index column for configuration in details. Vigor2862 Series User’s Guide...
  • Page 696 Selected Country. Selected Country Note that one country profile can contain 1 up to 16 countries. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2862 Series User’s Guide...
  • Page 697 Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider setting. In the following page, type the username and password and set the quota that the router can send the message out. Vigor2862 Series User’s Guide...
  • Page 698 Choose any index number (e.g., Index 1 in this case) to configure conditions for sending the SMS. In the following page, type the name of the profile and check the Disconnected and Reconnected boxes for WAN to work in concert with the topic of this paper. Vigor2862 Series User’s Guide...
  • Page 699 Click OK to save the settings. Later, if one of the WAN connections fails in your router, the system will send out SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully. Vigor2862 Series User’s Guide...
  • Page 700 URL string of the SMS provider and type the username and password. After clicking OK, the new added SMS provider will be added and will be available for you to specify for sending SMS out. Vigor2862 Series User’s Guide...
  • Page 701 USB ports on Vigor router are allowed to connect to USB modem. Models of the modems supported by Vigor router can be seen from USB Application>>Modem Support List. For network connection via USB modem, refer to WAN>>Internet Access and WAN>>General Setup for detailed information. Vigor2862 Series User’s Guide...
  • Page 702 FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage disk at one time. Default Charset - At present, Vigor router supports four types of character sets. Default Charset is for English based file name. Vigor2862 Series User’s Guide...
  • Page 703 USB storage disk must type the same username and password configured in this page. Before adding or modifying settings in this page, please insert a USB storage disk first. Otherwise, an error message will appear to warn you. Click index number to access into configuration page. Vigor2862 Series User’s Guide...
  • Page 704 ON, you cannot type any new folder name in this field. Only “/” can be used in such case. to open the following dialog to add any You can click new folder which can be specified as the Home Folder. Vigor2862 Series User’s Guide...
  • Page 705 Available settings are explained as follows: Item Description Click this icon to refresh files list. Refresh Click this icon to return to the upper directory. Back Click this icon to add a new folder. Create Current Path Display current folder. Vigor2862 Series User’s Guide...
  • Page 706 FTP server. Username It displays the username that user uses to login to the FTP server. When you insert USB device into the Vigor router, the system will start to find out such device within several seconds. Vigor2862 Series User’s Guide...
  • Page 707 A USB Thermometer is now available. It complements your installed DrayTek router installations which will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating. During summer in particular, it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures.
  • Page 708 Enable Syslog Alarm - The temperature log will be recorded on Syslog if it is enabled. Upper temperature limit/Lower temperature limit - Type the upper limit and lower limit for the system to send out temperature alert. Below shows an example of temperature graph: Vigor2862 Series User’s Guide...
  • Page 709 Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router. Vigor2862 Series User’s Guide...
  • Page 710 SMB Client Support List provides the test status information for applications with file sharing operated under different platforms. Vigor2862 Series User’s Guide...
  • Page 711 Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable SMB service. Vigor2862 Series User’s Guide...
  • Page 712 Vigor2862 Series User’s Guide...
  • Page 713 "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2862 Series User’s Guide...
  • Page 714 Now, users in LAN of Vigor2862 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. Vigor2862 Series User’s Guide...
  • Page 715 This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Vigor2862 Series User’s Guide...
  • Page 716 Backing to factory default setting if necessary.  If all above stages are done and the router still cannot run normally, it is the time for you to contact your dealer or DrayTek technical support for advanced help. Vigor2862 Series User’s Guide...
  • Page 717 (e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Vigor2862 Series User’s Guide...
  • Page 718 Refresh Click it to reload the page. Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2862 Series User’s Guide...
  • Page 719 Available settings are explained as follows: Item Description Show Specify LAN and VLAN to display related information. In default, this page will display all of the information about LAN and VLAN. Refresh Click it to reload the page. Vigor2862 Series User’s Guide...
  • Page 720 This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2862 Series User’s Guide...
  • Page 721 It displays the MAC address for the specified PC that DHCP assigned IP address for it. Leased Time It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. Vigor2862 Series User’s Guide...
  • Page 722 It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. Vigor2862 Series User’s Guide...
  • Page 723 Click OK to enable such function. It means when the TTL value of each DNS query reaches the threshold of the value specified here, the corresponding record will be deleted from router’s Cache automatically. Vigor2862 Series User’s Guide...
  • Page 724 Available settings are explained as follows: Item Description IPV4 /IPV6 Choose the interface for such function. Ping through Use the drop down list to choose the WAN/LTE interface that you want to ping through or choose Auto to be determined Vigor2862 Series User’s Guide...
  • Page 725 Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Vigor2862 Series User’s Guide...
  • Page 726 RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Vigor2862 Series User’s Guide...
  • Page 727 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2862 Series User’s Guide...
  • Page 728 WAN1/WAN2/WAN3/LTE/WAN4 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2862 Series User’s Guide...
  • Page 729 Click Diagnostics and click VPN Graph to open the web page. Vigor2862 Series User’s Guide...
  • Page 730 Available settings are explained as follows: Item Description IPv4 / IPv6 Click one of them to display corresponding information for it. Trace through Use the drop down list to choose the interface that you want to ping through. Vigor2862 Series User’s Guide...
  • Page 731 Click this link to save the data as a file. Refresh Click this link to refresh this page manually. Clear Click this link to clear information on this page. Display Mode There are two modes for you to choose. Vigor2862 Series User’s Guide...
  • Page 732 If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Available settings are explained as follows: Item Description Refresh Click this link to refresh this page manually. Vigor2862 Series User’s Guide...
  • Page 733 Such page is useful for RD debug or web technician. All of the routers under the same DARP (DrayTek Address resolution Protocol) group can be viewed in such page. However, only partial information of the router status will be displayed.
  • Page 734 “Equal” means the corresponding settings are equal to the primary router. Cached Time Display the time period since the last time to get the newest status of other router (except the primary router). Vigor2862 Series User’s Guide...
  • Page 735 When the mouse cursor moves to the name link under User Name, the connection message (including authentication failed information) about internal RADIUS or local 802.1X service will be shown by a popped up dialog box. This page will display the complete authentication log information. Vigor2862 Series User’s Guide...
  • Page 736 Always record the new event – only the newest events  will be recorded by the system. Time Display the time the user authenticated by Vigor2862 series. Message Display authentication information done by Vigor2862 series. Vigor2862 Series User’s Guide...
  • Page 737 Moreover, IP address detected and suspected to attack the network system can be blocked shortly by clicking the Block button shown on pages of SYN Flood, UDP Flood and ICMP Flood. Info The icon - - means there is something wrong (e.g., attacking the system) with that IP address. Vigor2862 Series User’s Guide...
  • Page 738 IP list in the right frame will be blocked by Vigor system permanatly. Remove – It is used to remove selected IP address from the Blocking IP List. Refresh Click this link to refresh current page. Vigor2862 Series User’s Guide...
  • Page 739 Analyze multiple packets… - Choose such mode to make Vigor router analyze how multiple packets in a specified file will be sent by a route policy. Packet Information Specify the nature of the packets to be analyzed by Vigor router. Vigor2862 Series User’s Guide...
  • Page 740 If required, click export analysis to export the result as a file. Note that the analysis was based on the current "load-balance/route policy" settings, we do not guarantee it will be 100% the same as the real case. Vigor2862 Series User’s Guide...
  • Page 741 Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “I-2 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2862 Series User’s Guide...
  • Page 742 Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. Vigor2862 Series User’s Guide...
  • Page 743 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. Vigor2862 Series User’s Guide...
  • Page 744 Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2862 Series User’s Guide...
  • Page 745 Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2862 Series User’s Guide...
  • Page 746 Vigor2862 Series User’s Guide...
  • Page 747  If the problem of LEDs cannot be solved by the above measures, please contact with the nearest reseller, or send an e-mail to DrayTek FAE for technical support.  Check if the settings offered by ISP are configured well or not.
  • Page 748 PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek.
  • Page 749 While the router is running (ACT LED blinking), press the Factory Reset button and hold for more than 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. Vigor2862 Series User’s Guide...
  • Page 750 If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor2862 Series User’s Guide...
  • Page 751 VLAN helps you to solve these situations, and DrayTek’s products support bellow two popular types:...
  • Page 752 P1 and P2 are doing NAT flow to access to the internet, but P3 and P4 will forward the packets between WAN and LAN ports directly. So far, there are two kinds of open system on Vigor router. One is DrayOS, which is DrayTek owned, and another is Linux-like which customized by DrayTek from OpenWRT. Here DrayOS system is going to be introduced to you because it is the most stable and superfast booting system in DrayTek products.
  • Page 753 Vigor2862 Series User’s Guide...
  • Page 754  Multi Subnet (VLAN of LAN) Vigor2862 Series User’s Guide...
  • Page 755 Port-based is able to extend the wired ports by installing a cheaper dumb switch as many as you need, but Tag-based offers you a flexible and well-managed network. The networks are isolated, secured and reduce the broadcasting storm effectively in each of networks with VLAN.  Guest Network Vigor2862 Series User’s Guide...
  • Page 756 Tag enabled.  Triple Play (Multi-WAN) NAT mode with VLAN Following settings, the set-top box (STB) is able to attach with any LAN port. Video streaming which your ISP provided will be played on your monitor. Vigor2862 Series User’s Guide...
  • Page 757 Vigor2862 Series User’s Guide...
  • Page 758 Set-top box (STB) or the other kinds of media devices are able to attach with Port4 or Port5 of LAN. Those devices that attached with Port4 or Port5 are able to access the services network directly which your ISP provided. Vigor2862 Series User’s Guide...
  • Page 759 Vigor2862 Series User’s Guide...
  • Page 760 If you have changed the default, enter the current IP address of the router. Next, type admin/admin for Account/Password. Then, type ?. You will see a list of valid/common commands depending on the router that your use. Vigor2862 Series User’s Guide...
  • Page 761 For users using previous Windows system (e.g., 2000/XP), simply click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Next, type admin/admin for Account/Password. And, type ? to get a list of valid/common commands. Vigor2862 Series User’s Guide...
  • Page 762 : 00000000 DSLAM CHIPSET VENDOR : < ADI > > This command can set the Internet Access mode for the router. adsl ppp [ ? | pvc_no vci vpi Encap Proto modu acqIP idle [Username Password] Vigor2862 Series User’s Guide...
  • Page 763 This parameter is used only for PPPoE/PPPoA Password This parameter is used only for PPPoE/PPPoA You have to reboot the system when you set it on Route mode. > adsl ppp o 35 8 1 1 4 1 -1 draytek draytek pvc no.=0 vci=35 vpi=8...
  • Page 764 It means the number of LAN port (x=2~4). Port 1 is locked for NAT. > adsl bridge 4 on p2 p3 PVC Bridge Service Type ------------------------------------------------------------ Normal -1(OFF) PVC 0 & 1 can't set for bridge mode. Please use 'save' to save config. Vigor2862 Series User’s Guide...
  • Page 765 4. Now, it is on continuous sending mode, and adsl2/2+ led is always ON. 5. Use 'adsl reboot' to restart dsl to normal mode. This command can reboot the router. > adsl reboot % Adsl is Rebooting... Vigor2862 Series User’s Guide...
  • Page 766 Some ISP might set the vci value under 32. In such case, we can cancel such limit manually by using this command. Do not set the number greater than 254. adsl vcilimit [n] The number shall be between 1 ~ 254. > adsl vcilimit 33 change VCI limitation from 32 to 33. Vigor2862 Series User’s Guide...
  • Page 767 This command can display the allocation for each Bin (Tone) SNR, Gain, and Bits. adsl showbins [startbin endbin | up] Parameter Description startbin The number is between 0 ~ 4092. endbin The number is between 4 ~ 4095. Show upstream information. > adsl showbins 2 30 DOWNSTREAM : Vigor2862 Series User’s Guide...
  • Page 768 [0: default(=3), 2: OFF, 3: ON , 4: DYNAMIC_SOS] retx [US] = ON, [DS] = aelem G.Vector This command can save the configuration into FLASH with a file format of cfg. > adsl savecfg % Xdsl Cfg Save OK! Vigor2862 Series User’s Guide...
  • Page 769 It means Sustainable Cell Rate. It means Maximum Burst Size. status It means to display PCR/SCR/MBS setting. > adsl atm pcr 1 200 max % PCR is 200 for pvc 1. > adsl atm pcr status channel --------------------------- Vigor2862 Series User’s Guide...
  • Page 770 This command is used to display information about CO or CPE. adsl inventory [co|cpe] Parameter Description It means DSLAM (Digital Subscriber Line Access Multiplexer) or CO (Central Office). It means CPE (Customer Premise Equipment). > adsl inventory co xDSL inventory info only available in showtime. Vigor2862 Series User’s Guide...
  • Page 771 This command can make the router accessing into the idle status. If you want to invoke the router again, you have to reboot the router by using “reboot” command. vdsl idle [on | tcpmessage | tcpmessage_off] Parameter Description DSL is under test mode. DSL debug tool mode is off. Vigor2862 Series User’s Guide...
  • Page 772 This command can display the allocation for each Bin (Tone) SNR, Gain, and Bits. vdsl showbins [startbin endbin | up] Parameter Description startbin The number is between 0 ~ 4092. endbin The number is between 4 ~ 4095. Show upstream information. Vigor2862 Series User’s Guide...
  • Page 773 ON, [DS] = aelem G.Vector This command can save the configuration into FLASH with a file format of cfg. > vdsl savecfg % Xdsl Cfg Save OK! This command allows you to configure user-defined CPE vendor ID. Vigor2862 Series User’s Guide...
  • Page 774 : 0XB5004946544E0000 System country code : 0XB500 System provider code : IFTN System vendor info : 0X000 Version number : 3.8.2_RC4a_STD Version number(16 octets) : 0X332E382E325F524334615F5354440000 Self-test result : PASS Transmission mode capability : 0X40004004C010400 > Vigor2862 Series User’s Guide...
  • Page 775 ACTION Specify the action of the application, 0 or 1. 0: Block. All of the applications meet the CSM rule will be blocked. 1: Pass. All of the applications meet the CSM rule will be passed. Vigor2862 Series User’s Guide...
  • Page 776 Specify the index number of CSM profile, from 1 to 32. View the configuration status of IM group. View the configuration status of P2P group. View the configuration status of protocol group. View the configuration status of Others group. > csm appe config -v 1 -m Vigor2862 Series User’s Guide...
  • Page 777 Vigor router specifies WAN interface automatically. Specify the WAN interface for signature downloading. > csm appe interface wan1 Download interface is set as "WAN1" now. > csm appe interface auto Download interface is set as "auto-selected" now. Vigor2862 Series User’s Guide...
  • Page 778 It means to specify the index number of CSM profile, from 1 to 8. It means to set the profile name. PROFILE_NAME It means to specify the name of the profile (less than 16 characters) Set the priority (defined by the number specified in VALUE) for the profile. Vigor2862 Series User’s Guide...
  • Page 779 INDEX uac -i E|D csm ucf obj INDEX uac -o KEY_WORD_Object_Index csm ucf obj INDEX uac -g KEY_WORD_Group_Index Parameter Description INDEX It means to specify the index number of CSM profile, from 1 to 8. Vigor2862 Series User’s Guide...
  • Page 780 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] [v]Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- Vigor2862 Series User’s Guide...
  • Page 781 Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] [v] Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- Vigor2862 Series User’s Guide...
  • Page 782 P: Pass. The web access meets the web feature will be passed. It means to set the profile name. PROFILE_NAME It means to specify the name of the profile (less than 16 characters) It means the log type of the profile. They are: Vigor2862 Series User’s Guide...
  • Page 783 Transportation, Compromised, Dating & Personals, , Education, Finance, Government,Health & Medcine, News, Non-profits & NGOs, Personal Sites,Politics, Real Estate, Rligion, Restaurants & Dining,Shopping, Translators, General, Cults,Greetig cards, Image Sharing, Network Errors, Parked Domains, Private IP Addresses) Vigor2862 Series User’s Guide...
  • Page 784 CACHE_TIME csm dnsf blockpage show/on/off csm dnsf profile_show csm dnsf profile_edit INDEX csm dnsf profile_edit INDEX -n PROFILE_NAME csm dnsf profile_edit INDEX -l N|P|B|A csm dnsf profile_edit INDEX -w WCF_PROFILE csm dnsf profile_edit INDEX -u UCF_PROFILE Vigor2862 Series User’s Guide...
  • Page 785 1 to 24; 1 is one hour, 2 is two hours, and so on ...) for DNS filter. > csm dnsf service 2 dns service set up!!! >csm dnsf service 3 wcf profile 3 is empty..>csm dnsf cachetime 1 dns cache time set up!!! Vigor2862 Series User’s Guide...
  • Page 786 It means to specify the name of flooding attack(s) or portscan, e.g., synflood, udpflood, icmpflood, or postscan. THRESHOLD It means the packet rate (packet/second) that a flooding attack will be detected. Set a value larger than 20. Vigor2862 Series User’s Guide...
  • Page 787 It means to set PPP Authentication Type and n means different types (represented by 0-1). n=0: PAP/CHAP (this is default setting) n=1: PAP Only -t n It means to set connection duration and n means different conditions. Vigor2862 Series User’s Guide...
  • Page 788 -N <apn name> Set (DHCP mode) APN Name (max. 47 characters) -U n (DHCP mode) MTU(1000-1440) >internet -M 1 -S tcom -u username -p password -a 0 -t -1 -i 0.0.0.0 WAN1 Internet Mode set to PPPoE/PPPoA Vigor2862 Series User’s Guide...
  • Page 789 Display an IP address which allows users set as the public subnet IP address. public subnet IP address Specify an IP address. The system will set the one that you specified as the public subnet IP address. > ip pubaddr ? % ip addr <public subnet IP address> Vigor2862 Series User’s Guide...
  • Page 790 0 (disable) or 1 (enable). wanX Add or remove an address for WAN interface. index Type the index number of the table displayed on your screen. > ip aux add 192.168.1.65 1 % 192.168.1.65 has added in index 2. Vigor2862 Series User’s Guide...
  • Page 791 IP address of the PC must be fixed with the same LAN IP address (network segment) set by this command for accessing into the web user interface of the router. Later, modify the start addresses for the DHCP server. Vigor2862 Series User’s Guide...
  • Page 792 3: enable to accept illegal dest mac address 4: Decline VRRP mac into arp table 5: Accept VRRP mac into arp table status: display the setting status. Time Available settings will be 10, 20, 30,..2550 seconds. Vigor2862 Series User’s Guide...
  • Page 793 It means to release current WAN IP address. renew It means to renew the WAN IP address and obtain another new one. status It displays current status of DHCP client. >ip dhcpc status I/F#3 DHCP Client Status: Vigor2862 Series User’s Guide...
  • Page 794 [Host/IP address] [WAN1/WAN2/WAN3/WAN4/WAN5] [Udp/Icmp] Parameter Description IP address It means the target IP address. WAN1/WAN2 It means the WAN port that the above IP address passes through. Udp/Icmp It means the UDP or ICMP. Vigor2862 Series User’s Guide...
  • Page 795 This command allows users to set the RIP (routing information protocol) of IP. ip rip [0/1/2] Parameter Description 0/1/2 0 means disable; 1 means first subnet and 2 means second subnet. > ip rip 1 %% Set RIP 1st subnet. Vigor2862 Series User’s Guide...
  • Page 796 <ifno> 1: WAN1,2: WAN2 3: PVC3,4: PVC4,5: PVC5 -e <0/1> 0: disable, 1: enable Now status: WAN[1] Rip Protocol disable WAN[2] Rip Protocol disable WAN[3] Rip Protocol disable WAN[4] Rip Protocol disable WAN[5] Rip Protocol enable Vigor2862 Series User’s Guide...
  • Page 797 > ip route add 172.16.2.0 255.255.255.0 172.16.2.4 3 static > ip route status Codes: C - connected, S - static, R - RIP, * - default, ~ - private 192.168.1.0/ 255.255.255.0 is directly connected, LAN1 172.16.2.0/ 255.255.255.0 via 172.16.2.4, WAN1 Vigor2862 Series User’s Guide...
  • Page 798 %IGMP Proxy Interface: WAN5(PVC) %WAN5 for Router-borne Application/ IPTV on/off: ON > ip igmp_proxy query 130000 This command is for setting IGMP General Query Interval The default value is 125000 ms Current Setting is:130000 ms > Vigor2862 Series User’s Guide...
  • Page 799 It means to display the current settings. show It means to display all session limit settings in the IP range. timer [num] It means to set when the IP session block works. The unit is second. Vigor2862 Series User’s Guide...
  • Page 800 It means to display all the bandwidth limits settings within the IP range. It means to add the bandwidth within the IP range. It means to delete the bandwidth within the IP range. IP1-IP2 It means the range of IP address specified for this command. Vigor2862 Series User’s Guide...
  • Page 801 It means to type the IP address for binding with specified MAC address. It means to type the MAC address for binding with the IP address specified. Comment It means to type words as a brief description. It means to delete all the IP bindmac settings. Vigor2862 Series User’s Guide...
  • Page 802 > ip bindmac add 192.168.1.46 00:50:7f:22:33:55 just for test > ip bindmac show ip bind mac function is turned ON IP : 192.168.1.46 bind MAC : 00-50-7f-22-33-55 Comment : just Vigor2862 Series User’s Guide...
  • Page 803 IP address. ip_range: Indicates a range of IP addresses. ip_subnet: Indicates the IP subnet. domain: Indicates the domain name. -3 [any/range] Specify the destination port mode. Range: Indicate a range of port number. Vigor2862 Series User’s Guide...
  • Page 804 It means to specify the interface for failover. Value: Avaialbe interfaces include, NO_FAILOVER, Default_WAN, Policy1 ~ Policy60 LAN1 ~ LAN8 IP_Routed_Subnet, DMZ_Subnet, WAN1 ~ WAN5, VPN_PROFILE_1 ~ VPN_PROFILE_100, WAN_1_IP_ALIAS_1 ~ WAN_4_IP_ALIAS_8 -b [value] It means “failback”. Vigor2862 Series User’s Guide...
  • Page 805 […] means that you can type in several commands in one line. -a <IP Address> Set forwarded DNS server IP Address. -d <DNS server mapping Delete the selected LAN DNS profile. index number> -e <0/1> 0: disable such function. 1: enable such function. Vigor2862 Series User’s Guide...
  • Page 806 Set domain name. -p <profile name> Set profile name for LAN DNS. Reset the settings for selected profile. > ip dnsforward -i 1 -n ftp.drayTek.com % Configure Set1's DomainName:ftp.drayTek.com > ip dnsforward -i 1 -a 172.16.1.1 % Configure Set1's IP:172.16.1.1 >...
  • Page 807 > ip6 dhcp req_opt WAN2 -a % Interface WAN2 is set to request following DHCPv6 options: sip name > This command allows you to use DHCPv6 protocol to obtain IPv6 address from server. ip6 dhcp client [WAN1|WAN2|iface#] [-<command> <parameter>| ... ] Vigor2862 Series User’s Guide...
  • Page 808 It means to set the end IPv6 address of the address pool. -d<addr> It means to set the first DNS IPv6 address. -D<addr> It means to set the second DNS IPv6 address. -c<parameter> It means to send rapid commit to server. 1: Enable Vigor2862 Series User’s Guide...
  • Page 809 The available commands with parameters are listed below. <parameter>|…] […] means that you can type in several commands in one line. -m n It means to set IPv6 MTU. N = any value (0 means “unspecified”). -u <username> It means to set Username. Vigor2862 Series User’s Guide...
  • Page 810 It means to set AICCU always on. 1=On, 0=Off > ip6 internet -W 2 -M 2 -u 88886666 -p draytek123456 –s amsterdam.freenet6.net This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. > system reboot Vigor2862 Series User’s Guide...
  • Page 811 Neighbour 2001:2222:3333::1111 successfully added! > ip6 neigh -a I/F ADDR STATE ------------------------------------------------------------------------- LAN FF02::1 33-33-00-00-00-01 CONNECTED WAN2 2001:5C0:1400:B::10B8 00-00-00-00-00-00 CONNECTED WAN2 2001:2222:3333::1111 00-00-00-00-00-00 CONNECTED WAN2 2001:2222:6666::1111 00-00-00-00-00-00 CONNECTED WAN2 :: 00-00-00-00-00-00 CONNECTED LAN :: NONE > Vigor2862 Series User’s Guide...
  • Page 812 It means the gateway of the router. LAN|WAN1|WAN2|iface# It means to specify LAN or WAN interface for such address. > ip6 route -s FE80::250:7FFF:FE12:500 16 FE80::250:7FFF:FE12:100 LAN Route FE80::250:7FFF:FE12:500/16 successfully added! > ip6 route -a LAN Vigor2862 Series User’s Guide...
  • Page 813 Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Packets: Sent = 5, Received = 5, Lost = 0 <% loss> > Vigor2862 Series User’s Guide...
  • Page 814 > ip6 tspc 2 Local Endpoint v4 Address : 111.243.177.223 Local Endpoint v6 Address : 2001:05c0:1400:000b:0000:0000:0000:10b9 Router DNS name : 8886666.broker.freenet6.net Remote Endpoint v4 Address :81.171.72.11 Remote Endpoint v6 Address : 2001:05c0:1400:000b:0000:0000:0000:10b8 Tspc Prefixlen : 56 Tunnel Broker: Amsterdam.freenet.net Vigor2862 Series User’s Guide...
  • Page 815 Description list It means to show the setting information of the access list. status It means to show the status of IPv6 management. It means to add an IPv6 address which can be used to execute Vigor2862 Series User’s Guide...
  • Page 816 It means the connection interface. 0=LAN1 1=WAN1 2=WAN2 > ip6 online 0 % LAN 1 online status : % Interface : UP % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static Vigor2862 Series User’s Guide...
  • Page 817 > ip6 aiccu subnet add 2 2001:1111:0000::1111 64 > ip6 aiccu 2 Status: Connecting >ip6 aiccu subnet show 2 IPv6 WAN2 AICCU Subnet Prefix Config: 2001:1111::1111/64 > This command allows you to set IPv6 settings for NTP (Network Time Protocols) server. Vigor2862 Series User’s Guide...
  • Page 818 > ipf view -V -c -d ipf: IP Filter: v3.3.1 (1824) Kernel: IP Filter: v3.3.1 Running: yes Log Flags: 0x80947278 = nonip Default: pass all, Logging: available This command is used to set general rule for firewall. Vigor2862 Series User’s Guide...
  • Page 819 Setting saved. > ipf set -d 2 #set data filter start from set 2 Setting saved. > ipf set -v Call Filter: Enable (Start Filter Set = 1) Data Filter: Enable (Start Filter Set = 2) Vigor2862 Series User’s Guide...
  • Page 820 It means to configure source IP address including address type, Address> <End IP Address> | start IP address, end IP address and address mask. <Address Mask> u – It means “user defined”. Address Type - Type the number (representing different address Vigor2862 Series User’s Guide...
  • Page 821 4 – Port range of the Start Port Number, range is 1-65535. 6 – Port range of the End Port Number, range is 1-65535. It means the Filter action you can specify. 0 –Pass Immediately, 1 – Block Immediately, Vigor2862 Series User’s Guide...
  • Page 822 It is used to show current filter/rule settings. > ipf rule 2 1 -e 1 -s "o 1" -d "o 2" -S "o 1" -F 2 > ipf rule 2 1 -v Filter Set 2 Rule 1: Vigor2862 Series User’s Guide...
  • Page 823 It means to refresh the flowtrack. It means to enable or disable the flowtrack. It means to show the sessions state of flowtrack. If you do not specify any IP address, then all the session state of flowtrack will be displayed. Vigor2862 Series User’s Guide...
  • Page 824 It means to show the IP filter log. It means to show the flush log buffer. a: flush all logs c: flush the call log f: flush the IP filter log w: flush the WAN log Vigor2862 Series User’s Guide...
  • Page 825 This command allows users to set FTP port for management. mngt ftpport [FTP port] Parameter Description FTP port It means to type the number for FTP port. The default setting is > mngt ftpport 21 % Set FTP server port to 21 done. Vigor2862 Series User’s Guide...
  • Page 826 Telnet port It means to type the number for telnet port. The default setting is > mngt telnetport 23 % Set Telnet server port to 23 done. This command allows users to set SSH port for management. Vigor2862 Series User’s Guide...
  • Page 827 All PING packets will be forwarded from LAN PC to Internet. All PING packets will be blocked from LAN PC to Internet. viewlog It means to display a log of ping action, including source MAC and source IP. Vigor2862 Series User’s Guide...
  • Page 828 Block TCP port list: 135, 137, 138, 139, 445 This command can allow the system administrators to login from the Internet. By default, it is not allowed. mngt rmtcfg [status] mngt rmtcfg [enable] mngt rmtcfg [disable] mngt rmtcfg [http/https/ftp/telnet/ssh/tr069] [on/off] Vigor2862 Series User’s Guide...
  • Page 829 Available values include: LAN2~LAN6, DMZ, IP Routed Subnet, None, All Note: LAN1 is always allowed for accessing into the router. It means to flush all of the settings. It means to restore the factory default settings. Vigor2862 Series User’s Guide...
  • Page 830 It means to drop the echo ICMP packet. > mngt echoicmp enable %% Echo ICMP packet enabled. This command allows you to specify that the system administrator can login from a specific host or network. A maximum of three IPs/subnet masks is allowed. Vigor2862 Series User’s Guide...
  • Page 831 Please type in IPv4 address to specify certain host. -t <Community name> It means to set trap community by typing a proper name. (max. 23 characters) -n <IP address> It means to set the IPv4 address of the host that will receive the Vigor2862 Series User’s Guide...
  • Page 832 -T <seconds> It means to set the trap timeout <0~999>. It means to list SNMP setting. > mngt snmp -e 1 -g draytek -s DK -m 192.168.1.1 -t trapcom -n 10.20.3.40 -T 88 SNMP Agent Turn on!!! Get Community set to draytek Set Community set to DK Manager Host IP set to 192.168.1.1...
  • Page 833 This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. This command is used to display current status of subnet. msubnet status [2/3/4/5/6] Parameter Description 2/3/4/5/6 It means LAN interface. 2=LAN2 Vigor2862 Series User’s Guide...
  • Page 834 Please use "sys reboot" command to reboot the router. This command is used to configure the subnet for NAT or Routing usage. msubnet nat [2/3/4/5/6] [On/Off] Parameter Description 2/3/4/5/6 It means LAN interface. 2=LAN2 3=LAN3 4=LAN4 5=LAN5 Vigor2862 Series User’s Guide...
  • Page 835 Please use "sys reboot" command to reboot the router. This command is used to defined the total number allowed for each LAN interface. msubnet ipcnt [2/3/4] [IP counts] Parameter Description 2/3/4/5/6 It means LAN interface. 2=LAN2 3=LAN3 Vigor2862 Series User’s Guide...
  • Page 836 > msubnet talk ? % msubnet talk <1/2/3/4/5/6> <1/2/3/4/5/6> <On/Off> % where 1:LAN1, 2:LAN2, 3:LAN3, 4:LAN4, 5:LAN5, 6:LAN6 % Now: LAN1 LAN2 LAN3 LAN4 LAN5 LAN6 % LAN1 % LAN2 % LAN3 % LAN4 % LAN5 % LAN6 > Vigor2862 Series User’s Guide...
  • Page 837 5=LAN5 6=LAN6 Start IP Type an IP address as the starting IP address for PPP connection. > msubnet pppip 2 192.168.2.250 % Set LAN2 PPP(IPCP) Start IP done !!! This setting will take effect after rebooting. Vigor2862 Series User’s Guide...
  • Page 838 % Now: LAN2 1; LAN3 0; LAN4 0; LAN5 0; LAN6 0 % count: 1. B-node 2. P-node 4. M-node 8. H-node This command is used to configure primary WINS server. msubnet primWINS [2/3/4/5/6] [WINS IP] Vigor2862 Series User’s Guide...
  • Page 839 Type the IP address as the WINS IP. > > msubnet secWINS 2 192.168.3.89 % Set LAN2 Dhcp Secondary WINS IP done !!! > msubnet secWINS ? % msubnet secWINS <2/3/4/5/6> <WINS IP> % Now: LAN2 192.168.3.89; LAN3 0.0.0.0; LAN4 0.0.0.0; LAN5 0.0.0.0; Vigor2862 Series User’s Guide...
  • Page 840 LAN4 LAN5 LAN6 This command allows you to configure MTU value for LAN/DMZ/IP Routed Subnet. msubnet mtu [interface][value] Parameter Description interface Available settings include LAN1~LAN6, IP_Routed_Subnet, and DMZ. value 1000 ~ 1508 (Bytes), default: 1500 (Bytes) Vigor2862 Series User’s Guide...
  • Page 841 It means to define a name for the IP object. NAME: Type a name with less than 15 characters. Example: object ip obj 9 -n bruce -i INTERFACE It means to define an interface for the IP object. INTERFACE=0, means any INTERFACE=1, means LAN Vigor2862 Series User’s Guide...
  • Page 842 It means to view the information of the specified group profile. Example: object ip grp 1 -v -n NAME It means to define a name for the IP group. NAME: Type a name with less than 15 characters. Vigor2862 Series User’s Guide...
  • Page 843 [6:][0] [7:][0] > object ip grp 2 -i 1 > object ip grp 2 -a 1 2 IP Group Profile 2 Name :[First] Interface:[Lan] Included ip object index: [0:][1] [1:][2] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] Vigor2862 Series User’s Guide...
  • Page 844 Type an IP address (different with START_IP) as the end IP address. > object ip obj 1 -n marketing > object ip obj 1 -a 1 192.168.1.45 > object ip obj 1 -v IP Object Profile 1 Name :[marketing] Vigor2862 Series User’s Guide...
  • Page 845 The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. > object ip grp 2 -n First IP Group Profile 2 Name :[First] Interface:[Any] Included ip object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] Vigor2862 Series User’s Guide...
  • Page 846 PROTOCOL =255, means TCP/UDP Other values mean other protocols. Example: object service obj 8 -i 0 It means the check action for the port setting. 0=equal(=), when the starting port and ending port values are the Vigor2862 Series User’s Guide...
  • Page 847 It means the index number of the specified group profile. It means to view the information of the specified group profile. Example: object service grp 1 -v -n NAME It means to define a name for the service group. Vigor2862 Series User’s Guide...
  • Page 848 INDEX -n NAME object kw obj INDEX -a CONTENTS Parameter Description setdefault It means to return to default settings for all profiles. show PAGE It means to show the contents of the specified profile. Vigor2862 Series User’s Guide...
  • Page 849 It means to view the information of the specified file extension object profile. -n NAME It means to define a name for the file extension object profile. NAME: Type a name with less than 15 characters. It means to enable the specific CATEGORY or FILE_EXTENSION. Vigor2862 Series User’s Guide...
  • Page 850 [ ].ocx [ ].olb [ ].ole [ ].tlb [ ].viv [ ].vrm ------------------------------------------------------------------------- ------ Compression category: [ ].ace [ ].arj [ ].bzip2 [ ].bz2 [ ].cab [ ].gz [ ].gzip [ ].rar [ ].sit [ ].zip Vigor2862 Series User’s Guide...
  • Page 851 > port 1 100F %Set Port 1 Force speed 100 Full duplex OK !!! This command allows you to set a time of keeping the session connection for specified protocol. portmaptime [-<command> <parameter> | ... ] Vigor2862 Series User’s Guide...
  • Page 852 Specify a mode. 1=auto 2=manual(traffic) 3=manual(qos) 4=manual(specific hosts) 0=disable -p <proto> Specify a protocol. proto - 1-TCP; 2-UDP; 3-Both. -b 1/0 Enable/disable TWO-way hardware acceleration. -M enable/disable Enable/disable the multicast hardware acceleration. Show multicast table in HW accleration Vigor2862 Series User’s Guide...
  • Page 853 WAN2 session check = hw_acc_for_ether_XDSL This command allows you to view current status (interface and driver) of USB printer. prn status prn debug > prn status Interface: USB bus 2.0 Printer: NotReady > prn debug conn[0] : none Vigor2862 Series User’s Guide...
  • Page 854 Set all to factory default (for all WANs). […] It means that you can type in several commands in one line. > qos setup -m 3 -i 9500 -o 8500 -r 3:20 -u 1 -p 50 -t 1 Vigor2862 Series User’s Guide...
  • Page 855 Set the remote address. addr1 – It means Single address. Please specify the IP address directly, for example, “-l 172.16.3.9”. addr1:addr2 – It means Range address. Please specify the IP addresses, for example, “-l 172.16.3.9: 172.16.3.50.” Vigor2862 Series User’s Guide...
  • Page 856 Show the rule in the specified class. […] It means that you can type in several commands in one line. > qos class -c 2 -n draytek -a -m 1 -l 192.168.1.50:192.168.1.80 Following setting will set in the class2 class 2 name set to draytek...
  • Page 857 > qos type -a draytek -t 6 -p 510:1330 service name set to draytek service type set to 6:TCP Port type set to Range Service Port set to 510 ~ 1330 > This command can exit the telnet command screen.
  • Page 858 ******************************************************** No data entry. This command displays current status of NAT. > show nat Port Redirection Running Table: Index Protocol Public Port Private IP Private Port 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Vigor2862 Series User’s Guide...
  • Page 859 This command displays current status of current session. > show session % Maximum Session Number: 10000 % Maximum Session Usage: 49 % Current Session Usage: 0 % Current Session Used(include waiting for free): 0 % WAN1 Current Session Usage: 0 Vigor2862 Series User’s Guide...
  • Page 860 ADSL Firmware Version : 05-04-04-04-00-01 -------------------------------- ATU-C Info --------------------------------- Far Current Attenuation : 0 dB Far SNR Margin 0 dB CO ITU Version[0] : 00000000 CO ITU Version[1] : 00000000 DSLAM CHIPSET VENDOR : < ADI > Vigor2862 Series User’s Guide...
  • Page 861 WAN1 total TX: 0 Bytes ,RX: 0 Bytes WAN2 total TX: 0 Bytes ,RX: 0 Bytes WAN3 total TX: 0 Bytes ,RX: 0 Bytes WAN4 total TX: 0 Bytes ,RX: 0 Bytes WAN5 total TX: 0 Bytes ,RX: 0 Bytes > Vigor2862 Series User’s Guide...
  • Page 862 MAC Addr It means to specify MAC Address of the host. all/ALL It means all of the MAC addresses. Vigor> ip route add 192.168.1.56 255.255.255.0 192.168.1.12 3 default Vigor> srv dhcp public status Index MAC Address Vigor2862 Series User’s Guide...
  • Page 863 Note: The IP Routed Subnet DNS must be the same as NAT Subnet DNS). > srv dhcp dns2 10.1.1.1 % srv dhcp dns2 <DNS IP address> % Now: 10.1.1.1 (IP Routed Subnet dns same as NAT Subnet dns) Vigor2862 Series User’s Guide...
  • Page 864 It means to display current gateway that you can use. Gateway IP It means to specify a gateway address used for DHCP server. > srv dhcp gateway 192.168.2.1 This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. Vigor2862 Series User’s Guide...
  • Page 865 1 or 2 specified here. > srv dhcp relay servip 192.168.1.46 > srv dhcp relay subnet 2 > srv dhcp relay servip ? % srv dhcp relay servip <server ip> % Now: 192.168.1.46 Vigor2862 Series User’s Guide...
  • Page 866 This command can display general information for the DHCP server, such as IP address, MAC address, leased time, host ID and so on. > srv dhcp status DHCP server: Relay Agent Default gateway: 192.168.1.1 Index IP Address MAC Address Leased Time HOST ID 192.168.1.113 00-05-5D-E4-D8-EE 17:20:08 A1000351 Vigor2862 Series User’s Guide...
  • Page 867 It means to specify a type for node. 1. B-node 2. P-node 4. M-node 8. H-node > srv dhcp nodetype 1 > srv dhcp nodetype ? %% srv dhcp nodetype <count> %% 1. B-node 2. P-node 4. M-node 8. H-node % Now: 1 Vigor2862 Series User’s Guide...
  • Page 868 It means to remove the IP address settings of second WINS server. > srv dhcp secWINS 192.168.1.180 > srv dhcp secWINS ? %% srv dhcp secWINS <WINS IP address> %% srv dhcp secWINS clear % Now: 192.168.1.180 Vigor2862 Series User’s Guide...
  • Page 869 -e [1 or 0] -c [option number] -v [option value] srv dhcp option -e [1 or 0] -c [option number] -a [option value] srv dhcp option -e [1 or 0] -c [option number] -x [option value] srv dhcp option -u [idx unmber] Vigor2862 Series User’s Guide...
  • Page 870 It means the index number of the option value. > srv dhcp option -e 1 -c 18 -v /path > srv dhcp option -l % state idx interface opt type data % enable 1 ALL LAN 18 ASCII /path Vigor2862 Series User’s Guide...
  • Page 871 The available commands with parameters are listed below. It means to enable IPSec ESP tunnel passthrough and IKE source port (500) preservation. It means to disable IPSec ESP tunnel passthrough and IKE source port (500) preservation. Vigor2862 Series User’s Guide...
  • Page 872 It means to return to factory settings for all the open ports profiles. > srv nat openport 1 1 -a 1 -c games -i 192.168.1.100 -w 1 -p TCP -s 23 -e 83 > srv nat openport -v Vigor2862 Series User’s Guide...
  • Page 873 It means to remove the selected port redirection setting. disable [idx] It means to inactivate the selected port redirection setting. enable [idx] It means to activate the selected port redirection setting. flush It means to clear all the port mapping settings. Vigor2862 Series User’s Guide...
  • Page 874 Protocol: 0 = Disable, 6 = TCP, 17 = UDP This command allows users to view NAT Port Redirection Running Table. > srv nat status NAT Port Redirection Running Table: Index Protocol Public Port Private IP Private Port 192.168.1.11 0.0.0.0 0.0.0.0 0.0.0.0 Vigor2862 Series User’s Guide...
  • Page 875 This command is used to obtain the TX (transmitted) or RX (received) data for each connected switch. switch -i [switch idx_no] [option] Parameter Description switch idx_no It means the index number of the switch profile. option The available commands with parameters are listed below. Vigor2862 Series User’s Guide...
  • Page 876 This command is used to reset the switch table and reboot the router. switch clear [idx] Parameter Description It means the index number of each item shown on the table. The range is from 1 to 8. It means to clear all of the data. Vigor2862 Series User’s Guide...
  • Page 877 Username – Type a new name for local user. Password – Type a password for local user. delete [INDEX] Delete a local user account. view [INDEX] Show the user account/password detail information. > > sys adminuser Local 1 Vigor2862 Series User’s Guide...
  • Page 878 It is used to disable/enable SSH service (0: disable, 1: enable). -p <enable> It is used to disable/enable printer service (0: disable, 1: enable). -6 <enable> It is used to disable/enable IPv6 (0: disable, 1: enable). > sys bonjour -s 1 > Vigor2862 Series User’s Guide...
  • Page 879 Parameter Description It means to turn on the FTP server of the system. It means to turn off the FTP server of the system. > sys ftpd on % sys ftpd turn on !!! Vigor2862 Series User’s Guide...
  • Page 880 Interface 4 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-02 Interface 5 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-03 Interface 6 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-04 Vigor2862 Series User’s Guide...
  • Page 881 > sys name ? % sys name <wan1/wan2> <ASCII string (max. 20 characters)> % sys name <wan1/wan2> clear % Now: wan1 == drayrouter, wan2 == Note: Such name can be used to recognize router’s identification in SysLog dialog. Vigor2862 Series User’s Guide...
  • Page 882 ON autoreboot time is 2 hour(s) This command allows users to save current settings to FLASH. Usually, current settings will be saved in SRAM. Yet, this command will save the file to FLASH. > sys commit Vigor2862 Series User’s Guide...
  • Page 883 7, cached#: Buf KMC504 ( 504B), used#: 8, cached#: Buf KMC248 ( 248B), used#: 26, cached#: Buf KMC120 ( 120B), used#: 67, cached#: Buf KMC56 ( 56B), used#: 20, cached#: Buf KMC24 ( 24B), used#: 58, cached#: Vigor2862 Series User’s Guide...
  • Page 884 [off] Parameter Description It means to turn on the bridge task for improving the triple play quality. It means to turn off the bridge task. > sys britask on % bridge task is ON, now Vigor2862 Series User’s Guide...
  • Page 885 9-"M Reboot" port [port num] It means to change tr069 listen port number. cert_auth [on/off] on: turn on certificate-based authentication. off: turn off certificate-based authentication. > sys tr069 get Int. nextlevel Total number of parameter is 24 Vigor2862 Series User’s Guide...
  • Page 886 It means to turn on SIP ALG. It means to turn off SIP ALG. > sys sip_alg ? usage: sys sip_alg [value] 0 - disable SIP ALG 1 - enable SIP ALG current SIP ALG is disabled Vigor2862 Series User’s Guide...
  • Page 887 It means to change the device key. dev_key It means to show device key. > sys license licifno License and Signature download interface setting: licifno [AUTO/WAN#] Ex: licifno wan1 Download interface is "auto-selected" now. Vigor2862 Series User’s Guide...
  • Page 888 [DSL] Status was switched: firmwareReady(3) to Init(5) 0:00:02 [DSL] Status was switched: Init(5) to Restart(10) 0:00:02 [DSL] Status was switched: Restart(10) to FirmwareRequest(1) 0:00:02 [DSL] Line state has changed: 00000000 -> 000000FF 0:00:02 [DSL] Entering VDSL2 mode Vigor2862 Series User’s Guide...
  • Page 889 This command can enable UPnP function. >upnp on UPNP start. This command can display IGD NAT status. > upnp nat ? ****************** IGD NAT Status **************** ((0)) InternalClient >>192.168.1.10<<, RemoteHost >>0.0.0.0<< InternalPort >>21<<, ExternalPort >>21<< PortMapProtocol >>TCP<< Vigor2862 Series User’s Guide...
  • Page 890 /OSInfo1 eventURL /OSInfoEvent1 uuid:774e9bbe-7386-4128-b627-001daa843464 >>>>> SERVICE TABLE2 <<<<< serviceType urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1 serviceId urn:upnp-org:serviceId:WANCommonIFC1 SCPDURL /upnp/WComIFCX.xml controlURL /upnp?control=WANCommonIFC1 eventURL /upnp?event=WANCommonIFC1 uuid:2608d902-03e2-46a5-9968-4a54ca499148 This command can show all UPnP services subscribed. > upnp on UPNP start. > upnp subscribe Vigor2862 Series User’s Guide...
  • Page 891 >>0<<, pseudo_port >>0<< hit_portmap_index >>0<< The protocol >>TCP<< time >>0<< ((1)) real_addr >>0.0.0.0<<, pseudo_addr >>0.0.0.0<< real_port >>0<<, pseudo_port >>0<< hit_portmap_index >>0<< The protocol >>0<< time >>0<< --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] Vigor2862 Series User’s Guide...
  • Page 892 Sony Erics Sony Ericsson MD30 3.5G TP-LINK TP-LINK MA180 3.5G TP-LINK TP-LINK MA260 3.5G Vodafone Vodafone K3765-Z 3.5G Vodafone Vodafone K4605 3.5G ZTE MF626 3.5G ZTE MF627 plus 3.5G ZTE MF633 3.5G ZTE MF636 3.5G SpinCom SpinCom GPRS Modem 3.5G Vigor2862 Series User’s Guide...
  • Page 893 This command can disable vigor bridge function. > vigbrg off %Disable Vigor Bridge Function! This command can show whether the Vigor Bridge Function is enabled or disabled. > vigbrg status %Vigor Bridge Function is enable! %Wan1 management is disable! Vigor2862 Series User’s Guide...
  • Page 894 -i [WAN index] -n [Subnet index] -b [Bridge mode] Parameter Description -I [WAN index] WAN index: Ranges from 1 to 10. 1: WAN1, 2: WAN2, ...etc., In which, WAN3 and WAN 4 are USB WAN. -n[Subnet index] Subnet index: Ranges from 1 to 8. Vigor2862 Series User’s Guide...
  • Page 895 [showmsg] Parameter Description flush It means to clear current log. showmsg It means to show current log. > voip debug showmsg -->Send Message to 192.168.1.2:5060 <02:35:16> INVITE sip:192.168.1.2 SIP/2.0 Via: SIP/2.0/UDP 192.168.1.1:5060;branch=z9hG4bK-YMa-3630;rport From: <sip:change_me@192.168.1.1>;tag=WLJ-11782 To: <sip:192.168.1.2> Vigor2862 Series User’s Guide...
  • Page 896 Call-ID: PbU-25312@192.168.1.1 CSeq: 1 INVITE Contact: <sip:change_me@192.168.1.1> Max-Forwards: 70 supported: 100rel, replaces User-Agent: DrayTek UA-1.2.3 DrayTek Vigor2910 Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, INFO, REFER, NOTIFY, PRACK Content-Type: application/sdp Content-Length: o=change_me 5972727 56415 IN IP4 192.168.1.1 This command allows users to set phone book settings.
  • Page 897 Hotkey to disable block unknow domain calls function. -P <number> Hotkey to disable block IP calls function. -p <number> Hotkey to disable block IP calls function. -l <number> Hotkey to block last incoming call. List current status for Regional settings. voip dialplan local Vigor2862 Series User’s Guide...
  • Page 898 [port] [mode] [value] voip dsp dtmfDetset [nLevel] [nTwist] voip dsp dtmftonepwr [Level] voip dsp cwtonepwr [ch] [value] voip dsp pstnringfxs [1|2] [on|off] voip dsp relaydbounce [on|off] voip dsp setRingPat [ring_pattern_index] [patten_num] voip dsp setDtmfCidlevel –l [value] Vigor2862 Series User’s Guide...
  • Page 899 5 - DTMF(Dk) 6 - DTMF(SE,NL,FIN) For example : Vigor> voip dsp cidtype 2 6 channel=2, current cidType: 6 That means the caller ID type for FXS2 (Channel2) is DTMF (SE, NL, FIN). voip dsp micgain Vigor2862 Series User’s Guide...
  • Page 900 Maximum allowed signal twist in dB, for DTMF detection. Range – (0 ~ 12) voip dsp dtmftonepwr Level Set power level for DTMF frequency. Level – 0 ~ 100. Power level for dtmf frequency in 0.3 dB steps. Vigor2862 Series User’s Guide...
  • Page 901 Enable. Note: This function is supported only by special mode. voip dsp setfxoCY value It is used to apply FXO country settings. 0: "use system country" 1: "Taiwan" 2: "Germany" 3: "Sweden" 4: "France" 5: "Switzerland" Vigor2862 Series User’s Guide...
  • Page 902 Rx gain – Available settings -24 ~ 12. Default is -6. > voip dsp countrytone ? VoIP has been disable. Please enable VoIP first. > voip sip misc –D 0 System reboot now! > voip dsp countrytone ? > Vigor> voip dsp countrytone? usage: Vigor2862 Series User’s Guide...
  • Page 903 2. G.729A/B 3. G.723 4. G.726_32 size - Five options, 0 means 10ms 1 means 20ms 2 means 30ms 3 means 40ms 5 means 60ms Vad - 0 means to Disable the function of Voice Active Detector Vigor2862 Series User’s Guide...
  • Page 904 > voip rtp symmetric 1 Set symmetric rtp to Enable This command allows users to set SIP account. voip sip acc n [-<command> <parameter> | ... ] voip sip calllog voip sip ep n [-<command> <parameter> | ... ] Vigor2862 Series User’s Guide...
  • Page 905 Set SIP account password (max. 63 characters). -e [sec] Set expiry time (default 3600) for SIP account. -w [enable] Enable to make phone call without registering. -m [mode] Set NAT traversal mode. 0 – disable 1 – stun 2 – manual Vigor2862 Series User’s Guide...
  • Page 906 0 – disable 1 - enable -x <enable> Enable / disable the function of call transfer. 0 – disable 1 - enable -d [enable] Enable / disable the function of DND (Do Not Disturb) 0 – disable Vigor2862 Series User’s Guide...
  • Page 907 SIP INFO packet will be sent out when encounting hook flash event. 0 - disable 1 - enable -t [val] Set the mode of User-Agent (e.g., phone, software, and device) for SIP packet. 0 - Hide SIP header "User-Agent". Vigor2862 Series User’s Guide...
  • Page 908 : --- auth. ID | [disable] expiry : 3600 NAT mode ring ports : 0 ring pat. call fwd mode call fwd url call fwd timer : 30 Broadsoft : disable Italian ITSP modification: disable Vigor2862 Series User’s Guide...
  • Page 909 It means the peer identity for aggressive mode. localid It means the local identity for aggressive mode. main It means to choose proposal for main mode. auto index It means to choose default proposals. proposal index It means to choose specified proposal. Vigor2862 Series User’s Guide...
  • Page 910 It means to set PIN code with secret. <pin> - Type the code for authentication (e.g, 1234). <secret> - Use the 32 digit-secret number generated by mOTP in the mobile phone (e.g., e759bb6f0e94c7ab4fe6) > vpn dinset 1 Dial-in profile index 1 Vigor2862 Series User’s Guide...
  • Page 911 It means the index number of the VPN profile. <1/2/3/4/5/6> 1 – it means LAN1 2 – it means LAN2. 3 – it means LAN3 4 – it means LAN4. 5 – it means LAN51 6 – it means LAN6. Vigor2862 Series User’s Guide...
  • Page 912 It means the IP address to dial to. <usr> <pwd> It means the user and the password required for the L2TP connection. <nip> <nmask> It means the remote network IP and the mask. e.g.,, vpn setup 1 name1 l2tp_out 1.2.3.4 vigor 1234 192.168.1.0 Vigor2862 Series User’s Guide...
  • Page 913 1 ~ 32 For Common Settings <index> It means the index number of the profile. pname It means the name of the profile. It means to enable or disable the profile. on – Enable off - Disable Vigor2862 Series User’s Guide...
  • Page 914 “ctype= l” means L2TP(IPSec Policy None). “ctype= l1” means L2TP(IPSec Policy Nice to Have). “ctype= l2” means L2TP(IPSec Policy Must). dialto It means Server IP/Host Name for VPN. (such as draytek.com or 123.45.67.89). ltype It means Link Type. “ltype=0” means “Disable”.
  • Page 915 Type “off” means any remote IP is allowed to dial in. peerid It means the peer ID for Remote VPN Gateway. Type “draytek” means the word is used as local ID. iname It means Dial-in Username. “iname=admin” means to set username as “admin”.
  • Page 916 Type the IP address with the network mask address. > vpn mroute 1 add 192.168.5.0/24 % 192.168.5.0/24 % Add new route 192.168.5.0/24 to profile 1 This command allows users to view LAN to LAN VPN profiles. Vigor2862 Series User’s Guide...
  • Page 917 % IKE phase 1 mode : Main mode % IKE Local ID % Dial-In Settings --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- > vpn list 1 com % Common Settings Vigor2862 Series User’s Guide...
  • Page 918 This command allows users to enable second subnet IP as VPN server IP. vpn 2ndsubnet on vpn 2ndsubnet off Parameter Description on/off It means to enable or disable second subnet. > vpn 2ndsubnet on %Enable second subnet IP as VPN server IP! Vigor2862 Series User’s Guide...
  • Page 919 2 – L2TP 3 – IPSec 4 – L2TP over IPSec <TCP maximum segment size Each type has different segment size range. range> PPTP – 1 ~ 1412 L2TP – 1 ~ 1408 IPSec – 1 ~ 1381 Vigor2862 Series User’s Guide...
  • Page 920 Multicast set <H2l/L2l> <index> <Block/Pass> Parameter Description <H2l/L2l> H2l means Host to LAN (Remote Access User Accounts). L2l means LAN-to-LAN Profile. <index> The index number of the profile. <Block/Pass> Set Block/Pass the Multicast Packets. The default is Block. Vigor2862 Series User’s Guide...
  • Page 921 % Packets would go through by NAT when VPN disconnect!! This command allows users to adjust the size of PPP LCP MRU. It is used for specific network. wan ppp_mru <WAN interface number> <MRU size > Vigor2862 Series User’s Guide...
  • Page 922 PPPoE(Max MSS: 1492) PPTP/L2TP(Max MSS: 1460) % wan ppp_mss <MSS size: 1000 ~ 1500> % Now: 1100 This command allows you to enable or disable the function of DF (Don’t fragment) wan DF_check [on] wan DF_check [off] Vigor2862 Series User’s Guide...
  • Page 923 > wan forward ? %WAN forwarding is Disable! > wan forward on %WAN forwarding is enable! This command allows you to display the status of WAN connection, including connection mode, TX/RX packets, DNS settings and IP address. Vigor2862 Series User’s Guide...
  • Page 924 Set the second initial modem AT command. dial Set dial modem AT command (default value is “ATDT*99#”). Set PIN code for SIM card. “0”:disable paponly It means PAP Only. Set the PPP authentication of the USB WAN. Vigor2862 Series User’s Guide...
  • Page 925 It means to display current status of Fallback Mode used. Available modes to be set as fallback mode include, Auto Vdsl_only Adsl_only > wan vdsl show basic ADSL Link Status: TRAINING Firmware Version: 05-04-04-04-00-01 ADSL Profile: Basic Status Upstream Downstream Unit Vigor2862 Series User’s Guide...
  • Page 926 -d <day>: Set the refresh day. -e <0/1>: Enable or disable SMS Quota Limit function. (0: disable 1: enable) -h <hour>: Set the refresh hour. -m <0/1/2>: Set SMS quota refresh mode. (0: None 1: monthly 2: periodically) Vigor2862 Series User’s Guide...
  • Page 927 Display status of LTE connection. Set an SMS in the LTE SIM card as read state by specifying the index number. Use "all" to set all SMS as read state. user Set the UserName of LTE WAN. Vigor2862 Series User’s Guide...
  • Page 928 Enable ping detection. The IP address of the target shall be set. Enable ARP detection (default). always_on Disable link detect, always connected(only support static IP) target Set the ping target. Target2 Set the secondary ping target. Vigor2862 Series User’s Guide...
  • Page 929 WAN4: off WAN5: off > wan detect wan1 target 192.168.1.78 Set OK > wan detect wan1 on Set OK > wan detect status WAN1: on, Target=192.168.1.78, TTL=255 WAN2: off WAN3: off WAN4: off WAN5: off > Vigor2862 Series User’s Guide...
  • Page 930 It means to enable/disable the Multi-VLAN function. on/off It means to turn on/off bridge mode for the specific channel. clear It means to turn off/clear the port. tag tag_no It means to tag a number for the VLAN. Vigor2862 Series User’s Guide...
  • Page 931 It means to display current bridge status. > wan multifno 5 1 % Configured channel 5 uplink to WAN1 > wan multifno status % Channel 3 uplink ifno: 3 % Channel 4 uplink ifno: 3 Vigor2862 Series User’s Guide...
  • Page 932 [#] gthres [budget limit (GB)] wan budget wan [#] mode [monthly|periodic|none] wan budget wan [#] psday [th day in periodic] wan budget wan [#] action [action bitmap] wan budget status Parameter Description wan[#] Specify the WAN interface. Vigor2862 Series User’s Guide...
  • Page 933 Available setting is 1000 ~ 1500. -d [decrease size] Set the MTU size to decrease between detections. decrease size: Available setting is 1 ~ 100. -c [count] Set the maximum times of ping failure during a Discovery. Vigor2862 Series User’s Guide...
  • Page 934 Apply to LAN interfaces. E.g., apply LAN1 and LAN2: -l 1, 2. Apply to WLAN interfaces. E.g., apply SSID1 and SSID2: -s 1, 2. Apply to WLAN5G interfaces. E.g., apply SSID1 and SSID2: -s 1, 2. Select login mode. Vigor2862 Series User’s Guide...
  • Page 935 > hsportal setup -p 1 -r 0 Profile 1 set landing page mode 0 ... [OK] > hsportal setup -p 2 -g 1 -k app_key_google Profile 2 set google login enabled ... [OK] Profile 2 set API KEY ... [OK] > Vigor2862 Series User’s Guide...
  • Page 936 > wl acl add 00-50-70-ff-12-70 Set Done !! > wl acl add 00-50-70-ff-12-70 ssid1 ssid2 isolate Set Done !! > wl acl show ----------Enable Mac Address Filter--------- ssid1: dis ssid2: dis ssid3: dis ssid4: dis ----------MAC Address Filter---------- Vigor2862 Series User’s Guide...
  • Page 937 It means to set the name of the SSID, hide the SSID if required. ssid_name [hidden_ssid]] ssid_num: Type 1, 2, 3 or 4 to specify SSID1, SSID2, SSID3 or SSID4. ssid_name: Give a name for the specified SSID. Vigor2862 Series User’s Guide...
  • Page 938 % <Note> Please restart wireless after you set the parameters. > wl config security 1 wpa1x %% Configured Wlan Security Setting: % SSID1 %% Mode: wpa1x %% Wireless card must be reset for configurations to take effect Vigor2862 Series User’s Guide...
  • Page 939 [En] Parameter Description It means to enable or disable the function of VPN isolation. 0: diable 1: enable > wl act on % Set Wlan to Enable. This command allows users to perform AP scanning. Vigor2862 Series User’s Guide...
  • Page 940 This command is used to configure connection time and reconnection time for each SSID that wireless client used for accessing into Internet. wl stamgt [enable/disable] [ssid_num]. wl stamgt [show] [ssid_num]. wl stamgt set [ssid_num] [c] [r] wl stamgt reset [ssid_num]. Vigor2862 Series User’s Guide...
  • Page 941 1: enable > wl iso_vpn 1 on % ssid: 1 isolate vpn on :1 This command allows you to configure WPA wireless settings. wl wpa 1/2/3 Parameter Description wl wpa Type 1/2/3 to represent different WPA modes. Vigor2862 Series User’s Guide...
  • Page 942 Window-Max. Specify the value ranging from 1 to 15. Txop It means transmission opportunity. Specify the value ranging from 0 to 65535. It can restrict stations from using specific category class if it is enabled. 0: disable 1: enable Vigor2862 Series User’s Guide...
  • Page 943 > wl wmm show Enable WMM: SSID0 =1, SSID1 =0,SSID2 =1,SSID3 =0 APSD=0 QueIdx=0: APAifsn=3,APCwmin=4,APCwmax=6, APTxop=0,APACM=0 QueIdx=1: APAifsn=7,APCwmin=4,APCwmax=10, APTxop=0,APACM=0 QueIdx=2: APAifsn=1,APCwmin=3,APCwmax=4, APTxop=94,APACM=0 QueIdx=3: APAifsn=1,APCwmin=2,APCwmax=3, APTxop=47,APACM=0 QueIdx=0: BSSAifsn=3,BSSCwmin=4,BSSCwmax=10, BSSTxop=0,BSSACM=0 QueIdx=1: BSSAifsn=7,BSSCwmin=4,BSSCwmax=10, BSSTxop=0,BSSACM=0 QueIdx=2: BSSAifsn=2,BSSCwmin=3,BSSCwmax=4, BSSTxop=94,BSSACM=0 QueIdx=3: BSSAifsn=2,BSSCwmin=2,BSSCwmax=3, BSSTxop=47,BSSACM=0 AckPolicy[0]=0: AckPolicy[1]=0,AckPolicy[2]=0,AckPolicy[3]=0 Vigor2862 Series User’s Guide...
  • Page 944 The value you can type is 0 (for mixed mode) and 1 (for green field). > wl ht bw value 1 BW=0 <Note> Please restart wireless after you set new parameters. > wl restart Wireless restart....Vigor2862 Series User’s Guide...
  • Page 945 It means to enable or disable the AP function. Value: 1 – enable the function. 0 – disable the function. hello [value] It means to send hello message to remote end (peer). Value: 1 – enable the function. Vigor2862 Series User’s Guide...
  • Page 946 WPA keys must be in 8~63 ASCII string or 64 Hexadecimal digit format. wep [key] [index] – WEP key will be used. You need to type the key string and specify the index number of the profile to be applied. Vigor2862 Series User’s Guide...
  • Page 947 This command is used to display the wireless station which accessing Internet via Vigor router. wl stalist > wl stalist wl stalist show : show station list wl stalist num : show number of stations wl stalist neighbor : show neighbor station list Vigor2862 Series User’s Guide...
  • Page 948 2.4GHz network connection. Specify the time limit for Vigor router to detect the wireless client. [value] – 1 to 60 seconds. > wl bndstrg show band steering: disable chk_time: 15 sec Vigor2862 Series User’s Guide...
  • Page 949 Parameter Description set [mode] [rs_low] Select a mode for roaming. [rs_low_security] [delta] 0 - disable 1 - Strictly Minimum RSSI 2 - Minimum RSSI rs_low – Set a value of Strictly Minimum RSSI (62~86). Vigor2862 Series User’s Guide...
  • Page 950 [ssid1 ssid2 ssid3 It means to set white/black list for each SSID. ssid4] [white/black] show It means to display current status of access control. showmode It means to show the mode for each SSID. Vigor2862 Series User’s Guide...
  • Page 951 > wl_dual apscan show AP scan is ongoing. > wl_dual apscan ? % wl_dual apscan [start/show] % start: do AP scan % show: show AP list > wl_dual apscan show 5G Access Point List : BSSID Channel SSID Vigor2862 Series User’s Guide...
  • Page 952 Channel 36 …. Number=52, means Channel 52. channel show It means to display what the current channel is. preamble [enable] It means to define the length of the sync field in an 802.11 packet. Vigor2862 Series User’s Guide...
  • Page 953 > wl_dual config channel 60 Current channel is 60 % <Note> Please restart 5G wireless after you set the channel. > wl_dual config preamble 1 Long preamble is enabled % <Note> Please restart 5G wireless after you set the parameters. Vigor2862 Series User’s Guide...
  • Page 954 WEP keys must be in 5/13 ASCII text string or 10/26 Hexadecimal digit format; WPA keys must be in 8~63 ASCII text string or 64 Hexadecimal digit format. show It means to display current mode selection for each SSID. Vigor2862 Series User’s Guide...
  • Page 955 F: Fail to pass WPA/PSK authentication. This command allows users to configure WDS for wireless connection (5GHz). wl_dual wds mode [value] wl_dual wds security [value] wl_dual wds ap [value] wl_dual wds hello [value] wl_dual wds status Vigor2862 Series User’s Guide...
  • Page 956 > wl_dual wds status Please enable WDS hello function first. > wl_dual wds hello 1 % <Note> Please restart router after you set the parameters. > wl dual wds mode b > wl dual wds security wep Vigor2862 Series User’s Guide...
  • Page 957 Vigor router. pin [code] It means to start WPS by using client PIN code. [code]: Client PIN code (digit number). show It means to display current WPS settings. > wl_dual wps enable 1 WPS is enabled. Vigor2862 Series User’s Guide...
  • Page 958 There are several modes to be selected: Disable – disable the security settings. wpapsk [key] – WPA Pre-shared Key will be used. Keys must start with 0x to be identified as a Hexadecimal number key. WPA keys Vigor2862 Series User’s Guide...
  • Page 959 Available values will be 2 to 64. Display current status (enable or disable) and triggering client number for airtime fairness function. status Display whether the function of airtime fairness is enabled or disabled. Vigor2862 Series User’s Guide...
  • Page 960 > wl_dual drayrs set 1 68 66 2 > wl_dual drayrs show % Mode : Strictly Minimun RSSI % rs_low : -68 % rs_low_secure : -66 % delta This command allows you to configure detailed settings for RADIUS server Vigor2862 Series User’s Guide...
  • Page 961 Dot1x_phase2 can only support MS-CHAPv2 now. So only “1” can be used for it. Set method for dot1x_phase1 or dot1x_phase2. Delete method for dot1x_phase1 or dot1x_phase2. > radius client add 1 -i 192.168.1.1 -m 255.255.255.0 -s 123 Vigor2862 Series User’s Guide...
  • Page 962 IP addresses/Subnets will be eligible to pass through NAT and wake up the LAN client. You also need to set NAT rule for LAN client. wol up [MAC Address]/[IP Address] wol fromWan [on/off/any] wol fromWan_Setting [idx][ip address][mask] Vigor2862 Series User’s Guide...
  • Page 963 Internet through the use of the WoL packet. ip address - It means the WAN IP address. mask - It means the mask of the IP address. > wol fromWan on > wol fromWan_Setting 1 192.168.1.45 255.255.255.0 > Vigor2862 Series User’s Guide...
  • Page 964 – type the name of the user profile. all – all of the user profile settings will be removed. It means to trigger the alert tool to do authentication. It means to set login service. 0:HTTPS 1:HTTP e.g.,-s 1 User edit Vigor2862 Series User’s Guide...
  • Page 965 It means to set account time quota. e.g., -q 200 It means to set account data quota. e.g., -r 1000 It means to enable /disable time quota limitation for user account. 0:Disable 1:Enable It means to set data quota unit (MB/GB). Vigor2862 Series User’s Guide...
  • Page 966 APP QoS set to Enable. > appqos traceable -e 68 2 TELNET: ENABLED, QoS Class 2. “NAND usage” is used to display NAND Flash usage; “nand bad” is used to display NAND Flash bad blocks. nand bad Vigor2862 Series User’s Guide...
  • Page 967 AP will be send back to Vigor2862 for updating the web page of Central AP Management. > apm clear ? Clear all clients ... done This command allows to configure wireless profiles to be used in Central AP Management. apm profile clone [from index][to index][[new name] Vigor2862 Series User’s Guide...
  • Page 968 WPA+WPA2/PSK x 2 forcarrie DrayTek Disable This command is used to display or remove the information of registered VigorAP, including MAC address, name, and authentication. Up to 30 entries of registered information can be stored and displayed. Vigor2862 Series User’s Guide...
  • Page 969 0 – disable upload limit. [6] – The sixth number means the download limit function. Type 1 – enable download limit, 0 – disable download limit. [7] – The seventh number means disassociation by idle time. Type Vigor2862 Series User’s Guide...
  • Page 970 8. Enable disassociation by Signal strength : 0 9. Traffic limit unit (upload) 10.Traffic limit unit (download) : 1 flag : 49 This command is used to enable/disable AP detection function. apm napdetect [get] apm napdetect [set] [enable/disable AP Detection 1/0][Refresh Time]. Vigor2862 Series User’s Guide...
  • Page 971 8d 03:16:10 syslog: [APM] Send Rogue AP Detection data. 8d 03:16:41 kernel: 60:fa:cd:55:f5:ea had associated successfully 8d 03:16:55 kernel: 60:fa:cd:55:f5:ea had disassociated. This command is used to display related syslog data from central AP management. apm syslog Vigor2862 Series User’s Guide...
  • Page 972 -l <1/0> 1: Enable the function of recording the operation record of HA in Syslog. 0: Disable the function of recording the operation record of HA in Syslog. -M <1/0> Specify the Redundancy Method for HA. Vigor2862 Series User’s Guide...
  • Page 973 > > ha set -h -4 LAN1 192.168.1.1 % Enable IPv4 Virtual IP on LAN1 % Virtual IP can not be same as router IP (192.168.1.1)!!! > This command can be used to show the settings information about config sync and general setup. Vigor2862 Series User’s Guide...
  • Page 974 Show the status for all of the routers in HA group. Show the status of local router only. Detail Level 0: Important status. 1: Important status, plus some information. 2: Show settings > ha status -m 2 [Local Router] DrayTek : 192.168.1.1 (FE80::21D:AAFF:FEC6:4C50) Status Vigor2862 Series User’s Guide...
  • Page 975 This command is used to get configuration information of VigorSwitch which connecting to Vigor router in LAN. Before using such command, make sure VigorSwitch has been managed under Vigor router (refer to Telnet Command: swm profile for adding a VigorSwitch device onto Vigor router). swm get [LAN_port] Vigor2862 Series User’s Guide...
  • Page 976 > swm auth show ===== SWM Auth Records List===== Index Model ----- ------- ------------ ================================ > swm auth clear 1 Clear index (1) swm auth record OK This command is used to configure port VLAN of VigorSwitch. Vigor2862 Series User’s Guide...
  • Page 977 Set the backup time. n : 1 ~ 168 hours -m n Set the firmware backup mode. 1: Backup after timeout. 0: Backup after upgrade. Backup the firmware manually and immediately. > backupmode -b Do Firmware backup now!!!. Vigor2862 Series User’s Guide...
  • Page 978 Active Mode, 68, 70, 71 ATM OoS, 122 Active When, 70, 72, 74 Auth Type, 192 Authentication, 109, 206 Active-Standby, 221 Additional Filter, 209 Authentication Information, 719 Address Mapping, 247, 263 Authentication Key, 222 ADSL/VDSL2, 68 Authentication Methods, 413 Vigor2862 Series User’s Guide...
  • Page 979 Dashboard, 24, 610 Brute Force Protection, 501 Data Coding Scheme, 281 Data Filter, 424 Ｃ Data Flow Monitor, 709 Data Quota, 544 Cache, 462 DataType, 76 Call Barring, 338 Daylight Saving, 497 Call Direction, 339, 378 Vigor2862 Series User’s Guide...
  • Page 980 Dynamic IP, 100 DHCP Client Identifier, 81, 89 Ｅ DHCP Server Configuration, 149, 152, 154 DHCP Server IP Address, 149, 152 Each / Shared, 521 DHCP Table, 705 Enable PING to keep alive, 97, 107 DHCPv6 (Stateful), 156 Vigor2862 Series User’s Guide...
  • Page 981 Google Map, 596 IP Address Assignment Method(IPCP), 99 GRE, 383 IP Address From ISP, 79 Green Field, 307 IP Address List, 196 Group ID, 213, 222 IP Based, 67 Guard Interval, 307 IP Bind List, 167 Vigor2862 Series User’s Guide...
  • Page 982 LAN Port Mirror, 169 Mail Service, 216 LAN Routed Prefix, 117 Main Screen, 21 LAN to LAN, 376 Maintenance, 642 Landing Page, 539, 543 Management, 500 LAN-General Setup, 146 Management Interface, 222 Last Call Return, 340 Vigor2862 Series User’s Guide...
  • Page 983 Netbios Naming Packet, 409 Ping Gateway IP, 78, 82, 85, 90, 92, 96, 100, 103, 105, 108, Network Configuration, 148, 152, 154 Ping Interval, 78, 82, 85, 90, 92, 96, 100, 103, 105, 108, 122 Network Interface, 252 Vigor2862 Series User’s Guide...
  • Page 984 Remote Dial-in User, 369, 372 Private Port, 177 Remote Endpoint IPv4 Address, 116 Production Registration, 60 Repeater, 304, 306 Protocol, 84, 222 Replace, 336 Protocol Processing Engine (PPE), 171 Restore, 167 Provider Host, 191 Ring Pattern, 332 Vigor2862 Series User’s Guide...
  • Page 985 Source IP, 177, 183, 186, 254 Self-Signed Certificate, 508 Speaker Gain, 345 Send SMS, 281 Specific Hosts, 172 Sensor, 691 Specify an IP address, 81 Server Address, 98 SPI, 425 Server Response, 192 SSID, 101, 293 Vigor2862 Series User’s Guide...
  • Page 986 Syslog Explorer, 715 Syslog/Mail Alert, 495 UDP, 393 System Maintenance, 478 Unique Local Address (ULA), 157 System time set, 200 Update DDNS, 222 Upload Limit, 310 Ｔ UPnP, 188, 211 URL Access Control, 459 T.38 Fax, 343 Vigor2862 Series User’s Guide...
  • Page 987 Web Content Filter, 429, 452 Voice Active Detector, 333 Web Content Filter Profile, 461 VoIP, 321 Web Feature, 460 VoIP Wizard, 324 Weight, 67 Volume Gain, 345 WEP, 101, 289, 299 VPI, 88 white/black list, 299 VPN, 349, 588 Vigor2862 Series User’s Guide...
  • Page 988 Wildcard, 192 WLAN Profile, 612 Wired 802.1x, 170 WMM Capable, 308 Wireless 2.4/5G, 71 WPA, 289, 298 Wireless LAN, 287 WPS, 290, 301 Wireless Wizard, 291 Ｚ Wizard Mode, 432 WLAN Isolation, 289 ZRTP+SRTP, 335 Vigor2862 Series User’s Guide...

This manual is also suitable for:

Vigor2862acVigor2862bnVigor2862lnVigor2862bVigor2862lacVigor2862vac ... Show all

Table of Contents