Page 2 Vigor1000 Series High Speed Gigabit Fiber Router User’s Guide Version: 1.0 Firmware Version: V1.5.2_RC1M Date: 12/01/2012 Vigor1000 Series User’s Guide...
Page 3: Copyright Information
Web registration is preferred. You can register your Vigor router via Be a Registered http://www.draytek.com. Owner Due to the continuous evolution of DrayTek technology, all routers will be regularly Firmware & Tools upgraded. Please consult the DrayTek web site for more information on newest Updates firmware, tools and documents.
Page 4: European Community Declarations
Product: Vigor1000 Series Router DrayTek Corp. declares that Vigor1000 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 5: Table Of Contents
Case 2: VPN direction from Vigor2820 to Vigor1000 .............. 42 3.4 How to configure settings for DLNA Service in Vigor1000............ 45 3.5 How to download BT Torrent to USB Device via Vigor Router..........49 3.6 How to configure Dynamic DNS Service on Vigor1000............56 Vigor1000 Series User’s Guide...
Page 6 4.7.6 Wake On LAN....................... 144 4.7.7 SMS ..........................145 4.8 VPN and Remote Access....................147 4.8.1 Remote Access Control ....................147 4.8.2 PPTP Remote Dial-in....................148 4.8.3 IPSec Remote Dial-in ....................152 4.8.4 Remote Dial-in Status....................154 Vigor1000 Series User’s Guide...
Page 7 4.15.5 Configuration Backup ....................237 4.15.6 Syslog/Mail Alert ......................239 4.15.7 Time and Date ......................242 4.15.8 Management....................... 243 4.15.9 Reboot System ......................244 4.15.10 Firmware Upgrade ....................244 4.16 Diagnostics........................246 4.16.1 Ping..........................246 4.16.2 Trace Route ........................ 247 Vigor1000 Series User’s Guide...
Page 8 5.4 Checking If the ISP Settings are OK or Not ................ 263 5.5 Forcing Vigor Router into TFTP Mode for Performing the Firmware Upgrade ....264 5.6 Backing to Factory Default Setting If Necessary ..............267 5.7 Contacting Your Dealer ....................... 268 viii Vigor1000 Series User’s Guide...
Page 9: Preface
The Vigor1000 series are the routers with high speed in data transmission through WAN port and LAN ports. With hardware NAT acceleration, the rate of Vigor1000 series can be ideal for multi-media application. With the development of NGN (Next Generation Network), you may recently hear the news about FTTx deployment in your local area or even have already subscribed the unbundling last mile service (e.g.
Page 10: Led Indicators And Connectors
Then the router will restart with the factory default configuration. Connector for a power adapter. Power switch. ON/OFF Connector for USB storage device (Pen Driver/Mobile HD) or printer or 3G backup. USB (1-2) Connector for accessing the Internet. Vigor1000 Series User’s Guide...
Page 11: For Vigor1000N
Then the router will restart with the factory default configuration. Connector for a power adapter. Power switch. ON/OFF Connector for USB storage device (Pen Driver/Mobile HD) or printer or 3G backup. USB (1-2) Connector for accessing the Internet. Vigor1000 Series User’s Guide...
Page 12: For Vigor1000
Then the router will restart with the factory default configuration. Connector for a power adapter. Power switch. ON/OFF Connector for USB storage device (Pen Driver/Mobile HD) or printer or 3G backup. USB (1-2) Connector for accessing the Internet. Vigor1000 Series User’s Guide...
Page 13: Hardware Installation
Connect one end of the power cord to the power port of this device. Connect the other end to the wall outlet of electricity. Power on the router. Check the ACT and WAN, LAN LEDs to assure network connections. (For the detailed information of LED status, please refer to section 1.1.) Vigor1000 Series User’s Guide...
Page 14: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.draytek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 15 Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. Vigor1000 Series User’s Guide...
Page 16 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Vigor1000 Series User’s Guide...
Page 17 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Vigor1000 Series User’s Guide...
Page 18 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ; find out the link of Printer Server and click it.
Page 19: Basic Settings
The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor1000 Series User’s Guide...
Page 20: Changing Password
Note: The home page will change slightly in accordance with the type of the router you have. Go to System Maintenance page and choose System Password. Type a new password in New Password and Confirm New Password fields. Then click OK to continue. Vigor1000 Series User’s Guide...
Page 21: Quick Start Wizard
If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is welcome page, please click Next. Vigor1000 Series User’s Guide...
Page 22: Setting Up The Password
The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next. On the next page as shown below, please select the Time Zone for the router installed and specify the NTP server(s). Then click Next for next step. Vigor1000 Series User’s Guide...
Page 23: Setting Up The Internet Connection
IP, while a DSL service provider will offer a public subnet. If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. Vigor1000 Series User’s Guide...
Page 24 The router will detect the MAC address automatically. Or, Enable check the box to enable MAC address cloning. It is available when the box of Enable is checked. Click Clone MAC Address Clone PC Address. The result will be displayed in the field Vigor1000 Series User’s Guide...
Page 25 Assign a specific valid user name provided by the ISP. User Name Assign a valid password provided by the ISP. Password If you want to connect to Internet all the time, you can Redial Policy choose Always On. Otherwise, choose Connect on Demand. Vigor1000 Series User’s Guide...
Page 26 User Name Assign a valid password provided by the ISP. Password Specify the IP address of the PPTP server. Server Address You can choose Static IP or DHCP as WAN IP network WAN IP Network setting. Settings Vigor1000 Series User’s Guide...
Page 27: Setting Up The Wireless Connection
Item Description Check the box to enable the wireless function. Enable Wireless LAN Choose Show to make the SSID being seen by wireless SSID Broadcast clients. Choose Hide to prevent from wireless sniffing and make it Vigor1000 Series User’s Guide...
Page 28 It means the identification of the wireless LAN. SSID can SSID be any text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. Select an appropriate encryption mode to improve the Encryption security and privacy of your wireless data packets.
Page 29 ASCII or Hexadecimal. Choose the key you wish to use by using the Default Key drop down list. If you choose WPA-PSK as the security configuration, you have to specify WPA mode, algorithm and pre-shared key. Vigor1000 Series User’s Guide...
Page 30 RADIUS server in performing mutual authentication. It enables centralized remote access authentication for network management. If you choose WPA-Radius as the security configuration, you have to specify WPA mode, algorithm, Radius server, Radius server port and Radius server secret respectively. Vigor1000 Series User’s Guide...
Page 31 (vigor router) with the encryption of WPA and WPA2. If you choose WPS as the security configuration, you can press Start WPS PIN and Start WPS PBC to complete the wireless connection. Vigor1000 Series User’s Guide...
Page 32 PinCode the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) After finishing the settings here, please click Next. Vigor1000 Series User’s Guide...
Page 33: Saving The Wizard Configuration
Drop PPPoE in the Online Status web page. Available settings are explained as follows: Item Description IP Address-Displays the IP address of the LAN interface. LAN Status TX Packets-Displays the total transmitted packets at the Vigor1000 Series User’s Guide...
Page 34: Saving Configuration
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor1000 Series User’s Guide...
Page 35: Tutorials And Applications
If the router you have supports VoIP, you can configure VoIP WAN setting for using by VoIP interface of the router. In LAN VLAN setting, check the box of Enable (LAN to WAN in bridge mode) and type a different VLAN ID number. Vigor1000 Series User’s Guide...
Page 36 FXS 1 Phone connects to the FXS 1 port of Vigor1000, registers, sends and receives phone call with VoIP WAN. Functions Configuration 1. Open WAN>>Internet. Set PPPoE as the Connection Type and fill in the Username and Password offered by your ISP. Vigor1000 Series User’s Guide...
Page 37 2. Open WAN>>802.1Q VLAN Tag Configuration to configure Multi-VLAN. Refer to the following graphic. 3. Open WAN>>VoIP WAN to configure VoIP WAN Setting. Note: At present, only DHCP, PPPoE and Static connection types are available. Vigor1000 Series User’s Guide...
Page 38 4. Open VoIP >>SIP Accounts. Specify the connection interface for VoIP in the field of Register via. 5. Connect your PC or network device to the forth LAN port and type the username and password for PPPoE connection mode. Vigor1000 Series User’s Guide...
Page 39: Lan To Lan Ipsec Vpn Between Vigor1000 And Vigor2820 Using Main Mode
In this document we will introduce how to create a LAN to LAN IPSec VPN between Vigor1000 and a Vigor2820 using Main mode. We use the following scenario. Create a LAN-to-LAN profile. Enable it and give it a name. In this example the profile name is “Demo”. Vigor1000 Series User’s Guide...
Page 40 Accessing the VPN network of Vigor2820 from a PC behind Vigor1000 to initiate the VPN connection, for example, ping 192.168.1.x from a PC (192.168.30.x). Vigor1000 will be triggered to dial the IPSec VPN to Vigor2820. After the VPN is connected, you can monitor the status. Vigor1000 Series User’s Guide...
Page 41 In Dial-Out Settings part, select IPSec Tunnel and press the Advanced button. In Dial-In Settings part, please enable Specify Remote VPN Gateway and enter WAN IP address of Vigor1000 in the Peer VPN Server ID field. Vigor1000 Series User’s Guide...
Page 42 3DES, MD5; 3DES, SHA1; When you select AES(any) AES-256, MD5; AES-256, SHA1; When you select AES-128 AES-128, MD5; AES-128, SHA1; When you select AES-192 AES-192, MD5; AES-192, SHA1; When you select AES-256 AES-256, MD5; AES-256, SHA1; Vigor1000 Series User’s Guide...
Page 43: Case 2: Vpn Direction From Vigor2820 To Vigor1000
Enter Vigor1000’s private network in the Local Network / Mask field. Enter Vigor2820’s private network in the Remote Network / Mask field. Use default value “Automatic” for IKE phase 1 and phase 2 proposals. After the VPN is connected, you can monitor the status. Vigor1000 Series User’s Guide...
Page 44 Create a LAN-to-LAN profile. Enable it and give it a name. In this example the profile name is “test”. Vigor1000 Series User’s Guide...
Page 45 Name for VPN field. Setup a pre-shared key, which must be the same as in Vigor1000. Select ESP (High) and 3DES with Authentication. Enter Vigor1000’s private network in the Remote Network IP / Mask field. Click OK. Vigor1000 Series User’s Guide...
Page 46: Lan To Lan Ipsec Vpn Between Vigor1000 And Vigor2820 Using Agressive Mode
Create a LAN-to-LAN profile. Enable it and give it a name. In this example the profile name is “Demo”. Enter Vigor2820’s WAN IP address in the Remote IP field. Select Aggressive Mode as IKE phase 1 mode. Vigor1000 Series User’s Guide...
Page 47 10. Accessing the VPN network of Vigor2820 from a PC behind Vigor1000 to initiate the VPN connection, for example, ping 192.168.1.x from a PC (192.168.30.x). Vigor1000 will be triggered to dial the IPSec VPN to Vigor2820. After the VPN is connected, you can monitor the status. Vigor1000 Series User’s Guide...
Page 48 Create a LAN-to-LAN profile. Enable it and give it a name. In this example the profile name is “test”. Vigor1000 Series User’s Guide...
Page 49 3DES, MD5; 3DES, SHA1 When you select AES(any) AES-256, MD5; AES-256, SHA1 When you select AES-128 AES-128, MD5; AES-128, SHA1 When you select AES-192 AES-192, MD5; AES-192, SHA1 When you select AES-256 AES-256, MD5; AES-256, SHA1 Vigor1000 Series User’s Guide...
Page 50: Case 2: Vpn Direction From Vigor2820 To Vigor1000
Enter Vigor1000’s private network in the Local Network / Mask field. Enter Vigor2820’s private network in the Remote Network / Mask field. Use default value “Automatic” for IKE phase 1 and phase 2 proposals. 10. After the VPN is connected, you can monitor the status. Vigor1000 Series User’s Guide...
Page 51 Create a LAN-to-LAN profile. Vigor1000 Series User’s Guide...
Page 52 DES_SHA1_G2/3DES_MD5_G2/3DES_SHA1_G2” as IKE phase 1 proposal. Enter vigor2820 in the Local ID field. Click OK to return to the profile setting page. Enter Vigor1000’s private network in the Remote Network IP / Mask field. 10. Click OK. Vigor1000 Series User’s Guide...
Page 53: How To Configure Settings For Dlna Service In Vigor1000
Insert USB storage device into the USB slot of Vigor1000. Then, open USB Application>>Disk Status to check the connection status. If it is connected successfully, the general information of that device will be shown on the screen. Vigor1000 Series User’s Guide...
Page 54 During the process of installation, you can click Show Detail to view the installation procedure. After finished the service installation, the configuration page will be open automatically. Please click Enable and type a name in the field of Server Name. Then, click OK to activate DLNA service. Vigor1000 Series User’s Guide...
Page 55 Server Name configured in Step 4. Note: If you cannot see the media device in Network view, please check and make sure the UPnP service has been enabled Control Panel>>Administrative Tools >>Services. Vigor1000 Series User’s Guide...
Page 56 Before removing USB storage device, please DISABLE DLNA service and then remove the device. The audio and video files might not be played normally due to unrecognized equipment set in client. Vigor1000 Series User’s Guide...
Page 57: How To Download Bt Torrent To Usb Device Via Vigor Router
Wait for few seconds for the router to detect it. If the disk is detected, it will be shown as the following figure. Make sure that WAN connection has been established. Open USB Application >> Bit Torrent Download. Click Install to install BT module from Internet to USB device. Vigor1000 Series User’s Guide...
Page 58 Simply wait for a few minutes to finish the installation. When the installation is finished, the following page will be displayed. Click the link of Open Web Client to open another window. Vigor1000 Series User’s Guide...
Page 59 10. Click Select File to open the following dialog. Choose the seed of BT torrent file and click Open. Note: Before uploading torrent files to the router, please search from Internet and store the seed of the BT torrent on our hard disk first. Vigor1000 Series User’s Guide...
Page 60 Access into Vigor1000 web configuration interface and open USB Application >> USB General Settings. Enable the Disk Sharing function by checking the box and click OK. Open USB Application >> Disk Shares. Click Add a New Entry. Vigor1000 Series User’s Guide...
Page 61 Share Name for home folder (“/”) . Click OK. Now, PCs in LAN connected to Vigor1000 can open a browser from his / her computer. Simply type “\\192.168.1.1” in the field of Address and then click Go. Vigor1000 Series User’s Guide...
Page 62 The sharing disk with the name of “bt_folder” created above will be shown as the following figure. Double click bt_folder to view the files in the disk. Vigor1000 Series User’s Guide...
Page 63 If you want to check the BT Torrent files downloaded from Internet to USB disk, access into bt_folder>>downloads. (Note: While the file is downloading, the file extension name will be “part”.) Vigor1000 Series User’s Guide...
Page 64: How To Configure Dynamic Dns Service On Vigor1000
Vigor1000. Go to http://freedns.afraid.org/dynamic/ and login with your normal username and password for the FreeDNS service. Click Direct URL on the domain, you would like to set to your WAN IP address. Vigor1000 Series User’s Guide...
Page 65 Past the strings what you copied on step3 on password field. Click OK to save the configuration. Now, you can check the service by using nslookup command on your computer or check the syslog information on Vigor1000. Vigor1000 Series User’s Guide...
Page 66 This page is left blank. Vigor1000 Series User’s Guide...
Page 67: Web Configuration
Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor1000 Series User’s Guide...
Page 68 After connecting into the router, 3G/4G Modem will be regarded as the backup WAN port. Therefore, when WAN is not available, the router will use 3G/4G for supporting automatically. The supported 3G/4G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information.
Page 69: Internet Access
Below shows the menu items for WAN. This page allows you to set WAN configuration with different modes. Use the Connection Type drop down list to choose one of the WAN modes. The corresponding page will be displayed. Vigor1000 Series User’s Guide...
Page 70 If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. To use Static as the accessing protocol of the internet, please choose Static mode from Connection Type drop down menu. The following web page will be shown. Vigor1000 Series User’s Guide...
Page 71 Detect. Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP - If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. Vigor1000 Series User’s Guide...
Page 72 DHCP Settings same as the name used in Syslog. The default setting is Vigor1000. Domain Name-Type the domain name (e.g., draytek) to fit the request of some ISPs. MTU Size-It means Max Transmit Unit for packet. The default setting will be specified by the system automatically.
Page 73 Password- Type in the password provided by ISP in this field. Confirm Password – Type the password again for confirmation. Redial Policy- If you want to connect to Internet all the time, you can choose Always On. Otherwise, choose Connect on Demand. Vigor1000 Series User’s Guide...
Page 74 After finishing all the settings here, please click OK to activate them. To use PPTP/L2TP as the accessing protocol of the internet, please choose PPTP/L2TP from Connection Type drop down menu. The following web page will be shown. Vigor1000 Series User’s Guide...
Page 75 Secondary DNS Server-You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Vigor1000 Series User’s Guide...
Page 76 Enable - It is available when the box of Enable is checked. Clone MAC Address Click Clone MAC Address. The result will be displayed in the field of MAC Address. After finishing all the settings here, please click OK to activate them. Vigor1000 Series User’s Guide...
Page 77 Enable - It is available when the box of Enable is checked. Clone MAC Address Click Clone MAC Address. The result will be displayed in the field of MAC Address. After finishing all the settings here, please click OK to activate them. Vigor1000 Series User’s Guide...
Page 78 Enable - It is available when the box of Enable is checked. Clone MAC Address Click Clone MAC Address. The result will be displayed in the field of MAC Address. After finishing all the settings here, please click OK to activate them. Vigor1000 Series User’s Guide...
Page 79 Enable - It is available when the box of Enable is checked. Clone MAC Address Click Clone MAC Address. The result will be displayed in the field of MAC Address. After finishing all the settings here, please click OK to activate them. Vigor1000 Series User’s Guide...
Page 80: Multi-Vlan
Vigor1000 series offers multi-VLAN function to make the data transmission with security. Data transmitting through the Ethernet port for connecting to Internet can be tagged with an ID number specified here for ensuring the security. In addition, each LAN port also can be tagged with an ID number in local network to reach the goal of protection.
Page 81 Public IP address from ISP for transmitting data from PC directly without NAT. The range of ID number you can type is from 2 – 4096. Each ID setting must be unique and different with WAN VLAN ID. Vigor1000 Series User’s Guide...
Page 82 When DHCP is selected as connection type, you need to configure the following settings: Available settings are explained as follows: Item Description Type the name of the router. Router Name Type the domain name obtained from the ISP. Domain Name Vigor1000 Series User’s Guide...
Page 83: Ports
Available settings are explained as follows: Item Description It displays current network interface. Port It displays current connection status. Green light means the Link WAN connection is successful. It displays current speed that the router uses. Speed Current Vigor1000 Series User’s Guide...
Page 84 Disabled: All power savings mechanisms disabled. ActiPHY: Link down power savings enabled. PerfectReach: Link up power savings enabled. Enabled: Both link up and link down power savings enabled. Click this button to refresh the information for WAN port. Refresh Vigor1000 Series User’s Guide...
Page 85: Backup
If both USB ports connected with 3G modem and 56K modem, and both 3G Backup and 56K Backup modes are enabled, the system will determine which one (3G Backup or 56K Backup) will be selected as backup mode according to the detected physical connection automatically. Vigor1000 Series User’s Guide...
Page 86 Ping IP- If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. Click this button to reset the USB port. Reset USB Click this button for returning to the default settings. Default Vigor1000 Series User’s Guide...
Page 87 Choose ARP or Ping Detect for the system to execute for WAN detection. Ping IP- If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. Click this button to reset the USB port. Reset USB Vigor1000 Series User’s Guide...
Page 88: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor1000 Series User’s Guide...
Page 89 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor1000 Series User’s Guide...
Page 90: General Setup
ISP via the Vigor router. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server. Thus, the PC can access Internet through such direction. Vigor1000 Series User’s Guide...
Page 91 Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. After finishing all the settings here, please click OK to activate them. Vigor1000 Series User’s Guide...
Page 92: Ports
Current Rx: indicates whether pause frames on the port are obeyed. Current Tx: indicates whether pause frames on the port are transmitted. This module offers 1518~9600 (Bytes) length to make the Maximum Frame long packet for data transmission. Vigor1000 Series User’s Guide...
Page 93 PerfectReach: Link up power savings enabled. Enabled: Both link up and link down power savings enabled. Click this button to refresh the information for WAN port. Refresh After finishing all the settings here, please click OK to activate them. Vigor1000 Series User’s Guide...
Page 94: Mac Address Table
Auto - Enable this port MAC address dynamic learning mechanism. Disable - Disable this port MAC address dynamic learning mechanism, only support static MAC address setting. Secure - Disable this port MAC address dynamic learning mechanism and copy the dynamic learning packets to CPU. Vigor1000 Series User’s Guide...
Page 95: Vlan
VLAN. The following page will appear. VLAN function is enabled in default. Available settings are explained as follows: Item Description Click this button to add a new private VLAN. The router Add New Private VLAN allows you to add up to 4 VLAN Vigor1000 Series User’s Guide...
Page 96: Monitor Port
It is used to monitor the traffic of the network. For example, we assume that LAN1 and LAN2 are Monitor Port and Monitor ingress Port respectively, thus, the traffic received by LAN2 will be copied to LAN1 for monitoring. Available settings are explained as follows: Item Description Vigor1000 Series User’s Guide...
Page 97: Static Route
Main Router 192.168.1.1 as the default gateway for the Router A 192.168.1.2. Before setting Static Route, user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router. Vigor1000 Series User’s Guide...
Page 98 192.168.1.2. Click OK. Return to Static Route page. Click Add again to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Verify current routing table. Vigor1000 Series User’s Guide...
Page 99: Policy Route
Display the interface used for policy route. Interface Display if NAT for source subnet is enabled or not. Display the status of the policy route. Status Click it to add a new policy route. Click Add to create a new policy route. Vigor1000 Series User’s Guide...
Page 100: Bind Ip To Mac
When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC address, it might cause you not access into the Internet. Click LAN and click Bind IP to MAC to open the setup page. Vigor1000 Series User’s Guide...
Page 101 It displays a list for the IP bind to MAC information. IP Bind List It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List. Vigor1000 Series User’s Guide...
Page 102: Nat
Below shows the menu items for NAT. Hardware-base Acceleration Engine, also named Protocol Processing Engine API is the function that DrayTek provides to extremely speed up the NAT performance. While the hardware acceleration mechanism is activated, most of the bandwidth usage will be concentrated on the specific sessions which increase transmission speed to get ultimately accelerated.
Page 103: Open Ports
To add a new open port, click Add New Entry. Available settings are explained as follows: Item Description Check this box to enable this function. Enable Specify the name for the defined network service. Name Vigor1000 Series User’s Guide...
Page 104 Enter the private IP address of the local host. Local Host If it is configured, the forwarded traffic is mapped to this Local Port (optional) port on the local host. Click OK to save the settings. Vigor1000 Series User’s Guide...
Page 105: Dmz Host
Check to enable the DMZ Host function. Enable Enter the private IP address of the DMZ host, or click Private IP Choose PC to specify a suitable one. Bring a dialog for you to choose an IP address. Choose PC Vigor1000 Series User’s Guide...
Page 106: Firewall
Below shows the menu items for Firewall. Click Firewall and click DoS Defense to open the setup page. Available settings are explained as follows: Item Description Vigor1000 Series User’s Guide...
Page 107: Ports Configuration
There is one WAN port and 4 LAN ports in Vigor1000. Port Here each port will be configured with different ID, action, rate limiter ID, port copy and etc. Select whether forwarding is permitted ("Allow") or denied Action ("Deny"). The default value is "Allow". Vigor1000 Series User’s Guide...
Page 108 Available settings are explained as follows: Item Description Rate limiter ID will be applied to WAN port and LAN port. Rate Limiter ID Please specify a rate number for each ID. The default setting is “1”(packet per second). Vigor1000 Series User’s Guide...
Page 109 Define the rate by choosing from the following drop down Rate list. Click OK to save the settings. Vigor1000 Series User’s Guide...
Page 110: Access Control List
Frame type, Rate, MAC type, VLAN ID, tag and etc. For IPv4, we can also define the protocol type, source IP and destination IP. Click to add a new specific session limitation onto the list. Define which port the packet comes from. Vigor1000 Series User’s Guide...
Page 111 Rate Limiter- Select a rate limiter to apply to this port. Available settings include Disabled, and 1 to 10. The default value is Disabled. Click the Rate Limiter link to configure different rates for each ID. Frame Type selection will lead different options for configuration. Vigor1000 Series User’s Guide...
Page 112 Choose ARP as the Frame Type, you will get ARP Parameters option as the following: Item Description Choose the ARP/RARP that you want to filter. ARP/RARP Choose the request or replay that you want to filter. Request/Reply Vigor1000 Series User’s Guide...
Page 113 (SHA) settings. 0: means sender hardware address is not equal to the SMAC address. 1: means sender hardware address is equal to the SMAC address. Any: means any value is allowed. Vigor1000 Series User’s Guide...
Page 114 0: ARP/RARP frames where the hardware address space is equal to Ethernet (1) must not match this entry. 1: ARP/RARP frames where the hardware address space is equal to Ethernet (1) must match this entry. Any: Any value is allowed. Vigor1000 Series User’s Guide...
Page 115 Source IP Address-Type the Source IP Address here. This option is available when you choose Host or Network as Source IP. Source IP Mask-Type the Source IP Mask here. This option is available only when you choose Network as source Source IP. Vigor1000 Series User’s Guide...
Page 116 ICMP value. Choose IPv4 as the Frame Type. You will see IP Parameters on the bottom of the page. If you choose UDP as IP Protocol Filter, you will get the page as the following: Vigor1000 Series User’s Guide...
Page 117 Dest IP Address-Type the destination IP Address here. This option is available when you choose Host or Network as destination IP. Dest IP Mask-Type the DIP Mask here. This option is available only when you choose Network as destination DIP. Vigor1000 Series User’s Guide...
Page 118 ACE matches this UDP source value. Dest. Port Range-Type the value if you choose Range as the Dest. Port Filter. The allowed range is 0 to 65535. A frame meeting this ACE matches this UDP source value. Vigor1000 Series User’s Guide...
Page 119 IP address in the destination IP Address field that appears. Network: Destination IP filter is set to Network. Specify the destination IP address and destination IP mask in the destination IP Address and destination IP Mask fields that appear. Vigor1000 Series User’s Guide...
Page 120 ACE matches this TCP source value. Dest. Port Range-Type the value if you choose Range as the Dest. Port filter. The allowed range is 0 to 65535. A frame meeting this ACE matches this TCP source value. Vigor1000 Series User’s Guide...
Page 121 (ACK) value for this ACE. 0: TCP frames where the ACK field is set must not be Vigor1000 Series User’s Guide able to match this entry. 1: TCP frames where the ACK field is set must be able to match this entry.
Page 122 Any: No destination IP filter is specified. Host: Destination IP filter is set to Host. Specify the destination IP address in the destination IP Address field that appears. Network: Destination IP is set to Network. Specify the Vigor1000 Series User’s Guide...
Page 123: Traffic Control
Check the box to enable such function. Enable Traffic Control Click it add a new firewall rule. Add Entry You are allowed to add many firewall rules for your request. Simply click Add Entry, the following screen will be shown. Vigor1000 Series User’s Guide...
Page 124 Drop - Packets matching with such rule will be discarded immediately. Reject - Packets matching with such rule cannot pass through the router and become packets with TCP reset or ICMP port unreachable packets. Vigor1000 Series User’s Guide...
Page 125 New Time Object – Such link allows you to create new time object for using by web feature filter. The method to configure the time object is that same as set in Firewall>>Time Object. Click OK to save the settings. Vigor1000 Series User’s Guide...
Page 126: Csm
If you do not check any box here, it means Vigor router will Web Feature Filter not prevent users from accidentally downloading malicious codes conceal in the executable objects from web pages. Filters – Choose any one of the items to be filtered by such router. Vigor1000 Series User’s Guide...
Page 127 URL and type the Start IP and End IP and click Add a New Entry. The new one will be displayed on the screen. After pressing OK, it will be filtered whenever you visit. Vigor1000 Series User’s Guide...
Page 128: Web Content Filter
If the WCF mechanism has been activated (green circle), you will see the following screen: Now, you can click Add a New Entry to create a WCF profile which can be applied in Firewall. Vigor1000 Series User’s Guide...
Page 129 New Time Object – If there is no time profile created, you can click such link to access into the configuration page for setting a new one. Check the box to filter the data transmitting via HTTPS. Filter Https Vigor1000 Series User’s Guide...
Page 130: App Enforcement
Click it add a new blocking rule. Add Entry You are allowed to add many firewall rules for your request. Simply click Add Entry, the following screen will be shown. There are four tabs IM, P2P, Protocol and Misc displayed on Vigor1000 Series User’s Guide...
Page 131 Block – Packets matching with such rule will be blocked by Action the router. Pass – Packets matching with such rule are allowed to pass through the router. Check this box to record the information on Syslog. Syslog Vigor1000 Series User’s Guide...
Page 132: Bandwidth Management
To solve the problem, you can use limit session to limit the session procession for specified Hosts. In the Bandwidth Management menu, click Sessions Limit to open the web page. Vigor1000 Series User’s Guide...
Page 133 Adds the specific session limitation onto the list above. Allows you to edit the settings for the selected limitation. Edit Remove the selected settings existing on the limitation list. Delete When you finish adding a new session limit, simply click OK. Vigor1000 Series User’s Guide...
Page 134: Bandwidth Limit
Enable and set the default or user-defined upstream and downstream limit. Default TX Limit - Define the limitation for the speed of the upstream as default setting. Default RX Limit - Define the limitation for the speed of the downstream as default setting. Vigor1000 Series User’s Guide...
Page 135 TX limit - Define the default speed of the upstream for each computer in LAN. RX limit - Define the default speed of the downstream for each computer in LAN. When you finish adding a new bandwidth limit, simply click OK. Vigor1000 Series User’s Guide...
Page 136: Port Rate Control
Another reason is due to congestions at network intersections where speeds of interconnected circuits mismatch or traffic aggregates, packets will queue up and traffic can be throttled back to a lower speed. If there’s no defined priority to specify which packets should be discarded Vigor1000 Series User’s Guide...
Page 137 SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s effort. In the Bandwidth Management menu, click QoS Control List to open the web page. Vigor1000 Series User’s Guide...
Page 138 QCE onto this page. Different QCE type will bring out different web settings. If you choose Ethernet Type as QCE Type, you have to type value for it and specify traffic class from Low, Normal, Medium and High. Vigor1000 Series User’s Guide...
Page 139 Type in the starting port number and the end porting TCP/UDP Port number here if you choose Range as the type. Range Vigor1000 Series User’s Guide...
Page 140 If you choose ToS as QCE Type, you have to specify priority class from Low, Normal, Medium and High. If you choose Tag Priority as QCE Type, you have to specify priority class from Low, Normal, Medium and High. Click to modify the settings of an existing QCE on this page. Vigor1000 Series User’s Guide...
Page 141: Ports Priority
Available settings are explained as follows: Item Description Indicate the interface for the physical port, WAN port, LAN Port port and so on. Use the drop down list to choose the priority for each port. Default Class Vigor1000 Series User’s Guide...
Page 142: Qos Statistics
Queue Weighted weighted number. Click OK to save the settings. This page displays statistics for QoS setting. Click WAN/LAN link to check detailed information for each interface. Click WAN/LAN link to check detailed information for each interface. Vigor1000 Series User’s Guide...
Page 143 Rx Pause - Display the counting number of the received pause packet. RX 64 Bytes - Display the number of 64-byte frames in Receive Size Counters good and bad packets received. RX 65-127 Bytes - Display the number of 65 ~ 127-byte Vigor1000 Series User’s Guide...
Page 144 Tx Pause - Show the counting number of the transmitted pause packet. Tx 64 Bytes - Display the number of 64-byte frames in Transmit Size Counters good and bad packets transmitted. Tx 65-127 Bytes - Display the number of 65 ~ 127-byte Vigor1000 Series User’s Guide...
Page 145: Applications
Before you use the Dynamic DNS feature, you have to apply for free DDNS service to the DDNS service providers. Basically, Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www.dyndns.org, Vigor1000 Series User’s Guide...
Page 146 Type in one domain name that you applied previously. Use Domain name the drop down list to choose the desired domain. Type in the login name that you set for applying domain. Username Type in the password that you set for applying domain. Password Vigor1000 Series User’s Guide...
Page 147: Schedule
This method can only be applied when the WAN connection has been built up. You can set up to 15 schedules. To add a schedule profile, please click Add. Available settings are explained as follows: Vigor1000 Series User’s Guide...
Page 148: Igmp
Click OK button to activate the settings. You will see your setting has been saved. IGMP snooping means multicast traffic will be forwarded to ports that have members of that group. If you disable IGMP snooping, the system will make multicast traffic treated in the same manner as broadcast traffic. Vigor1000 Series User’s Guide...
Page 149: Igmp Status
Fast Leave. Fast Leave - Check the box to fast leave from the LAN port. Click OK button to activate the settings. You will see your setting has been saved. This page display current IGMP status. Vigor1000 Series User’s Guide...
Page 150: Upnp Configuration
DMZ. UPnP is available on Windows XP and the router provide the associated support for MSN Messenger to allow full use of the voice, video and messaging features. Vigor1000 Series User’s Guide...
Page 151 NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor1000 Series User’s Guide...
Page 152: Wake On Lan
Wake On LAN of this router. In addition, such PC must have installed a network card supporting WOL function. By the way, WOL function must be set as “Enable” on the BIOS setting. Vigor1000 Series User’s Guide...
Page 153: Sms
The router will send a SMS to the user for notification when something special happens. It can assist the user to know the abnormal situation of network connection. Each item is explained as follows: Item Description Display the queue number of the profile. Index Vigor1000 Series User’s Guide...
Page 154 SMS. Type the total number of the messages that the router will Quota send out in this field. The system will reduce the amount for each SMS sent out till out of the quota. Usually, SMS Vigor1000 Series User’s Guide...
Page 155: Vpn And Remote Access
Enable the necessary VPN service as you need. If you intend to run a VPN server inside your LAN, you should enable IPSec VPN Pass-through and specify an IP address to allow VPN tunnel pass through. Available settings are explained as follows: Item Description Vigor1000 Series User’s Guide...
Page 156: Pptp Remote Dial-In
VPN connection. The router provides access accounts for dial-in users. Note: This page is similar to the page under User>>User Configuration. Click Add a New User to open the following page. Vigor1000 Series User’s Guide...
Page 157 Assign Static IP Address – If you choose Remote Dial-in Client as Allowed Dial-In type, you can assign a fixed IP address. Local Network/Mask – If you choose LAN to LAN as Allowed Dial-In Type, you have to type the IP address as Vigor1000 Series User’s Guide...
Page 158 Check this box to let the remote user to adjust the settings Allow TELNET of router by TELNET. When you finish the settings, simply click OK to save the configuration. The new user will be created and displayed on the page. Vigor1000 Series User’s Guide...
Page 159 To edit a user, click the name link under Username to open the following page. Modify the settings except Username and then click OK to save and exit it. If you want to remove such user settings, simply click Delete User. Vigor1000 Series User’s Guide...
Page 160: Ipsec Remote Dial-In
L2TP/IPSec –The range must not overlap the DHCP address range (if enabled), and must allow for at least one IP address. Example: 10.10.137.240-10.10.137.245. If you choose this type, please specify the IP address range for L2TP/IPSec mode. Vigor1000 Series User’s Guide...
Page 161 Phase 2 (IPSec) - Negotiation IPSec security methods including Authentication Header (AH) or Encapsulating Security Payload (ESP) for the following IKE exchange and mutual examination of the secure tunnel establishment. Vigor1000 Series User’s Guide...
Page 162: Remote Dial-In Status
Display the given local IP address of a client. Local IP Display the system time that the user logs in. Login Time Display the data total received for such client. Rx bytes Display the data total transmitted for such client. Tx bytes Vigor1000 Series User’s Guide...
Page 163: Lan To Lan
Rx Packets / Rx Bytes tunnel (by IPSec or PPTP). Display the duration time of the IPSec / PPTP connection. Up Time Click it to add a new VPN tunnel via IPSec / PPTP Add Tunnel protocol. Vigor1000 Series User’s Guide...
Page 164 Click Add Tunnel to open the following page. Vigor1000 Series User’s Guide...
Page 165 Remote Network IP Address/Remote Network Mask through the VPN connection. For IPSec, this is the destination clients IDs of phase 2 quick mode. Change default route to this VPN tunnel – Check the Vigor1000 Series User’s Guide...
Page 166 You may specify a value in between 600 and 86400 seconds. Perfect Forward Secrecy - The IKE Phase 1 key will be reused to avoid the computation complexity in phase 2. The default value is inactive this function. Click OK to save the settings. Vigor1000 Series User’s Guide...
Page 167 Remote Network / Mask will travel through the VPN tunnel. Remote Network / Mask - Add a static route to direct all traffic destined to this Remote Network IP Address/Remote Network Mask through the VPN Vigor1000 Series User’s Guide...
Page 168: Certificate Management
Here you can generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor1000 Series User’s Guide...
Page 169: Trusted Ca Certificate
Valid From - Display the starting time for the valid Root Expires - Display the ending time for the valid Root CA. Status - Display if such certificate is Active or not. Build RootCA - Allow to build user-defined Root CA certificate. Vigor1000 Series User’s Guide...
Page 170 After pasting the data in this field, simply click Upload below. The related data will be uploaded onto the router. Upload – After pasting the information, click it to upload the CA data coming from the third-party to Vigor router. Vigor1000 Series User’s Guide...
Page 171 Common Name - Type a common name for such certificate. Email address - Type an email address for the system to send any information for you. After finished the page, click OK to save the settings. Vigor1000 Series User’s Guide...
Page 172: Local Certificate
Next, import the issued information in this page to be the local certificate for network connection. Allows you to import a certificate which has been issued IMPORT by Trusted CA Certificate. Click GENERATE to open the following page: Vigor1000 Series User’s Guide...
Page 173 Organization Unit - Type the department or unit for your company. Common Name - Type a common name. Email address - Type an email address for the system to send any information for you. Click OK to save the settings and return to previous page. Vigor1000 Series User’s Guide...
Page 174: Issue Certificate
IEEE 802.11n draft 2 protocol. To boost its performance further, the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps*. Hence, you can finally smoothly enjoy stream music and video. Vigor1000 Series User’s Guide...
Page 175 /or privacy on your wireless network. The Vigor wireless router is very flexible and can support multiple secure connections with both WEP and WPA at the same time. Below shows the menu items for Wireless LAN. Vigor1000 Series User’s Guide...
Page 176: General Setup
Enable Wireless LAN - Check the box to enable the General Setting wireless function. Show/Hide- Choose Show to make the SSID being seen by wireless clients. Choose Hide to prevent from wireless sniffing and make it Vigor1000 Series User’s Guide...
Page 177 SSID- It means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. Isolate LAN- Check this box to make the wireless clients (stations) not accessing the PC with wired connection.
Page 178 Each encryption mode will bring out different web page and ask you to offer additional configuration. Click OK to save the settings. Vigor1000 Series User’s Guide...
Page 179 Accepts only WPA clients and the encryption key should be entered in PSK. The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Vigor1000 Series User’s Guide...
Page 180 Available settings are explained as follows: Item Description The WPA encrypts each frame transmitted from the radio Type using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via Vigor1000 Series User’s Guide...
Page 181 (You need to setup WPS within two minutes. It is the simplest way to build connection between wireless network clients and vigor router. Users do not need to select any encryption mode and type any long encryption Vigor1000 Series User’s Guide...
Page 182 Start PBC button or using PIN Code. On the side of Vigor1000 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card.
Page 183: Access Control
Add a new MAC address into the list. Add a New Entry Delete the selected MAC address in the list. This button Delete will appear only an entry of MAC Address has been typed. Click OK to save the configuration. Vigor1000 Series User’s Guide...
Page 184: Station List
Display the SSID of the connected station. SSID Display the authentication of the connected station. Auth Display the encryption type adapted by the connected Encrypt station. Display the connection mode used by the connected Mode station. Vigor1000 Series User’s Guide...
Page 185: Access Point Discovery
AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added on WDS settings page. Vigor1000 Series User’s Guide...
Page 186: Wmm Configuration
1 to 15. Be aware that CWMax value must be greater than CWMin or equals to CWMin value. Both values will influence the time delay for WMM accessing categories. The difference between AC_VI and AC_VO Vigor1000 Series User’s Guide...
Page 187 WMM packets. “Check” the box means the AP router will not answer any response request for the transmitting packets. It will have better performance with lower reliability. Click OK to save the settings. Vigor1000 Series User’s Guide...
Page 188: Wds
To meet the above requirement, two WDS modes are implemented in Vigor router. One is Bridge, the other is Repeater. Below shows the function of WDS-bridge interface: The application for the WDS-Repeater mode is depicted as below: Vigor1000 Series User’s Guide...
Page 189 Please disable the unused link to get better performance. Key- Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Peer Mac Address- Four peer MAC addresses are allowed Vigor1000 Series User’s Guide...
Page 190: Usb Application
This page can display current using status of the USB storage disk. If you want to remove the disk from USB port in router, please check the box of Safely Remove Disk first. And then, remove the USB storage disk later. Vigor1000 Series User’s Guide...
Page 191: Format Disk (Ext2/3)
Under Linux environment, USB disk can be formatted in ext2 or ext3 to have good stability and efficiency for data transmitting. After clicking OK, the following confirmation dialog will appear. Simply click OK to continue the procedure. Vigor1000 Series User’s Guide...
Page 192: File Explorer
Click this icon to add a new folder. Create Display current folder. Current Path Click this button to upload the selected file to the USB Upload diskette. The uploaded file in the USB diskette can be shared for other user through FTP. Vigor1000 Series User’s Guide...
Page 193: Ftp User Management
It displays the access right for the connected USB disk. Access Rights Click the name link under User Name to open the setting web page. Available settings are explained as follows: Item Description Select the proper volume for the connected USB disk. Volume Vigor1000 Series User’s Guide...
Page 194: Disk Shares
LAN. It displays the name to be known by other computers in Share Name local network. It displays the description for the disk sharing. Comment It displays the directory name for the connected USB disk. Path Vigor1000 Series User’s Guide...
Page 195 Check this box to make this USB diskette to be seen in Visible Network Neighborhood on Windows of clients in local network. Specify the access right and apply to all the wireless clients Access that want to connect to the attached USB disk. Vigor1000 Series User’s Guide...
Page 196: Bit Torrent Download
USB storage device directly. Click USB Application >>Bit Torrent Download. Click Install to install the BT module for the router and the USB storage device. When the module installation is finished, you will see the following screen: Vigor1000 Series User’s Guide...
Page 197 Authentication Enable wireless clients or PC in LAN must type the username and password for authentication to the remote control services. Disable – Click it to disable authentication function. Type a name for authentication. User Name Vigor1000 Series User’s Guide...
Page 198: Itunes Server
Click Install to install the iTunes Server for the router and the USB storage device. When the server installation is finished, you will see the following screen: Available settings are explained as follows: Item Description Enable – Click it to enable iTunes Server function. iTunes Server Vigor1000 Series User’s Guide...
Page 199: Dlna Server
Clients with equipments supporting DLNA can play the files stored in the USB storage device connected to Vigor1000 through the network. Click Install to install the DLNA Server for the router and the USB storage device. When the server installation is finished, you will see the following screen: Vigor1000 Series User’s Guide...
Page 200: Temperature Sensor
A USB Thermometer can be attached to Vigor router to monitor the environmental temperature. If the temperature is higher the upper limit or lower than the lower limit, an alert would be sent out for notification. Vigor1000 Series User’s Guide...
Page 201 Use the drop down list to choose a SMS profile for sending SMS Profile the alarm. Save the settings. Cancel the settings. Cancel Below shows an example of temperature graph: Current temperature, maximum temperature, minimum temperature and average temperature will be displayed on the screen. Vigor1000 Series User’s Guide...
Page 202: Voip
G.729 A & B. Each codec uses a different bandwidth and hence provides different levels of voice quality. The more bandwidth a codec uses the better the voice quality, however the codec used must be appropriate for your Internet bandwidth. Vigor1000 Series User’s Guide...
Page 203 Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor1000 Series User’s Guide...
Page 204: Dialplan
SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor2820V for setting the phone book. Click any index number to display the dial plan setup page. Vigor1000 Series User’s Guide...
Page 205 For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Vigor1000 Series User’s Guide...
Page 206 Set the maximum length of the dial number for applying Max Len the prefix number settings. Choose the one that you want to enable the prefix number Route settings from the saved SIP accounts. Please set up one SIP Vigor1000 Series User’s Guide...
Page 207 Available settings are explained as follows: Item Description Click this to enable this entry. Enable Determine the direction for the phone call, IN – incoming Call Direction call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Vigor1000 Series User’s Guide...
Page 208 SIP accounts. Such control also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Such control also can be done based on preconfigured schedules. Vigor1000 Series User’s Guide...
Page 209 Dial the number typed in this field to release the DND Do Not Distrub [Deact] function. Dial the number typed in this field to make your phone Hide caller ID [Act] number (ID) not displayed on the display panel of remote Vigor1000 Series User’s Guide...
Page 210: Sip Accounts
Display the domain name or IP address of the SIP proxy Proxy server. Display the account name of SIP address before @.. Account Name Specify which port will ring when receiving a phone call. Ring Port Vigor1000 Series User’s Guide...
Page 211 Call without Registration. Choosing Auto is recommended. The system will select a proper way for your VoIP call. Set the port number for sending/receiving SIP message for SIP Port building a session. The default value is 5060. Your peer Vigor1000 Series User’s Guide...
Page 212 SIP Registrar again. Set Phone 1 and/or Phone 2 as the default ring port(s) for Ring Port this SIP account. Choose a ring tone type for the VoIP phone call. Ring Pattern Vigor1000 Series User’s Guide...
Page 213: Phone Settings
Advanced setting allows you to adjust tone settings manually if you choose User Defined. TOn1, TOff1, TOn2 and TOff2 mean the cadence of the tone pattern. TOn1 and TOn2 represent sound-on; TOff1 and TOff2 represent the sound-off. Vigor1000 Series User’s Guide...
Page 214 Dynamic RTP Port End - Specifies the end port for RTP stream. The default value is 15000. RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Vigor1000 Series User’s Guide...
Page 215 CLIR (hide caller ID)- Check this box to hide the caller ID on the display panel of the phone set. Call Waiting- Check this box to invoke this function. A Vigor1000 Series User’s Guide...
Page 216 Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting. Play dial tone only when account registered - Check this box to invoke the function. Vigor1000 Series User’s Guide...
Page 217 OutBand - Choose this one then the Vigor will capture the keypad number you pressed and transform it to digital form then send to the other side; the receiver will generate the tone according to the digital form it receive. This function Vigor1000 Series User’s Guide...
Page 218: Status
ALERTING - Indicates that a call is coming. ACTIVE-Indicates that the VoIP connection is launched. Indicates the voice codec employed by present channel. Codec The present in-call or out-call peer ID (the format may be PeerID Vigor1000 Series User’s Guide...
Page 219: Ipv6
This page defines the IPv6 connection types for WAN interface. Possible types contain Link-Local only, Static IPv6, DHCPv6 and TSPC. Each type requires different parameter settings. There are six IPv6 Connection Types for you to choose. Vigor1000 Series User’s Guide...
Page 220 Available settings are explained as follows: Item Description The least significant 64 bits are usually chosen as the IPv6 Address interface hardware address constructed in modified EUI-64 format. Display the fixed value (64) for prefix length. Prefix Length Vigor1000 Series User’s Guide...
Page 221 Secondary DNS Server DHCPv6 client mode would use IA_NA option of DHCPv6 protocol to obtain IPv6 address from server. Available settings are explained as follows: Item Description Type primary DNS Server address here. Primary DNS Server Vigor1000 Series User’s Guide...
Page 222 It gets a public IPv6 IP address and an IPv6 prefix from the tunnel broker and then monitors the state of the tunnel in background. After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to the Internet. Vigor1000 Series User’s Guide...
Page 223 Yes – Keep the connection between TSPC and tunnel Keepalive broker always on. TSPC will send ping packet to make sure the connection between both ends is normal. No - The client will not send keepalives. Vigor1000 Series User’s Guide...
Page 224 Type the password assigned with the user name. Password Type the password again to make the confirmation. Confirm Password Type the default server address, tic.sixxs.net. Server Choose one of the tunnel modes Tunnel mode AYIYA – allows tunnels to be created even behind Vigor1000 Series User’s Guide...
Page 225 2 or more services for IPv4 to IPv6/IPv6 to IPv4 with different tunnel IDs. Simply type tunnel ID characters obtained from AICCU service provider for IPv6 connection. For the default setting, simply use the word “any”. For more details, please refer to http://www.sixxs.net/tools/aiccu/。 Vigor1000 Series User’s Guide...
Page 226: Ipv6 Lan Setup
18.2 hours. A lifetime of 0 indicates that the router is not a default router and should not appear on the default router list. IPv6 Start Address/IPv6 End Address - Type the start DHCPv6 (Stateful) and end address for IPv6 server. Vigor1000 Series User’s Guide...
Page 227: Ipv6 Firewall Setup
Display the destination port number of such rule Destination Port Display the status (accept or drop) of such rule. Action Click Add New Rule to configure a new rule for IPv6 Firewall. Note: You can set up to 20 sets of IPv6 rules. Vigor1000 Series User’s Guide...
Page 228 Type the subnet mask here if you choose Subnet as Source Source Subnet IP Type. Determine the IP type as the destination. Destination IP Type Type the IP address here if you choose Single as Destination IP Destination IP Type. Vigor1000 Series User’s Guide...
Page 229 You are using IPv6 from 2001:5c0:1503:7400:30e4:139d:53c8:3a1e Set firewall rule to block all TCP traffic from this IP address. Open IPv6 >> IPv6 Firewall Setup and press Add New Rule. In the following dialog, please configure the page with the following values. Vigor1000 Series User’s Guide...
Page 230: Ipv6 Routing
Description Display the interface name (eth0, eth1, fp, etc..) that used to Device transfer packets with addresses matching the prefix. The IPv6 address prefix. Prefix Display the distance to the target (usually counted in hops). Metric Vigor1000 Series User’s Guide...
Page 231: Ipv6 Neighbour
- neighbor may be unreachable and probes are sent to verify the reachability. Check this box to enable an automatic refresh of the page at Auto-refresh regular intervals. Click it to reload the page. Refresh Vigor1000 Series User’s Guide...
Page 232: Ipv6 Tspc Status
When the router detects all the information, the screen will be shown as follows. One set of TSPC prefix and prefix length will be obtained after the connection between TSPC and Tunnel broker built. Vigor1000 Series User’s Guide...
Page 233 When the router connects to the tunnel broker, the router will use RADVD to transmit the prefix to the PC on LAN. Next, the PC will generate one set of IPv6 public IP (see the figure below). Users can use such IP for connecting to IPv6 network. Vigor1000 Series User’s Guide...
Page 234 When your PC obtains the IPv6 address, please connect to http://www.ipv6.org. If your PC access Internet via IPv6 connection, your IPv6 address will be shown on the web page immediately. Refer to the following figure. Vigor1000 Series User’s Guide...
Page 235: Ipv6 Management
-Enable the checkbox to allow system administrators to login the Internet from the Internet. There are several servers provided by the system to allow you managing the router from Internet. Check the box(es) to specify the service. Vigor1000 Series User’s Guide...
Page 236: User
Check this box to enable such user profile. Enable Type a name for this user. Username Type full name for this user. Full Name Type the password for this user. Password Type the password again for confirmation. Confirm Password Vigor1000 Series User’s Guide...
Page 237 Check this box to let the remote user to adjust the settings of Allow TELNET router by TELNET. When you finish the settings, simply click OK to save the configuration. The new user will be created and displayed on the page. Vigor1000 Series User’s Guide...
Page 238: System Maintenance
For the system setup, there are several items that you have to know the way of configuration: TR-069, System Password, User Password, Configuration Backup, Syslog/Mail Alert, Time and Date, Management, Reboot System, and Firmware Upgrade. Below shows the menu items for System Maintenance. Vigor1000 Series User’s Guide...
Page 239: System Status
IP Mask - Display the subnet mask address of the LAN interface. IPv6 Address - Display the link local IPv6 address of the LAN interface. DHCP Server - Display if the DHCP server is active or not. Vigor1000 Series User’s Guide...
Page 240 IPv6 Address - Display the IPv6 address of the WAN interface. Default Gateway - Display the gateway address of the WAN interface. Primary DNS - Display the specified primary DNS setting. Secondary DNS - Display the specified secondary DNS setting. Vigor1000 Series User’s Guide...
Page 241: 233
If the connected CPE needs to be authenticated, please set URL as the following and type username and password for VigorACS server: http://{IP address of VigorACS}:8080/ACSServer/services/ACSServlet If the connected CPE does not need to be authenticated please set URL as the following: http://{IP address of Vigor1000 Series User’s Guide...
Page 242: System Password
Type in new password in this filed. New Password Type in the new password again. Confirm Password When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Vigor1000 Series User’s Guide...
Page 243: User Password
Below shows an example for accessing into User Operation with User Password. 1. Type a new password in the field of New Password and click OK. 2. The following screen will appear. Simply click OK. 3. Log out Vigor1000 Web Configurator. Vigor1000 Series User’s Guide...
Page 244 Password and click Login. 5. The main screen with User Mode will be shown as follows. Settings to be configured in User Mode will be less than settings in Admin Mode. Vigor1000 Series User’s Guide...
Page 245: Configuration Backup
Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. Vigor1000 Series User’s Guide...
Page 246 Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Note: If the file you want to restore has been encrypted, you will be asked to type the encrypted key before clicking Restore. Vigor1000 Series User’s Guide...
Page 247: Syslog/Mail Alert
User Access Log - Check this box to record the user logging information. Enable - Check “Enable” to activate function of mail Mail Alert Setup alert. Send a Test e-mail – Click this button to let the system Vigor1000 Series User’s Guide...
Page 248 Just set your monitor PC’s IP address in the field of Server IP Address. Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. From the Syslog screen, select the router you want to monitor. Vigor1000 Series User’s Guide...
Page 249 Vigor1000 Series User’s Guide...
Page 250: Time And Date
Add NTP server - Click the button to add a new NTP server. Delete - Click this button to remove an NTP server. Click OK to save these settings. Vigor1000 Series User’s Guide...
Page 251: Management
A maximum of three IPs/subnet masks is allowed. List IP - Indicate an IP address allowed to login to the router. Subnet Mask - Represent a subnet mask allowed to login to the router. Vigor1000 Series User’s Guide...
Page 252: Reboot System
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.
Page 253 Click Browse.. to locate the newest firmware and click Upgrade. During the process of upgrade, do not turn off your router. Vigor1000 Series User’s Guide...
Page 254: Diagnostics
Type in the payload size of the ICMP packet. Values range Ping Size from 8 bytes to 1400 bytes. Click this button to start the ping work. The result will be Start displayed on the screen. Vigor1000 Series User’s Guide...
Page 255: Trace Route
Display the gateway address or “*” if none set. Gateway the netmask for the destination net; Display Genmask '255.255.255.255' is for a host destination and '0.0.0.0' is for the default route. Different codes represent different routing status. Flags Vigor1000 Series User’s Guide...
Page 256: System Log
Click it to reload the page. Refresh Click Diagnostics and click System Log to open the web page. Available settings are explained as follows: Item Description Check it to enable auto-refresh function. Auto-refresh Click it to reload the page. Refresh Vigor1000 Series User’s Guide...
Page 257: Traffic Overview
Display the number of received frames filtered by the Filtered forwarding process. Check it to enable auto-refresh function. Auto-refresh Click it to reload the page. Refresh Click it to clear the counters for all ports. Clear Vigor1000 Series User’s Guide...
Page 258: Detailed Statistics
Rx Unicast - Display the counting number of the received unicast packet. Rx Broadcast - Display the counting number of the received broadcast packet. Rx Pause - Display the counting number of the received pause packet. Vigor1000 Series User’s Guide...
Page 259 Tx Multicast - Display the show the counting number of the transmitted multicast packet. Tx Broadcast - Display the counting number of the transmitted broadcast packet. Tx Pause - Show the counting number of the transmitted pause packet. Vigor1000 Series User’s Guide...
Page 260: Mac Address Table
The button >> will use the last entry of the currently displayed VLAN/MAC address pairs as a basis for the next lookup. When the end is reached the text "no more entries" is shown in the displayed table, use the l<< button to start over. Vigor1000 Series User’s Guide...
Page 261: Dhcp Table
The facility provides information on IP address assignments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Each item is explained as follows: Item Description Check it to enable auto-refresh function. Auto-refresh Vigor1000 Series User’s Guide...
Page 262: Data Flow Monitor
Allow to choose the page to be displayed on this screen. Page Check it to enable auto-refresh function. Auto-refresh Click it to reload the page. Refresh Display the number of the data flow. Index Display the IP address of the monitored device. IP Address Vigor1000 Series User’s Guide...
Page 263: Traffic Graph
The remaining time will be shown on the session column. Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Refresh to renew the graph at any time. Vigor1000 Series User’s Guide...
Page 264: Sessions Table
You can check a range of certain devices by specifying the Source IP: Port / source and destination IP address (es) with the port Dest IP: Port number. Display the sessions based on the state chosen here. State Vigor1000 Series User’s Guide...
Page 265: Ports State
Item Description Check it to enable auto-refresh function. Auto-refresh Click it to reload the page if you change the LAN port Refresh connection. Or you can check Auto-refresh to reload the page by the system automatically. Vigor1000 Series User’s Guide...
Page 266 This page is left blank. Vigor1000 Series User’s Guide...
Page 267: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor1000 Series User’s Guide...
Page 268 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor1000 Series User’s Guide...
Page 269 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor1000 Series User’s Guide...
Page 270: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor1000 Series User’s Guide...
Page 271: Checking If The Isp Settings Are Ok Or Not
Open WAN>>Internet Access page and then check whether the ISP settings are set correctly. Use the Connection Type drop down list to choose Static IP/DHCP/PPPoE/PPTP/L2TP/3G USB Modem for reviewing the settings that you configured previously. Vigor1000 Series User’s Guide...
Page 272: Forcing Vigor Router Into Tftp Mode For Performing The Firmware Upgrade
The .all firmware format will remain the former configurations after upgrading firmware. 10. Input the Password if you have set one, then click Send. 11. There is a bar showing the upgrading process. Vigor1000 Series User’s Guide...
Page 273 12. When the firmware upgrade is successful, the following window will pop up. Vigor1000 Series User’s Guide...
Page 274 Transfer Abort ! appears, please check if the firmware you download is correct for your Vigor router. Note: Please turn off the Firewall protection while upgrading the firmware with Windows Vista. The Firewall function can be turned off via Control Panel >> Security Center >> Firewall. Vigor1000 Series User’s Guide...
Page 275: Backing To Factory Default Setting If Necessary
5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the factory default setting, you can configure the settings for the router again to fit your personal request. Vigor1000 Series User’s Guide...
Page 276: Contacting Your Dealer
If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor1000 Series User’s Guide...

This manual is also suitable for:

Vigor1000n Vigor1000vn

Draytek Vigor1000 Series User Manual

Quick Links

Related Manuals for Draytek Vigor1000 Series

Summary of Contents for Draytek Vigor1000 Series

This manual is also suitable for:

Table of Contents