Page 1 Vigor2110 Series Broadband Firewall Router User’s Guide Version: 1.01 Date: 03/07/2009 Vigor2110 Series User’s Guide...
Page 2: Copyright Information
Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 3: European Community Declarations
Product: Vigor2110 Series Router DrayTek Corp. declares that Vigor2110 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 4: Table Of Contents
3.2.1 Basics of LAN ......................... 32 3.2.2 General Setup......................... 33 3.3 NAT ............................36 3.3.1 Port Redirection ......................36 3.3.2 DMZ Host........................38 3.3.3 Open Ports........................41 3.4 Applications ........................... 42 3.4.1 Dynamic DNS ......................... 42 Vigor2110 Series User’s Guide...
Page 5 4.3.3 Open Ports........................105 4.4 Hardware Acceleration ......................107 4.5 Firewall ..........................108 4.5.1 Basics for Firewall......................108 4.5.2 General Setup....................... 110 4.5.3 Filter Setup ........................112 4.5.4 DoS Defense ........................ 117 4.6 Objects Settings ........................120 Vigor2110 Series User’s Guide...
Page 6 4.13.2 General Setup......................198 4.13.3 Security ........................201 4.13.4 Access Control......................203 4.13.5 WPS..........................204 4.13.6 WDS..........................206 4.13.7 Advanced Setting......................209 4.13.8 WMM Configuration ....................210 4.13.9 AP Discovery ......................211 4.13.10 Station List ........................ 212 Vigor2110 Series User’s Guide...
Page 7 6.3 Pinging the Router from Your Computer ................264 6.4 Checking If the ISP Settings are OK or Not ................ 265 6.5 Backing to Factory Default Setting If Necessary ..............267 6.6 Contacting Your Dealer ....................... 268 Vigor2110 Series User’s Guide viii...
Page 8: Preface
Vigor2110 series is a broadband router. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DS, the router increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP) with up to 2 VPN tunnels.
Page 9: Led Indicators And Connectors
Firewall >>General Setup. (Such profile must be established under CSM menu) Interface Description Connector for accessing the Internet. LAN (1-4) Connecters for local networked devices. Connecter for USB storage device (Pen Driver/Mobile HD) or printer. Vigor2110 Series User’s Guide...
Page 10 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Connector for a power adapter. Power Switch. ON/OFF Vigor2110 Series User’s Guide...
Page 11: For Vigor2110N
Press the button once to enable (WLAN LED on) or WLAN disable (WLAN LED off) wireless connection. Connector for accessing the Internet. LAN (1-4) Connecters for local networked devices. Connecter for USB storage (Pen Driver Mobile/HD) or printer. Vigor2110 Series User’s Guide...
Page 12 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Connecter for a power adapter. Power Switch. ON/OFF Vigor2110 Series User’s Guide...
Page 13: For Vigor2110Vn
Press the button once to enable (WLAN LED on) or WLAN disable (WLAN LED off) wireless connection. Connector for accessing the Internet. LAN (1-4) Connecters for local networked devices. Connecter for USB storage (Pen Driver Mobile/HD) or printer. Vigor2110 Series User’s Guide...
Page 14 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Connecter for a power adapter. Power Switch. ON/OFF Vigor2110 Series User’s Guide...
Page 15: Hardware Installation
4 PCs directly. Connect Phone port to a conventional analog telephone. Connect detachable antennas to the router for Vigor2110 series (n model). Connect one end of the power cord to the power port of this device. Connect the other end to the wall outlet of electricity.
Page 16: Stand Installation
The Vigor2110 must be placed erectly. Therefore you have to install a stand onto the router to make it standing firmly. Please follow the figures listed below to finish the installation. Vigor2110 Series User’s Guide...
Page 17: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.draytek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 18 Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. Vigor2110 Series User’s Guide...
Page 19 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Vigor2110 Series User’s Guide...
Page 20 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and UPR name. Vigor2110 Series User’s Guide...
Page 21 If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support Center->FAQ; find out the link of Printer Server FAQ; finally click the link of “What types of printers are compatible with Vigor router?”.
Page 22: Configuring Basic Settings
The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor2110 Series User’s Guide...
Page 23: Changing Password
Please type “admin/admin” on Username/Password for admin mode. Otherwise, do not type any word (both username and password are Null for user mode) on the window and click Login on the window. Now, the Main Screen will appear. Main screen for admin mode operation (full configuration) Vigor2110 Series User’s Guide...
Page 24 Enter the login password (the default is blank) on the field of Old Password. Type New Password. Then click OK to continue. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. Vigor2110 Series User’s Guide...
Page 25: Quick Start Wizard
On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Vigor2110 Series User’s Guide...
Page 26: Pppoe
If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown: User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Vigor2110 Series User’s Guide...
Page 27: Pptp
Click Finish. Then, the system status of this protocol will be shown. Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Vigor2110 Series User’s Guide...
Page 28: Static Ip
Click Finish. Then, the system status of this protocol will be shown. Click Static IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Vigor2110 Series User’s Guide...
Page 29: Dhcp
Click Finish. Then, the system status of this protocol will be shown. Click DHCP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Vigor2110 Series User’s Guide...
Page 30: Online Status
Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface. RX Packets Displays the total number of received packets at the LAN interface. WAN Status Line Displays the physical connection (Ethernet) of this interface. Vigor2110 Series User’s Guide...
Page 31: Saving Configuration
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2110 Series User’s Guide...
Page 32: User Mode Operation
Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor2110 Series User’s Guide...
Page 33: Pppoe
ISP. Below shows the menu items for Internet Access. To choose PPPoE as the accessing protocol of the internet, please select PPPoE from the Internet Access menu. The following web page will be shown. Vigor2110 Series User’s Guide...
Page 34 Please contact your ISP before you want to use this function. WAN IP Alias - If you have multiple public IP addresses and would like to utilize them on the WAN interface, please use WAN IP Alias. Vigor2110 Series User’s Guide...
Page 35: Static Or Dynamic Ip
If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. To use Static or Dynamic IP as the accessing protocol of the internet, please choose Static or Dynamic IP mode from Internet Access menu. The following web page will be shown. Vigor2110 Series User’s Guide...
Page 36 Click Enable RIP for activating this function. WAN IP Network This group allows you to obtain an IP address automatically and Settings allows you type in IP address manually. Vigor2110 Series User’s Guide...
Page 37: Pptp/L2Tp
Static IP mode. If necessary, type in secondary IP address for necessity in the future. To use PPTP/L2TP as the accessing protocol of the internet, please choose PPTP/L2TP from Internet Access menu. The following web page will be shown. Vigor2110 Series User’s Guide...
Page 38 Obtain an IP address automatically – Click this button to obtain Settings the IP address automatically. Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. Vigor2110 Series User’s Guide...
Page 39: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2110 Series User’s Guide...
Page 40: General Setup
Type in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask Type in an address code that determines the size of the network. (Default: 255.255.255.0/ 24) For IP Routing Usage Click Enable to invoke this function. The default setting is Disable. Vigor2110 Series User’s Guide...
Page 41 1st Subnet - Select the router to change the RIP information of the 1st subnet with neighboring routers. 2nd Subnet - Select the router to change the RIP information of the 2nd subnet with neighboring routers. Vigor2110 Series User’s Guide...
Page 42 DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: 194.98.0.1 to this field. The default DNS Server IP address can be found via Online Status: Vigor2110 Series User’s Guide...
Page 43: Nat
IP address/port, the goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping private IP address/port of the server. Vigor2110 Series User’s Guide...
Page 44 To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection. Vigor2110 Series User’s Guide...
Page 45: Dmz Host
IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a Vigor2110 Series User’s Guide...
Page 46 Click DMZ Host to open the following page: If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode, you will find them in Aux. WAN IP for your selection. Vigor2110 Series User’s Guide...
Page 47 LAN network. Select one private IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2110 Series User’s Guide...
Page 48: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2110 Series User’s Guide...
Page 49: Applications
Internet. The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address. It allows the router to update its online WAN IP address mappings on the specified Dynamic DNS server. Once the router is online, you will be able to use the Vigor2110 Series User’s Guide...
Page 50 Account, and choose correct Service Provider: dyndns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. Vigor2110 Series User’s Guide...
Page 51: Upnp
DMZ. UPnP is available on Windows XP and the router provide the associated support for MSN Messenger to allow full use of the voice, video and messaging features. Vigor2110 Series User’s Guide...
Page 52 NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor2110 Series User’s Guide...
Page 53: Voip
“userinfo” includes the user field, the password field and the @ sign following them. This is very similar to a URL so some may call it “SIP URL”. SIP supports peer-to-peer direct calling and also calling via a SIP proxy server (a role similar to the gatekeeper in H.323 networks), Vigor2110 Series User’s Guide...
Page 54 SIP Registrar. Peer-to-Peer Before calling, you have to know your friend’s IP Address. The Vigor VoIP Routers will build connection between each other. Vigor2110 Series User’s Guide...
Page 55: Dialplan
“speed-dial” Phone Number. There are total 60 index entries in the phonebook for you to store all your friends and family members’ SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor 2820V for setting the phone book. Vigor2110 Series User’s Guide...
Page 56 Dial Out Account Choose one of the SIP accounts for this profile to dial out. It is useful for both sides (caller and callee) that registered to different SIP Registrar servers. If caller and callee do not use Vigor2110 Series User’s Guide...
Page 57 For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Vigor2110 Series User’s Guide...
Page 58 VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” Vigor2110 Series User’s Guide...
Page 59 SIP accounts. Please set up one SIP account first to make this interface available. Call barring is used to block phone calls coming from the one that is not welcomed. Click any index number to display the dial plan setup page. Vigor2110 Series User’s Guide...
Page 60 Unknown Domain or Block IP Address. Simply click the relational links to open the web page. For Block Anonymous – this function can block the incoming calls without caller ID on the interface (Phone port) specified in the following window. Such control also can be done based on preconfigured schedules. Vigor2110 Series User’s Guide...
Page 61 This page allows you to process incoming or outgoing phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed. Vigor2110 Series User’s Guide...
Page 62 Dial the number typed in this field to make your phone number (ID) not displayed on the display panel of remote end. Hide caller ID [Deact] Dial the number typed in this field to release this function. Vigor2110 Series User’s Guide...
Page 63: Sip Accounts
Account Name or user name, SIP Registrar, Proxy, and Domain name. (The last three might be the same in some case). Then you can tell your folks your SIP Address as in Account Name@ Domain name Vigor2110 Series User’s Guide...
Page 64 The default value is 150 (sec). It is useful for a Nortel server NAT Traversal Support. Status Show the status for the corresponding SIP account. R means such account is registered on SIP server successfully. – means the account is failed to register on SIP server. Vigor2110 Series User’s Guide...
Page 65 Account Number/Name Enter your account name of SIP Address, e.g. every text before Authentication ID Check the box to invoke this function and enter the name or number used for SIP Authorization with SIP Registrar. If this Vigor2110 Series User’s Guide...
Page 66: Phone Settings
Ring Pattern Choose a ring tone type for the VoIP phone call. This page allows user to set phone settings for Phone 1 and Phone 2 respectively. However, it changes slightly according to different model you have. Vigor2110 Series User’s Guide...
Page 67 Vigor2110 Series User’s Guide...
Page 68 RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Click the number link for Phone port, you can access into the following page for configuring Phone settings. Vigor2110 Series User’s Guide...
Page 69 Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigured schedules. Refer to section 3.8.2 Schedule for detailed configuration. Index (1-60) in Phone Book - Enter the index of phone book Vigor2110 Series User’s Guide...
Page 70 Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting. Play dial tone only when account registered - Check this box to invoke the function. Vigor2110 Series User’s Guide...
Page 71 Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Vigor2110 Series User’s Guide...
Page 72: Status
Payload Type (rfc2833) - Choose a number from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. From this page, you can find codec, connection and other important call status for each port. Vigor2110 Series User’s Guide...
Page 73 Total number of transmitted voice packets during this connection session. Rx Pkts Total number of received voice packets during this connection session. Rx Losts Total number of lost packets during this connection session. Rx Jitter The jitter of received voice packets. Vigor2110 Series User’s Guide...
Page 74: Wireless Lan
Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router. The General Settings will set up the information of this wireless network, including its SSID as identification, located channel etc. Vigor2110 Series User’s Guide...
Page 75: General Setup
Below shows the menu items for Wireless LAN. By clicking the General Settings, a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Vigor2110 Series User’s Guide...
Page 76 SSID Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. Channel Means the channel of frequency of the wireless LAN. The default channel is 6.
Page 77 In default, the first set of SSID will be enabled. You can hide it for your necessity. Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short Vigor2110 Series User’s Guide...
Page 78: Security
PSK. WPA2/PSK-Accepts only WPA2 clients and the encryption key should be entered in PSK. Mixed (WPA+ WPA2)/PSK - Accepts WPA and WPA2 clients simultaneously and the encryption key should be entered in PSK. Vigor2110 Series User’s Guide...
Page 79: Access Control
MAC address that has been configured can access the wireless LAN interface. By clicking the Access Control, a new web page will appear, as depicted below, so that you could edit the clients' MAC addresses to control their access rights. Vigor2110 Series User’s Guide...
Page 80: Advanced Setting
Such channel can increase the performance for data transit. Guard Interval It is to assure the safety of propagation delays and reflections for the sensitive digital data. If you choose auto Vigor2110 Series User’s Guide...
Page 81: Wmm Configuration
AC_VI and AC_VO categories For the service of e-mail or web browsing, please set large value for AC_BE and AC_BK categories. CWMin/CWMax CWMin means contention Window-Min and CWMax means contention Window-Max. Please specify the value Vigor2110 Series User’s Guide...
Page 82: Station List
Station List provides the knowledge of connecting wireless clients now along with its status code. There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Vigor2110 Series User’s Guide...
Page 83: System Maintenance
Below shows the menu items for System Maintenance. The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Vigor2110 Series User’s Guide...
Page 84: User Password
It indicates information about equipped WLAN miniPCi card. This also helps to provide availability of some features that are bound with some WLAN miniPCi. SSID Display the SSID of the router. This page allows you to set new password for user operation. Vigor2110 Series User’s Guide...
Page 85: Time And Date
Enable Daylight Saving Check the box to activate daylight saving function. Such feature is useful for some areas. Automatically Update Interval Select a time interval for updating from the NTP server. Click OK to save these settings. Vigor2110 Series User’s Guide...
Page 86: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpect errors of the router in the future. Vigor2110 Series User’s Guide...
Page 87: Diagnostics
DHCP assigned IP address for it. Leased Time It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. Vigor2110 Series User’s Guide...
Page 88: Ping Diagnosis
Use the drop down list to choose the interface that you want to ping through. Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Clear Click this link to remove the result on the window. Vigor2110 Series User’s Guide...
Page 89 Vigor2110 Series User’s Guide...
Page 90: Admin Mode Operation
These are known as private IP addresses, and are listed in the following ranges: From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 Vigor2110 Series User’s Guide...
Page 91: Pppoe
ISP. Below shows the menu items for Internet Access. To choose PPPoE as the accessing protocol of the internet, please select PPPoE from the Internet Access menu. The following web page will be shown. Vigor2110 Series User’s Guide...
Page 92 WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Vigor2110 Series User’s Guide...
Page 93: Static Or Dynamic Ip
If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. To use Static or Dynamic IP as the accessing protocol of the internet, please choose Static or Dynamic IP mode from Internet Access menu. The following web page will be shown. Vigor2110 Series User’s Guide...
Page 94 Click Enable RIP for activating this function. WAN IP Network This group allows you to obtain an IP address automatically and Settings allows you type in IP address manually. Vigor2110 Series User’s Guide...
Page 95: Pptp/L2Tp
Static IP mode. If necessary, type in secondary IP address for necessity in the future. To use PPTP/L2TP as the accessing protocol of the internet, please choose PPTP/L2TP from Internet Access menu. The following web page will be shown. Vigor2110 Series User’s Guide...
Page 96 Obtain an IP address automatically – Click this button to obtain Settings the IP address automatically. Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. Vigor2110 Series User’s Guide...
Page 97: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2110 Series User’s Guide...
Page 98 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2110 Series User’s Guide...
Page 99: General Setup
Type in secondary IP address for connecting to a subnet. (Default: 192.168.2.1/ 24) Subnet Mask An address code that determines the size of the network. (Default: 255.255.255.0/ 24) DHCP Server You can configure the router to serve as a DHCP server for the 2nd subnet. Vigor2110 Series User’s Guide...
Page 100 IP settings to any local user configured as a DHCP client. It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network. Vigor2110 Series User’s Guide...
Page 101 If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name immediately. Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. Vigor2110 Series User’s Guide...
Page 102: Static Route
Main Router 192.168.1.1 as the default gateway for the Router A 192.168.1.2. Before setting Static Route, user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router. Vigor2110 Series User’s Guide...
Page 103 192.168.10.0 will be forwarded to 192.168.1.2. Click OK. Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Vigor2110 Series User’s Guide...
Page 104 Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2110 Series User’s Guide...
Page 105: Vlan
P3 and P4. After checking the box to enable VLAN function, you will check the table according to the needs as shown below. To remove VLAN, uncheck the needed box and click OK to save the results. Vigor2110 Series User’s Guide...
Page 106: Bind Ip To Mac
It is used to refresh the ARP table. When there is one new PC added to the LAN, you can click this link to obtain the newly ARP table information. IP Bind List It displays a list for the IP bind to MAC information. Vigor2110 Series User’s Guide...
Page 107: Nat
IP address/domain name are recognized by all users. Since the server is actually located inside the LAN, the network well protected by NAT of the router, and identified by its private IP address/port, the goal of Port Redirection function is to Vigor2110 Series User’s Guide...
Page 108 To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection. Vigor2110 Series User’s Guide...
Page 109 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2110 Series User’s Guide...
Page 110: Dmz Host
LAN. Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption. DMZ Host allows a defined internal user to be totally exposed to the Internet, which usually helps some special applications such as Netmeeting or Internet Games etc. Vigor2110 Series User’s Guide...
Page 111 If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode, you will find them in Aux. WAN IP for your selection. Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Vigor2110 Series User’s Guide...
Page 112: Open Ports
Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application involved up-to-date to avoid falling victim to any security exploits. Click Open Ports to open the following page: Vigor2110 Series User’s Guide...
Page 113 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2110 Series User’s Guide...
Page 114: Hardware Acceleration
Hardware-base Acceleration Engine, also named Protocol Processing Engine API is the function that Draytek provides to extremely speed up the NAT performance. While the hardware acceleration mechanism is activated, most of the bandwidth usage will be concentrated on the specific sessions which increase transmission speed to get ultimately accelerated.
Page 115: Firewall
It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2110 Series User’s Guide...
Page 116 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor2110 Series User’s Guide...
Page 117: General Setup
CSM>> URL Content Filter) for applying with this router. Please set at least one profile for choosing in CSM>> URL Content Filter web page first. For troubleshooting needs, you can specify to record information for URL Content Filter by checking the Log box. It Vigor2110 Series User’s Guide...
Page 118 Syslog/Mail Alert for more detailed information. Syslog For troubleshooting needs you can specify the filter log and/or CSM log here by checking the box. The log will be displayed on Draytek Syslog window. Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here.
Page 119: Filter Setup
Check Active to enable the rule. Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the button will open Edit Filter Rule web page. For the detailed information, refer to the following page. Vigor2110 Series User’s Guide...
Page 120 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Type and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects Vigor2110 Series User’s Guide...
Page 121 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. Service Group/Object - Use the drop down list to choose the one that you want. Vigor2110 Series User’s Guide...
Page 122 For troubleshooting needs you can specify the filter log and/or CSM log here. Check the corresponding box to enable the log function. Then, the filter log and/or CSM log will be shown on Draytek Syslog window. Vigor2110 Series User’s Guide...
Page 123 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2110 Series User’s Guide...
Page 124: Dos Defense
Internet has exceeded the defined value, the router will discard the ICMP echo requests coming from the Internet. The default setting for threshold and timeout are 50 packets per second and 10 seconds, respectively. Vigor2110 Series User’s Guide...
Page 125 The Vigor routers will block any packets realizing this attacking activity. Block ICMP Fragment Check the box to activate the Block ICMP fragment function. Any ICMP packets with more fragment bit set are dropped. Vigor2110 Series User’s Guide...
Page 126 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2110 Series User’s Guide...
Page 127: Objects Settings
IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2110 Series User’s Guide...
Page 128 Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. Below is an example of IP objects settings. Vigor2110 Series User’s Guide...
Page 129: Ip Group
This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2110 Series User’s Guide...
Page 130 Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Click >> button to add the selected IP objects in this box. Vigor2110 Series User’s Guide...
Page 131: Service Type Object
Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. Vigor2110 Series User’s Guide...
Page 132: Service Type Group
Below is an example of service type objects settings. This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2110 Series User’s Guide...
Page 133: Keyword Object
You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles. Click the number under Index column for setting in detail. Vigor2110 Series User’s Guide...
Page 134: Keyword Group
This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles. Click the number under Index column for setting in detail. Vigor2110 Series User’s Guide...
Page 135: File Extension Object
Profile 1 with name of “default” is the default profile, some files with the file extensions specified in this profile will be ignored and not be scanned by Vigor router. Set to Factory Default Clear all profiles. Click the number under Profile column for configuration in details. Vigor2110 Series User’s Guide...
Page 136 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2110 Series User’s Guide...
Page 137: Im Object
Profile Name Type a name for this profile. Type a name for such profile and check all the items that not allowed to be used in the host. Finally, click OK to save this profile. Vigor2110 Series User’s Guide...
Page 138: P2P Object
Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click OK to save this profile. Vigor2110 Series User’s Guide...
Page 139: Misc Object
Profile Name Type a name for this profile. Type a name for such profile and check all the protocols that not allowed to be used in the host. Finally, click OK to save this profile. Vigor2110 Series User’s Guide...
Page 140: Csm Profile
URL address requested (e.g.www.bbc.co.uk) will be checked against our server database. This database is updated as frequent as daily by a global team of Internet researchers. The server will look up the URL and return a category to your router. Your Vigor2110 Series User’s Guide...
Page 141: Im/P2P Filter Profile
Peer) application. CSM profile can be used in Filter Setup page. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Profile Name Type a name for the CSM profile. Vigor2110 Series User’s Guide...
Page 142: Url Content Filter Profile
Click CSM and click URL Content Filter Profile to open the profile setting page. You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Vigor2110 Series User’s Guide...
Page 143 None – There is no log file will be recorded for this profile. Pass – Only the log about Pass will be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. Vigor2110 Series User’s Guide...
Page 144 Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noticed that the more simplified the blocking keyword list, the more efficiently the Vigor router perform. Vigor2110 Series User’s Guide...
Page 145 File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Objects previously for passing or blocking the file downloading. Vigor2110 Series User’s Guide...
Page 146: Web Content Filter Profile
Click CSM and click Web Content Filter Profile to open the profile setting page. You can set eight profiles as Web content filter. Simply click the index number under Profile to open the following web page. Vigor2110 Series User’s Guide...
Page 147 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. For this section, please refer to Web Content Filter user’s guide. Vigor2110 Series User’s Guide...
Page 148: Bandwidth Management
LAN. Limitation List Displays a list of specific limitations that you set on this web page. Start IP Defines the start IP address for limit session. End IP Defines the end IP address for limit session. Vigor2110 Series User’s Guide...
Page 149: Bandwidth Limit
Click this button to activate the function of limit bandwidth. Subnet – Check this box to apply the bandwidth Apply to 2 limit to the second subnet specified in LAN>>General Setup. Disable Click this button to close the function of limit bandwidth. Vigor2110 Series User’s Guide...
Page 150: Quality Of Service
IP header. For instance, to ensure the connection with the headquarter, a teleworker may enforce an index of QoS Control to reserve bandwidth for HTTPS connection while using lots of application at the same time. Vigor2110 Series User’s Guide...
Page 151 WAN interface. As to class rule, simply click the Edit link to access into next for configuration. You can configure general setup for the WAN interface, edit the Class Rule, and edit the Service Type for the Class Rule for your request. Vigor2110 Series User’s Guide...
Page 152 Enable UDP Bandwidth Check this and set the limited bandwidth ratio on the right Control field. This is a protection of TCP application traffic since UDP application traffic such as streaming video will exhaust Vigor2110 Series User’s Guide...
Page 153 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2110 Series User’s Guide...
Page 154 For Subnet Address, you have to fill in Start IP address and Subnet Mask. DiffServ CodePoint All the packets of data will be divided with different levels and will be processed according to the level type by the system. Vigor2110 Series User’s Guide...
Page 155 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. Vigor2110 Series User’s Guide...
Page 156 Range as the type. By the way, you can set up to 40 service types. If you want to edit/delete an existed service type, please select the radio button of that one and click Edit/Edit for modification. Vigor2110 Series User’s Guide...
Page 157: Applications
Set to Factory Default Clear all profiles and recover to factory settings. Enable Dynamic DNS Setup Check this box to enable DDNS function. Auto-Update Interval Type the time interval for auto update information about dynamic DNS server. Vigor2110 Series User’s Guide...
Page 158 Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup, and push Clear All button to disable the function and clear all accounts from the router. Delete a Dynamic DNS Account Vigor2110 Series User’s Guide...
Page 159: Schedule
You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule, please click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. Vigor2110 Series User’s Guide...
Page 160 9:00 to 18:00 for whole week. Other time the Internet access connection should be disconnected (Force Down). Office Hour: (Force On) Mon - Sun 9:00 am 6:00 pm Make sure the PPPoE connection and Time Setup is working properly. Vigor2110 Series User’s Guide...
Page 161: Radius
The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. Vigor2110 Series User’s Guide...
Page 162: Upnp
NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor2110 Series User’s Guide...
Page 163 Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2110 Series User’s Guide...
Page 164: Igmp
Wake on LAN of this router. In addition, such PC must have installed a network card supporting WOL function. By the way, WOL function must be set as “Enable” on the BIOS setting. Vigor2110 Series User’s Guide...
Page 165 MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2110 Series User’s Guide...
Page 166: Vpn And Remote Access
LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Vigor2110 Series User’s Guide...
Page 167: Ipsec General Setup
Eventually to set up a secure tunnel for IKE Phase 2. Phase 2: negotiation IPSec security methods including Authentication Header (AH) or Encapsulating Security Payload (ESP) for the following IKE exchange and mutual examination of the secure tunnel establishment. Vigor2110 Series User’s Guide...
Page 168: Ipsec Peer Identity
To use digital certificate for peer authentication in either LAN-to-LAN connection or Remote User Dial-In connection, here you may edit a table of peer certificate for selection. As shown below, the router provides 32 entries of digital certificates for peer dial-in users. Vigor2110 Series User’s Guide...
Page 169 Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2110 Series User’s Guide...
Page 170: Remote Dial-In User
LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Status Display the access state of the specific dial-in user. The symbol V and X represent the specific dial-in user to be active and inactive, respectively. Vigor2110 Series User’s Guide...
Page 171 Netbios Naming Packet Pass – Click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connecting. Vigor2110 Series User’s Guide...
Page 172: Lan To Lan
ID, connection type (VPN connection - including PPTP, IPSec Tunnel, and L2TP by itself or over IPSec) and corresponding security methods, etc. The router supports 2 VPN tunnels simultaneously and provides up to 32 profiles. The following figure shows the summary table. Vigor2110 Series User’s Guide...
Page 173 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. For the web page is too long, we divide the page into several sections for explanation. Vigor2110 Series User’s Guide...
Page 174 Enable PING to keep alive This function is to help the router to determine the status of IPSec VPN connection, especially useful in the case of abnormal VPN IPSec tunnel disruption. For details, please refer to the note below. Check to enable the transmission of PING packets to a specified IP address. Vigor2110 Series User’s Guide...
Page 175 IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy. Medium Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active. Vigor2110 Series User’s Guide...
Page 176 IKE phase 2 key lifetime-For security reason, the lifetime of key should be defined. The default value is 3600 seconds. You may specify a value in between 600 and 86400 seconds. Perfect Forward Secret (PFS)-The IKE Phase 1 key will be Vigor2110 Series User’s Guide...
Page 177 Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Specify Remote VPN You can specify the IP address of the remote dial-in user or Gateway peer ID (should be the same with the ID setting in dial-in Vigor2110 Series User’s Guide...
Page 178 Add a static route to direct all traffic destined to this Remote Remote Network IP/ Network IP Address/Remote Network Mask through the VPN Remote Network Mask connection. For IPSec, this is the destination clients IDs of Vigor2110 Series User’s Guide...
Page 179 From first subnet to IP, please choose NAT, otherwise choose Route. remote network, you have to do Change default route to Check this box to change the default route with this VPN this VPN tunnel tunnel. Vigor2110 Series User’s Guide...
Page 180: Connection Management
Tool and clicking Dial button. Dial Click this button to execute dial out function. Refresh Seconds Choose the time for refresh the dial information among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Vigor2110 Series User’s Guide...
Page 181: Certificate Management
Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Generate Click this button to open Generate Certificate Request window. Vigor2110 Series User’s Guide...
Page 182 Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After clicking Generate, the generated information will be displayed on the window below: Vigor2110 Series User’s Guide...
Page 183: Trusted Ca Certificate
For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2110 Series User’s Guide...
Page 184: Certificate Backup
The more bandwidth a codec uses the better the voice quality, however the codec used must be appropriate for your Internet bandwidth. Usually there will be two types of calling scenario, as illustrated below: Calling via SIP Servers Vigor2110 Series User’s Guide...
Page 185 QoS Assurance assists to assign high priority to voice traffic via Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor2110 Series User’s Guide...
Page 186: Dialplan
“speed-dial” Phone Number. There are total 60 index entries in the phonebook for you to store all your friends and family members’ SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor 2820V for setting the phone book. Vigor2110 Series User’s Guide...
Page 187 For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Vigor2110 Series User’s Guide...
Page 188 VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” Vigor2110 Series User’s Guide...
Page 189 SIP accounts. Please set up one SIP account first to make this interface available. Call barring is used to block phone calls coming from the one that is not welcomed. Click any index number to display the dial plan setup page. Vigor2110 Series User’s Guide...
Page 190 Unknown Domain or Block IP Address. Simply click the relational links to open the web page. For Block Anonymous – this function can block the incoming calls without caller ID on the interface (Phone port) specified in the following window. Such control also can be done based on preconfigured schedules. Vigor2110 Series User’s Guide...
Page 191 This page allows you to process incoming or outgoing phone calls by regional. Default values (common used in most areas) will be shown on this web page. You can change the number based on the region that the router is placed. Vigor2110 Series User’s Guide...
Page 192 Dial the number typed in this field to make your phone number (ID) not displayed on the display panel of remote end. Hide caller ID [Deact] Dial the number typed in this field to release this function. Vigor2110 Series User’s Guide...
Page 193: Sip Accounts
Account Name or user name, SIP Registrar, Proxy, and Domain name. (The last three might be the same in some case). Then you can tell your folks your SIP Address as in Account Name@ Domain name Vigor2110 Series User’s Guide...
Page 194 The default value is 150 (sec). It is useful for a Nortel server NAT Traversal Support. Status Show the status for the corresponding SIP account. R means such account is registered on SIP server successfully. – means the account is failed to register on SIP server. Vigor2110 Series User’s Guide...
Page 195 Some SIP server allows user to use VoIP function without registering. For such server, please check the box of Call without Registration. Choosing Auto is recommended. The system will select a proper way for your VoIP call. Vigor2110 Series User’s Guide...
Page 196: User Mode
IP address as the NAT transversal support. Nortel – If the soft-switch that you use supports Nortel solution, you can choose this option. Ring Port Set Phone1 or Phone2 as the default ring port for this SIP account. Vigor2110 Series User’s Guide...
Page 197: Phone Settings
Phone Index. Symmetric RTP – Check this box to invoke the function. To make the data transmission going through on both ends of local router and remote router not misleading due to IP lost (for Vigor2110 Series User’s Guide...
Page 198 RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Click the number link for Phone port, you can access into the following page for configuring Phone settings. Vigor2110 Series User’s Guide...
Page 199 G.729A/B; it occupies little bandwidth while maintaining good voice quality. If your upstream speed is only 64Kbps, do not use G.711 codec. It is better for you to have at least 256Kbps upstream if you would like to use G.711. Vigor2110 Series User’s Guide...
Page 200 ID type automatically. Or you can adjust tone settings manually if you choose User Defined. TOn1, TOff1, TOn2 and TOff2 mean the cadence of the tone pattern. TOn1 and TOn2 represent sound-on; TOff1 and TOff2 represent the sound-off. Vigor2110 Series User’s Guide...
Page 201 VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. Vigor2110 Series User’s Guide...
Page 202: Status
From this page, you can find codec, connection and other important call status for each port. Refresh Seconds Specify the interval of refresh time to obtain the latest VoIP calling information. The information will update immediately Vigor2110 Series User’s Guide...
Page 203: Wireless Lan
LAN cable or drilling holes everywhere. Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access. Vigor2110 Series User’s Guide...
Page 204 WPA-Enterprise or called WPA/802.1x. In WPA-Personal, a pre-defined key is used for encryption during data transmission. WPA applies Temporal Key Integrity Protocol (TKIP) for data encryption while WPA2 applies AES. The WPA-Enterprise combines not only encryption but also authentication. Vigor2110 Series User’s Guide...
Page 205: General Setup
Below shows the menu items for Wireless LAN. By clicking the General Settings, a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Vigor2110 Series User’s Guide...
Page 206 11g Only, 11b Only, Mixed (11g+11n), 11n Only and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode. Note: You should also set RADIUS Server simultaneously if 11g Only, 11b Only or 11n Only mode is selected. Vigor2110 Series User’s Guide...
Page 207 SSID Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "Draytek. We suggest you to change it. LAN – Check this box to make the wireless clients Isolate (stations) with the same SSID cannot access wired PCs on LAN.
Page 208: Security
This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invoke it. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WEP and WPA. Vigor2110 Series User’s Guide...
Page 209 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, such as 0x4142434445.) Vigor2110 Series User’s Guide...
Page 210: Access Control
Display all MAC addresses that are edited before. Client’s MAC Address Manually enter the MAC address of wireless client. Attribute s: Isolate the station from LAN - select to isolate the wireless connection of the wireless client of the MAC address from LAN. Vigor2110 Series User’s Guide...
Page 211: Wps
On the side of Vigor 2110 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card. Vigor2110 Series User’s Guide...
Page 212 Below shows Wireless LAN>>WPS web page. Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Configured’ message here. Vigor2110 Series User’s Guide...
Page 213: Wds
Provide bridge traffic between two LANs through the air. Extend the coverage range of a WLAN. To meet the above requirement, two WDS modes are implemented in Vigor router. One is Bridge, the other is Repeater. Below shows the function of WDS-bridge interface: Vigor2110 Series User’s Guide...
Page 214 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Vigor2110 Series User’s Guide...
Page 215 Click WDS from Wireless LAN menu. The following page will be shown. Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the Vigor2110 Series User’s Guide...
Page 216: Advanced Setting
802.11g or 802.11b wireless client is connected. Green Field – to get the highest throughput, please choose such mode. Such mode can make the data transmission happening between 11n systems only. In addition, it does Vigor2110 Series User’s Guide...
Page 217: Wmm Configuration
Such function is designed for mobile and cordless phones that support VoIP mostly. WMM Capable To apply WMM parameters for wireless data transmission, please click the Enable radio button. Vigor2110 Series User’s Guide...
Page 218: Ap Discovery
This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP which is in the same channel of this router can be found. Please click Scan to discover all the connected APs. Vigor2110 Series User’s Guide...
Page 219: Station List
Station List provides the knowledge of connecting wireless clients now along with its status code. There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Vigor2110 Series User’s Guide...
Page 220 Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2110 Series User’s Guide...
Page 221: System Maintenance
Display the ADSL firmware version. LAN------- MAC Address Display the MAC address of the LAN Interface. IP Address Display the IP address of the LAN interface. Subnet Mask Display the subnet mask address of the LAN interface. Vigor2110 Series User’s Guide...
Page 222: 215
This device supports TR-069 standard. It is very convenient for an administrator to manage a Auto Configuration Server, e.g., TR-069 device through an VigorACS. ACS Server On Choose the interface for the router connecting to ACS server. Vigor2110 Series User’s Guide...
Page 223: Administrator Password
When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Follow the steps below to backup your configuration. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Vigor2110 Series User’s Guide...
Page 224 Click Save button, the configuration will download automatically to your computer as a file named config.cfg. The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Vigor2110 Series User’s Guide...
Page 225: Syslog/Mail Alert
Web Configurator of the router or borrow debug equipments. Enable (Syslog Access…) Check “Enable” to activate function of syslog. Syslog Server IP The IP address of the Syslog server. Destination Port Assign a port for the Syslog protocol. Vigor2110 Series User’s Guide...
Page 226 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2110 Series User’s Guide...
Page 227: Time And Date
Type the IP address of the time server. Time Zone Select the time zone where the router is located. Automatically Update Interval Select a time interval for updating from the NTP server. Click OK to save these settings. Vigor2110 Series User’s Guide...
Page 228: Management
Check to specify user-defined port numbers for the Telnet, HTTP and FTP servers. Enable SNMP Agent Check it to enable this function. Get Community Set the name for getting community by typing a proper character. The default setting is public. Vigor2110 Series User’s Guide...
Page 229: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpect errors of the router in the future. Vigor2110 Series User’s Guide...
Page 230: Firmware Upgrade
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.
Page 231: Diagnostics
(e.g., PPPoE) is triggered by a package sending from the source IP address. Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2110 Series User’s Guide...
Page 232: Routing Table
Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Refresh Click it to reload the page. Clear Click it to clear the whole table. Vigor2110 Series User’s Guide...
Page 233: Dhcp Table
It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. Click Diagnostics and click NAT Sessions Table to open the list page. Vigor2110 Series User’s Guide...
Page 234: Data Flow Monitor
Refresh Click this link to refresh this page manually. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. Vigor2110 Series User’s Guide...
Page 235: Ping Diagnosis
Use the drop down list to choose the destination that you want to ping. IP Address Type in the IP address of the Host/IP that you want to ping. Click this button to start the ping work. The result will be displayed on the screen. Vigor2110 Series User’s Guide...
Page 236: Trace Route
Use the drop down list to choose the interface that you want to ping through. Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Clear Click this link to remove the result on the window. Vigor2110 Series User’s Guide...
Page 237 Vigor2110 Series User’s Guide...
Page 238: Application And Examples
For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both parties Vigor2110 Series User’s Guide...
Page 239 Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. Vigor2110 Series User’s Guide...
Page 240 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2110 Series User’s Guide...
Page 241 Go to VPN and Remote Access and select Remote Access Control to enable the necessary VPN service and click OK. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. Vigor2110 Series User’s Guide...
Page 242 Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. Vigor2110 Series User’s Guide...
Page 243 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2110 Series User’s Guide...
Page 244 Username, Password, and VJ Compression for this Dial-In connection. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection. Vigor2110 Series User’s Guide...
Page 245: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter
PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2110 Series User’s Guide...
Page 246 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2110 Series User’s Guide...
Page 247 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.draytek.com download center. Install as instructed.
Page 248 VPN router. To use default gateway on remote network means that all the packets of remote host will be directed to VPN server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. Vigor2110 Series User’s Guide...
Page 249: Qos Setting Example
HTTPS or VPN to check email and access internal database. Meanwhile, children may chat on Skype in the restroom. Go to Bandwidth Management>>Quality of Service. Click Setup link of WAN. Make sure the QoS Control on the left corner is checked. And select BOTH in Direction. Vigor2110 Series User’s Guide...
Page 250 Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the name “E-mail” for Class 1. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP. Vigor2110 Series User’s Guide...
Page 251 If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. Vigor2110 Series User’s Guide...
Page 252: Lan - Created By Using Nat
An example of default setting and the corresponding deployment are shown below. The default Vigor router private IP address/Subnet Mask is 192.168.1.1/255.255.255.0. The built-in DHCP server is enabled so it assigns every local NATed host an IP address of 192.168.1.x starting from 192.168.1.10. Vigor2110 Series User’s Guide...
Page 253 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. To use another DHCP server in the network rather than the built-in one of Vigor Router, you have to change the settings as show below. Vigor2110 Series User’s Guide...
Page 254 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. Vigor2110 Series User’s Guide...
Page 255: Calling Scenario For Voip Function
Display Name: David Account Name: 4321 Authentication ID: unchecked Password: **** Expiry Time: (use default value) David calls John He picks up the phone and dials 2222# (DialPlan CODEC/RTP/DTMF --- Phone Number for John) (Use default value) Vigor2110 Series User’s Guide...
Page 256 Expiry Time: (use default value) CODEC/RTP/DTMF--- David calls John (Use default value) He picks up the phone and dials 2222# (DialPlan Phone Number for John) Or, He picks up the phone and dials 1234# (John’s Account Name) Vigor2110 Series User’s Guide...
Page 257: Peer-To-Peer Calling
Display Name: Paulin Acco4unt Name: 4321 Authentication ID: unchecked Password: (blank) Expiry Time: (use default value) Paulin calls Arnor CODEC/RTP/DTMF--- He picks up the phone and dials 2222# (DialPlan (Use default value) Phone Number for John) Vigor2110 Series User’s Guide...
Page 258: Upgrade Firmware For Your Router
4. The file RTSxxx.exe will be asked to copy onto your computer. Remember the place of storing the execution file. 5. Go to www.draytek.com to find out the newly update firmware for your router. 6. Access into Support Center >> Downloads. Find out the model name of the router and click the firmware link.
Page 259 You will find out two files with different extension names, xxxx.all (keep the old custom settings) and xxxx.rst (reset all the custom settings to default settings). Choose any one of them that you need. Vigor2110 Series User’s Guide...
Page 260 14. Click Send. 15. Now the firmware update is finished. Vigor2110 Series User’s Guide...
Page 261: Request A Certificate From A Ca Server On Windows Ca Server
Go to Certificate Management and choose Local Certificate. Vigor2110 Series User’s Guide...
Page 262 Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate. Vigor2110 Series User’s Guide...
Page 263 64 encoded certificate and Download CA certificate. Now you should get a certificate (.cer file) and save it. Back to Vigor router, go to Local Certificate. Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh and Vigor2110 Series User’s Guide...
Page 264 “------BEGINE CERTIFICATE------..” You may review the detail information of the certificate by clicking View button. Vigor2110 Series User’s Guide...
Page 265: Request A Ca Certificate And Set As Trusted On Windows Ca Server
Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. Vigor2110 Series User’s Guide...
Page 266 You may review the detail information of the certificate by clicking View button. Note: Before setting certificate configuration, please go to System Maintenance >> Time and Date to reset current time of the router first. Vigor2110 Series User’s Guide...
Page 267 Vigor2110 Series User’s Guide...
Page 268: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2110 Series User’s Guide...
Page 269 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2110 Series User’s Guide...
Page 270 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used MacOs on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2110 Series User’s Guide...
Page 271: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2110 Series User’s Guide...
Page 272: Checking If The Isp Settings Are Ok Or Not
Click Internet Access group and then check whether the ISP settings are set correctly. Check if the Enable option is selected. Check if Username and Password are entered with correct values that you got from your ISP. Check if the Enable option for Broadband Access is selected. Vigor2110 Series User’s Guide...
Page 273 ISP) if you choose Specify an IP address. Check if the Enable option for PPTP Link is selected. Check if PPTP Server, Username, and Password are set correctly (must identify with the values from your ISP). Vigor2110 Series User’s Guide...
Page 274: Backing To Factory Default Setting If Necessary
5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the factory default setting, you can configure the settings for the router again to fit your personal request. Vigor2110 Series User’s Guide...
Page 275: Contacting Your Dealer
If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor2110 Series User’s Guide...

This manual is also suitable for:

Vigor2110n Vigor2110vn

Draytek Vigor2110 Series User Manual

Preface

Configuring Basic Settings

User Mode Operation

Admin Mode Operation

Application and Examples

Trouble Shooting

Quick Links

Related Manuals for Draytek Vigor2110 Series

Summary of Contents for Draytek Vigor2110 Series

This manual is also suitable for: