Draytek Vigor2710 Series User Manual
Draytek Vigor2710 Series User Manual

Draytek Vigor2710 Series User Manual

Adsl2/2+ firewall router
Hide thumbs Also See for Vigor2710 Series:
Table of Contents

Advertisement

Quick Links

i
Vigor2710 Series User's Guide

Advertisement

Table of Contents
loading

Summary of Contents for Draytek Vigor2710 Series

  • Page 1 Vigor2710 Series User’s Guide...
  • Page 2 Vigor2710 Series User’s Guide...
  • Page 3 Vigor2710 Series ADSL2/2+ Firewall Router User’s Guide Version: 2.1 Firmware Version: V3.3.6 Date: 10/03/2011 Vigor2710 Series User’s Guide...
  • Page 4: Copyright Information

    Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
  • Page 5: European Community Declarations

    Product: Vigor2710 Series Router DrayTek Corp. declares that Vigor2710 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
  • Page 6 Vigor2710 Series User’s Guide...
  • Page 7: Table Of Contents

    3.1.2 PPPoE/PPPoA........................ 32 3.2 LAN ............................41 3.2.1 Basics of LAN ......................... 41 3.2.2 General Setup......................... 42 3.3 NAT ............................45 3.3.1 Port Redirection ......................46 3.3.2 DMZ Host........................48 3.3.3 Open Ports........................50 3.4 Applications ........................... 51 Vigor2710 Series User’s Guide...
  • Page 8 4.2.4 VLAN..........................125 4.2.5 Bind IP to MAC ......................126 4.3 NAT ............................. 127 4.3.1 Port Redirection ......................128 4.3.2 DMZ Host........................131 4.3.3 Open Ports........................133 4.4 Firewall ..........................135 4.4.1 Basics for Firewall......................135 Vigor2710 Series User’s Guide viii...
  • Page 9 4.11.3 Phone Settings ......................227 4.11.4 DECT .......................... 234 4.11.5 Status.......................... 238 4.12 Wireless LAN ........................239 4.12.1 Basic Concepts......................239 4.12.2 General Setup......................242 4.12.3 Security ........................245 4.12.4 Access Control......................246 4.12.5 WPS..........................248 4.12.6 WDS..........................250 Vigor2710 Series User’s Guide...
  • Page 10 5.7 Request a certificate from a CA server on Windows CA Server ......... 308 5.8 Request a CA Certificate and Set as Trusted on Windows CA Server ....... 312 5.9 How can I get the files from USB storage device connecting to Vigor router? ....314 Vigor2710 Series User’s Guide...
  • Page 11 6.3 Pinging the Router from Your Computer ................320 6.4 Checking If the ISP Settings are OK or Not ................ 321 6.5 Backing to Factory Default Setting If Necessary ..............322 6.6 Contacting Your Dealer ....................... 323 Vigor2710 Series User’s Guide...
  • Page 13: Preface

    Vigor2710 series is an ADSL router. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DS, the router increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP) with up to 2 VPN tunnels.
  • Page 14: Led Indicators And Connectors

    >>General Setup. (Such profile must be established under CSM menu) Interface Description Connecter for accessing the Internet through ADSL2/2+. LAN (1-4) Connecters for local networked devices. Connecter for USB storage device (Pen Driver/Mobile HD) or printer. Vigor2710 Series User’s Guide...
  • Page 15 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Connecter for a power adapter. Power Switch. ON/OFF Vigor2710 Series User’s Guide...
  • Page 16: For Vigor2710

    Press the button once to enable (WLAN LED on) or WLAN disable (WLAN LED off) wireless connection. Connecter for accessing the Internet through ADSL2/2+. LAN (1-4) Connecters for local networked devices. Connecter for USB storage (Pen Driver Mobile/HD) or printer. Vigor2710 Series User’s Guide...
  • Page 17 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Connecter for a power adapter. Power Switch. ON/OFF Vigor2710 Series User’s Guide...
  • Page 18: For Vigor2710Vn

    Press the button once to enable (WLAN LED on) or WLAN disable (WLAN LED off) wireless connection. Connecter for accessing the Internet through ADSL2/2+. LAN (1-4) Connecters for local networked devices. Connecter for USB storage (Pen Driver Mobile/HD) or printer. Vigor2710 Series User’s Guide...
  • Page 19 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Connecter for a power adapter. Power Switch. ON/OFF Vigor2710 Series User’s Guide...
  • Page 20: For Vigor2710Vdn

    The WPS is off. Blinking Waiting for wireless client sending requests for connection about 2 minutes. Vigor2710 Series User’s Guide...
  • Page 21 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Connector for a power adapter. Power Switch. ON/OFF Vigor2710 Series User’s Guide...
  • Page 22: Hardware Installation

    Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. Here, we take Annex A model as an example for describing hardware installation. Vigor2710 Series User’s Guide...
  • Page 23: Printer Installation

    You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.draytek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
  • Page 24 Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. Vigor2710 Series User’s Guide...
  • Page 25 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Vigor2710 Series User’s Guide...
  • Page 26 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. Vigor2710 Series User’s Guide...
  • Page 27 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ; find out the link of Printer Server and click it; then click the What types of printers are compatible with Vigor router? link.
  • Page 28 This page is left blank. Vigor2710 Series User’s Guide...
  • Page 29: Configuring Basic Settings

    The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor2710 Series User’s Guide...
  • Page 30: Changing Password

    Otherwise, do not type any word (both username and password are Null for user operation) on the window and click Login on the window. Now, the Main Screen will appear. Main screen for admin mode operation (full configuration) Main screen for user mode operation (simple configuration) Vigor2710 Series User’s Guide...
  • Page 31 Enter the login password (the default is blank) on the field of Old Password. Type the new password in New Password and Confirm Password fields. Then click OK to continue. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. Vigor2710 Series User’s Guide...
  • Page 32: Quick Start Wizard

    Now, you have to select an appropriate WAN connection type for connecting to the Internet through this router according to the settings that your ISP provided. Stands for Virtual Path Identifier. It is an 8-bit header Vigor2710 Series User’s Guide...
  • Page 33: Pppoe/Pppoa

    Ethernet can share a common connection. PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode. Vigor2710 Series User’s Guide...
  • Page 34 Assign a specific valid user name provided by the ISP. Assign a valid password provided by the ISP. Password Confirm Password Retype the password. Click Next for viewing summary of such connection. Click Finish. Then, the system status of this protocol will be shown. Vigor2710 Series User’s Guide...
  • Page 35: 1483 Bridged Ip

    Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. Then, the system status of this protocol will be shown. Vigor2710 Series User’s Guide...
  • Page 36: 1483 Routed Ip

    Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Click Finish. Then, the system status of this protocol will be shown. Vigor2710 Series User’s Guide...
  • Page 37: Service Activation Wizard

    Service Activation Wizard is a tool which allows you to use trial version or update the license of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to section Web Content Filter Profile for detailed information.
  • Page 38 When you finish the selection, please click Next. Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from DrayTek dealer.
  • Page 39 Later, if you need to extend the license valid time, you can also use the Service Activation Wizard again to reach your goal by clicking the radio button of Formal edition with license key and clicking Next. Vigor2710 Series User’s Guide...
  • Page 40: Online Status

    ADSL information, and so on. If you select PPPoE as the protocol, you will find out a link of Dial PPPoE or Drop PPPoE in the Online Status web page. Online status for PPPoE Online status for Static IP Vigor2710 Series User’s Guide...
  • Page 41: Virtual Wan

    Internet; the words in red mean that the WAN connection of that interface (WAN1) is not ready for accessing Internet. Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. Vigor2710 Series User’s Guide...
  • Page 42: Saving Configuration

    Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2710 Series User’s Guide...
  • Page 43: User Mode Operation

    Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor2710 Series User’s Guide...
  • Page 44: Pppoe/Pppoa

    ADSL loop and your ISP’s Digital Subscriber Line Access Multiplexer (SDLAM). To choose PPPoE or PPPoA as the accessing protocol of the internet, please select PPPoE/PPPoA from the Internet Access menu. The following web page will be shown. Vigor2710 Series User’s Guide...
  • Page 45 If you have already used Quick Start Wizard to set the protocol, then it is not necessary for you to change any settings in this group. Modulation – Drop down the list to choose a proper modulation Vigor2710 Series User’s Guide...
  • Page 46 3G USB Modem – If you have installed a 3G USB modem on the router, please enable Dial Backup Mode to perform file backup via USB device. After choosing Enable, please click the 3G USB Modem link to access into the following page for configuring detailed settings. Vigor2710 Series User’s Guide...
  • Page 47 PPP Authentication – Select PAP only or PAP or CHAP for PPP. Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action. This setting is active only when the Active on demand option for Active Mode Vigor2710 Series User’s Guide...
  • Page 48 Ethernet, or TCP/IP protocols. The goal of MPoA is to allow different LANs to send packets to each other via an ATM backbone. To use MPoA as the accessing protocol of the Internet, select MPoA mode. The following web page will appear. Vigor2710 Series User’s Guide...
  • Page 49 Modulation – Drop down the list to choose a proper modulation for the router. VLAN Enable - Enable the function of VLAN with tag. The router will add specific VLAN number to all packets while sending them out. Please type the tag value and specify the Vigor2710 Series User’s Guide...
  • Page 50 Please use the default value. If you have any question, please contact to your ISP. APN Name – APN (Access Point Name) is provided by your ISP for identifying different access points. Simply click Apply to Vigor2710 Series User’s Guide...
  • Page 51 WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. Vigor2710 Series User’s Guide...
  • Page 52 DNS Server IP Type in the primary IP address for the router. If necessary, type in Address secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. Vigor2710 Series User’s Guide...
  • Page 53: Lan

    IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2710 Series User’s Guide...
  • Page 54: General Setup

    Configuration local private network (Default: 192.168.1.1). 1st Subnet Mask - Type in an address code that determines the size of the network. (Default: 255.255.255.0/ 24) For IP Routing Usage - Click Enable to invoke this function. Vigor2710 Series User’s Guide...
  • Page 55 (Default) 1st Subnet - Select the router to change the RIP information of the 1st subnet with neighboring routers. 2nd Subnet - Select the router to change the RIP information of Vigor2710 Series User’s Guide...
  • Page 56 Secondary IP Address - You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: Vigor2710 Series User’s Guide...
  • Page 57: Nat

    192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor2710 Series User’s Guide...
  • Page 58: Port Redirection

    To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection. Vigor2710 Series User’s Guide...
  • Page 59 Note that the router has its own built-in services (servers) such as Telnet, HTTP and FTP etc. Since the common port numbers of these services (servers) are all the same, you may need to reset the router in order to avoid confliction. Vigor2710 Series User’s Guide...
  • Page 60: Dmz Host

    We suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias for PPPoE/PPPoA or MPoA mode, you will find them in Aux. WAN IP for your selection. Vigor2710 Series User’s Guide...
  • Page 61 DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2710 Series User’s Guide...
  • Page 62: Open Ports

    Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2710 Series User’s Guide...
  • Page 63: Applications

    Internet. The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address. It allows the router to update its online WAN IP address mappings on the specified Dynamic DNS server. Once the router is online, you will be able to use the Vigor2710 Series User’s Guide...
  • Page 64 Account, and choose correct Service Provider: dyndns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. Vigor2710 Series User’s Guide...
  • Page 65: Upnp

    It is more reliable than requiring a router to work out by itself which ports need to be opened. Further, the user does not have to manually set up port mappings or a DMZ. Vigor2710 Series User’s Guide...
  • Page 66 NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor2710 Series User’s Guide...
  • Page 67: Voip

    @ host: port Some fields may be optional in different use. In general, "host” refers to a domain. The “userinfo” includes the user field, the password field and the @ sign following them. This is Vigor2710 Series User’s Guide...
  • Page 68 SIP Registrar. Peer-to-Peer Before calling, you have to know your friend’s IP Address. The Vigor VoIP Routers will build connection between each other. Vigor2710 Series User’s Guide...
  • Page 69: Dialplan

    SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor 2710Vn/2710VDn for setting the phone book. Vigor2710 Series User’s Guide...
  • Page 70 Dial Out Account Choose one of the SIP accounts for this profile to dial out. It is useful for both sides (caller and callee) that registered to different SIP Registrar servers. If caller and callee do not use Vigor2710 Series User’s Guide...
  • Page 71 It is used to help user having a quick and easy way to dial out through VoIP interface. Enable Check this box to invoke this setting. Match Prefix The phone number set here is used to add, strip, or replace the OP number. Vigor2710 Series User’s Guide...
  • Page 72 Set the maximum length of the dial number for applying the prefix number settings. Route Choose the one that you want to enable the prefix number settings from the saved SIP accounts. Please set up one SIP account first to make this interface available. Vigor2710 Series User’s Guide...
  • Page 73 Call Direction Determine the direction for the phone call, IN – incoming call, OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Barring Type Determine the type of the VoIP phone call, URI/URL or number. Vigor2710 Series User’s Guide...
  • Page 74 Web Page for Vigor2710 VDn ------- For Block Unknown Domain – this function can block incoming calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Web Page for Vigor2710 Vn ------- Vigor2710 Series User’s Guide...
  • Page 75 Web Page for Vigor2710 VDn ------- For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Web Page for Vigor2710 Vn ------- Web Page for Vigor2710 VDn ------- Vigor2710 Series User’s Guide...
  • Page 76 Dial the number typed in this field to invoke the function of DND. Do Not Distrub [Deact] Dial the number typed in this field to release the DND function. Hide caller ID [Act] Dial the number typed in this field to make your phone number Vigor2710 Series User’s Guide...
  • Page 77 Note: A Line port on the router allows connection to a PSTN line so the user can select either the PSTN or VoIP for the calls, and can access the PSTN line during power black-outs when VoIP is cut off (only available on port 2). Vigor2710 Series User’s Guide...
  • Page 78: Sip Accounts

    As Vigor VoIP Router is turned on, it will first register with Registrar using AuthorizationUser@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity. SIP Accounts Web Page for Vigor2710 Vn ------- SIP Accounts Web Page for Vigor2710 VDn ------- Vigor2710 Series User’s Guide...
  • Page 79 SIP PING interval The default value is 150 (sec). It is useful for a Nortel server NAT Traversal Support. Click the index link to open the following web page. SIP Accounts Web Page for Vigor2710 Vn ------- Vigor2710 Series User’s Guide...
  • Page 80 :port number after the domain name to specify that port as the destination of data transmission (e.g., nat.draytel.org:5065) Act as Outbound Proxy Check this box to make the proxy acting as outbound proxy. Vigor2710 Series User’s Guide...
  • Page 81 The default codec is G.729A/B; it occupies little bandwidth while maintaining good voice quality. If your upstream speed is only 64Kbps, do not use G.711 codec. It is better for you to have at least 256Kbps upstream if you would like to use G.711. Vigor2710 Series User’s Guide...
  • Page 82 This function can detect if the voice on both sides is active or not. If not, the router will do something to save the bandwidth for other using. Click On to invoke this function; click Off to close the function. Vigor2710 Series User’s Guide...
  • Page 83: Phone Settings

    Port – Phone, Phone1/Phone2 allow you to set general Phone List settings for PSTN phones. DECT1-6 allow you to set general settings for DECT phone. Call Feature – A brief description for call feature will be Vigor2710 Series User’s Guide...
  • Page 84 Dynamic RTP Port End - Specifies the end port for RTP stream. The default value is 15000. RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Vigor2710 Series User’s Guide...
  • Page 85 T.38 Fax Function Check the box to enable the function. Call Forwarding There are four options for you to choose. Disable is to close call forwarding function. Always means all the incoming calls Vigor2710 Series User’s Guide...
  • Page 86 ID type automatically. Or you can adjust tone settings manually if you choose User Defined. TOn1, TOff1, TOn2 and TOff2 mean the cadence of the tone pattern. TOn1 and TOn2 represent sound-on; TOff1 and TOff2 represent the sound-off. Vigor2710 Series User’s Guide...
  • Page 87 VoIP communication. Volume Gain Mic Gain (1-10)/Speaker Gain (1-10) - Adjust the volume of microphone and speaker by entering number from 1- 10. The larger of the number, the louder the volume is. Vigor2710 Series User’s Guide...
  • Page 88 DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message. Payload Type (rfc2833) - Choose a number from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. Vigor2710 Series User’s Guide...
  • Page 89: Dect

    Enable Registration If you want to use handset to register with the router, you need Mode to enable DECT module registration mode via this button. Otherwise, you can't search our DECT base station from the air. Vigor2710 Series User’s Guide...
  • Page 90 In the web page, please click Enable Registration Mode and wait for DECT handset to register. When the registration is finished, open VoIP>>SIP Accounts. The Registered DECT phone will be available for you to choose. Choose the one you need. Vigor2710 Series User’s Guide...
  • Page 91 Open VoIP>>Status. Information for the active DECT phone will be shown as follows. When registering with DECT phone, you will be asked to type access code. The default setting in Vigor2710VDn is 1234. Please open VoIP>>Phone Settings to modify it if required. Vigor2710 Series User’s Guide...
  • Page 92: Status

    The following diagram shows the brief construction of DECT phone (handset) and Vigor router. From this page, you can find codec, connection and other important call status for each port. For Vigor2710 Vn ------- Vigor2710 Series User’s Guide...
  • Page 93 ACTIVE-Indicates that the VoIP connection is launched. Codec Indicates the voice codec employed by present channel. The present in-call or out-call peer ID (the format may be IP or PeerID Domain). Elapse The format is represented as hours:minutes:seconds. Vigor2710 Series User’s Guide...
  • Page 94: Wireless Lan

    Access Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router. The General Settings will set up the information of this wireless network, including its SSID as identification, located channel etc. Vigor2710 Series User’s Guide...
  • Page 95 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor2710 Series User’s Guide...
  • Page 96: General Setup

    SSID Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "Draytek. We suggest you to change it. Channel Means the channel of frequency of the wireless LAN. The default channel is 6.
  • Page 97 Note: Vigor N61 wireless adapter supports this function. Therefore, you can use and install it into your PC for matching with Packet-OVERDRIVE (refer to the following picture of Vigor N61 wireless utility window, choose Enable for TxBURST on the tab of Option). Vigor2710 Series User’s Guide...
  • Page 98: Security

    Download – Type the transmitting rate for data download. Default value is 30,000 kbps. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WEP and WPA. Vigor2710 Series User’s Guide...
  • Page 99: Access Control

    MAC address that has been configured can access the wireless LAN interface. By clicking the Access Control, a new web page will appear, as depicted below, so that you could edit the clients' MAC addresses to control their access rights. Vigor2710 Series User’s Guide...
  • Page 100 Delete the selected MAC address in the list. Edit the selected MAC address in the list. Edit Cancel Give up the access control set up. Click it to save the access control list. Clear All Clean all entries in the MAC address list. Vigor2710 Series User’s Guide...
  • Page 101: Station List

    This page will determine the number of concurrent FTP connection and default charset for FTP server. At present, the Vigor router can support USB disk with versions of FAT16 and FAT32 only. Therefore, before connecting the USB disk into the Vigor router, please make Vigor2710 Series User’s Guide...
  • Page 102 A workgroup name must not be the same as the host name. The workgroup name can have as many as 15 characters and the host name can have as many as 23 characters. Both them cannot contain Vigor2710 Series User’s Guide...
  • Page 103: Usb User Management

    Type the username for FTP users for accessing into FTP server (USB disk). Be aware that users cannot access into USB disk in anonymity. Later, you can open FTP client software and type the username specified here for accessing Vigor2710 Series User’s Guide...
  • Page 104 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor2710 Series User’s Guide...
  • Page 105: File Explorer

    This page is to monitor the status for the FTP users who accessing into FTP server (USB disk) via the Vigor router. Connection Status If there is no USB disk connected to Vigor router, “No Disk Vigor2710 Series User’s Guide...
  • Page 106: System Maintenance

    The System Status provides basic network settings of Vigor router (web page will change according to the route you have). It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Vigor2710 Series User’s Guide...
  • Page 107 Firmware Version It indicates information about equipped WLAN miniPCi card. This also helps to provide availability of some features that are bound with some WLAN miniPCi. SSID Display the SSID of the router. Vigor2710 Series User’s Guide...
  • Page 108: User Password

    Select the time zone where the router is located. Enable Daylight Saving Check the box to enable the daylight saving. Such feature is available for certain area. Automatically Update Select a time interval for updating from the NTP server. Vigor2710 Series User’s Guide...
  • Page 109: Reboot System

    Below shows the menu items for Diagnostics. The facility provides information on IP address assignments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Vigor2710 Series User’s Guide...
  • Page 110: Ping Diagnosis

    Type in the IP address of the Host/IP that you want to ping. Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. Vigor2710 Series User’s Guide...
  • Page 111: Trace Route

    Click this button to start route tracing work. Clear Click this link to remove the result on the window. When you click it, you will be guided to visit myvigor.draytek.com and open the corresponding pages directly. Vigor2710 Series User’s Guide...
  • Page 112 This page is left blank. Vigor2710 Series User’s Guide...
  • Page 113: Admin Mode Operation

    Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor2710 Series User’s Guide...
  • Page 114: Pppoe/Pppoa

    ADSL loop and your ISP’s Digital Subscriber Line Access Multiplexer (SDLAM). To choose PPPoE or PPPoA as the accessing protocol of the internet, please select PPPoE/PPPoA from the Internet Access menu. The following web page will be shown. Vigor2710 Series User’s Guide...
  • Page 115 If you have already used Quick Start Wizard to set the protocol, then it is not necessary for you to change any settings in this group. Modulation – Drop down the list to choose a proper modulation Vigor2710 Series User’s Guide...
  • Page 116 3G USB Modem – If you have installed a 3G USB modem on the router, please enable Dial Backup Mode to perform file backup via USB device. After choosing Enable, please click the 3G USB Modem link to access into the following page for configuring detailed settings. Vigor2710 Series User’s Guide...
  • Page 117 PPP Authentication – Select PAP only or PAP or CHAP for PPP. Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action. This setting is active only when the Active on demand option for Active Mode Vigor2710 Series User’s Guide...
  • Page 118 All the schedules can be set previously in Applications – Schedule web page and you can use the number that you have set in that web page. After finishing all the settings here, please click OK to activate them. Vigor2710 Series User’s Guide...
  • Page 119 Internet Access – Multi PVCs. Select M-PVCs Channel means no selection will be chosen. Encapsulating Type - Drop down the list to choose the type provided by ISP. VPI - Type in the value provided by ISP. Vigor2710 Series User’s Guide...
  • Page 120 Modem link to access into the following page for configuring detailed settings. PPP Client Mode - Click Enable to activate this mode for WAN2. SIM PIN code - Type PIN code of the SIM card that will be used Vigor2710 Series User’s Guide...
  • Page 121 WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check Vigor2710 Series User’s Guide...
  • Page 122 DNS Server IP Type in the primary IP address for the router. If necessary, type in Address secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. Vigor2710 Series User’s Guide...
  • Page 123: Multi-Pvcs

    Internet Access. Type in the value provided by your ISP. Type in the value provided by your ISP. Select a proper QoS type for the channel. QoS Type Protocol Select a proper protocol for this channel. Vigor2710 Series User’s Guide...
  • Page 124 ISP and then click WAN link of Channel 3, 4 or 5 to configure your router. WAN for Choose the router service for channel 3, 4 or 5. Router-borne Management - It can be specified for general management (Web Application configuration/telnet/TR069). If you choose Management, the Vigor2710 Series User’s Guide...
  • Page 125 Obtain an IP address Click this button to obtain the IP address automatically. automatically Router Name – Type in the router name provided by ISP. Domain Name – Type in the domain name that you have Vigor2710 Series User’s Guide...
  • Page 126 Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. DNS Server IP Type in the primary IP address for the router. If necessary, type Address in secondary IP address for necessity in the future. Vigor2710 Series User’s Guide...
  • Page 127 It represents Maximum Burst Size. The range of the value is 10 to 50. General page lets you set the first PVC. As to set the second PVC line, please click the Port-based Bridge tab to open Bridge configuration page. Vigor2710 Series User’s Guide...
  • Page 128 Click Clear to remove all the configurations in this page if you do not satisfy it. When you finish the configuration, please click OK to save and exit this page. Or click Cancel to abort the configuration and exit this page. Vigor2710 Series User’s Guide...
  • Page 129: Lan

    IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2710 Series User’s Guide...
  • Page 130 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2710 Series User’s Guide...
  • Page 131: General Setup

    (Default: 192.168.2.1/ 24) Subnet Mask - An address code that determines the size of the network. (Default: 255.255.255.0/ 24) DHCP Server - You can configure the router to serve as a DHCP server for the 2nd subnet. Vigor2710 Series User’s Guide...
  • Page 132 DHCP client. It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network. If you want to use another DHCP server in the network other Vigor2710 Series User’s Guide...
  • Page 133 DNS Server IP address: 194.98.0.1 to this field. The default DNS Server IP address can be found via Online Status: If both the Primary IP and Secondary IP Address fields are left Vigor2710 Series User’s Guide...
  • Page 134: Static Route

    Here is an example of setting Static Route in Main Router so that user A and B locating in different subnet can talk to each other via the router. Assuming the Internet access has been configured and the router works properly: use the Main Router to surf the Internet. Vigor2710 Series User’s Guide...
  • Page 135 Click the LAN - Static Route and click on the Index Number 1. Check the Enable box. Please add a static route as shown below, which regulates all packets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click OK. Vigor2710 Series User’s Guide...
  • Page 136 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2710 Series User’s Guide...
  • Page 137: Vlan

    If, VLAN 0 is consisted of hosts linked to P1 and P2 and VLAN 1 is consisted of hosts linked to P3 and P4. After checking the box to enable VLAN function, you will check the table according to the needs as shown below. Vigor2710 Series User’s Guide...
  • Page 138: Bind Ip To Mac

    Mac Address – Type the MAC address that is used to bind with the assigned IP address. Refresh It is used to refresh the ARP table. When there is one new PC added to the LAN, you can click this link to obtain the newly ARP table information. Vigor2710 Series User’s Guide...
  • Page 139: Nat

    192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor2710 Series User’s Guide...
  • Page 140: Port Redirection

    To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection. Vigor2710 Series User’s Guide...
  • Page 141 Therefore, you need to change the router’s http port to any one other than the default port 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. Vigor2710 Series User’s Guide...
  • Page 142 You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2710 Series User’s Guide...
  • Page 143: Dmz Host

    We suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias for PPPoE/PPPoA or MPoA mode, you will find them in Aux. WAN IP for your selection. Vigor2710 Series User’s Guide...
  • Page 144 DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2710 Series User’s Guide...
  • Page 145: Open Ports

    Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2710 Series User’s Guide...
  • Page 146 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. Specify the ending port number of the service offered by the local End Port host. Vigor2710 Series User’s Guide...
  • Page 147: Firewall

    It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2710 Series User’s Guide...
  • Page 148 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor2710 Series User’s Guide...
  • Page 149: General Setup

    If the firewall system does not have any response (pass or block) for these packets, such as no response coming from web content filter, then the router’s firewall will block the packets directly. Vigor2710 Series User’s Guide...
  • Page 150 Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Load-Balance Policy Choose the WAN interface for applying Load-Balance Policy. Vigor2710 Series User’s Guide...
  • Page 151 ANSI 1252 Latin I. If you do not choose any codepage, no decoding job of URL will be processed. Please use the drop-down list to choose a codepage. If you do not have any idea of choosing suitable codepage, Vigor2710 Series User’s Guide...
  • Page 152 (0~65535). The more the value is, the better the performance will be. However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. Vigor2710 Series User’s Guide...
  • Page 153: Filter Setup

    Use Up or Down link to move the order of the filter rules. Move Up/Down Next Filter Set Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. Vigor2710 Series User’s Guide...
  • Page 154 It is for Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Source/Destination IP Click Edit to access into the following dialog to choose the source/destination IP or IP ranges. Vigor2710 Series User’s Guide...
  • Page 155 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Vigor2710 Series User’s Guide...
  • Page 156 Sessions Control The number typed here is the total sessions of the packets that do not match the filter rule configured in this page. The default setting is 12000. Vigor2710 Series User’s Guide...
  • Page 157 CSM log here. Check the corresponding box to enable the log function. Then, the filter log and/or CSM log will be shown on Draytek Syslog window. Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here. Vigor2710 Series User’s Guide...
  • Page 158 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
  • Page 159 Strict Security Checking. Such work can ensure the data security transferring via network. APP Enforcement – Check this box to execute the critical checking for all the files transferred via IM/P2P. Vigor2710 Series User’s Guide...
  • Page 160 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2710 Series User’s Guide...
  • Page 161: Dos Defense

    UDP packets for a period defined in Timeout. The default setting for threshold and timeout are 150 packets per second and 10 seconds, respectively. Enable ICMP flood Check the box to activate the ICMP flood defense function. Vigor2710 Series User’s Guide...
  • Page 162 ICMP datagrams (packets) that exceed the maximum length. To avoid this type of attack, the Vigor router is designed to be capable of discarding any fragmented ICMP packets with a length greater than 1024 octets. Vigor2710 Series User’s Guide...
  • Page 163 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2710 Series User’s Guide...
  • Page 164: Objects Settings

    IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2710 Series User’s Guide...
  • Page 165 Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Vigor2710 Series User’s Guide...
  • Page 166: Ip Group

    Below is an example of IP objects settings. This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2710 Series User’s Guide...
  • Page 167 Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Click >> button to add the selected IP objects in this box. Vigor2710 Series User’s Guide...
  • Page 168: Service Type Object

    Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. Vigor2710 Series User’s Guide...
  • Page 169: Service Type Group

    Below is an example of service type objects settings. This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2710 Series User’s Guide...
  • Page 170: Keyword Object

    You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles. Click the number under Index column for setting in detail. Vigor2710 Series User’s Guide...
  • Page 171: Keyword Group

    This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles. Click the number under Index column for setting in detail. Vigor2710 Series User’s Guide...
  • Page 172: File Extension Object

    Profile 1 with name of “default” is the default profile, some files with the file extensions specified in this profile will be ignored and not be scanned by Vigor router. Set to Factory Default Clear all profiles. Click the number under Profile column for configuration in details. Vigor2710 Series User’s Guide...
  • Page 173: Csm

    It is similar situation for corporation towards peer-to-peer applications since file-sharing can be convenient but insecure at the same time. To address these needs, we provide CSM functionality. Vigor2710 Series User’s Guide...
  • Page 174 Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor2710 Series User’s Guide...
  • Page 175: App Enforcement Profile

    There are three tabs IM, P2P and Misc displayed on this page. Each tab will bring out different items that you can choose to disallow people using. Below shows the items which are categorized under IM. Vigor2710 Series User’s Guide...
  • Page 176: Url Content Filter Profile

    It’s very common that malicious codes conceal in the executable objects, such as ActiveX, Java Applet, compressed files, and other executable files. Once downloading these types of files from websites, you may risk bringing threat to your system. Vigor2710 Series User’s Guide...
  • Page 177 Type a name for the CSM profile. Profile Name Priority It determines the action that this router will apply. Both: Pass – The router will let all the packages that match with the conditions specified in URL Access Control and Web Vigor2710 Series User’s Guide...
  • Page 178 URL Access Control. You must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before. Action – This setting is available only when Either : URL Vigor2710 Series User’s Guide...
  • Page 179 Pass - Allow accessing into the corresponding webpage with the keywords listed on the box below. Block - Restrict accessing into the corresponding webpage with the keywords listed on the box below. If the web pages do not match with the specified feature set Vigor2710 Series User’s Guide...
  • Page 180: Web Content Filter Profile

    WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request. Be aware that service provider matching with Vigor router currently offers a period of time for trial version for users to experiment.
  • Page 181 It is recommended for you to use the default setting, auto-selected. Such server is powered by Commtouch. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Set to Factory Default Click this link to retrieve the factory settings.
  • Page 182 Block - restrict accessing into the corresponding webpage with the characters listed on Group/Object Selections. If the web pages do not match with the specified feature set here, they will be processed with the categories listed on the Vigor2710 Series User’s Guide...
  • Page 183 Pass – Only the log about Pass will be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. Vigor2710 Series User’s Guide...
  • Page 184: Bandwidth Management

    Enable Click this button to activate the function of limit session. Disable Click this button to close the function of limit session. Default session limit Defines the default session number used for each computer in Vigor2710 Series User’s Guide...
  • Page 185: Bandwidth Limit

    The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs. Please use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Management menu, click Bandwidth Limit to open the web page. Vigor2710 Series User’s Guide...
  • Page 186 End IP having the same speed defined in TX limit and RX limit fields; select Shared to make all the IPs within the range of Start IP and End IP share the total bandwidth of TX limit and RX limit. Vigor2710 Series User’s Guide...
  • Page 187: Quality Of Service

    Service License Agreement (SLA) with other DS domain owners to define the service level provided toward traffic from different domains. Then each DS node in these domains will perform the priority treatment. This is called Vigor2710 Series User’s Guide...
  • Page 188 You can configure general setup for the WAN interface, edit the Class Rule, and edit the Service Type for the Class Rule for your request. Display an online statistics for quality of service for your reference. This feature is available only when the Quality of Service for WAN interface is enabled. Vigor2710 Series User’s Guide...
  • Page 189 Check this box and click OK, then click Setup link again. You will see the Online Statistics link appearing on this page. Reserved Bandwidth It is reserved for the group index in the form of ratio of Ratio reserved bandwidth to upstream speed and reserved Vigor2710 Series User’s Guide...
  • Page 190 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2710 Series User’s Guide...
  • Page 191 By the way, you can set up to 20 rules for one Class. If you want to edit an existed rule, please select the radio button of that one and click Edit to open the rule edit page for modification. Vigor2710 Series User’s Guide...
  • Page 192 To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. Vigor2710 Series User’s Guide...
  • Page 193: App Qos

    APP QoS employs the function of APP Enforcement to detect several types of software in application layer. By combining the function of QoS, Vigor router can perform the bandwidth management for the application of VoIP, Streaming, IM and P2P. Vigor2710 Series User’s Guide...
  • Page 194 VoIP packets will be the first to be sent out and P2P packets will be the last to be sent out. Enable (for Application) There are four applications (VoIP, Streaming, IM and P2P) which can be specified with different QoS Class. Vigor2710 Series User’s Guide...
  • Page 195: Applications

    Enable Dynamic DNS Check this box to enable DDNS function. Setup Set to Factory Default Clear all profiles and recover to factory settings. Set the time for the router to perform auto update for Auto-Update interval DDNS service. Vigor2710 Series User’s Guide...
  • Page 196 Click OK button to activate the settings. You will see your setting has been saved. The Wildcard and Backup MX features are not supported for all Dynamic DNS providers. You could get more detailed information from their websites. Vigor2710 Series User’s Guide...
  • Page 197: Schedule

    You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule, please click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. Vigor2710 Series User’s Guide...
  • Page 198 Suppose you want to control the PPPoE Internet access connection to be always on (Force On) from 9:00 to 18:00 for whole week. Other time the Internet access connection should be disconnected (Force Down). Office Hour: (Force On) Vigor2710 Series User’s Guide...
  • Page 199: Radius

    The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. Vigor2710 Series User’s Guide...
  • Page 200: Upnp

    NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor2710 Series User’s Guide...
  • Page 201 Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2710 Series User’s Guide...
  • Page 202: Igmp

    Refresh Click this link to renew the working multicast group status. If you check Enable IGMP Proxy, all the multicast groups will be listed and all the LAN ports (P1 to P4) are available for use. Vigor2710 Series User’s Guide...
  • Page 203: Wake On Lan

    MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2710 Series User’s Guide...
  • Page 204: Vpn And Remote Access

    LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Vigor2710 Series User’s Guide...
  • Page 205: Ipsec General Setup

    Pre-Shared Key or Digital Signature (x.509). The peer that starts the negotiation proposes all its policies to the remote peer and then remote peer tries to find a highest-priority match with its policies. Eventually to set up a secure tunnel for IKE Phase 2. Vigor2710 Series User’s Guide...
  • Page 206 By default, this option is active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. Vigor2710 Series User’s Guide...
  • Page 207: Ipsec Peer Identity

    Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2710 Series User’s Guide...
  • Page 208 Click to check the specific fields of digital signature to accept the peer with matching value. The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). Vigor2710 Series User’s Guide...
  • Page 209: Remote Dial-In User

    Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. Vigor2710 Series User’s Guide...
  • Page 210 ISDN number or peer ID (used in IKE aggressive mode). Uncheck the checkbox-This means the connection type you select above will apply the authentication methods and security methods in the general settings. Netbios Naming Packet Vigor2710 Series User’s Guide...
  • Page 211 Triple DES (3DES), and AES. Local ID - Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. Vigor2710 Series User’s Guide...
  • Page 212: Lan To Lan

    4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. For the web page is too long, we divide the page into several sections for explanation. Vigor2710 Series User’s Guide...
  • Page 213 Block – This is default setting. Click this button to let multicast packets be blocked by the router. Specify the allowed call direction of this LAN-to-LAN profile. Call Direction Both:-initiator/responder Dial-Out- initiator only Dial-In- responder only. Vigor2710 Series User’s Guide...
  • Page 214 IPSec policy above. PAP/CHAP is the most common selection due to wild compatibility. VJ compression This field is applicable when you select PPTP or L2TP with or without IPSec policy above. VJ Compression is used for Vigor2710 Series User’s Guide...
  • Page 215 Aggressive mode is faster. The default value in Vigor router is Main mode. IKE phase 1 proposal-To propose the local available authentication schemes and encryption algorithms to the VPN peers, and get its feedback to find a match. Two combinations Vigor2710 Series User’s Guide...
  • Page 216 VPN server. The length of the ID is limited to 47 characters. Allowed Dial-In Type Determine the dial-in connection with different types. PPTP - Allow the remote dial-in user to make a PPTP VPN Vigor2710 Series User’s Guide...
  • Page 217 IPSec Policy when you specify the remote node. Medium- Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active. High- Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select Vigor2710 Series User’s Guide...
  • Page 218 If the remote network only allows you to dial in with single IP, please choose NAT, otherwise choose Route. remote network, you have to do Change default route to Check this box to change the default route with this VPN this VPN tunnel tunnel. Vigor2710 Series User’s Guide...
  • Page 219: Connection Management

    Tool and clicking Dial button. Dial Click this button to execute dial out function. Refresh Seconds Choose the time for refresh the dial information among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Vigor2710 Series User’s Guide...
  • Page 220: Certificate Management

    Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Generate Click this button to open Generate Certificate Request window. Vigor2710 Series User’s Guide...
  • Page 221 Generate again. Import Click this button to import a saved file as the certification information. Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. Vigor2710 Series User’s Guide...
  • Page 222: Trusted Ca Certificate

    For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2710 Series User’s Guide...
  • Page 223: Certificate Backup

    The more bandwidth a codec uses the better the voice quality, however the codec used must be appropriate for your Internet bandwidth. Usually there will be two types of calling scenario, as illustrated below: Vigor2710 Series User’s Guide...
  • Page 224 QoS Assurance assists to assign high priority to voice traffic via Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor2710 Series User’s Guide...
  • Page 225: Dialplan

    SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor 2710Vn/VDn for setting the phone book. Vigor2710 Series User’s Guide...
  • Page 226 And when the VoIP phone is switched into the PSTN phone, the telecom co. might charge you for the connection fee. Please type in backup phone number (PSTN) for this VoIP phone setting. Vigor2710 Series User’s Guide...
  • Page 227 VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will replace 8863. For example: dial number of “88631111111” will be changed to “031111111” and sent to SIP server. Vigor2710 Series User’s Guide...
  • Page 228 SIP accounts. Please set up one SIP account first to make this interface available. Call barring is used to block phone calls coming from the one that is not welcomed. Click any index number to display the dial plan setup page. Vigor2710 Series User’s Guide...
  • Page 229 Block Unknown Domain or Block IP Address. Simply click the relational links to open the web page. For Block Anonymous – this function can block the incoming calls without caller ID on the interface (Phone port) specified in the following window. Web page for Vigor2710Vn--- Vigor2710 Series User’s Guide...
  • Page 230 Web page for Vigor2710VDn--- For Block Unknown Domain – this function can block incoming calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Web page for Vigor2710Vn--- Web page for Vigor2710VDn--- Vigor2710 Series User’s Guide...
  • Page 231 For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Web page for Vigor2710Vn--- Web page for Vigor2710DVn--- Vigor2710 Series User’s Guide...
  • Page 232 Dial the number typed in this field to release the DND function. Hide caller ID [Act] Dial the number typed in this field to make your phone number (ID) not displayed on the display panel of remote end. Vigor2710 Series User’s Guide...
  • Page 233 Note: A Line port on the router allows connection to a PSTN line so the user can select either the PSTN or VoIP for the calls, and can access the PSTN line during power black-outs when VoIP is cut off (only available on port 2). Vigor2710 Series User’s Guide...
  • Page 234: Sip Accounts

    As Vigor VoIP Router is turned on, it will first register with Registrar using AuthorizationUser@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity. SIP Accounts Web Page for Vigor2710 Vn ------- SIP Accounts Web Page for Vigor2710 VDn ------- Vigor2710 Series User’s Guide...
  • Page 235 SIP PING interval The default value is 150 (sec). It is useful for a Nortel server NAT Traversal Support. Click the index link to open the following web page. SIP Accounts Web Page for Vigor2710 Vn ------- Vigor2710 Series User’s Guide...
  • Page 236 :port number after the domain name to specify that port as the destination of data transmission (e.g., nat.draytel.org:5065) Act as Outbound Proxy Check this box to make the proxy acting as outbound proxy. Vigor2710 Series User’s Guide...
  • Page 237 The default codec is G.729A/B; it occupies little bandwidth while maintaining good voice quality. If your upstream speed is only 64Kbps, do not use G.711 codec. It is better for you to have at least 256Kbps upstream if you would like to use G.711. Vigor2710 Series User’s Guide...
  • Page 238 This function can detect if the voice on both sides is active or not. If not, the router will do something to save the bandwidth for other using. Click On to invoke this function; click Off to close the function. Vigor2710 Series User’s Guide...
  • Page 239: Phone Settings

    Port – Phone, Phone1/Phone2 allow you to set general settings for PSTN phones. DECT1-6 allow you to set general settings for DECT phone. Call Feature – A brief description for call feature will be shown in this field for your reference. Vigor2710 Series User’s Guide...
  • Page 240 Dynamic RTP Port End - Specifies the end port for RTP stream. The default value is 15000. RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Vigor2710 Series User’s Guide...
  • Page 241 Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Session Timer Check the box to enable the function. In the limited time that Vigor2710 Series User’s Guide...
  • Page 242 Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting. Play dial tone only when account registered - Check this box to invoke the function. Vigor2710 Series User’s Guide...
  • Page 243 Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, and congestion tone by yourself for VoIP phone. Vigor2710 Series User’s Guide...
  • Page 244 DTMF tone. SIP INFO- Choose this one then the Vigor will capture the DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message. Vigor2710 Series User’s Guide...
  • Page 245 Payload Type (rfc2833) - Choose a number from 96 to 127, the default value was 101. This setting is available for the OutBand (RFC2833) mode. Vigor2710 Series User’s Guide...
  • Page 246: Dect

    Enable Registration If you want to use handset to register with the router, you need Mode to enable DECT module registration mode via this button. Otherwise, you can't search our DECT base station from the air. Vigor2710 Series User’s Guide...
  • Page 247 In the web page, please click Enable Registration Mode and wait for DECT handset to register. When the registration is finished, open VoIP>>SIP Accounts. The Registered DECT phone will be available for you to choose. Choose the one you need. Vigor2710 Series User’s Guide...
  • Page 248 Open VoIP>>Status. Information for the active DECT phone will be shown as follows. When registering with DECT phone, you will be asked to type access code. The default setting in Vigor2710VDn is 1234. Please open VoIP>>Phone Settings to modify it if required. Vigor2710 Series User’s Guide...
  • Page 249 The following diagram shows the brief construction of DECT phone (handset) and Vigor router. Vigor2710 Series User’s Guide...
  • Page 250: Status

    From this page, you can find codec, connection and other important call status for each port. For Vigor2710 Vn ------- For Vigor2710 VDn ------- Refresh Seconds Specify the interval of refresh time to obtain the latest VoIP calling information. The information will update immediately Vigor2710 Series User’s Guide...
  • Page 251: Wireless Lan

    Any authorized staff can bring a built-in WLAN client PDA or notebook into a meeting room for conference without laying a clot of LAN cable or drilling holes everywhere. Wireless LAN enables high Vigor2710 Series User’s Guide...
  • Page 252 WPA-Enterprise or called WPA/802.1x. In WPA-Personal, a pre-defined key is used for encryption during data transmission. WPA applies Temporal Key Integrity Protocol (TKIP) for data encryption while WPA2 applies AES. The WPA-Enterprise combines not only encryption but also authentication. Vigor2710 Series User’s Guide...
  • Page 253 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor2710 Series User’s Guide...
  • Page 254: General Setup

    Enable Wireless LAN Check the box to enable wireless function. Mode At present, the router can connect to Mixed (11b+11g), 11g Only, 11b Only, Mixed (11g+11n), 11n Only and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode. Vigor2710 Series User’s Guide...
  • Page 255 Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "Draytek. We suggest you to change it. Isolate LAN – Check this box to make the wireless clients (stations) with the same SSID cannot access wired PCs on LAN.
  • Page 256 It controls the data transmission rate through wireless connection. Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbps. Vigor2710 Series User’s Guide...
  • Page 257: Security

    Mixed (WPA+ WPA2)/PSK - Accepts WPA and WPA2 clients simultaneously and the encryption key should be entered in PSK. The WPA encrypts each frame transmitted from the radio using the key. Either 8~63 ASCII characters, such as Vigor2710 Series User’s Guide...
  • Page 258: Access Control

    MAC addresses into a black list, or only let them be able to connect by inserting their MAC addresses into a white list. In the Access Control web page, users may configure the white/black list modes used by each SSID and the MAC addresses applied to their lists. Vigor2710 Series User’s Guide...
  • Page 259 Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. Click it to save the access control list. Clear All Clean all entries in the MAC address list. Vigor2710 Series User’s Guide...
  • Page 260: Wps

    Start PBC button of network card. If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN code of the wireless client you wish to connect to the Vigor2710 Series User’s Guide...
  • Page 261 Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Configured’ message here. SSID Display the SSID1 of the router. WPS is supported by SSID1 only. Vigor2710 Series User’s Guide...
  • Page 262: Wds

    Provide bridge traffic between two LANs through the air. Extend the coverage range of a WLAN. To meet the above requirement, two WDS modes are implemented in Vigor router. One is Bridge, the other is Repeater. Below shows the function of WDS-bridge interface: Vigor2710 Series User’s Guide...
  • Page 263 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Vigor2710 Series User’s Guide...
  • Page 264 Click WDS from Wireless LAN menu. The following page will be shown. Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Vigor2710 Series User’s Guide...
  • Page 265: Advanced Setting

    Pre-shared Key Type – There are several types for you to choose. Default setting is DrayTek WPA. WPA and WPA2 are used for WDS devices (e.g., AP700). For example, if you have a wireless AP and a Vigor2830n wireless router, you can set the encryption mode as WPA or WPA2 to establish your WDS system between AP and the router.
  • Page 266: Wmm Configuration

    Wi-Fi networks. It allows devices to take more time in sleeping state and consume less power to improve the performance by minimizing transmission latency. Such function is designed for mobile and cordless phones that support VoIP mostly. Vigor2710 Series User’s Guide...
  • Page 267 Note: Vigor2830 provides standard WMM configuration in the web page. If you want to modify the parameters, please refer to the Wi-Fi WMM standard specification. Vigor2710 Series User’s Guide...
  • Page 268: Ap Discovery

    Please click Scan to discover all the connected APs. Scan It is used to discover all the connected AP. The results will be shown on the box above this button. Statistics It displays the statistics for the channels used by APs. Vigor2710 Series User’s Guide...
  • Page 269: Station List

    There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2710 Series User’s Guide...
  • Page 270: Usb Application

    FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage disk at one time. Default Charset - At present, Vigor router supports three types of character sets: default, GB2312 and BIG5. Vigor2710 Series User’s Guide...
  • Page 271: Usb User Management

    USB disk must type the same username and password configured in this page. Before adding or modifying settings in this page, please insert a USB disk first. Otherwise, an error message will appear to warn you. Click index number to access into configuration page. Vigor2710 Series User’s Guide...
  • Page 272 Only “/” can be used in such case. You can click to open the following dialog to add any new folder which can be specified as the Home Folder. Vigor2710 Series User’s Guide...
  • Page 273 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor2710 Series User’s Guide...
  • Page 274: File Explorer

    Create Display current folder. Current Path Upload Click this button to upload the selected file to the USB storage disk. The uploaded file in the USB storage disk can be shared for other user through FTP. Vigor2710 Series User’s Guide...
  • Page 275: Usb Disk Status

    FTP server. Username It displays the username that user uses to login to the FTP server. When you insert USB disk into the Vigor router, the system will start to find out such device within several seconds. Vigor2710 Series User’s Guide...
  • Page 276: System Maintenance

    Display the MAC address of the LAN Interface. IP Address Display the IP address of the LAN interface. Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHCP server of the LAN Vigor2710 Series User’s Guide...
  • Page 277 Firmware Version It indicates information about equipped WLAN miniPCi card. This also helps to provide availability of some features that are bound with some WLAN miniPCi. SSID Display the SSID of the router. Vigor2710 Series User’s Guide...
  • Page 278: 266

    CPE. Periodic Inform Settings The default setting is Enable. Please set interval time or schedule time for the router to send notification to CPE. Or click Disable to close the mechanism of notification. Vigor2710 Series User’s Guide...
  • Page 279: Administrator Password

    Type in new password in this field. Confirm Password Type in the new password again. When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Vigor2710 Series User’s Guide...
  • Page 280: Configuration Backup

    Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. Vigor2710 Series User’s Guide...
  • Page 281: Syslog/Mail Alert

    Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipments. Vigor2710 Series User’s Guide...
  • Page 282 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2710 Series User’s Guide...
  • Page 283: Time And Date

    Select the time zone where the router is located. Enable Daylight Saving Check the box to enable the daylight saving. Such feature is available for certain area. Automatically Update Select a time interval for updating from the NTP server. Vigor2710 Series User’s Guide...
  • Page 284: Management

    Check to specify user-defined port numbers for the Telnet, HTTP and FTP servers. Enable SNMP Agent Check it to enable this function. Get Community Set the name for getting community by typing a proper character. The default setting is public. Vigor2710 Series User’s Guide...
  • Page 285: Reboot System

    Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2710 Series User’s Guide...
  • Page 286: Firmware Upgrade

    Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.
  • Page 287: Activation

    Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. Below shows the successful activation of Web Content Filter: Vigor2710 Series User’s Guide...
  • Page 288 Display the mechanism adopted by such router. Start Date Display the starting date of WCF license activated successfully. Expire Date Display the ending date of WCF license activated successfully. Click this link to access into http://myvigor.draytek.com for Activate activating WCF function. Vigor2710 Series User’s Guide...
  • Page 289: Diagnostics

    (e.g., PPPoE, PPPoA, etc) is triggered by a package sending from the source IP address. Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2710 Series User’s Guide...
  • Page 290: Routing Table

    Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Refresh Click it to reload the page. Clear Click it to clear the whole table. Vigor2710 Series User’s Guide...
  • Page 291: Dhcp Table

    It displays the host ID name of the specified PC. Refresh Click it to reload the page. Click Diagnostics and click NAT Sessions Table to open the list page. Private IP:Port It indicates the source IP address and port of local PC. Vigor2710 Series User’s Guide...
  • Page 292: Data Flow Monitor

    Enable Data Flow Monitor Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refresh this page manually. Vigor2710 Series User’s Guide...
  • Page 293: Traffic Graph

    Auto for instead. Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Refresh to renew the graph at any time. Vigor2710 Series User’s Guide...
  • Page 294 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2710 Series User’s Guide...
  • Page 295: Ping Diagnosis

    Type in the IP address of the Host/IP that you want to ping. Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. Vigor2710 Series User’s Guide...
  • Page 296: Trace Route

    Click this button to start route tracing work. Clear Click this link to remove the result on the window. When you click it, you will be guided to visit myvigor.draytek.com and open the corresponding pages directly. Vigor2710 Series User’s Guide...
  • Page 297: Application And Examples

    For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2710 Series User’s Guide...
  • Page 298 If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Vigor2710 Series User’s Guide...
  • Page 299 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2710 Series User’s Guide...
  • Page 300 PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2710 Series User’s Guide...
  • Page 301 Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. Vigor2710 Series User’s Guide...
  • Page 302 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2710 Series User’s Guide...
  • Page 303 Address, Username, Password, and VJ Compression for this Dial-In connection. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection. Vigor2710 Series User’s Guide...
  • Page 304: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter

    PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2710 Series User’s Guide...
  • Page 305 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2710 Series User’s Guide...
  • Page 306 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.draytek.com download center. Install as instructed.
  • Page 307 VPN router. To use default gateway on remote network means that all the packets of remote host will be directed to VPN server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. Vigor2710 Series User’s Guide...
  • Page 308: Qos Setting Example

    Meanwhile, children may chat on Skype in the restroom. Go to Bandwidth Management>>Quality of Service. Click Setup link of WAN. Make sure the QoS Control on the left corner is checked. And select BOTH in Direction. Vigor2710 Series User’s Guide...
  • Page 309 Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the name “E-mail” for Class 1. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP. Vigor2710 Series User’s Guide...
  • Page 310 If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. Vigor2710 Series User’s Guide...
  • Page 311 Click Edit to open the following window. Check the ACT box, first. 10. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor2710 Series User’s Guide...
  • Page 312: Lan - Created By Using Nat

    You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. To use another DHCP server in the network rather than the built-in one of Vigor Router, you have to change the settings as show below. Vigor2710 Series User’s Guide...
  • Page 313 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. Vigor2710 Series User’s Guide...
  • Page 314: Calling Scenario For Voip Function

    SIP Accounts Settings --- Profile Name: iptel 1 Register via: Auto SIP Port: 5060(default) Domain/Realm: iptel.org Proxy: iptel.org Act as outbound proxy: unchecked Display Name: David Account Name: 4321 Authentication ID: unchecked Password: **** Expiry Time: (use default value) Vigor2710 Series User’s Guide...
  • Page 315 Expiry Time: (use default value) CODEC/RTP/DTMF --- John calls David (Use default value) He picks up the phone and dials 1111#. (DialPlan Phone Number for David) He picks up the phone and dials 4321#. (David’s Account Name) Vigor2710 Series User’s Guide...
  • Page 316: Peer-To-Peer Calling

    Register via: None SIP Port: 5060(default) Domain/Realm: (blank) Proxy: (blank) Act as outbound proxy: unchecked Display Name: Arnor Account Name: 1234 Authentication ID: unchecked Password: (blank) Expiry Time: (use default value) CODEC/RTP/DTMF--- (Use default value) Arnor calls Paulin Vigor2710 Series User’s Guide...
  • Page 317: Upgrade Firmware For Your Router

    1. Go to www.draytek.com. 2. Access into Support >> Downloads. Please find out Firmware menu and click it. Search the model you have and click on it to download the newly update firmware for your router. Vigor2710 Series User’s Guide...
  • Page 318 9. Click the button to the right side of Firmware file typing box. Locate the files that you download from the company web sites. You will find out two files with different extension names, xxxx.all (keep the old custom settings) and xxxx.rst (reset all the Vigor2710 Series User’s Guide...
  • Page 319 Choose any one of them that you need. 10. Click Send. 11. Now the firmware update is finished. Vigor2710 Series User’s Guide...
  • Page 320: Request A Certificate From A Ca Server On Windows Ca Server

    Go to Certificate Management and choose Local Certificate. Vigor2710 Series User’s Guide...
  • Page 321 Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate. Vigor2710 Series User’s Guide...
  • Page 322 64 encoded certificate and Download CA certificate. Now you should get a certificate (.cer file) and save it. Back to Vigor router, go to Local Certificate. Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh Vigor2710 Series User’s Guide...
  • Page 323 “------BEGINE CERTIFICATE------..” You may review the detail information of the certificate by clicking View button. Vigor2710 Series User’s Guide...
  • Page 324: Request A Ca Certificate And Set As Trusted On Windows Ca Server

    Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. Vigor2710 Series User’s Guide...
  • Page 325 You may review the detail information of the certificate by clicking View button. Note: Before setting certificate configuration, please go to System Maintenance >> Time and Date to reset current time of the router first. Vigor2710 Series User’s Guide...
  • Page 326: How Can I Get The Files From Usb Storage Device Connecting To Vigor Router

    Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable Samba service. Vigor2710 Series User’s Guide...
  • Page 327 "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2710 Series User’s Guide...
  • Page 328 Now, users in LAN of Vigor2710 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. Vigor2710 Series User’s Guide...
  • Page 329: Trouble Shooting

    Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2710 Series User’s Guide...
  • Page 330 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2710 Series User’s Guide...
  • Page 331 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used MacOs on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2710 Series User’s Guide...
  • Page 332: Pinging The Router From Your Computer

    Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2710 Series User’s Guide...
  • Page 333: Checking If The Isp Settings Are Ok Or Not

    Click Internet Access group and then check whether the ISP settings are set correctly. Check if the Enable option is selected. Check if Username and Password are entered with correct values that you got from your ISP. Vigor2710 Series User’s Guide...
  • Page 334: Backing To Factory Default Setting If Necessary

    Warning: After pressing factory default setting, you will loose all settings you did before. Make sure you have recorded all useful settings before you pressing. The password of factory default is null. You can reset the router to factory default via Web page. Vigor2710 Series User’s Guide...
  • Page 335: Contacting Your Dealer

    After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor2710 Series User’s Guide...

This manual is also suitable for:

Vigor2710nVigor2710vnVigor2710vdn

Table of Contents