Draytek Vigor120 Series User Manual

Draytek Vigor120 Series User Manual

Vigor120 series adsl2/2+ modem
Hide thumbs Also See for Vigor120 Series:

Advertisement

Quick Links

i
Vigor120 Series User's Guide

Advertisement

Table of Contents
loading

Summary of Contents for Draytek Vigor120 Series

  • Page 1 Vigor120 Series User’s Guide...
  • Page 2 Vigor120 Series ADSL2/2+ Modem User’s Guide Version: 1.3 Date: 04/08/2009 Vigor120 Series User’s Guide...
  • Page 3: Copyright Information

    Web registration is preferred. You can register your Vigor modem via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all modems will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
  • Page 4 No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor120 DrayTek Corp. declares that Vigor120 is in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
  • Page 5: Table Of Contents

    3.4 Firewall ..........................37 3.4.1 Basics for Firewall......................37 3.4.2 General Setup......................... 39 3.4.3 Filter Setup ........................40 3.4.4 DoS Defense ........................45 3.4.5 URL Content Filter ......................48 3.5 Objects Settings ........................50 3.5.1 IP Object ......................... 50 Vigor120 Series User’s Guide...
  • Page 6 5.3 Pinging the Modem from Your Computer................84 5.4 Checking If the ISP Settings are OK or Not ................85 5.5 Backing to Factory Default Setting If Necessary ..............86 5.6 Contacting Your Dealer ......................87 Vigor120 Series User’s Guide...
  • Page 8: Preface

    Vigor120 Series is an ADSL modem. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy with ease. It is flexible and makes your network be safe. By the way, DoS/DDoS prevention and URL content filter strengthen the security outside and control inside.
  • Page 9: Led Indicators And Connectors

    A normal connection is through its corresponding port. LAN is disconnected. Blinking Data is transmitting (sending/receiving). DSL connection synchronized. Blinking DSL connection is synchronizing. INTERNET Internet connection is established. Internet connection is not established. Blinking Data is transmitting (sending/receiving). Vigor120 Series User’s Guide...
  • Page 10 Connecter for a power adapter. ON/OFF: Power switch. RESET Restore the default settings. Usage: Turn on the router. Press the button and keep for more than 10 seconds. Then the router will restart with the factory default configuration. Vigor120 Series User’s Guide...
  • Page 11: Hardware Installation

    Power on the modem. Check the POWER, ACT, LAN, DSL and INTERNET LEDs to assure network connections. (For the detailed information of LED status, please refer to section 1.2.) Vigor120 Series User’s Guide...
  • Page 12: Basic Configuration

    Do not type any word on the window and click Login for the simple web pages for configuration. Notice: If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Vigor120 Series User’s Guide...
  • Page 13: Changing Password

    Note: The home page will change slightly in accordance with the type of the modem you have. Go to System Maintenance page and choose Administrator Password/User Password. Enter the login password (the default is blank) on the field of Old Password. Type New Password. Then click OK to continue. Vigor120 Series User’s Guide...
  • Page 14: Quick Start Wizard

    If your modem can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the modem quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next. Vigor120 Series User’s Guide...
  • Page 15: Adjusting Protocol/Encapsulation

    No (Dynamic IP) to allow the modem choosing a dynamic IP. If you choose No, the following IP Address, Subnet Mask and Default Gateway will not be changed. IP Address Assign an IP address for the protocol that you select. Vigor120 Series User’s Guide...
  • Page 16: Pppoe/Pppoa

    User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Click Next for viewing summary of such connection. Vigor120 Series User’s Guide...
  • Page 17: 1483 Bridged Ip

    Click Finish. Then, the system status of this protocol will be shown. Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for this protocol. Vigor120 Series User’s Guide...
  • Page 18: 1483 Routed Ip

    Click Next for viewing summary of such connection. Click Finish. Then, the system status of this protocol will be shown. Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol. Vigor120 Series User’s Guide...
  • Page 19: Online Status

    If you select PPPoE/PPPoA as the protocol, you will find out a link of Dial PPPoE or Drop PPPoE in the Online Status web page. Online status for PPPoE Vigor120 Series User’s Guide...
  • Page 20 Displays the IP address of the LAN interface. TX Packets Displays the total transmitted packets at the LAN interface. RX Packets Displays the total number of received packets at the LAN interface. WAN1 Status Line Displays the physical connection (Ethernet) of this interface. Vigor120 Series User’s Guide...
  • Page 21: Saving Configuration

    Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor120 Series User’s Guide...
  • Page 22: Advanced Configuration

    NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 Vigor120 Series User’s Guide...
  • Page 23: Pppoe/Pppoa

    ADSL loop and your ISP’s Digital Subscriber Line Access Multiplexer (SDLAM). To choose PPPoE or PPPoA as the accessing protocol of the internet, please select PPPoE/PPPoA from the Internet Access menu. The following web page will be shown. Vigor120 Series User’s Guide...
  • Page 24 PPPoE clients on the LAN will be served and only one session is allowed. ISP Access Setup Enter your allocated username, password and authentication parameters according to the information provided by your ISP. If Vigor120 Series User’s Guide...
  • Page 25 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Applications – Schedule web page and you can use the number that you have set in that web page. Vigor120 Series User’s Guide...
  • Page 26: Mpoa

    If you choose Bridged IP as the protocol, you can check this box to invoke the function. The modem will work as a bridge modem. WAN IP Network This group allows you to obtain an IP address automatically and Vigor120 Series User’s Guide...
  • Page 27 DNS Server IP Type in the primary IP address for the modem. If necessary, type Address in secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. Vigor120 Series User’s Guide...
  • Page 28: Multi-Pvcs

    Internet Access. Type in the value provided by your ISP. Type in the value provided by your ISP. QoS Type Select a proper QoS type for the channel. Protocol Select a proper protocol for this channel. Vigor120 Series User’s Guide...
  • Page 29 ISP and then click WAN link of Channel 3 or 4 to configure your modem. Such configuration is applied to upstream packets. Such information will be provided by ISP. Please contact with your ISP for detailed information. Vigor120 Series User’s Guide...
  • Page 30 It represents Peak Cell Rate. The default setting is “0”. It represents Sustainable Cell Rate. The value of SCR must be smaller than PCR. It represents Maximum Burst Size. The range of the value is 10 to 50. Vigor120 Series User’s Guide...
  • Page 31: Lan

    IP address. As a part of the public subnet, the Vigor modem will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the modem should be set as the gateway for public hosts. Vigor120 Series User’s Guide...
  • Page 32 When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method. You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP. Vigor120 Series User’s Guide...
  • Page 33: General Setup

    DNS Server DNS stands for Domain Name System. Every Internet host must Configuration have a unique IP address, also they may have a human-friendly, easy to remember name such as www.yahoo.com. The DNS Vigor120 Series User’s Guide...
  • Page 34: Static Route

    The number (1 to 10) under Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Set to Factory Default Clear all profiles. Vigor120 Series User’s Guide...
  • Page 35 Before setting Static Route, user A cannot talk to user B for Modem A can only forward recognized packets to its default gateway Main Modem. Go to LAN page and click General Setup, select 1st Subnet as the RIP Protocol Control. Then click the OK button. Vigor120 Series User’s Guide...
  • Page 36 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor120 Series User’s Guide...
  • Page 37: Nat

    IP address/port, the goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping private IP address/port of the server. Vigor120 Series User’s Guide...
  • Page 38 To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection. Vigor120 Series User’s Guide...
  • Page 39 For example, the built-in web configurator in the modem is with default port 80, which may conflict with the web server in the local network, http://192.168.1.13:80. Therefore, you need to change the modem’s http port to any one other than the default port 80 to avoid Vigor120 Series User’s Guide...
  • Page 40: Dmz Host

    LAN. Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption. DMZ Host allows a defined internal user to be totally exposed to the Internet, which usually helps some special applications such as Netmeeting or Internet Games etc. Vigor120 Series User’s Guide...
  • Page 41 Click DMZ Host to open the following page: If you previously have set up WAN Alias for PPPoE/PPPoA or MPoA mode, you will find them in Aux. WAN IP for your selection. Enable Check to enable the DMZ Host function. Vigor120 Series User’s Guide...
  • Page 42: Open Ports

    Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application involved up-to-date to avoid falling victim to any security exploits. Click Open Ports to open the following page: Vigor120 Series User’s Guide...
  • Page 43 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor120 Series User’s Guide...
  • Page 44: Firewall

    It will check packets according to the filter rules. If legal, the packet will pass the modem. The following illustrations are flow charts explaining how modem will treat incoming traffic and outgoing traffic respectively. Vigor120 Series User’s Guide...
  • Page 45 Any malicious packet that might duplicate itself to paralyze the host in the secure LAN will be strictly blocked and a Syslog message will be sent as warning, if you set up Syslog server. Vigor120 Series User’s Guide...
  • Page 46: General Setup

    Check Enable to activate the Call Filter function. Assign a start filter set for the Call Filter. Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Vigor120 Series User’s Guide...
  • Page 47: Filter Setup

    For troubleshooting needs you can specify the filter log by checking the box. The log will be displayed on Draytek Syslog window. Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to transfer game data. Instinctively as a secure firewall, Vigor modem will reject these fragmented packets to prevent attack unless you enable “Accept large incoming...
  • Page 48 Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Source/Destination IP Click Edit to access into the following dialog to choose the source/destination IP or IP ranges. Vigor120 Series User’s Guide...
  • Page 49 From the IP Group drop down list, choose the one that you want to apply. Or use the IP Object drop down list to choose the object that you want. Service Type Click Edit to access into the following dialog to choose a suitable service type. Vigor120 Series User’s Guide...
  • Page 50 SysLog For troubleshooting needs you can specify the filter log here. Check the corresponding box to enable the log function. Then, the filter log will be shown on Draytek Syslog window. Vigor120 Series User’s Guide...
  • Page 51 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor120 Series User’s Guide...
  • Page 52: Dos Defense

    ICMP echo requests coming from the Internet. The default setting for threshold and timeout are 50 packets per second and 10 seconds, respectively. Enable PortScan Port Scan attacks the Vigor modem by sending lots of packets to Vigor120 Series User’s Guide...
  • Page 53 The Vigor modems will block any packets realizing this attacking activity. Block ICMP Fragment Check the box to activate the Block ICMP fragment function. Any ICMP packets with more fragment bit set are dropped. Vigor120 Series User’s Guide...
  • Page 54 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor120 Series User’s Guide...
  • Page 55: Url Content Filter

    Keyword The Vigor router provides 8 frames for users to define keywords and each frame supports multiple keywords. The keyword could be a noun, a partial noun, or a complete URL string. Multiple Vigor120 Series User’s Guide...
  • Page 56 URL Access Subnets Control. To enable an entry, click on the empty checkbox, named as ACT, in front of the appropriate entry. Time Schedule Specify what time should perform the URL content filtering facility. Vigor120 Series User’s Guide...
  • Page 57: Objects Settings

    IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor120 Series User’s Guide...
  • Page 58: Ip Group

    If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. Below is an example of IP objects settings. This page allows you to bind several IP objects into one IP group. Vigor120 Series User’s Guide...
  • Page 59 Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Click >> button to add the selected IP objects in this box. Vigor120 Series User’s Guide...
  • Page 60: Service Type Object

    Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. Vigor120 Series User’s Guide...
  • Page 61: Service Type Group

    (<) – the port number less than this value is available for this profile. Below is an example of service type objects settings. This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Vigor120 Series User’s Guide...
  • Page 62: Applications

    DDNS service providers such as www.dyndns.org, www.no-ip.com, www.dtdns.com, www.changeip.com, www.dynamic- nameserver.com. You should visit their websites to register your own domain name for the modem. Enable the Function and Add a Dynamic DNS Account Vigor120 Series User’s Guide...
  • Page 63 Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. Check this box to enable the current account. If you did Enable Dynamic Vigor120 Series User’s Guide...
  • Page 64: Schedule

    You can inquiry an NTP server (a time server) on the Internet to synchronize the modem’s clock. This method can only be applied when the WAN connection has been built Set to Factory Default Clear all profiles and recover to factory settings. Vigor120 Series User’s Guide...
  • Page 65 Example Suppose you want to control the PPPoE Internet access connection to be always on (Force On) from 9:00 to 18:00 for whole week. Other time the Internet access connection should be disconnected (Force Down). Vigor120 Series User’s Guide...
  • Page 66: Upnp

    The NAT Traversal of UPnP enables the multimedia features of your applications to operate. This has to manually set up port mappings or use other similar methods. The screenshots below show examples of this facility. Vigor120 Series User’s Guide...
  • Page 67 Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches. Non-privileged users can control some modem functions, including removing and adding port mappings. Vigor120 Series User’s Guide...
  • Page 68: Igmp

    For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items for System Maintenance. Vigor120 Series User’s Guide...
  • Page 69: System Status

    MAC Address Display the MAC address of the WAN Interface. Connection Display the connection type. IP Address Display the IP address of the WAN interface. Default Gateway Display the assigned IP address of the default gateway. Vigor120 Series User’s Guide...
  • Page 70: Tr-069

    The default setting is Enable. Please set interval time or schedule time for the modem to send notification to CPE. Or click Disable to close the mechanism of notification. Date (yyyy-mm-dd) - Specify the starting date of the Vigor120 Series User’s Guide...
  • Page 71: Administrator Password

    When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Follow the steps below to backup your configuration. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Vigor120 Series User’s Guide...
  • Page 72 The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Vigor120 Series User’s Guide...
  • Page 73 Click Browse button to choose the correct configuration file for uploading to the modem. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor120 Series User’s Guide...
  • Page 74: Syslog/Mail Alert

    Type the user name for authentication. Password Type the password for authentication. Enable E-mail Alert Check the box to send alert message to the e-mail box while the modem detecting the item(s) you specify here. Click OK to save these settings. Vigor120 Series User’s Guide...
  • Page 75: Time And Date

    Network Information, select the network adapter used to connect to the modem. Otherwise, you won’t succeed in retrieving information from the modem. It allows you to specify where the time of the modem should be inquired from. Vigor120 Series User’s Guide...
  • Page 76: Management

    List IP - Indicate an IP address allowed to login to the modem. Subnet Mask - Represent a subnet mask allowed to login to the modem. Default Ports Check to use standard port numbers for the Telnet, FTP and HTTP servers. Vigor120 Series User’s Guide...
  • Page 77: Reboot System

    Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your modem for ensuring normal operation and preventing unexpected errors of the modem in the future. Vigor120 Series User’s Guide...
  • Page 78: Firmware Upgrade

    Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.
  • Page 79: Diagnostics

    (e.g., PPPoE, PPPoA, etc) is triggered by a package sending from the source IP address. Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor120 Series User’s Guide...
  • Page 80: Routing Table

    Resolution Protocol) cache held in the modem. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Refresh Click it to reload the page. Clear Click it to clear the whole table. Vigor120 Series User’s Guide...
  • Page 81: Dhcp Table

    It displays the host ID name of the specified PC. Refresh Click it to reload the page. Click Diagnostics and click NAT Sessions Table to open the list page. Private IP:Port It indicates the source IP address and port of local PC. Vigor120 Series User’s Guide...
  • Page 82: Ping Diagnosis

    Type in the IP address of the Host/IP that you want to ping. Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. Vigor120 Series User’s Guide...
  • Page 83: Trace Route

    Run. The result of route trace will be shown on the screen. Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Clear Click this link to remove the result on the window. Vigor120 Series User’s Guide...
  • Page 84: Application And Examples

    DHCP server is enabled so it assigns every local NATed host an IP address of 192.168.1.x starting from 192.168.1.10. You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. Vigor120 Series User’s Guide...
  • Page 85: Upgrade Firmware For Your Modem

    1. Go to www.draytek.com. 2. Access into Support >> Downloads. Please find out Firmware menu and click it. Search the model you have and click on it to download the newly update firmware for your router. Vigor120 Series User’s Guide...
  • Page 86 5. Double click on the icon of modem tool. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Modem Tools XXX >> Firmware Upgrade Utility. Vigor120 Series User’s Guide...
  • Page 87 (keep the old custom settings) and xxxx.rst (reset all the custom settings to default settings). Choose any one of them that you need. 10. Click Send. 11. Now the firmware update is finished. Vigor120 Series User’s Guide...
  • Page 88: Trouble Shooting

    Power on the modem. Make sure the POWER LED, ACT LED and LAN LED are bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor120 Series User’s Guide...
  • Page 89 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor120 Series User’s Guide...
  • Page 90 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used MacOs on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor120 Series User’s Guide...
  • Page 91: Pinging The Modem From Your Computer

    Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor120 Series User’s Guide...
  • Page 92: Checking If The Isp Settings Are Ok Or Not

    Click Internet Access group and then check whether the ISP settings are set correctly. Check if the Enable option is selected. Check if Username and Password are entered with correct values that you got from your ISP. Vigor120 Series User’s Guide...
  • Page 93: Backing To Factory Default Setting If Necessary

    Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK. After few seconds, the modem will return all the settings to the factory settings. Vigor120 Series User’s Guide...
  • Page 94: Contacting Your Dealer

    If the modem still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor120 Series User’s Guide...

Table of Contents