Page 2 Vigor2912 Series User’s Guide...
Page 3 Vigor2912 Series Dual-WAN Security Router User’s Guide Version: 1.0 Firmware Version: V3.7.3_RC5 (For future update, please visit DrayTek web site) Date: 18/09/2013 Vigor2912 Series User’s Guide...
Page 4: Copyright Information
Web registration is preferred. You can register your Vigor router via Owner http://www.DrayTek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 5: European Community Declarations
Product: Vigor2912 Series Router DrayTek Corp. declares that Vigor2912 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 6 Vigor2912 Series User’s Guide...
Page 7: Table Of Contents
(Main Mode) ..........................54 3.4 How to Optimize the Bandwidth through QoS Technology ........... 58 3.5 QoS Setting Example......................62 3.6 How to use Landing Page Feature ..................66 3.7 How to Create an Account for MyVigor................. 70 Vigor2912 Series User’s Guide...
Page 8 4.6.5 Service Type Object ..................... 194 4.6.6 Service Type Group...................... 196 4.6.7 Keyword Object ......................197 4.6.8 Keyword Group......................199 4.6.9 File Extension Object....................200 4.6.10 SMS/Mail Service Object .................... 202 4.6.11 Notification Object....................... 207 Vigor2912 Series User’s Guide viii...
Page 9 4.13.1 USB General Settings....................313 4.13.2 USB User Management....................314 4.13.3 File Explorer........................ 317 4.13.4 USB Device Status ..................... 318 4.13.5 Modem Support List....................319 4.14 System Maintenance......................320 4.14.1 System Status......................320 4.14.2 TR-069 ........................322 Vigor2912 Series User’s Guide...
Page 10 5.4 Checking If the ISP Settings are OK or Not ................ 361 5.5 Problems for 3G Network Connection ................361 5.6 Backing to Factory Default Setting If Necessary ..............362 5.7 Contacting Your Dealer ....................... 363 Vigor2912 Series User’s Guide...
Page 11: Introduction
By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside. Object-based firewall is flexible and allows your network be safe. In addition, Vigor2912 series supports USB interface for connecting USB printer to share printing function or 3G USB modem for network connection.
Page 12: Web Configuration Buttons Explanation
Add new settings for specified item. Edit the settings for the selected item. Delete the selected item with the corresponding settings. Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed explanation. Vigor2912 Series User’s Guide...
Page 13: Led Indicators And Connectors
The data is transmitting. WAN(W2~W1) Internet connection is ready. Internet connection is not ready. Blinking The data is transmitting. The VPN tunnel is active. USB1~USB2 USB device is connected and ready for use. Blinking The data is transmitting. Vigor2912 Series User’s Guide...
Page 14 Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Vigor2912 Series User’s Guide...
Page 15: For Vigor2912N
The data is transmitting. WAN(W2~W1) Internet connection is ready. Internet connection is not ready. Blinking The data is transmitting. The VPN tunnel is active. USB device is connected and ready for use. Blinking The data is transmitting. Vigor2912 Series User’s Guide...
Page 16 Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Vigor2912 Series User’s Guide...
Page 17: Hardware Installation
Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. (For the hardware connection, we take “n” model as an example.) Vigor2912 Series User’s Guide...
Page 18: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 19 Open File->Add Printer. A welcome dialog will appear. Please click Next. Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. Vigor2912 Series User’s Guide...
Page 20 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Vigor2912 Series User’s Guide...
Page 21 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. Vigor2912 Series User’s Guide...
Page 22 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click it.
Page 23: Basic Settings
Please type “admin/admin” as the Username/Password and click Login. Notice: If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Vigor2912 Series User’s Guide...
Page 24 The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor2912 Series User’s Guide...
Page 25: Changing Password
Now, the password has been changed. Next time, use the new password to access the Web user interface for this router. Note: Even the password has been changed, the Username for logging to the web user interface is still “admin”. Vigor2912 Series User’s Guide...
Page 26: Quick Start Wizard
WAN1/WAN2; if 3G USB modem is used, please choose WAN3. Then click Next for next step. WAN1, WAN2 and WAN3 will bring up different configuration page. Refer to the following for detailed information. Vigor2912 Series User’s Guide...
Page 27: For Wan1/Wan2 (Ethernet)
ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2912 Series User’s Guide...
Page 28 Note: The maximum length of the password you can set is 62 characters. Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2912 Series User’s Guide...
Page 29 Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 30 Description User Name Assign a specific valid user name provided by the ISP. Note: The maximum length of the user name you can set is 63 characters. Password Assign a valid password provided by the ISP. Vigor2912 Series User’s Guide...
Page 31 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 32 Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Vigor2912 Series User’s Guide...
Page 33 Please type in the IP address information originally provided by your ISP. Then click Next for next step. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 34 Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to enter the MAC address. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Vigor2912 Series User’s Guide...
Page 35 After finished the settings above, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 36: For Wan3 (Usb)
Modem Initial String – Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of the string you can set is 47 characters. Vigor2912 Series User’s Guide...
Page 37 Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 38: Service Activation Wizard
Service Activation Wizard is a tool which allows you to use trial version or update the license of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Page 39 When you finish the selection, please click Next. Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from retailing outlets.
Page 40 Later, if you need to extend the license valid time for the same service, you can also use the Service Activation Wizard again to reach your goal by clicking the radio button of Formal edition with license key and clicking Next. Vigor2912 Series User’s Guide...
Page 41 Vigor2912 Series User’s Guide...
Page 42: Web Console, Config Backup & Exit
The functions/settings modified under Web Console also can be reviewed on the web user interface. Click the Web Console icon on the top of the main screen to open the following screen. Vigor2912 Series User’s Guide...
Page 43: Config Backup
System Maintenance>>Configuration Backup. Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting. Click the Logout icon to exit the web user interface. Vigor2912 Series User’s Guide...
Page 44: Online Status
Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. Vigor2912 Series User’s Guide...
Page 45 RX Bytes - Displays the speed of received octets at the LAN interface. WAN IPv6 Status Enable – No in red means such interface is available but not enabled. Yes in green means such interface is enabled. No in red means such interface is not available. Vigor2912 Series User’s Guide...
Page 46: Virtual Wan
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2912 Series User’s Guide...
Page 47: Registering Vigor Router
Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login. Vigor2912 Series User’s Guide...
Page 48 When the following page appears, please type in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit. Vigor2912 Series User’s Guide...
Page 49 If you have not activated web content filter service by using Service Activation Wizard, you can activate the service from this step. Please click the serial number link. From the Device’s Service section, click the Trial. Vigor2912 Series User’s Guide...
Page 50 In the following page, check the box of “I have read and accept the above Agreement”. The system will find out the date for you to activate this version of service. Then, click Next. When this page appears, click Register. Wait for a moment until the following page appears. Click Close. Vigor2912 Series User’s Guide...
Page 51: Tutorials And Applications
TSPC, AICCU, DHCPv6 Client and Static IPv6. Access into the web user interface of Viogr2925. Open WAN>> Internet Access. Choose one of the WAN interfaces as the one supporting IPv6 service. Then, click the IPv6 button of the selected WAN. Vigor2912 Series User’s Guide...
Page 52 PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same time Choose PPP and type the information for PPPoE of IPv4. Access into the setting page for IPv6 service, it is not necessary for you to configure anything. Vigor2912 Series User’s Guide...
Page 53 Click OK and open Online Status. If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time. Vigor2912 Series User’s Guide...
Page 54 (In the following figure, the TSPC information is obtained from http://gogo6.com/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2912 Series User’s Guide...
Page 55 (In the following figure, the AICCU information is obtained from https://www.sixxs.net/main/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2912 Series User’s Guide...
Page 56 DHCPv6 Client Choose DHCPv6 Client. Click one of the identity associations and type the IAID number. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2912 Series User’s Guide...
Page 57 Static IPv6 Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2912 Series User’s Guide...
Page 58 In the field of HCPv6 Server Configuration, when DHCPv6 service is enabled, you can assign available IPv6 address for the client manually. Note: When both mechanisms are enabled, the client can determine which mechanism to be used (e.g., the default mechanism for Windows7 is RADVD). Vigor2912 Series User’s Guide...
Page 59 IPv4 IP and IPv6 IP services. Its IPv6 address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7. After getting the above message, it means the IPv6 service has been activated successfully. Vigor2912 Series User’s Guide...
Page 60 If not, only a steady turtle will be seen. If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to access and utilize. Vigor2912 Series User’s Guide...
Page 61: How Can I Get The Files From Usb Storage Device Connecting To Vigor Router
Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable Samba service. Vigor2912 Series User’s Guide...
Page 62 "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2912 Series User’s Guide...
Page 63 Now, users in LAN of Vigor2912 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. Vigor2912 Series User’s Guide...
Page 64: (Main Mode)
(in this case, type VPN Server), and check the box of Enable This Profile. For Vigor router will be set as a server, the call direction shall be set as Dial-in and set 0 as Idle Timeout. Vigor2912 Series User’s Guide...
Page 65 (e.g., 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote side. Click OK to save the settings. Vigor2912 Series User’s Guide...
Page 66 (in this case, type VPN Client), and check the box of Enable This Profile. For such Vigor router will be set as a client, the call direction shall be set as Dial-out. Check the box of Always on for a permanent VPN connection. Vigor2912 Series User’s Guide...
Page 67 IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the remote side. Click OK to save the settings. Vigor2912 Series User’s Guide...
Page 68: How To Optimize The Bandwidth Through Qos Technology
Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
Page 69 In the pop-up window, choose Range Address as the Address Type and type the start IP address and end IP address in relational fields. Click OK to save the settings and exit the window. Click OK again to save the settings. Vigor2912 Series User’s Guide...
Page 70 The class rule for VoIP has been set. Click OK to return to previous page. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. Vigor2912 Series User’s Guide...
Page 71 10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control. 11. Click OK to save the settings. The class rules for WAN1 are defined as shown below. Vigor2912 Series User’s Guide...
Page 72: Qos Setting Example
Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor2912 Series User’s Guide...
Page 73 E-mail using protocol POP3 and SMTP. Click OK to save the settings. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. Vigor2912 Series User’s Guide...
Page 74 If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. Vigor2912 Series User’s Guide...
Page 75 11. Click Add to open the following window. Check the ACT box, first. 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor2912 Series User’s Guide...
Page 76: How To Use Landing
Landing Page is a special feature configured under User Management. It can specify the message, content to be seen or specify which website to be accessed into when users try to access into the Internet by passing the authentication. Here, we take Vigor2912 series router as an example.
Page 77 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will see the message of Login Success from the browser you use. Vigor2912 Series User’s Guide...
Page 78 Next, enable the Landing Page function. Open User Management -> User Profile and click one of the index number (e.g., index number 3) links. In the following page, check the box of Landing page and click OK to save the settings. Vigor2912 Series User’s Guide...
Page 79 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will be directed into the website of www.draytek.com. Vigor2912 Series User’s Guide...
Page 80: How To Create An Account For Myvigor
The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
Page 81 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. Vigor2912 Series User’s Guide...
Page 82 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2912 Series User’s Guide...
Page 83 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2912 Series User’s Guide...
Page 84: Create An Account Via Myvigor Web Site
11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
Page 85 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. Vigor2912 Series User’s Guide...
Page 86 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2912 Series User’s Guide...
Page 87 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2912 Series User’s Guide...
Page 88: How To Configure Certain Computers Accessing To Internet
Firewall>>Filter Setup is used as the default setting, we has to create a new rule starting from Filter Rule 2 of Set 2. Access into the web user interface of Vigor router. Open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 2 button. Vigor2912 Series User’s Guide...
Page 89 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. Vigor2912 Series User’s Guide...
Page 90 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 91 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor2912 Series User’s Guide...
Page 92: How To Block Facebook Service Accessed By The Users Via Web Content Filter / Url Content Filter
*How to Register AI/AV/AS/WCF Service (Service Activation Wizard) (http://www.draytek.com/user/SupportFAQDetail.php?ID=1955) *How to Activate Anti-Virus/Anti-Intrusion/Anti-Spam Service (http://www.draytek.com/user/SupportFAQDetail.php?ID=286 ) How to use the Web Content Filter (WCF) (http://www.draytek.com/user/SupportFAQDetail.php?ID=1953) * What the Web Content Filter (WCF) license benefits are, (http://www.draytek.com/user/PdInfoDetail.php?Id=110) Vigor2912 Series User’s Guide...
Page 93 Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Enable this profile in Firewall>>General Setup>>Default Rule. Vigor2912 Series User’s Guide...
Page 94 In the field of Contents, please type facebook. Configure the settings as the following figure. Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. Vigor2912 Series User’s Guide...
Page 95 B. Disallow users to play games on Facebook Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Vigor2912 Series User’s Guide...
Page 96 Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. When you finished the above steps, please open Firewall>>General Setup. Vigor2912 Series User’s Guide...
Page 97 Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. Vigor2912 Series User’s Guide...
Page 98 This page is left blank. Vigor2912 Series User’s Guide...
Page 99: Advanced Configuration
Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor2912 Series User’s Guide...
Page 100 However, the original WAN1 and WAN2 still can be used and Load-Balance can be done in the router. Besides, 3G USB Modem in WAN3 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting Vigor2912 Series User’s Guide...
Page 101: General Setup
The supported 3G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information. Below shows the menu items for WAN. This section will introduce some general settings of Internet and explain the connection modes for WAN1, WAN2 and WAN3 in details.
Page 102 Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. You can change the physical type for WAN2 or choose Physical Type Auto negotiation for determined by the system. Vigor2912 Series User’s Guide...
Page 103 When the data traffic is large, the WAN interface with the function enabled will balance the data transmission automatically among all of the WAN interfaces in connection status. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 104 When any of selected WAN disconnect – Such backup WAN will be activated when any master WAN interface disconnects. When all of selected WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. Vigor2912 Series User’s Guide...
Page 105: Internet Access
It shows the physical connection for WAN1/WAN2 (Ethernet) /WAN3 (USB) according to the real network connection. Access Mode Use the drop down list to choose a proper access mode. Then, click Details Page for accessing the settings page to configure the settings. Vigor2912 Series User’s Guide...
Page 106 Enter your allocated username, password and authentication parameters according to the information provided by your ISP. Username – Type in the username provided by ISP in this field. The maximum length of the user name you can set is 63 Vigor2912 Series User’s Guide...
Page 107 WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. Vigor2912 Series User’s Guide...
Page 108 If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. To use Static or Dynamic IP as the accessing protocol of the internet, please click the Static or Dynamic IP tab. The following web page will be shown. Vigor2912 Series User’s Guide...
Page 109 IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. It means Max Transmit Unit for packet. The default setting Vigor2912 Series User’s Guide...
Page 110 62 characters. Specify an IP address – Click this radio button to specify some data if you want to use Static IP mode. IP Address: Type the IP address. Vigor2912 Series User’s Guide...
Page 111 DSL modem on the WAN interface. Disable – Click this radio button to close the connection through PPTP or L2TP. Server Address - Specify the IP address of the PPTP/L2TP server if you enable PPTP/L2TP client mode. Vigor2912 Series User’s Guide...
Page 112 Click Yes to use this function and type in a fixed IP address in the box. Fixed IP Address -Type a fixed IP address. WAN IP Network Obtain an IP address automatically – Click this button to Vigor2912 Series User’s Guide...
Page 113 SIM PIN code Type PIN code of the SIM card that will be used to access Internet. The maximum length of the PIN code you can set is 15 characters. Vigor2912 Series User’s Guide...
Page 114 IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finishing all the settings here, please click OK to activate them. Vigor2912 Series User’s Guide...
Page 115 IPv6 prefix address (such as: 2001:B010:7300:200::/64) offered by the ISP. In addition, PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix. No need to type any other information for PPP mode. Vigor2912 Series User’s Guide...
Page 116 Below shows an example for successful IPv6 connection based on PPP mode. Note: At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan (hinet), the Netherlands, Australia and UK. Vigor2912 Series User’s Guide...
Page 117 Confirm Password Type the password again to make the confirmation. Tunnel Broker Type the address for the tunnel broker IP, FQDN or an optional port number. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 118 Subnet Prefix Type the subnet prefix address getting from service provider. The maximum length of the prefix you can set is 128 characters. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 119 Available settings are explained as follows: Item Description Identify Association Choose Prefix Delegation or Non-temporary Address as the identify association. IAID Type a number as IAID. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 120 Delete – Click it to remove an existed entry. Current IPv6 Address Display current interface IPv6 address. Table Static IPv6 Gateway IPv6 Gateway Address - Type your IPv6 gateway address Configuration here. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 121 Type the static IPv6 address for LAN routing with the value for prefix length. Tunnel TTL Type the number for the data lifetime in tunnel. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 122 Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode. Vigor2912 Series User’s Guide...
Page 123 It may be any value between 0 and 32. 6rd Prefix Type the 6rd IPv6 address. 6rd Prefix Length Type the IPv6 prefix length for the 6rd IPv6 prefix in number of bits. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 124 Below shows an example for successful IPv6 connection based on 6rd mode. Vigor2912 Series User’s Guide...
Page 125 Check the box to enable the function of DHCP Option. Each DHCP option is composed by an option number with data. For example, Option number:100 Data: abcd When such function is enabled, the specified values for DHCP option will be seen in DHCP reply packets. Vigor2912 Series User’s Guide...
Page 126 Type the content of the data to be processed by the function of DHCP option. Create a new entry and display on the Option List table. Update Edit the existing entry. Delete Remove the existing entry. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 127: Multi-Vlan
Enable - Check this box to enable the port-based bridge function on this channel. P1 ~ P4 – Check the box(es) to build bridge connection on LAN. Click any index (3, 4 and 8) to get the following web page: Vigor2912 Series User’s Guide...
Page 128 Moreover, WAN link for Channel 5, 6 and 7 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, Vigor2912 Series User’s Guide...
Page 129 WAN type to be built upon. In the Multi-VLAN application, only the Ethernet WAN type is available. The user will be able to select the physical WAN interface the channel shall use here. Vigor2912 Series User’s Guide...
Page 130 ISP Access Setup, IP For other settings, refer to Details Page for PPPoE in Address From ISP, WAN WAN1. IP Network Settings, DNS Server IP Address After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 131: Load-Balance Policy
Displays the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Move UP/Move Down Use Up or Down link to move the order of the policy. Vigor2912 Series User’s Guide...
Page 132 Type the destination IP end for the specified WAN interface. If this field is blank, it means that all the destination IPs will be passed through the WAN interface. Dest Port Start Type the destination port start for the destination IP. Vigor2912 Series User’s Guide...
Page 133: Lan
IP address to private IP address to forward the right packets to the right host and vice versa. Besides, Vigor router has a built-in DHCP server that assigns private IP address to each local host. See the following diagram for a briefly understanding. Vigor2912 Series User’s Guide...
Page 134 When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method. You may simply set rules to Vigor2912 Series User’s Guide...
Page 135 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2912 Series User’s Guide...
Page 136: General Setup
(Default: 192.168.2.1/ 24) Subnet Mask - An address code that determines the size of the network. (Default: 255.255.255.0/ 24) DHCP Server - You can configure the router to serve as a DHCP server for the 2nd subnet. Vigor2912 Series User’s Guide...
Page 137 Add – Type the MAC address in the boxes and click this button to add. Delete – Click it to delete the selected MAC address. Edit – Click it to edit the selected MAC address. Cancel – Click it to cancel the job of adding, deleting Vigor2912 Series User’s Guide...
Page 138 Lease Time - Enter the time to determine how long the IP address assigned by DHCP server can be used. DNS Server IP Address DNS stands for Domain Name System. Every Internet host Vigor2912 Series User’s Guide...
Page 139 DHCP server). Advanced DHCP packets can be processed by adding option number and data information when such function is enabled. Enable/Disable – Enable/Disable the function of DHCP Option. Each DHCP option is composed by an option Vigor2912 Series User’s Guide...
Page 140 IPv4) and IPv6 Setup. Click the tab for each type and refer to the following explanations for detailed information. Below shows the settings page for IPv6. It provides 2 daemons for LAN side IPv6 address configuration. One is RADVD(stateless) and the other is DHCPv6 Server (Stateful). Available settings are explained as follows: Vigor2912 Series User’s Guide...
Page 141 Add – Click it to add a new entry. Delete – Click it to remove an existed entry. Display current used IPv6 addresses. Current IPv6 Address Table When you finish the configuration, please click OK to save and exit this page. Vigor2912 Series User’s Guide...
Page 142: Static Route
The number (1 to 10) under Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Vigor2912 Series User’s Guide...
Page 143 Type the subnet mask for such static route. Network Interface Use the drop down list to specify an interface for such static route. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 144 Displays the destination address of the static route. Status Displays the status of the static route. Click any underline of index number to get the following page. Available settings are explained as follows: Item Description Enable Check it to enable this profile. Vigor2912 Series User’s Guide...
Page 145 Main Router 192.168.1.1 as the default gateway for the Router A 192.168.1.2. Before setting Static Route, user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router. Vigor2912 Series User’s Guide...
Page 146 192.168.10.0 will be forwarded to 192.168.1.2. Click OK. Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Click OK. Vigor2912 Series User’s Guide...
Page 147 Note: Settings in this page only applied to LAN port but not WAN port. Available settings are explained as follows: Item Description Enable Click it to enable VLAN configuration. P1 – P4 – Check the LAN port(s) to be grouped under the selected VLAN. Vigor2912 Series User’s Guide...
Page 148: Vlan
To add or remove a VLAN, please refer to the following example. If, VLAN 0 is consisted of hosts linked to P1 and P2 and VLAN 1 is consisted of hosts linked to P3 and P4. VLAN0 and VLAN1 are configured with different subnets. Vigor2912 Series User’s Guide...
Page 149 After checking the box to enable VLAN function, you will check the table according to the needs as shown below. Click OK to save the settings. To remove VLAN, uncheck the needed box and click OK to save the results. Vigor2912 Series User’s Guide...
Page 150: Bind Ip To Mac
Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below Select All Click this link to select all the items in the ARP table. Sort Reorder the table based on the IP address. Vigor2912 Series User’s Guide...
Page 151 Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 152: Lan Port Mirror
Mirror Port Select a port to view traffic sent from mirrored ports. Mirrored port Select which ports are necessary to be mirrored. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 153: Web Portal Setup
Display the applied interfaces of the profile. Open a preview window according to the configured settings. Preview To configure the profile, click any index number link to open the following page. Available settings are explained as follows: Vigor2912 Series User’s Guide...
Page 154: Nat
192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor2912 Series User’s Guide...
Page 155: Port Redirection
The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor2912 Series User’s Guide...
Page 156 Display the IP address of the internal host providing the service. Status Display if the profile is enabled (v) or not (x). Press any number under Index to access into next page for configuring port redirection. Available settings are explained as follows: Vigor2912 Series User’s Guide...
Page 157 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2912 Series User’s Guide...
Page 158 Vigor2912 Series User’s Guide...
Page 159: Dmz Host
Click DMZ Host to open the following page. You can set different DMZ host for each WAN interface. Click the WAN tab to switch into the configuration page for that WAN. Vigor2912 Series User’s Guide...
Page 160 IP address will be shown on the following screen. Click OK to save the setting. DMZ Host for WAN2 and WAN3 is slightly different with WAN1. Active True IP selection is available for WAN1 only. See the following figure. Vigor2912 Series User’s Guide...
Page 161 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 162: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2912 Series User’s Guide...
Page 163 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2912 Series User’s Guide...
Page 164: Address Mapping
In the above example, you can configure NAT Host1 to always map to 202.211.100.10 (WAN1); Host2 to always map to 202.211.100.11 (WAN1 alias); Host3 always map to 203.98.200.10 (WAN2) and Group 1 to always map to 202.211.100.10 (WAN1). Vigor2912 Series User’s Guide...
Page 165 Display the subnet mask selected for this address mapping. Status Display the status for the entry, enable or disable. Click the index number link to open the configuration page. Available settings are explained as follows: Item Description Enable Check to enable this entry. Vigor2912 Series User’s Guide...
Page 166: Port Triggering
The duration that these ports are opened depends on the type of protocol used. The "default" durations are shown below and these duration values can be modified via telnet commands. TCP: 86400 sec. UDP: 180 sec. IGMP: 10 sec. TCP WWW: 60 sec. TCP SYN: 60 sec. Vigor2912 Series User’s Guide...
Page 167 Display the protocol for the incoming data of such triggering profile. Incoming Port Display the port for the incoming data of such triggering profile. Status Display if the rule is active or de-active. Click the index number link to open the configuration page. Vigor2912 Series User’s Guide...
Page 168 (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Incoming Port Type the port or port range for the incoming packets. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 169: Firewall
It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2912 Series User’s Guide...
Page 170 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor2912 Series User’s Guide...
Page 171: General Setup
“Accept large incoming fragmented UDP or ICMP Packets”. By checking this box, you can play these kinds of on-line games. If security concern is in higher priority, you cannot enable “Accept large incoming fragmented UDP or ICMP Packets”. Vigor2912 Series User’s Guide...
Page 172 (pass or block) for these packets, then the router’s firewall will block the packets directly. Such page allows you to choose filtering profiles including QoS, Policy Route, WCF, APP Enforcement, URL Content Filter for data transmission via Vigor router. Vigor2912 Series User’s Guide...
Page 173 For detailed information, refer to the section of APP Enforcement profile setup. For troubleshooting needs, you can specify to record information for IM/P2P by checking the Log box. It will be sent to Vigor2912 Series User’s Guide...
Page 174 URL will be processed. Please use the drop-down list to choose a codepage. If you do not have any idea of choosing suitable codepage, please open Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Vigor2912 Series User’s Guide...
Page 175 However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 176: Filter Setup
Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Vigor2912 Series User’s Guide...
Page 177 ON schedule profiles are applied. Set the direction of packet flow. It is for Data Filter only. Direction For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Vigor2912 Series User’s Guide...
Page 178 From the IP Group drop down list, choose the one that you want to apply. Or use the IP Object drop down list to choose the object that you want. Service Type Click Edit to access into the following dialog to choose a suitable service type. Vigor2912 Series User’s Guide...
Page 179 Filter Specifies the action to be taken when packets match the rule. Block Immediately - Packets matching the rule will be dropped immediately. Pass Immediately - Packets matching the rule will be Vigor2912 Series User’s Guide...
Page 180 All the hosts in LAN must follow the standard configured in the APP Enforcement profile selected here. For detailed information, refer to the section of APP Enforcement profile setup. For Vigor2912 Series User’s Guide...
Page 181 Choose correct codepage can help the system obtaining correct ASCII after decoding data from URL and enhance the correctness of URL Content Filter. The default value for this setting is ANSI 1252 Latin Vigor2912 Series User’s Guide...
Page 182 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
Page 183 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2912 Series User’s Guide...
Page 184: Dos Defense
10 seconds. Enable UDP flood defense Check the box to activate the UDP flood defense function. Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router Vigor2912 Series User’s Guide...
Page 185 Check the box to activate the Block SYN fragment function. The Vigor router will drop any packets having SYN flag and more fragment bit set. Block Fraggle Attack Check the box to activate the Block fraggle Attack function. Vigor2912 Series User’s Guide...
Page 186 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2912 Series User’s Guide...
Page 187 After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 188: User Management
Note: If Transparency Mode is selected in Firewall>>General Setup, User Management cannot be used any more. Please uncheck Transparency Mode first if you want to utilize user management to handle users in LAN, WAN or WLAN. Vigor2912 Series User’s Guide...
Page 189: General Setup
Landing Page Type the information to be displayed on the first web page when the LAN user accessing into Internet via such router. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 190: User Profile
To set the user profile, please click any index number link to open the following page. Notice that profile 1 (admin) and profile 2 (Dial-In User) are factory default settings. Profile 2 is reserved for future use. Vigor2912 Series User’s Guide...
Page 191 Firewall can be adopted for such user profile. Create New Policy – If you choose such item, the following page will be popped up for you to define another filter rule as a new policy. Vigor2912 Series User’s Guide...
Page 192 Alert Tool – If it is selected, the user can open Alert Tool and type the user name and password for authentication. A window with remaining time of connection for such user will be Vigor2912 Series User’s Guide...
Page 193 Data Quota means the total amount for data transmission allowed for the user. The unit is MB. – Click this box to set and increase the data quota for such profile. – Click this box to decrease the data quota for such profile. Vigor2912 Series User’s Guide...
Page 194 Default Time Quota – Type the value for the time manually. Default Data Quota – Type the value for the data manually. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 195: User Group
All the available user objects that you have created will be shown in this box. Notice that user object, Admin and Dial-In User are factory settings. User defined profiles will be numbered with 3, 4, 5 and so Vigor2912 Series User’s Guide...
Page 196: User Online Status
Display the login time that such user connects to the router last time. Expired Time Display the expired time of the network connection for the user. Idle Time Display the idle timeout setting for such profile. Vigor2912 Series User’s Guide...
Page 197: Objects Settings
IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Vigor2912 Series User’s Guide...
Page 198 Select Range Address if this object contains several IPs within a range. Select Subnet Address if this object contains one subnet for IP address. Select Any Address if this object contains any IP address. Select Mac Address if this object contains Mac address. Vigor2912 Series User’s Guide...
Page 199 If it is checked, all the IP addresses except the ones listed Invert Selection above will be applied later while it is chosen. After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. Vigor2912 Series User’s Guide...
Page 200: Ip Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2912 Series User’s Guide...
Page 201: Ipv6 Object
You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2912 Series User’s Guide...
Page 202 Prefix Len Type the number (e.g., 64) for the prefix length of IPv6 address. Invert Selection If it is checked, all the IPv6 addresses except the ones listed above will be applied later while it is chosen. Vigor2912 Series User’s Guide...
Page 203: Ipv6 Group
Display the name of the group profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2912 Series User’s Guide...
Page 204: Service Type Object
Display the profile number that you can configure. Display the name of the object profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. Vigor2912 Series User’s Guide...
Page 205 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 206: Service Type Group
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Vigor2912 Series User’s Guide...
Page 207: Keyword Object
Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2912 Series User’s Guide...
Page 208 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 209: Keyword Group
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Vigor2912 Series User’s Guide...
Page 210: File Extension Object
Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2912 Series User’s Guide...
Page 211 Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2912 Series User’s Guide...
Page 212: Sms/Mail Service Object
Display the service provider which offers SMS service. To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. Vigor2912 Series User’s Guide...
Page 213 Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 214 Display the name of this profile. It cannot be modified. Service Provider Type the website of the service provider. Type the URL string in the box under the filed of Service Provider. You have to contact your SMS provider to obtain the exact URL string. Vigor2912 Series User’s Guide...
Page 215 Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Vigor2912 Series User’s Guide...
Page 216 63 characters. SMTP Port Type the port number for SMTP server. Sender Address Type the e-mail address of the sender. Use SSL Check this box to enable such function. Vigor2912 Series User’s Guide...
Page 217: Notification Object
Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Display the name for such mail server profile. Profile Settings Display the category selected for such profile. Vigor2912 Series User’s Guide...
Page 218 Display the types that will be monitored. Category Status Display the status for the category. You can check the box you want to be monitored. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 219: Csm Profile
Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor2912 Series User’s Guide...
Page 220: App Enforcement Profile
Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and OTHERS displayed on this page. Each tab will bring out different items that you can choose to disallow people using. Vigor2912 Series User’s Guide...
Page 221 Pass – Pass all the packets with the settings configured in this page. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Below shows the items which are categorized under IM. Vigor2912 Series User’s Guide...
Page 222: Url Content Filter Profile
TCP/IP headers only. On the other hand, Vigor router can prevent user from accidentally downloading malicious codes from web pages. It’s very common that malicious codes conceal in the executable objects, Vigor2912 Series User’s Guide...
Page 223 Administration Message. You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Vigor2912 Series User’s Guide...
Page 224 Control and Web Feature below, such function can determine the priority for the actions executed. For this one, the router will process the packages with the conditions set below for web feature first, then URL second. Vigor2912 Series User’s Guide...
Page 225 URL string. Multiple keywords within a frame are separated by space, comma, or semicolon. In addition, the maximal length of each frame is 32-character long. After specifying keywords, the Vigor Vigor2912 Series User’s Guide...
Page 226 Upload – Check the box to block the file upload by way of web page. File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Objects previously for passing or blocking the file downloading. Vigor2912 Series User’s Guide...
Page 227: Web Content Filter Profile
Note: If you have used Service Activation Wizard to activate WCF service, you can skip this section. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
Page 228 Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Test a site to verify Click this link to do the verification.
Page 229 If you have and activate another web content filter license, the items will be changed simultaneously. All of the configuration made for web content filter will be deleted automatically. Therefore, please backup your data before you change the web content filter license. Vigor2912 Series User’s Guide...
Page 230 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 231: Bandwidth Management
To activate the function of limit session, simply click Enable and set the default session limit. Available settings are explained as follows: Item Description Session Limit Enable - Click this button to activate the function of limit session. Disable - Click this button to close the function of limit session. Vigor2912 Series User’s Guide...
Page 232 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 233: Bandwidth Limit
Disable - Click this button to close the function of limit bandwidth. Default TX limit - Define the default speed of the upstream for each computer in LAN. Default RX limit - Define the default speed of the Vigor2912 Series User’s Guide...
Page 234 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2912 Series User’s Guide...
Page 235: Quality Of Service
The core routers in the backbone will do the same checking before executing treatments in order to ensure service-level consistency throughout the whole QoS-enabled network. Vigor2912 Series User’s Guide...
Page 236 Index – Display the class number that you can edit. Class Rule Name – Display the name of the class. Rule – Allow to configure detailed settings for the selected Class. Service Type – Allow to configure detailed settings for the Vigor2912 Series User’s Guide...
Page 237 There are four queues allowed for QoS control. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Vigor2912 Series User’s Guide...
Page 238 The difference in bandwidth between download and upload Prioritize are great in ADSL2+ environment. For the download speed might be impacted by the uploading TCP ACK, you can check this box to push ACK of upload faster to speed the Vigor2912 Series User’s Guide...
Page 239 Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor2912 Series User’s Guide...
Page 240 After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. For adding a new rule, click Add to open the following page. Vigor2912 Series User’s Guide...
Page 241 Service Type drop down list. Those types are predefined in factory. Simply choose the one that you want for using by current QoS. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 242 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. Vigor2912 Series User’s Guide...
Page 243 For example, in the following illustration, the VoIP packets in LAN go into Vigor router without any header. However, when they go forward to the Server on ISP through Vigor router, all of the packets are tagged with AF (configured in Bandwidth >>QoS>>Class) automatically. Vigor2912 Series User’s Guide...
Page 244: Applications
Enable the Function and Add a Dynamic DNS Account Assume you have a registered domain name from the DDNS provider, say hostname.dyndns.org, and an account with username: test and password: test. In the DDNS setup menu, check Enable Dynamic DNS Setup. Vigor2912 Series User’s Guide...
Page 245 Account, and choose correct Service Provider: dyndns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. Vigor2912 Series User’s Guide...
Page 246 Type in the password that you set for applying domain. Wildcard and The Wildcard and Backup MX (Mail Exchange) features Backup MX are not supported for all Dynamic DNS providers. You could get more detailed information from their websites. Vigor2912 Series User’s Guide...
Page 247 Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. Vigor2912 Series User’s Guide...
Page 248: Schedule
You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule: Click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. Vigor2912 Series User’s Guide...
Page 249 Click OK button to save the settings. Example Suppose you want to control the PPPoE Internet access connection to be always on (Force On) from 9:00 to 18:00 for whole week. Other time the Internet access connection should be disconnected (Force Down). Vigor2912 Series User’s Guide...
Page 250 Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Vigor2912 Series User’s Guide...
Page 251: Radius
For LDAP is defined to perform , inquire and modify the information within the directory, and acquire the data in the directory securely, therefore users can apply LDAP to search or list the directory object, inquire or manage the active directory. Vigor2912 Series User’s Guide...
Page 252 Type a port number as the destination port for LDAP server. Check the box to use the port number specified for SSL. Use SSL Regular DN Type this setting if Regular Mode is selected as Bind Type. Vigor2912 Series User’s Guide...
Page 253 You can configure eight AD/LDAP profiles. These profiles would be used with User Management for different purposes in management. Click any index number link to open the following page. Available settings are explained as follows: Item Description Name Type a name for such profile. Vigor2912 Series User’s Guide...
Page 254: Upnp
After setting Enable UPNP Service setting, an icon of IP Broadband Connection on Router on Windows XP/Network Connections will appear. The connection status and control status will be able to be activated. The NAT Traversal of UPnP enables the multimedia features of Vigor2912 Series User’s Guide...
Page 255 Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches. Non-privileged users can control some router functions, including removing and adding port mappings. Vigor2912 Series User’s Guide...
Page 256: Igmp
This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P4 It indicates the LAN port used for the multicast group. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 257: Wake On Lan
MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2912 Series User’s Guide...
Page 258: Sms / Mail Alert Service
Available settings are explained as follows: Item Description Index Check the box to enable such profile. SMS Provider Use the drop down list to choose SMS service provider. You can click SMS Provider link to define the SMS server. Vigor2912 Series User’s Guide...
Page 259 Use the drop down list to choose a message profile. The recipient will get the content stated in the message profile. You can click the Notify Profile link to define the content of the mail message. Vigor2912 Series User’s Guide...
Page 260: Vpn And Remote Access
Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connection (from server to client) step by step. 1. Open VPN and Remote Access>>VPN Client Wizard. The following page will appear. Vigor2912 Series User’s Guide...
Page 261 Route Mode. Please choose a There are 32 VPN profiles for users to set. LAN-to-LAN Profile 2. When you finish the mode and profile selection, please click Next to open the following page. Vigor2912 Series User’s Guide...
Page 262 Note: The following descriptions for VPN Type are based on the Route Mode specified in LAN-to-LAN Client Mode Selection. When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: Vigor2912 Series User’s Guide...
Page 263 When you choose IPsec, you will see the following graphic: When you choose L2TP, you will see the following graphic: Vigor2912 Series User’s Guide...
Page 264 WAN1/WAN2/WAN3 as the first channel for VPN connection. If WAN1/WAN2/WAN3 fails, the router will use another WAN interface instead. WAN1 Only /WAN2 Only/WAN 3 Only- While connecting, the router will use WAN1/WAN2/WAN3 as Vigor2912 Series User’s Guide...
Page 265 3. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Vigor2912 Series User’s Guide...
Page 266 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. Click this radio button to access VPN and Remote View more detailed configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2912 Series User’s Guide...
Page 267: Vpn Server Wizard
VPN connection. This item is available when you choose Site to Site VPN Please choose a LAN-to-LAN Profile (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Vigor2912 Series User’s Guide...
Page 268 2. After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. Here we take the examples of choosing Site-to-Site VPN as the VPN Server Mode. Vigor2912 Series User’s Guide...
Page 269 When you check PPTP, you will see the following graphic: When you check PPTP & IPsec & L2TP (three types) or PPTP&IPsec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2912 Series User’s Guide...
Page 270 Type the WAN IP address or VPN client IP address for the Peer IP/VPN Client remote client. Peer ID Type the ID name for the remote client. The length of the name is limited to 47 characters. Vigor2912 Series User’s Guide...
Page 271 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2912 Series User’s Guide...
Page 272: Remote Access Control
Optional MPPE - This option represents that the MPPE encryption method will be optionally employed in the (MPPE) router for the remote dial-in user. If the remote dial-in user does not support the MPPE encryption algorithm, the router Vigor2912 Series User’s Guide...
Page 273 Simply check the one you want to enable the PPP authentication by LDAP server profiles. However, if there is no profile listed, simply click the link of PPTP LDAP Profile to create/add some new LDAP profiles you want. Vigor2912 Series User’s Guide...
Page 274: Ipsec General Setup
This usually applies to those are remote dial-in user or node Method (LAN-to-LAN) which uses dynamic IP address and IPsec-related VPN connections such as L2TP over IPsec and IPsec tunnel. Pre-Shared Key- Specify a key for IKE authentication. Vigor2912 Series User’s Guide...
Page 275 High (ESP) - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 276: Ipsec Peer Identity
Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2912 Series User’s Guide...
Page 277 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 278: Remote Dial-In User
Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. Vigor2912 Series User’s Guide...
Page 279 IPsec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPsec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. Must -Specify the IPsec policy to be definitely Vigor2912 Series User’s Guide...
Page 280 Identity. This group of fields is a must for IPsec Tunnels and L2TP IPsec Security Method with IPsec Policy when you specify the remote node. Check the Medium, DES, 3DES or AES box as the security Vigor2912 Series User’s Guide...
Page 281: Lan To Lan
The router supports up to 32 VPN tunnels simultaneously. The following figure shows the summary table. The following figure shows the summary table according to the item (All/Trunk) selected for View. The following shows profiles joined into VPN Backup mechanism. Vigor2912 Series User’s Guide...
Page 282 LAN-to-LAN profile includes 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. For the web page is too long, we divide the page into several sections for explanation. Vigor2912 Series User’s Guide...
Page 283 LAN-to-LAN connection. Enable this profile - Check here to activate this profile. VPN Dial-Out Through - Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. Vigor2912 Series User’s Guide...
Page 284 However, if the remote peer disconnect without notice, Vigor router will by no where to know this situation. To resolve this dilemma, by Vigor2912 Series User’s Guide...
Page 285 Peer ID - Select one of the predefined Profiles set in VPN and Remote Access >>IPsec Peer Identity. Local ID – Specify a local ID (Alternative Subject Name First or Subject Name First) to be used for Dial-in setting in the LAN-to-LAN Profile setup. This Vigor2912 Series User’s Guide...
Page 286 VPN peers, and get its feedback to find a match. Two combinations are available for Aggressive mode and nine for Main mode. We suggest you select the combination that covers the most schemes. IKE phase 2 proposal-To propose the local available Vigor2912 Series User’s Guide...
Page 287 Index(1-15) - Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Vigor2912 Series User’s Guide...
Page 288 None - Do not apply the IPsec policy. Accordingly, the VPN connection employed the L2TP without IPsec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPsec policy first, if it is applicable during negotiation. Otherwise, the Vigor2912 Series User’s Guide...
Page 289 IPsec Security Method - This group of fields is a must for IPsec Tunnels and L2TP with IPsec Policy when you specify the remote node. Medium- Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active. Vigor2912 Series User’s Guide...
Page 290 More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. Vigor2912 Series User’s Guide...
Page 291 IP, please choose NAT, otherwise choose Route. Change default route to this VPN tunnel - Check this box to change the default route with this VPN tunnel. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 292: Vpn Trunk Management
VPN tunnel is off-line. Before setting VPN TRUNK backup profile, please configure at least two sets of LAN-to-LAN profiles (with fully configured dial-out settings) first, otherwise you will not have selections for grouping Member1 and Member2. Vigor2912 Series User’s Guide...
Page 293 IPsec, PPTP, L2TP, L2TP over IPsec (NICE), L2TP over IPsec(MUST) and so on. Member2 - Display the dial-out profile selected from the Member2 drop down list below. Advanced – This button is available only when LAN to LAN profile (or more) is created. Vigor2912 Series User’s Guide...
Page 294 TRUNK profile will be released and that profiles in LAN-to-LAN will be displayed in black. – – VPN TRUNK – VPN Backup mechanism will be activated automatically after the initial connection of single VPN Tunnel off-line. The content in Member1/2 within VPN TRUNK – Vigor2912 Series User’s Guide...
Page 295 Member2. For such reason, LAN-to-LAN profiles of 1 and 2 will be expressed in red to indicate that they are fixed. If you delete the VPN TRUNK – VPN Backup mechanism profile, the selected LAN-to-LAN profiles will be released and expressed in black. Vigor2912 Series User’s Guide...
Page 296 Peer GRE IP. See the following graphic for an example. Later, on peer side (as VPN Client): please type 192.168.50.100 in the field of My GRE IP and type IP address of the server (192.168.50.200) in the field of Peer GRE IP. Vigor2912 Series User’s Guide...
Page 297: Connection Management
Drop button. You may also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Available settings are explained as follows: Item Description General Mode - This filed displays the profile configured Dial-out Tool in LAN-to-LAN (with Index number and VPN Server IP Vigor2912 Series User’s Guide...
Page 298: Certificate Management
Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor2912 Series User’s Guide...
Page 299: Local Certificate
Click this button to open Generate Certificate Signing Request window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE again. Vigor2912 Series User’s Guide...
Page 300 Vigor router allows you to generate a certificate request and submit it the CA server, then import it as “Local Certificate”. If you have already gotten a certificate from a third party, you may import it directly. The supported types are PKCS12 Certificate and Certificate with a private key. Vigor2912 Series User’s Guide...
Page 301 CA server and enter the page of certificate request, copy the information into it and submit a request. A new certificate will be issued to you by the CA server. You can save it. Click this button to remove the selected certificate. Vigor2912 Series User’s Guide...
Page 302: Trusted Ca Certificate
For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2912 Series User’s Guide...
Page 303: Certificate Backup
Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Retype password. Also, you can use Restore to retrieve these two settings to the router whenever you want. Vigor2912 Series User’s Guide...
Page 304: Wireless Lan
SSID as identification, located channel etc. Vigor router supports four SSID settings for wireless connections. Each SSID can be defined with different name and download/upload rate for selecting by stations connected to the router wirelessly. Vigor2912 Series User’s Guide...
Page 305 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor2912 Series User’s Guide...
Page 306: General Setup
Enable Wireless LAN Check the box to enable wireless function. Mode At present, the router can connect to 11g Only, 11n Only(2.4 GHz), Mixed (11b+11g), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mixed (11b+11g+11n) mode. Vigor2912 Series User’s Guide...
Page 307 You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 308: Security
By clicking the Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Available settings are explained as follows: Item Description Mode There are several modes provided for you to choose. Vigor2912 Series User’s Guide...
Page 309 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, such as 0x4142434445.) Vigor2912 Series User’s Guide...
Page 310: Access Control
SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN. For example, they can be grouped under SSID 1 and SSID 2 at the same time Vigor2912 Series User’s Guide...
Page 311: Wps
He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. There are two methods to do network connection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code. Vigor2912 Series User’s Guide...
Page 312 For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security, you will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again. Vigor2912 Series User’s Guide...
Page 313 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2912 Series User’s Guide...
Page 314: Wds
To meet the above requirement, two WDS modes are implemented in Vigor router. One is Bridge, the other is Repeater. Below shows the function of WDS-bridge interface: The application for the WDS-Repeater mode is depicted as below: Vigor2912 Series User’s Guide...
Page 315 Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Available settings are explained as follows: Vigor2912 Series User’s Guide...
Page 316 Disable to cancel this function. Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 317: Advanced Setting
Enable to use Long Preamble if needed to communicate with this kind of devices. Packet-OVERDRIVE This feature can enhance the performance in data transmission about 40%* more (by checking Tx Burst). It is active only when both sides of Access Point and Station Vigor2912 Series User’s Guide...
Page 318 Vigor N61 wireless utility window, choose Enable for TxBURST on the tab of Option). Note: * means the real transmission rate depends on the environment of the network. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 319: Wmm Configuration
CWMin or equals to CWMin value. Both values will influence the time delay for WMM accessing categories. The difference between AC_VI and AC_VO categories must be smaller; however, the difference between AC_BE and AC_BK categories must be greater. Vigor2912 Series User’s Guide...
Page 320 “Check” the box means the AP router will not answer any response request for the transmitting packets. It will have better performance with lower reliability. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 321: Ap Discovery
AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2912 Series User’s Guide...
Page 322: Station List
WLAN station and click Add to Access Control below. Available settings are explained as follows: Item Description Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2912 Series User’s Guide...
Page 323: Usb Application
Item Description General Settings Simultaneous FTP Connections - This field is used to specify the quantity of the FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage disk at one time. Vigor2912 Series User’s Guide...
Page 324: Usb User Management
USB storage disk must type the same username and password configured in this page. Before adding or modifying settings in this page, please insert a USB storage disk first. Otherwise, an error message will appear to warn you. Click index number to access into configuration page. Vigor2912 Series User’s Guide...
Page 325 USB storage disk. Note: When write protect status for the USB storage disk is ON, you cannot type any new folder name in this field. Only “/” can be used in such case. Vigor2912 Series User’s Guide...
Page 326 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB storage disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor2912 Series User’s Guide...
Page 327: File Explorer
Click this icon to add a new folder. Create Current Path Display current folder. Upload Click this button to upload the selected file to the USB storage disk. The uploaded file in the USB diskette can be shared for other user through FTP. Vigor2912 Series User’s Guide...
Page 328: Usb Device Status
Username It displays the username that user uses to login to the FTP server. When you insert USB storage disk into the Vigor router, the system will start to find out such device within several seconds. Vigor2912 Series User’s Guide...
Page 329: Modem Support List
Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router. Vigor2912 Series User’s Guide...
Page 330: System Maintenance
Below shows the menu items for System Maintenance. The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Vigor2912 Series User’s Guide...
Page 331 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. Vigor2912 Series User’s Guide...
Page 332: 322
Port – Sometimes, port conflict might be occurred. To solve such problem, you might change port number for CPE. Periodic Inform Settings The default setting is Enable. Please set interval time or schedule time for the router to send notification to CPE. Or Vigor2912 Series User’s Guide...
Page 333: Administrator Password
23 characters. Confirm Password Type in the new password again. When you click OK, the login window will appear. Please use the new password to access into the web user interface again. Vigor2912 Series User’s Guide...
Page 334: User Password
Below shows an example for accessing into User Operation with User Password. 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. Vigor2912 Series User’s Guide...
Page 335 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2912 Series User’s Guide...
Page 336 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Note: Setting in User Mode can be configured as same as in Admin Mode. Vigor2912 Series User’s Guide...
Page 337: Login Page Title
Enable Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Welcome Message and Type words or sentences here. It will be displayed for Bulletin bulletin message.
Page 338 Below shows an example of login customization with the information typed in Login Description and Bulletin. Vigor2912 Series User’s Guide...
Page 339: Configuration Backup
Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. Vigor2912 Series User’s Guide...
Page 340 Click Browse button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2912 Series User’s Guide...
Page 341: Syslog/Mail Alert
Mail Syslog – Check the box to recode the mail event on Syslog. Enable syslog message - Check the box listed on this web page to send the corresponding message of firewall, VPN, User Access, Call, WAN, Router/DSL information to Syslog. Vigor2912 Series User’s Guide...
Page 342 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2912 Series User’s Guide...
Page 343 Vigor2912 Series User’s Guide...
Page 344: Time And Date
Enable Daylight Saving Check the box to enable the daylight saving. Such feature is available for certain area. Automatically Update Select a time interval for updating from the NTP server. Interval Click OK to save these settings. Vigor2912 Series User’s Guide...
Page 345: Snmp
Set trap community by typing a proper name. The default Trap Community setting is public. The maximum length of the text is limited to 23 characters. Notification Host IP Set the IPv4 address of the host that will receive the trap community. (IPv4) Vigor2912 Series User’s Guide...
Page 346 Privacy Algorithm Choose one of the methods listed below as the privacy algorithm. Type a password for privacy. The maximum length of the Privacy Password text is limited to 23 characters. Click OK to save these settings. Vigor2912 Series User’s Guide...
Page 347: Management
You could specify that the system administrator can only login from a specific host or network defined in the list. A maximum of three IPs/subnet masks is allowed. List IP - Indicate an IP address allowed to login to the router. Vigor2912 Series User’s Guide...
Page 348 A maximum of three IPs/subnet masks is allowed. IPv6 Address /Prefix Length- Indicate the IP address(es) allowed to login to the router. After finished the above settings, click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 349: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2912 Series User’s Guide...
Page 350: Firmware Upgrade
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 351: Activation
The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. Vigor2912 Series User’s Guide...
Page 352 Below shows the successful activation of Web Content Filter: Vigor2912 Series User’s Guide...
Page 353: Diagnostics
(e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2912 Series User’s Guide...
Page 354: Routing Table
Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2912 Series User’s Guide...
Page 355: Arp Cache Table
IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2912 Series User’s Guide...
Page 356: Dhcp Table
DHCP assigned IP address for it. Leased Time It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. Vigor2912 Series User’s Guide...
Page 357: Nat Sessions Table
It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. Vigor2912 Series User’s Guide...
Page 358: Ping Diagnosis
Use the drop down list to choose the destination that you want to ping. IP Address Type the IP address of the Host/IP that you want to ping. Ping IPv6 Address Type the IPv6 address that you want to ping. Vigor2912 Series User’s Guide...
Page 359: Data Flow Monitor
Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Available settings are explained as follows: Item Description Vigor2912 Series User’s Guide...
Page 360 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2912 Series User’s Guide...
Page 361: Traffic Graph
WAN1/WAN2/WAN3 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2912 Series User’s Guide...
Page 362: Trace Route
Available settings are explained as follows: Item Description IPv4 / IPv6 Click one of them to display corresponding information for Trace through Use the drop down list to choose the interface that you want to ping through. Vigor2912 Series User’s Guide...
Page 363: Web Firewall Syslog
Click this link to refresh this page manually. Clear Click this link to clear information on this page. Display Mode There are two modes for you to choose. Stop record when fulls – when the capacity of syslog is Vigor2912 Series User’s Guide...
Page 364: Ipv6 Tspc Status
If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Available settings are explained as follows: Item Description Refresh Click this link to refresh this page manually. Vigor2912 Series User’s Guide...
Page 365: External Devices
You can change the device name if required or remove the information for off-line device whenever you want. When you finished the configuration, click OK to save it. Note: Only DrayTek products can be detected by this function. Vigor2912 Series User’s Guide...
Page 366 This page is left blank. Vigor2912 Series User’s Guide...
Page 367: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2912 Series User’s Guide...
Page 368 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2912 Series User’s Guide...
Page 369 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2912 Series User’s Guide...
Page 370: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2912 Series User’s Guide...
Page 371: Checking If The Isp Settings Are Ok Or Not
PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek.
Page 372: Backing To Factory Default Setting If Necessary
Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click Reboot Now. After few seconds, the router will return all the settings to the factory settings. Vigor2912 Series User’s Guide...
Page 373: Contacting Your Dealer
After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor2912 Series User’s Guide...

Draytek Vigor2912 Series User Manual

Quick Links

Related Manuals for Draytek Vigor2912 Series

Summary of Contents for Draytek Vigor2912 Series

Table of Contents