Page 2 Vigor2960 Dual-WAN Security Firewall User’s Guide Version: 1.11 Firmware Version: V1.0.7.1 (For future update, please visit DrayTek web site for further information) Date: February 13, 2014 Vigor2960 Series User’s Guide...
Page 3 Web registration is preferred. You can register your Vigor router via Owner http://www.DrayTek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 4 No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu County, Taiwan Product: Vigor2960 DrayTek Corp. declares that Vigor2960 of routers are in compliance with the following essential requirements and other relevant provisions of EC, Directive 2004/108/EC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class A and EN55024/Class A.
Page 5 3.4 CVM Application - How to manage the CPE (router) through Vigor2960? ........ 35 3.5 CVM Application - How to build the VPN between remote devices and Vigor2960? ....40 3.6 CVM Application - How to upgrade CPE firmware through Vigor2960? ........43 Chapter 4: Advanced Configuration................49...
Page 6 4.9 Certificate Management ......................278 4.9.1 Local Certificate ........................279 4.9.2 Trusted CA Certificate ......................283 4.10 SSL VPN ..........................284 4.10.1 SSL Web Proxy .........................284 4.10.2 SSL Application .........................286 4.10.3 Online User Status......................291 4.11 Central VPN Management ..................... 292 Vigor2960 Series User’s Guide...
Page 7 5.3 Pinging the Router from Your Computer .................. 354 5.4 Checking If the ISP Settings are OK or Not ................355 5.5 Backing to Factory Default Setting If Necessary..............356 5.6 Contacting Your Dealer ......................357 Vigor2960 Series User’s Guide...
Page 9: Led Indicators And Connectors
The Vigor2960 Series integrates a rich suite of functions, including NAT, firewall, VPN, load balance, and bandwidth management capability. These products are very suitable for providing multi-integrated solutions to SME markets. A Virtual Private Network (VPN) is an extension of a private network that encompasses links across shared or public networks like an Intranet.
Page 10 The port is connected with 10/100Mbps. Left LED The port is connected. GigaLAN (Green) The port is disconnected. 1/2/3/4 Blinking The data is transmitting. Right LED The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps. Vigor2960 Series User’s Guide...
Page 11 Then the router will restart with the factory default configuration. GigaWAN 1/2 Connecters for remote networked devices. GigaLAN 1/2/3/4 Connecters for local networked devices. USB1/2 Connecter for Mobile HDD, 3G Modem or printer. Connecter for a power cord. ON/OFF - Power switch. Vigor2960 Series User’s Guide...
Page 12: Hardware Installation
Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router with Ethernet cable (RJ-45). Connect the power cord to Vigor2960’s power port on the rear panel, and the other side into a wall outlet. Power on the device by pressing down the power switch on the rear panel. The PWR LED should be ON.
Page 13 The Vigor2960 Series can be mounted on the wall by using standard brackets shown below. Choose a flat surface (on the wall) which is suitable for placing the router. Make the screw holes on the short side of the bracket aim at the screw holes on the router. Next, fasten both the bracket and the router with two screws;...
Page 14 This page is left blank. Vigor2960 Series User’s Guide...
Page 15 Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type default values on the window for the first time accessing. The default value for user name is admin and the password is admin. Next, click Login. Vigor2960 Series User’s Guide...
Page 16 New Password and retype it on the field of Confirm Password. Then click Apply to continue. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. Vigor2960 Series User’s Guide...
Page 17: Quick Start Wizard
Available parameters are listed as follows: Item Description Use the drop down list to choose one of the WAN profiles Profile for modifying. IPv4 Protocol Use the drop down list to choose the type for the IPv4 protocol for such profile. Vigor2960 Series User’s Guide...
Page 18 Please type in values for Static IP address, Static Mask, Static Gateway and Static DNS specified by your ISP, and then click Next. Available parameters are listed as follows: Item Description IP Address Type a public IP address for such WAN profile. Vigor2960 Series User’s Guide...
Page 19 Previous Click it to return to previous setting page. Finish Click it to finish the configuration. Cancel Click it to discard the settings configured in this page. When you finished the above settings, please click Finish. Vigor2960 Series User’s Guide...
Page 20 DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP address for Vigor2960 automatically. It is not necessary for you to assign any setting. (Host Name is required for some ISPs).
Page 21 Previous Click it to return to previous setting page. Finish Click it to finish the configuration. Cancel Click it to discard the settings configured in this page. When you finished the above settings, please click Finish. Vigor2960 Series User’s Guide...
Page 22 In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. Static – specify the IP address. DHCP - obtain the IP address automatically. Vigor2960 Series User’s Guide...
Page 23 – Click the icon to remove the selected entry. Click it to return to previous setting page. Previous Finish Click it to finish the configuration. Cancel Click it to discard the settings configured in this page. Vigor2960 Series User’s Guide...
Page 24 When you finished the above settings, please click Finish. Later, you can surf the Internet at any time. When the following screen appears, it means you have finished the Quick Start Wizard configuration. Vigor2960 Series User’s Guide...
Page 25 Please follow the steps below to register the router. Before using such function, please register your router online first. Log into the web configurator of Vigor2960 and click Product Registration. A Login page will be shown on the screen. Please type the account and password that you created previously.
Page 26 When the following page appears, please type in Nick Name (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit. Vigor2960 Series User’s Guide...
Page 27 Now, your router information has been added to the database. Click OK to leave this web page and return to My Information web page. Take a look at the page of My Information, the new added Vigor2960 is listed under Your Device List.
Page 28 This page is left blank. Vigor2960 Series User’s Guide...
Page 29 Microsoft Terminal Services. An easy way is provided to establish connection between the router and the RDP Server via any browser. Open the web configurator of Vigor2960. Enable the HTTPS service from System Maintenance >> Access Control by clicking Enable for HTTPS Allow and type 443 as the value of HTTPS Port.
Page 30 Open User Management >> User Profile to create a new profile named “7788”. Set the Password as 7788 and choose the profile of Win7 as SSL Application (RDP). Click Apply. Logout Vigor2960. Login Vigor2960 HTTPS Server with 7788 for both Username and Password. Vigor2960 Series User’s Guide...
Page 31 A screen like the following figure will appear. Simply click the SSL Application link. In the following screen, click Connect for connecting to Win7, the RDP server. Vigor2960 Series User’s Guide...
Page 32 After that, you can access into Windows 7 via a browser. Note the message below the window. In which, TLS means Transport Layer Security. Vigor2960 Series User’s Guide...
Page 33: Troubleshooting
If you have installed Java Runtime Environment edition 6 but still cannot establish the connection, please make sure you have disabled “Use TLS 1.0” in the Java Control Panel as figure shown below. Then, try to connect again. Vigor2960 Series User’s Guide...
Page 34 Static Route. Refer to the OSPF topology diagram listed below. OSPF can place each router (e.g., Vigor3900A, Vigor3900B and Vigor2960 shown above) at the root of a tree and calculate the shortest path to each destination according to the cumulative cost to reach the destination.
Page 35 2. Next, continue to create a LAN (192.168.3.1/24) profile named lan2 with the settings shown below. 3. Open LAN >> Static Route Setup and click the Inter-LAN Route tab to enable this profile. Vigor2960 Series User’s Guide...
Page 36 Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.) 1. Open LAN >> General Setup to create a LAN (192.168.2.1/24) profile named lan1 with the settings shown below. 2. Next, continue to create a LAN (192.168.3.2/24) profile named lan2 with the settings shown below. Vigor2960 Series User’s Guide...
Page 37 Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.) 1. Open LAN >> General Setup to create a LAN (192.168.4.1/24) profile named lan1 with the settings shown below. Vigor2960 Series User’s Guide...
Page 38 3. Open LAN >> Static Route Setup and click the Inter-LAN Route tab to enable this profile. 4. Open LAN >> OSPF Configuration to enable this profile. Click Add to make the LAN Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.) Vigor2960 Series User’s Guide...
Page 39 5. After setting, check the routing information (marked with red line) which is created by OSPF. Vigor2960 Series User’s Guide...
Page 40 Here provides an example about LAN to LAN IPSec tunnel established between Vigor2960 and Vigor2710. Access into the web configurator of Vigor2960 and open VPN and Remote Access >> LAN to LAN Profiles to add a new VPN configuration. Type the Pre-shared key and choose a WAN Profile. Specify Local IP/Subnet Mask with 192.168.29.0/24.
Page 41 Choose Dial-Out as Call Direction and check the box of Always on. For Dial-Out Settings, please choose IPSec Tunnel and type WAN IP address of Vigor2960 in the field of Server IP/Host Name for VPN (e.g., 1.169.162.1). Type the same IKE Pre-Shared Key configured in Vigor2960.
Page 42 For the role of Vigor2710 is dialing-out, please skip Dial-In setting. Type the Remote Network IP and Remote Network Mask of Vigor2960 to complete configuration. Please check if the VPN connection is built successfully in both devices respectively. For Vigor2960, open VPN and Remote Access>>IPSec>>Status for viewing the result.
Page 43 To manage CPEs through Vigor2960, you have to set URL on CPE first and set username and password for Vigor2960. For this section, we use Vigor2830 series as the example. The firmware upgrade for the CPE can be done through Vigor2830 series.
Page 44 Remember the values configured in this page. Click Apply to save the settings. To manage CPEs through Vigor2960, you have to set ACS URL on CPE first and set username and password for Vigor2960. Connect one CPE (e.g., Vigor2830 series) and get ready to access into the web user interface of the CPE.
Page 45 Login the web user interface of the CPE. Open System Maintenance>>Management Setup. Check Allow management from the Internet to set management access control. Vigor2960 Series User’s Guide...
Page 46 Click Specify an IP address. Type correct WAN IP address, subnet mask and gateway IP address for your CPE. Then click OK. Note: Reboot the CPE device and re-log into Vigor2960. CPE which has registered to Vigor2960 will be captured and displayed on the page of Central VPN Management>>CPE Management.
Page 47 Return to the web user interface of Vigor2960. Open Central VPN Management>>CPE Management. Now there is one CPE managed (Vigor2830) by Vigor2960 on the page of CPE Maintenance. Vigor2960 Series User’s Guide...
Page 48 When a remote device is managed by Vigor2960 series, it is easy to build VPN between these two devices. Access into the web user interface of Vigor2960 series. Open Central VPN Management>>CPE Management. The icons displayed on the screen means the remote devices are ready for building VPN with Vigor2960.
Page 49 Or click Advanced to open the following page for specified the CPE you want. Click Connect after finished the settings. A confirmation dialog will appear. Click OK and wait for a moment. If VPN is built successfully, related information will be displayed on Connected Devices. Vigor2960 Series User’s Guide...
Page 50 VPN and Remote Access>>LAN to LAN of the remote device for viewing the detailed information. Note: The profile name is created automatically by the system. Do not modify any value in such page to avoid VPN error. Vigor2960 Series User’s Guide...
Page 51 Suppose the newest firmware file is located on your PC. You can upload it from your PC to Vigor2960. Log into the web user interface of Vigor2960. Open System Maintenance>>Access Control. Check Enable for Web Allow and type the value for Web Port. Then click Apply to save the settings.
Page 52 In the Upload dialog, click the Browse.. button to find out the firmware (e.g., 2830_0508 in this case) you want to upload from PC to Vigor2960. Then, click Upload. Vigor2960 Series User’s Guide...
Page 53 When the file is uploaded successfully, later you will find the one in the File Explorer dialog. Vigor2960 Series User’s Guide...
Page 54 To create a new firmware upgrade profile, one CPE (e.g., 2830 in this case) must be managed by Vigor2960 at least. Otherwise, the profile cannot be created successfully. Open Central VPN Management>>CPE Management. Click CPE Maintenance. In the Maintenance area, click Add.
Page 55 – now). Note that a red icon, will appear during the period of firmware upgrading. And, in the web user interface of client’s CPE, the system will show you that firmware upgrade is on going. Vigor2960 Series User’s Guide...
Page 56 If [Finished] is displayed, it means the firmware upgrade of specified CPE has completed. Open Central VPN Management>>CPE Management. In the Managed Devices Status area, choose the router (representing Vigor2830) and click Detail. Check the software version field. Vigor2960 Series User’s Guide...
Page 57: General Setup
When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated Vigor2960 Series User’s Guide...
Page 58 (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation. Web Page in Basic Mode Web Page in Advance Mode Vigor2960 Series User’s Guide...
Page 59 Display the profile name. Display the status of the profile. False means disabled; True Enable means enabled. Description Display a brief explanation for such profile. VLAN Tag If the data transmitted with tag, Enable will be displayed in Vigor2960 Series User’s Guide...
Page 60 A confirmation dialog will appear. Click OK to apply the related settings for Advance mode. Re-login the system. Open WAN>>General Setup. Click the Add button to open the following dialog. Different protocol type selected will bring up different configuration web page. Vigor2960 Series User’s Guide...
Page 61 VLAN ID Type the VLAN ID number for such profile. Priority Type the packet priority number for such VLAN. The range is from 0 to 7. Port Display the physical WAN interface for such profile. Vigor2960 Series User’s Guide...
Page 62 Global configuration allows you to enable the profile, give a brief explanation for such profile, specify the VLAN ID, specify MAC address, choose IPv4 and IPv6 protocol, and specify the mode of the data transmission (NAT or Routing). Vigor2960 Series User’s Guide...
Page 63 DNS Server IP adding a new IP address. Type the IP address on the tiny Address boxes one by one. Save – After finished the IP address configuration, click Save to save the setting onto the router. Vigor2960 Series User’s Guide...
Page 64 (sending reply to the router) or not. If not, the connection of WAN interface will be regarded as breaking down. This function is available when Connection Detection Mode is set with PING or HTTP. Vigor2960 Series User’s Guide...
Page 65 Host Name Type a name as the host name for identification. (Optional) Type other IP addresses to be bound to this interface. This IP Alias setting is optional. If you have typed addresses here, you can Vigor2960 Series User’s Guide...
Page 66 Connection Detection Mode is set with PING or HTTP. Save – Click this button to save the setting. – Click the icon to remove the selected entry. Assign an interval period of time for each detecting. Connection Vigor2960 Series User’s Guide...
Page 67 Click it to exit the dialog without saving the configuration.  If you choose PPPoE as IPv4 protocol type, click the PPPoE Tab to open the following page: Available parameters are listed as follows: Item Description Username Type the user name offered by your ISP. Vigor2960 Series User’s Guide...
Page 68: Network Connection
Detection Interval Assign detecting times to ensure the connection of the WAN Connection interface. After passing the times you set in this field and no Detection Retry reply received by the router, the connection of WAN Vigor2960 Series User’s Guide...
Page 69 Click it to save the configuration and exit the dialog. Apply Click it to exit the dialog without saving the configuration. Cancel  If you choose PPTP as IPv4 protocol type, click the PPTP Tab to open the following page: Vigor2960 Series User’s Guide...
Page 70 PING and HTTP supported in Vigor router for you to choose to send the request out. Connection If you choose PING/HTTP as Connection Detection Mode, Detection Host you have to specify the detection host address in this field. Use the default setting. Vigor2960 Series User’s Guide...
Page 71 MAC Address.  If you choose PPP as IPv6 protocol type Simply refer to the section of “If you choose PPPoE as IPv4 protocol type, click the PPPoE Tab to open the following page” for detailed information. Vigor2960 Series User’s Guide...
Page 72 Save – Click this button to save the setting. – Click the icon to remove the selected entry. Apply Click it to save the configuration and exit the dialog. Cancel Click it to exit the dialog without saving the configuration. Vigor2960 Series User’s Guide...
Page 73 If you choose DHCP-IA_PD as IPv6 protocol type It is not necessary for you to configure any web page. After finished the settings configuration, click Apply to save and apply the settings. Open WAN>>General Setup and click the USB WAN tab. Vigor2960 Series User’s Guide...
Page 74 Display the status of the profile. False means disabled; True means enabled. Description Display a brief explanation for such profile. Port Display the physical WAN interface for such profile. Display the protocol selected by the profile. Protocol Vigor2960 Series User’s Guide...
Page 75 Click it to restore the default settings. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. After finished the settings above, click the USB 3G tab to display the following page: Vigor2960 Series User’s Guide...
Page 76 Type the PPP username (optional). PPP Password Type the PPP password (optional). Default Click it to restore the default settings. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Vigor2960 Series User’s Guide...
Page 77 To edit a profile, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected rule. Delete Remove the selected WAN profile. Such function is available in Advance mode only. Vigor2960 Series User’s Guide...
Page 78 VLAN for creating VLAN ID number bound with LAN port (802.1Q VLAN profile) first. Otherwise, no profiles will be displayed here for you to specify. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Vigor2960 Series User’s Guide...
Page 79 Enter all the settings and click Apply. The modified profile will be shown as below. Vigor2960 Series User’s Guide...
Page 80: Default Route
Enable – Check it to let the network connection being WANs established through any active WAN interface. Disable – Check it to disable the function. Apply Click it to save the configuration. Cancel Discard current page modification. Vigor2960 Series User’s Guide...
Page 81: Load Balance
Vigor2960 supports a load balancing function. It can assign traffic with protocol type, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN interface. User can assign traffic category and force it to go to dedicate network interface based on the following web page setup.
Page 82 Click Add. A new line for adding new entry will appear. Use the drop down list of Interface to choose the WAN profiles that will be in the Load Balance Pool. Type the value for Weight. Vigor2960 Series User’s Guide...
Page 83 Profile cannot be used any more, the Backup Profile will be used instead. Use the drop down list to choose the one you need. Backup Profile Use the drop down list to choose the one you need. Vigor2960 Series User’s Guide...
Page 84 Click Apply. A new profile will be added on the page. Vigor2960 Series User’s Guide...
Page 85 Display the protocol of such rule. Source IP Object Display the name of the source object. Display the name of the source group. Source IP Group Destination IP Object Display the name of the destination object. Vigor2960 Series User’s Guide...
Page 86 Failback Display the status (enabled or disabled) of the function. Open WAN>>Load Balance Policy and click the tab of Rule. Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Vigor2960 Series User’s Guide...
Page 87 In addition, profiles configured in WAN>>Load Balance Policy>> Pool page also will be displayed here. To have user-defined WAN profile, please refer to WAN<<General Setup for detailed information. Vigor2960 Series User’s Guide...
Page 88 Enter all the settings and click Apply. The new rule profile will be added on the screen. Vigor2960 can offer the mapped IP address to respond the DNS query coming from the remote end through the designate domain to reduce the loading of the network traffic.
Page 89 Display the weight(s) that WAN interface(s) used. Weight Display the WAN interfaces used by the IP alias. Alias Interface Display the alias IP settings used by the profile. Display the weight that the above IP address used. Alias Weight Vigor2960 Series User’s Guide...
Page 90 It is available only when Failover is selected as the Mode. There are five levels (Top, 2, 3, 4 and 5) which can be specified for WAN profiles (including default WAN profiles and user-defined WAN profiles). Vigor2960 Series User’s Guide...
Page 91 (for Alias From Wan Interface) or type an IP address manually (for Alias From Manual Input). Weight –Use the drop down list to choose the one you want. – click the icon to remove the selected entry. Vigor2960 Series User’s Guide...
Page 92 DNS query forwarded by HOST. IP Address – This is optional. If required, simply type the IP address of the NS record server. – click the icon to remove the selected entry. Vigor2960 Series User’s Guide...
Page 93 Click Apply. A new profile will be added on the page. You can create sub-domain by clicking on the left side of the selected inbound load balance profile. A sub-domain setting page will appear for you to add new profile. Vigor2960 Series User’s Guide...
Page 94 It depends on the setting configured in this page for VLAN ID configured in WAN >>General Setup>>Profile relates to the VLAN ID setting configured here. This page simply displays current status of 802.1Q VALN setting profiles. Vigor2960 Series User’s Guide...
Page 95 WAN interface selected. The administrator can monitor all the packets passing through mirrored port with the mirroring port. It is useful for the administrator to analyze the troubles on Network. Vigor2960 Series User’s Guide...
Page 96: Switch
Click it to save the configuration. Click it to discard the settings configured in this page. Cancel This page allows you to modify the status (enable / disable), speed(Auto,10M,100M,1000M) and duplex (Half/Full) for the WAN ports respectively. Vigor2960 Series User’s Guide...
Page 97 Cancel – Click it to exit the dialog without saving anything. Refresh Renew current web page. Interface Display the name of the WAN port on the router. Enable Display the status of the profile. False means disabled; True means enabled. Vigor2960 Series User’s Guide...
Page 98 Up means the network is connected; Down means the network is not connected. Display the transmission rate (10M, 100M, 1000M or Auto) Speed of the date for such WAN interface. Duplex Display the duplex used (full or half) by such WAN interface. Vigor2960 Series User’s Guide...
Page 99 This page allows you to enable the profile, give a brief explanation for such profile, specify the VLAN ID, specify MAC address, and choose protocol type for such profile. Vigor2960 Series User’s Guide...
Page 100 Display the IP address for such LAN profile. IP Address Subnet Mask Display the subnet mask for such LAN profile. DHCP Server Display the status (Enable/Disable) of the DHCP server. IPv6 Protocol Display the IPv6 protocol type for the LAN profile. Vigor2960 Series User’s Guide...
Page 101 Type the description for the new LAN profile. VLAN ID Type a number as the VLAN ID to make the data be identified while performing data transmission. Priority Type the packet priority number for such profile. The range is from 0 to 7. Vigor2960 Series User’s Guide...
Page 102 – click the icon to remove the selected entry. DHCP Routers In general, this box will be blank. It means Vigor2960 will be regarded as the gateway for the user. However, if you want to use other gateway, please assign the...
Page 103 Add – Click it to add a new subnet mask with IP address and specified mode. Save – Click it to save the settings. IP – Type the IP address if you click Add for adding a new entry. Vigor2960 Series User’s Guide...
Page 104 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. When you finish the above settings, please click Apply to save the configuration and exit the dialog. Vigor2960 Series User’s Guide...
Page 105 Enable This Profile Display the status of the profile. False means disabled; True means enabled. DHCP Server Location Display the LAN or WAN profile for the DHCP server. DHCP Server IP Display the IP address of DHCP server. Vigor2960 Series User’s Guide...
Page 106 Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. When you finish the above settings, please click Apply to save the configuration and exit the dialog. The LAN profile has been edited. Vigor2960 Series User’s Guide...
Page 107 Display the status of the profile. False means disabled; True means enabled. Advertisement Lifetime Display the lifetime value. The lifetime associated with the default router in units of minutes, ranging from 10 ~ 150. It is used to control the Vigor2960 Series User’s Guide...
Page 108 A lifetime of 0 indicates that the router is not a default router and should not appear on the default router list. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Vigor2960 Series User’s Guide...
Page 109 Renew current web page. Profile Display the name of the LAN profile. Enable Display the status of the profile. False means disabled; True means enabled. Mode Display the mode (automatic setting or manual setting) specified for such profile. Vigor2960 Series User’s Guide...
Page 110 Display the private IP address for DNS server. Open LAN>>General Setup and click the DHCPv6 tab. Choose one of the LAN profiles by clicking on it and click the Edit button to open the following dialog. Vigor2960 Series User’s Guide...
Page 111 2000:0000:0000:0000:0000:0000:0000:10 or 2000::10. Set the private IP address for DNS server. If this field is blank, users on LAN will treat Vigor2960 as the DNS server. Add – Click it to add a new IP address for DNS server. Save – Click it to save the setting.
Page 112: Pppoe Server
LAN PC connections with username/password authentication. Secondly, it can prevent ARP attack by nature. Thirdly, the system administrator can configure quota (time/traffic based) for each user as ISP does. Available parameters are listed as follows: Item Description Vigor2960 Series User’s Guide...
Page 113 Apply Click it to save and exit the dialog. Cancel Click it to discard current page modification. This page displays general information for PPPoE server; allows you to disconnect the network connection to PPoE server. Vigor2960 Series User’s Guide...
Page 114 Display the IP address of the client’s host. Up Time Display the time that the PPPoE connection built. RX Bytes Display the total amount of received packets. TX Bytes Display the total amount of transmitted packets. Vigor2960 Series User’s Guide...
Page 115: Ip Routing
WAN. When the local device tries to transmit the data packets out, Vigor2960 will send it out through that certain WAN interface without passing through NAT. Meanwhile, remote device also can access the local device directly without any difficulty.
Page 116 LAN Profile Choose one of LAN profiles for the local device. Type the private IP address for such IP routing profile. Use the drop down list to choose the subnet mask for such IP Mask routing profile. Vigor2960 Series User’s Guide...
Page 117: Static Route
Remove the selected static route setting. To delete a static route setting, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Rename Allow to modify the selected profile name. Vigor2960 Series User’s Guide...
Page 118 Available parameters are listed as follows: Item Description Type the name of the static route profile. Profile Enable Check this box to enable such profile. Destination IP Type the IP address for such static route profile. Vigor2960 Series User’s Guide...
Page 119 Description Add a new static route setting. Edit Modify the selected static route setting. To edit static route setting, simply select the one you want to modify and click the Edit button. The edit window will Vigor2960 Series User’s Guide...
Page 120 Display the subnet LAN or WAN profile of the gateway. Metric Display the distance to the target. Open LAN>>Static Route and click the IPv6 Static Route tab. Click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 121 Metric Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. The new profile will be added on the screen. Vigor2960 Series User’s Guide...
Page 122 To make the users in different LAN communicating with each other, please check the box to enable Inter-LAN route function. Vigor2960 Series User’s Guide...
Page 123 Modify the selected VLAN ID setting. Edit To edit VALN ID setting, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the Vigor2960 Series User’s Guide...
Page 124 Type the number as the VLAN ID. Type a number used for identification on VLAN for your computer. Later, you have to type the same ID number for each PC which wants to be grouped within the same VLAN group. Vigor2960 Series User’s Guide...
Page 125 Cancel Enter all the settings and click Apply. The new profile will be added on the screen. Vigor2960 supports port mirroring function in LAN interfaces. This mechanism helps manager track the network errors or abnormal packets transmission without interrupting the flow of data access the network.
Page 126 Check the box to enable the Mirror function for the switch. Select a port to view traffic sent from mirrored ports. Mirroring Port Select which port is necessary to be mirrored. Mirrored Port Refresh Renew current web page. Click it to save the settings. Apply Vigor2960 Series User’s Guide...
Page 127 Display the status (enable or disable) of such function. Note Display addition information for such interface. Open LAN>>Switch and click the Interface tab. Please select a profile and click the Edit button. Vigor2960 Series User’s Guide...
Page 128 Display addition information for such interface. Apply Click it to save and exit the dialog. Click it to exit the dialog without saving anything. Cancel Enter all the settings and click Apply. The profile has been edited. Vigor2960 Series User’s Guide...
Page 129 Display the status (up or down) for the interface. Speed Display the transmission rate (10M, 100M, 1000M or Auto) of the date for such profile. Duplex Display the duplex used (full or half) by such profile. Vigor2960 Series User’s Guide...
Page 130: Bind Ip To Mac
Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Move on IP Bind List IP Address - Display the IP address of one device. Vigor2960 Series User’s Guide...
Page 131 Strict_Bind – Only specified IP addresses will be assigned to the device with bind MAC address. Other devices which are not listed on the Bind Table shall still NOT get the IP address from DHCP server. Vigor2960 Series User’s Guide...
Page 132 IP address. Click it to save and exit the dialog. Apply Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new profile has been added onto Bind Table. Vigor2960 Series User’s Guide...
Page 133 B will tell A "if you want to send packets to C, please send it to me first", then A will create a routing rule to forward packet that destination is C to B. In another direction, C will do the same thing. Vigor2960 Series User’s Guide...
Page 134 OSPF feature to fit your request. Note that both routers must support OSPF function at the same time to build the OSPF connection. Vigor2960 Series User’s Guide...
Page 135: Ospf Configuration
Profile Choose a LAN profile from the drop down list to apply for such configuration. Apply Click it to save the settings. Cancel Click it to discard the settings configured in this page. Open LAN>>OSPF Configuration. Vigor2960 Series User’s Guide...
Page 136 If you are not satisfied the settings, simply click to remove the entry, and then re-type the settings. Click Apply to save the settings and exit the dialog. A new profile is created and displayed on the screen. Vigor2960 Series User’s Guide...
Page 137: Port Redirection
Series is NAT-enabled by default and gets one globally routable IP addresses from the ISP by Static, PPPoE, or DHCP mechanism. The Vigor2960 Series assigns private network IP addresses according to RFC-1918 protocol and translates the private network addresses to a globally routable IP address so that local hosts can communicate with the router and access the Internet.
Page 138 Display the starting number of the public port. Public Port End Display the ending number of the public port. Private Port Display the number of the private port. Open NAT>> Port Redirection. Simply click the Add button. Vigor2960 Series User’s Guide...
Page 139 Specify the WAN interface for such profile. Public IP Use IP Alias When All is selected as WAN Profile, such feature is unavailable. Use the drop down menu to specify which type of IP Alias you want. Vigor2960 Series User’s Guide...
Page 140 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new profile has been added onto Port Redirection table. Vigor2960 Series User’s Guide...
Page 141: Dmz Host
Delete Remove the selected profile. To delete a profile, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Rename Allow to modify the selected profile name. Vigor2960 Series User’s Guide...
Page 142 Display the IP address of the DMZ host. Allow DMZ Host to Display if such function is enabled or disabled. Access Network Open NAT>> DMZ Host. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 143 This is an optional setting. Type Use the drop down list to choose the type(s) to apply to such profile. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Vigor2960 Series User’s Guide...
Page 144 Enter all the settings and click Apply. A new profile has been added onto DMZ Host table. Vigor2960 Series User’s Guide...
Page 145: Address Mapping
Change the order of selected profile by moving it up. Move Up Move Down Change the order of selected profile by moving it down. Rename Allow to modify the selected profile name. Profile Display the name of the profile. Vigor2960 Series User’s Guide...
Page 146 Display if failover to the default route is enabled or disabled. Failback Display if the function of Failback is enabled or disabled. Open NAT>> Address Mapping. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 147 Use the drop down list to specify one IP group for such profile. If there is nothing to be specified, simply open Object Settings to create the one you want. Protocol Choose the protocol used for the entry. Vigor2960 Series User’s Guide...
Page 148 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new profile has been added onto Address Mapping table. Vigor2960 Series User’s Guide...
Page 149: Sip Alg
Apply Cancel Click it to discard the settings configured in this page. The H.323 ALG allows incoming and outgoing VoIP calls passing through NAT. If required, check the box and click Apply to save the settings. Vigor2960 Series User’s Guide...
Page 150: Firewall
The firewall controls the allowance and denial of packets through the router. Firewall Setup in the Vigor2960 Series mainly consists of packet filtering, Denial of Service (DoS) and URL (Universal Resource Locator) content filtering facilities. These firewall filters help to protect your local network against attack from outsiders. A firewall...
Page 151 Comment Display the description for such profile. To build an IP group containing IP filter rules, please follow the steps: Open Firewall>>Filter Setup and click the IP Filter tab. Simply click the Add button. Vigor2960 Series User’s Guide...
Page 152 A new filter group has been added. You can create filter rule by clicking on the left side of the selected IP filter group profile. A setting page will appear for you to add new IP filter rule profile. Vigor2960 Series User’s Guide...
Page 153 The following page for configuration will appear. Move your mouse to click Add. Vigor2960 Series User’s Guide...
Page 154 Pass_If_No_Further_Match as Block Action, you have to specify next IP filter group for further matching. Syslog Click Enable to make the history of firewall actions appearing on the System Maintenance >> Syslog/Mail Alert >> Syslog File. Vigor2960 Series User’s Guide...
Page 155 Choose one or more user group profiles from the drop down list. The selected profile will be treated as source target. You can click to create another new user group profile. Vigor2960 Series User’s Guide...
Page 156 10. Enter all the settings and click Apply. 11. A new IP filter rule has been added under the IP Filter Group (named IPF_Market in this case). Note: You can create multiple IP filter rules under a certain IP Filter group. Vigor2960 Series User’s Guide...
Page 157 Display the status of the profile. False means disabled; True means enabled. Time Object If no time schedule is set, None will be shown in this field. Time Group Display the Time group profile selected for such application profile. Vigor2960 Series User’s Guide...
Page 158 Display the P2P object profile selected for such application profile. P2P Block Display the P2P object profile selected for such application profile. Open Firewall>>Filter Setup and click the Application Filter tab. Simply click the Add button. Vigor2960 Series User’s Guide...
Page 159 The selected profile will be filtered by the router when such application filter profile is applied. You can click to create another new IP group profile, or you can click the edit icon to modify the existed group profile. Vigor2960 Series User’s Guide...
Page 160 Apply Click it to save and exit the dialog. Click it to exit the dialog without saving anything. Cancel Enter all the settings and click Apply. A new Application filter profile has been added. Vigor2960 Series User’s Guide...
Page 161 Display if the HTTPs filter is enabled or not. Time Object If no time schedule is set, None will be shown in this field. Display the Time group profile selected for such application Time Group profile. Vigor2960 Series User’s Guide...
Page 162 Click it to save and exit the dialog. Cancel Click it to discard the settings configured in this page. Open Firewall>>Filter Setup and click the URL/Web Category Filter tab. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 163 URL filter profile is applied. You can click to create another new IP object profile. IP Group - Click the triangle icon to display the profile selection box. Choose one or more IP group profiles from Vigor2960 Series User’s Guide...
Page 164 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new URL filter profile has been added. Vigor2960 Series User’s Guide...
Page 165 Change the order of selected profile by moving it down. Rename Allow to modify the selected profile name. Profile Display the name of the application filter profile. Enable Display the status of the profile. False means disabled; True Vigor2960 Series User’s Guide...
Page 166 Click it to save and exit the dialog. Cancel Click it to discard the settings configured in this page. Open Firewall>>Filter Setup and click the QQ Filter tab. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 167 QQ account. Click it to save and exit the dialog. Cancel Click it to discard the settings configured in this page. Enter all the settings and click Add. A new QQ filter profile has been added. Vigor2960 Series User’s Guide...
Page 168: Dos Defense
In the Firewall group, click the DOS Defense and click the tab of System. You will see the following page. The DoS Defense Engine inspects each incoming packet against the attack signature database. Any packet that may paralyze the host in the security zone is blocked. Vigor2960 Series User’s Guide...
Page 169 UDP Flood Threshold The default setting for threshold is 300 packets per second. The default setting for timeout is 10 seconds. UDP Flood Timeout Block Port Scan Click Enable to activate the Port Scan detection function. Vigor2960 Series User’s Guide...
Page 170 Click Enable to activate the Block Unknown Protocol Protocol function. The router will block any packets with unknown protocol types. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Vigor2960 Series User’s Guide...
Page 171: Mac Block
Display the name of the profile. Enable Display the status of the profile. False means disabled; True means enabled. MAC Address Display the MAC address for such profile. Open Firewall>>MAC Block. Simply click the Add button. Vigor2960 Series User’s Guide...
Page 172 Enter all the settings and click Apply. A new MAC Block profile has been created. Vigor2960 allows users to set different filter profiles based on IP, service type, keyword, file extension, instant message application, P2P application, protocol application, web category,...
Page 173: Objects Setting
QQ application, time setting, SMS service, mail service and notification. These objects setting profiles can be applied in Firewall. Vigor2960 Series User’s Guide...
Page 174: Ip Object
Display the name of the profile. Interface Display the interface of the IP Object. Address Type Display the address type (single, range or subnet) for such profile. Start IP Address Display the IP address of the starting point for such profile. Vigor2960 Series User’s Guide...
Page 175 Choose the address type (Single / Range /Subnet) for such Address Type profile. Start IP Address Type the IP address of the starting point for such profile. End IP Address Type the IP address of the ending point for such profile if Vigor2960 Series User’s Guide...
Page 176 Subnet as Address Type. Apply Click it to save and exit the dialog. Click it to exit the dialog without saving anything. Cancel Enter all the settings and click Apply. A new IP object profile has been created. Vigor2960 Series User’s Guide...
Page 177: Ip Group
Display the total number (32) of the object profiles to be created. Group Name Display the name of the object group. Description Display the description for such profile. Objects Display the object profiles grouped under such group. Open Objects Setting>>IP Group. Simply click the Add button. Vigor2960 Series User’s Guide...
Page 178 Setting>>IP Object will be seen here. To clear the selected one, click to remove current object selections. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. Vigor2960 Series User’s Guide...
Page 179: Service Type Object
To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Profile Number Limit Display the total number (96) of the object profiles to be created. Profile Display the name of the service type object profile. Vigor2960 Series User’s Guide...
Page 180 Protocol Specify one of the protocols for such profile. It is available for TCP/UDP protocol. It can be ignored for Source Port Start ICMP. Type a port number (0 – 65535) as the starting source port. Vigor2960 Series User’s Guide...
Page 181: Service Type Group
This page allows you to bind several service types into one group. To manage conveniently, several service type profiles can be grouped under a service type group. Different service type group can contain different service type profiles. Each item will be explained as follows: Vigor2960 Series User’s Guide...
Page 182 Display the description for such profile. Objects Display the service type object profiles grouped under such group. Open Objects Setting>> Service Type Group. Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Vigor2960 Series User’s Guide...
Page 183 Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new Service Type Group profile has been created. Vigor2960 Series User’s Guide...
Page 184: Keyword Object
Keyword can be set as a filter rule to be applied in Firewall. Vigor2960 allows users to set keyword profile with several keywords. Even, it allows users to group several keyword profiles within a keyword group. Each item will be explained as follows:...
Page 185 Save – Click it to save the setting. – click the icon to remove the selected entry. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. Vigor2960 Series User’s Guide...
Page 186 Delete button. Refresh Renew current web page. Profile Number Limit Display the total number (8) of the object profiles to be created. Profile Display the name of the profile. Image Display the selected file extension of image. Vigor2960 Series User’s Guide...
Page 187: File Extension Object
Available parameters are listed as follows: Item Description Profile Type the name of the File Extension Object group. The number of the characters allowed to be typed here is 10. Image Several file extensions for Image offered for you to choose. Vigor2960 Series User’s Guide...
Page 188 Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new File Extension Object profile has been created. Vigor2960 Series User’s Guide...
Page 189: Im Object
Profile Display the name of the IM object profile. Member Display the IM application specified in such profile. WebIM Display the status of IM object whether including the specified set of web IM or not. Vigor2960 Series User’s Guide...
Page 190 Type the name of the IM object group. The number of the characters allowed to be typed here is 10. Member Several IM applications offered for you to choose. Check the one(s) you want to add for such profile. Vigor2960 Series User’s Guide...
Page 191 Click it to save the configuration. Apply Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new IM Object profile has been created. Vigor2960 Series User’s Guide...
Page 192: P2P Object
Vigor2960 can block P2P application for users, especially for the ones who always upload or download improper files to Internet. P2P object setting lists all of the point to point application for you to choose to block. Choose the one(s) you want to block and save as a P2P Object profile. Later, it can be applied to Firewall as a filter rule and reach the purpose of block.
Page 193 Several P2P applications offered for you to choose. Check the one(s) you want to add for such profile. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. Vigor2960 Series User’s Guide...
Page 194 A new P2P Object profile has been created. Network services, e.g., DNS, FTP, HTTP, POP3, for LAN users can be blocked by Vigor2960. Common services will be listed in this function and can be selected to be blocked by the router.
Page 195: Protocol Object
Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Type the name of the protocol object profile. The number of the characters allowed to be typed here is 10. Vigor2960 Series User’s Guide...
Page 196 If you want to purchase a formal edition, simply contact with your DrayTek dealer. Note: Web Content Filter (WCF) is not a built-in service of Vigor router but a service powered by Commtouch.
Page 197 Chatting Display the items under certain category that you choose to block. Computer Display the items under certain category that you choose to block. Display the items under certain category that you choose to Other block. Vigor2960 Series User’s Guide...
Page 198: Web Category Object
10. Child Protection The web pages which are not suitable for children will be classified into different categories. Simply check the one(s) that you don’t want the children to visit. Vigor2960 Series User’s Guide...
Page 199 Move your mouse to the link of Activate URL and click it. The system will guide you to access into MyVigor website. After finishing the activation for the trial version of WCF, remember to purchase “Silver Card” for WCF service from your DrayTek dealer or distributor. Vigor2960 Series User’s Guide...
Page 200: Qq Object
Display the total number (16) of the object profiles to be created. Profile Display the name of the QQ object profile. Display the account name of the QQ object profile. Description Display a brief explanation of the QQ object profile. Vigor2960 Series User’s Guide...
Page 201 - Click this button to remove the selected account. Description Type a brief explanation for the QQ object profile. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. Vigor2960 Series User’s Guide...
Page 202 To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Profile Number Limit Display the total number (16) of the object profiles to be created. Group Name Display the name of the group. Vigor2960 Series User’s Guide...
Page 203: Qq Group
All the available objects that you have added on Objects Setting>>QQ Object will be seen here. To clear the selected one, click to remove current object selections. Apply Click it to save the configuration. Vigor2960 Series User’s Guide...
Page 204 Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new QQ group profile has been created. Vigor2960 Series User’s Guide...
Page 205: Time Object
Display the starting time of the time object profile. End Date Display the ending date of the time object profile. End Time Display the ending time of the time object profile. Weekdays Display the frequency of such time object profile. Vigor2960 Series User’s Guide...
Page 206 Specify the starting date of the time object profile. Start Time Specify the starting time of the time object profile. End Date Specify the ending date of the time object profile. Specify the ending time of the time object profile. End Time Vigor2960 Series User’s Guide...
Page 207 Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new Time Object profile has been created. This page allows you to group several time object profiles. Vigor2960 Series User’s Guide...
Page 208: Time Group
Display the name of the group. Description Display the brief explanation for such group. Objects Display the time objects selected by such group. Open Objects Setting>> Time Group. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 209 Enter all the settings and click Apply. A new Web Category Object profile has been created. This page allows you to set ten profiles which will be applied in Application>>SMS/Mail Alert Service. Each item will be explained as follows: Vigor2960 Series User’s Guide...
Page 210 Display the user name that the sender can use to register to selected SMS provider. Display the number of the credit that you purchase from the Quota service provider Interval(s) Display the time interval for sending the SMS. Vigor2960 Series User’s Guide...
Page 211: Sms Service Object
Use the drop down list to specify the service provider which Provider offers SMS service. Username Type a user name that the sender can use to register to selected SMS provider. The maximum length of the name you can set is 31 characters. Vigor2960 Series User’s Guide...
Page 212 Enter all the settings and click Apply. A new SMS object profile has been created. This page allows you to set ten profiles which will be applied in Application>>SMS/Mail Alert Service. Each item will be explained as follows: Vigor2960 Series User’s Guide...
Page 213 Display the IP address of the SMTP Server Authentication Enable means such profile must be authenticated by the server. Disable means such profile will not be authenticated by the server. User Name Display the name used for authentication. Vigor2960 Series User’s Guide...
Page 214: Mail Service Object
Enable Check this box to enable such profile. Type the e-mail address of the sender. Mail From SMTP Port Type the port number for SMTP server. SMTP Server Type the IP address of the mail server. Vigor2960 Series User’s Guide...
Page 215 A new mail service object profile has been created. This page allows you to set ten profiles which will be applied in Application>>SMS/Mail Alert Service. Each item will be explained as follows: Item Description Add a new profile. Vigor2960 Series User’s Guide...
Page 216 Display if such function is enabled or disabled. VPN Disconnection Display if such function is enabled or disabled. VPN Reconnection Display if such function is enabled or disabled. Temperature Display if such function is enabled or disabled. Vigor2960 Series User’s Guide...
Page 217 Enable – When disconnection happened to a VPN tunnel, the router system will send the alert message to the recipient. VPN Reconnection Enable - When reconnection happened to a VPN tunnel, the router system will send the alert message to the recipient. Vigor2960 Series User’s Guide...
Page 218: Notification Object
Enter all the settings and click Apply. A new notification object profile has been created. User Management can manage all the accounts (user profiles) to connect to Internet via different protocols. Below shows the menu items for User Management: Vigor2960 Series User’s Guide...
Page 219 Rule-Based is configured in default. Available parameters will be explained as follows: Item Description Mode There are two modes offered here for you to choose. Each mode will bring different filtering effect to the users Vigor2960 Series User’s Guide...
Page 220 User-based Firewall Status will start to record each authentication event of specified users including authentication failure or success, user’s IP, when or how much time the user uses, and how much rest time for the user. Vigor2960 Series User’s Guide...
Page 221 Display the ending time of the network connection. Rest Time Display the rest time for the wireless station to browse the Internet. Disconnect It is available for the administrator to turn off a specific user’s connection immediately. Vigor2960 Series User’s Guide...
Page 222: User Profile
This function allows to configure all accounts (user profiles) in Vigor2960, including PPTP/L2TP, System user, and so on. Each item will be explained as follows: Item Description Add a new profile. Edit Modify the selected profile. To edit a profile, simply select the one you want to modify and click the Edit button.
Page 223 Time Quota(min) Display the time quota allowed for such user profile. Traffic Quota(MB) Display the traffic quota allowed for such user profile. Open User Management>>User Profile. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 224 When the user passes the authentication, he/she can access Internet via this router. However the accessing operation will be restricted with the conditions configured in this user profile. Enable Check this box to enable such profile. Vigor2960 Series User’s Guide...
Page 225 The range is from 1 to 255. -1 means not limit; 0 means No access. System User Choose True to allow the user accessing into WUI of Vigor2960 via the username and password above. If you choose False, you can set SSL for such profile. PPTP/L2TP Click Enable to make network connection through PPTP/L2TP protocol for users who access into Internet via such profile.
Page 226 Enable – Click it to enable the function. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new User Profile has been created. Vigor2960 Series User’s Guide...
Page 227: User Group
Display the total number (200) of the object profiles to be created. Usergroup Display the name of the user group. Enable This Profile Display the status of the profile. False means disabled; True means enabled. Member Display the user profiles under such group. Vigor2960 Series User’s Guide...
Page 228 Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new User Profile has been created. Vigor2960 Series User’s Guide...
Page 229: Radius
1812, based on RFC 2138. Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Vigor2960 Series User’s Guide...
Page 230 Delete Remove the selected profile. To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Vigor2960 Series User’s Guide...
Page 231: Ldap/Active Directory
Display the configured regular DN if Bind Type is set with Regular Mode. Regular Password Display the configured regular password if Bind Type is set with Regular Mode. Open User Management>>LDAP/Active Directory. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 232 For the regular mode, you’ll need to type in the Regular DN and Regular Password. Server IP Address Enter the IP address of LDAP server. Port Type a port number as the destination port for LDAP server. Vigor2960 Series User’s Guide...
Page 233 By default, the Usage Time is 480 minutes. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new LADP/Active Directory Profile has been created. Vigor2960 Series User’s Guide...
Page 234: Application
Basically, Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www.dyndns.org, www.no-ip.com, www.dtdns.com, www.changeip.com, www.dynamic- nameserver.com. You should visit their websites to register your own domain name for the router. Vigor2960 Series User’s Guide...
Page 235 The information will update immediately when the Refresh button is clicked. Profile Display the name of the DDNS. Status Display the connection status of the DDNS server. Domain Name Display the domain name for the DDNS server. Vigor2960 Series User’s Guide...
Page 236 Display the domain name of such profile. Domain Name IP Source Display the interface (My WAN IP or My Internet IP) selected by such DDNS profile. Force update interval Display the interval setting to refresh the data for such profile. Vigor2960 Series User’s Guide...
Page 237 WAN interface first, then applied to other interface. Selected_wan_only – The DDNS profile will be applied to the traffic via WAN interface only. No other interface will be used. Service Provider Select the service provider for the DDNS account. Vigor2960 Series User’s Guide...
Page 238 Click it to save the configuration. Apply Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. The DDNS Profile has been modified. This page displays the information related to all DDNS. Vigor2960 Series User’s Guide...
Page 239 Vigor2960 Series User’s Guide...
Page 240: Gvrp
Join Time Define the time for the system to send GVRP packet to other device. The unit is second. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Vigor2960 Series User’s Guide...
Page 241: Igmp Proxy
Further, the user does not have to manually set up port mappings or a DMZ. UPnP is available on Windows XP and the router provide the associated support for MSN Messenger to allow full use of the voice, video and messaging features. Vigor2960 Series User’s Guide...
Page 242 The NAT Traversal of UPnP enables the multimedia features of your applications to operate. This has to manually set up port mappings or use other similar methods. The screenshots below show examples of this facility. Vigor2960 Series User’s Guide...
Page 243 Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches.  Non-privileged users can control some router functions, including removing and adding port mappings. Vigor2960 Series User’s Guide...
Page 244: Wake On Lan
LAN Profile – Use the drop down list to choose one of the LAN profiles. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2960 Series User’s Guide...
Page 245 Renew current web page. Index Display the index number (from 1 to 10) of the profile. Display the status of the profile. False means disabled; True Enable means enabled. SMS Provider Display the name of the SMS provider. Vigor2960 Series User’s Guide...
Page 246: Sms / Mail Alert Service
Service Object. Recipient Type the cell phone number to receive the SMS. Notify Profile Choose a profile (specify the timing for sending SMS) from the drop down list. Such profiles can be created from Object Setting>>Notification Object. Vigor2960 Series User’s Guide...
Page 247 Edit button. The edit window will appear for you to modify the corresponding settings for the selected profile. Refresh Renew current web page. Display the index number (from 1 to 10) of the profile. Index Vigor2960 Series User’s Guide...
Page 248 Choose the mail service object profile from the drop down list. Such profiles can be created from Object Setting>>Mail Service Object. Recipient Type the e-mail address for receiving the mail. Notify Profile Choose a profile (specify the timing for sending SMS) from Vigor2960 Series User’s Guide...
Page 249 Click it to save the configuration and exit the page. Click it to exit the dialog without saving the configuration. Cancel Enter all the settings and click Apply. The mail alert service profile has been modified. Vigor2960 Series User’s Guide...
Page 250: Vpn And Remote Access
Below shows the menu items for VPN and Remote Access. Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connection (from server to client) step by step. Vigor2960 Series User’s Guide...
Page 251: Vpn Client Wizard
Create New VPN Profile – It allows you to create a new VPN LAN to LAN profile. Simply type the name in the field of Profile Name. The field of Profile Name is available only when you click this setting. Vigor2960 Series User’s Guide...
Page 252 Specify the type. Click Create New VPN Profile and type the name of the profile. Then, click Next. If you choose PPTP as the Type, you will get the following screen: Available parameters are listed as follows: Item Description Profile Display the name of the VPN profile. Vigor2960 Series User’s Guide...
Page 253 Available parameters are listed as follows: Item Description Profile Display the name of the VPN profile. Enable Check this box to enable such profile. WAN Profile Choose a wan profile to be used by such profile. Vigor2960 Series User’s Guide...
Page 254 Use the value 0 to disable this function. The recommended value is 120 seconds if enabled. Fill in the required information on this page and click Finish. Later, a new profile has been created. Vigor2960 Series User’s Guide...
Page 255 Vigor2960 Series User’s Guide...
Page 256: Vpn Server Wizard
Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connection (from client to server) step by step. Open VPN and Remote Access >> VPN Server Wizard. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 257 Display the name of the profile. Check this box to enable such profile. Enable PPTP User Name Choose a user for authentication in PPTP connection. Such profile shall be created in User Management>>User Profile previously. Otherwise, there are no selections Vigor2960 Series User’s Guide...
Page 258 More Remote Subnet Auth Type The authentication to be used by Pre-Shared Key or RSA Signature. Choose PSK or RSA for such profile. Certificate Choose a local certificate from the drop down list if RSA is Vigor2960 Series User’s Guide...
Page 259 Use the value 0 to disable this function. The recommended value is 120 seconds if enabled. F Fill in the required information on this page and click Finish. A pop-up window will appear. Vigor2960 Series User’s Guide...
Page 260 Click OK. Then, return to VPN and Remote Access>>VPN Server Wizard. The new added VPN server profile will be displayed on the screen. Vigor2960 Series User’s Guide...
Page 261 Check the box(es) to enable the service. Service / L2TP VPN Service/DHCP over IPSec Service/L2TP over IPSec Service Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Vigor2960 Series User’s Guide...
Page 262 CHAP protocol. MPPE Encryption Specify one of the encryptions for such server. It is available only when MS-CHAP or MS-CHAP_v2 is selected. User Authentication Set user authentication to Local server or RADIUS server. Type Vigor2960 Series User’s Guide...
Page 263 Click it to discard the settings configured in this page. This page display current status for VPN tunnel built with L2TP protocol. Available parameters are listed as follows: Item Description Authenticate Protocol The router will authenticate the dial-in user with the protocol selected here. Vigor2960 Series User’s Guide...
Page 264 If it is checked, the router will use L2TP with IPsec policy Force L2TP with IPsec policy for VPN connection. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Enter all the settings and click Apply. Vigor2960 Series User’s Guide...
Page 265 GRE over IPSec MSS Type the port number for GRE over IPSec MSS. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Enter all the settings and click Apply. Vigor2960 Series User’s Guide...
Page 266: Vpn Profiles
Profile Number Limit Display the total number (500) of the object profiles to be created. Display the name of LAN to LAN profile. Profile Enable Display the status of the profile. False means disabled; True means enabled. Vigor2960 Series User’s Guide...
Page 267 (ESP), and through the use of cryptographic key management procedures and protocols. Open VPN and Remote Access >> VPN Profiles. Simply click the Add button. The following dialog will appear. Click the Basic tab to configure the settings. Vigor2960 Series User’s Guide...
Page 268 Remote IP / Subnet Mask - Type the LAN IP address and LAN subnet mask for the remote host. More Remote Subnet – Add more remote subnet in this field if required. Auth Type - The authentication to be used by Pre-Shared Vigor2960 Series User’s Guide...
Page 269 Enable – Click it to enable Aggressive Mode. Aggressive Mode Disable – Click it to disable Aggressive Mode. Local Peer ID Type the ID for Vigor2960 which can be configured by the remote end. It is available for Aggressive Mode enabled only. Vigor2960 Series User’s Guide...
Page 270 0 to disable this function. The recommended value is 120 seconds. Source IP Choose one of the LAN profiles as a source IP. Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Vigor2960 Series User’s Guide...
Page 271 The length is 4 bytes. Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Vigor2960 Series User’s Guide...
Page 272 - When the VPN tunnel is established, only the selected proposal will be accepted and applied by this device. Apply Click it to save the configuration. Vigor2960 Series User’s Guide...
Page 273 Enter all the settings and click Apply. A new IPSec LAN-to-LAN profile has been created. Below will guide you to create a PPTP dial-out profile for VPN connection: Open VPN and Remote Access >> VPN Profiles. Simply click the Add button. Vigor2960 Series User’s Guide...
Page 274 Local IP/Subnet Mask - Type the IP address and subnet mask of local host. Remote IP / Subnet Mask - Type the LAN IP address and LAN subnet mask for the remote host. Route / NAT Mode - Specify the purpose for such profile. Vigor2960 Series User’s Guide...
Page 275 A new PPTP Dial-Out VPN profile has been created. Below will guide you to create a PPTP dial-in profile for VPN connection: Open VPN and Remote Access >> VPN Profiles. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 276 Choose a PPTP user profile for authentication in PPTP connection. Such profile shall be created in User Management>>User Profile previously. You can click Set PPTP Dial-In For User Profile in this page to configure a new one for Vigor2960 Series User’s Guide...
Page 277 Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Enter all the settings and click Apply. A new PPTP Dial-In LAN-to-LAN profile has been created. Vigor2960 Series User’s Guide...
Page 278 Management>>User Profile, or click Set PPTP Dial-In For User Profile in this page to configure a new one for choosing for authentication in PPTP connection. Below shows the window of Set PPTP Dial-In For User Profile. For the configuration and detailed information, simply refer to 4.6.2 User Profile. Vigor2960 Series User’s Guide...
Page 279 VPN Tunnels disconnected. Users do not need to reconnect with setting TCP/UDP Service Port again. The VPN Load Balance function can keep the transmission for internal data on tunnel stably. Vigor2960 Series User’s Guide...
Page 280 Display the source IP address specified for this profile. Source Mask Display the subnet mask address specified for the source IP of this entry. Display the destination IP address specified for this entry. Destination IP Address Vigor2960 Series User’s Guide...
Page 281: Vpn Trunk Management
Open VPN and Remote Access >>VPN TRUNK Management and click the Load Balance Rule tab. Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Type the name of the profile. Vigor2960 Series User’s Guide...
Page 282 Then, such rule will be applied by the pool. Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Enter all the settings and click Apply. A new profile has been created. Vigor2960 Series User’s Guide...
Page 283 Display the name of the Load Balance profile grouped under such pool profile. Primary Interface Display the primary interface for failover. Backup Interface Display the backup interface for failover. Open VPN and Remote Access >>VPN TRUNK Management and click the Load Balance Pool tab. Vigor2960 Series User’s Guide...
Page 284 Remote Access>>VPN Profiles to create a new IPSec LAN to LAN profile with enabled GRE setting. Then, return to this page to specify the Interface option. Enter all the settings and click Apply. A new profile has been created. Vigor2960 Series User’s Guide...
Page 285 Refer to Chapter 3, How to Configure VPN Load Balance between Vigor2960 and Other Router for getting more detailed information about Load Balance application. You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Disconnect button.
Page 286: Certificate Management
Local certificate is created by the end user and must be signed by a trusted CA center. Vigor2960 can serve as a trusted CA and is called with “Root CA”. Therefore, any user can ask for certificate signed by Vigor2960.
Page 287: Local Certificate
This page allows users to generate certificate based on different work requests. Local certificate can be signed by itself or signed by a root CA (e.g., root CA on Vigor2960). Each item will be explained as follows: Item Description Upload Allow you to upload current configuration to the host as a CA certificate.
Page 288 Available parameters are listed as follows: Item Description Certificate Name Type the name of the local certificate. The ID type for such certificate. There are four types: ID Type Domain Name: Certificated by domain name. IP: Certificated by IP address. Vigor2960 Series User’s Guide...
Page 289 Click it to create a new local certificate based on the Apply configuration here. Cancel Click it to exit the web page without saving the configuration. Enter all the settings and click Apply. A new generated Local Certificate has been created. Vigor2960 Series User’s Guide...
Page 290 Open Certificate Management>> Local Certificate. Click the Browse.. button to import a CA file stored on the computer as the certification information. Click Open for the selected CA file. Click Upload. The system will start to upload the selected file. Vigor2960 Series User’s Guide...
Page 291: Trusted Ca Certificate
This page allows you to build a RootCA certificate for Vigor2960. RootCA can be deleted but not edited. If you want to modify the settings for a RootCA, please delete the one and create another one by clicking Build RootCA.
Page 292: Ssl Vpn
Modify the selected profile. To edit a profile, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected profile. Vigor2960 Series User’s Guide...
Page 293 Host IP Address If you type function variation as URL, you have to type corresponding IP address in this filed. Such field must match with URL setting. Apply Click it to save the configuration. Vigor2960 Series User’s Guide...
Page 294 Modify the selected profile. To edit a profile, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected Vigor2960 Series User’s Guide...
Page 295: Ssl Application
Available parameters are listed as follows: Item Description Profile Type the name of the profile that you create. IP Address Type the IP address for this protocol. Port Specify the port used for this protocol. The default setting is 5900. Vigor2960 Series User’s Guide...
Page 296 Modify the selected profile. Edit To edit a profile, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected profile. Vigor2960 Series User’s Guide...
Page 297 Profile Type the name of the profile that you create. IP Address Type the IP address for this protocol. Port Specify the port used for this protocol. Screen Size Chose the screen size for such application. Vigor2960 Series User’s Guide...
Page 298 Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Enter all the settings and click Apply. A new SSL Application profile has been created. Vigor2960 Series User’s Guide...
Page 299 If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into DrayTek SSL VPN portal interface. Each item will be explained as follows: Item Description Refresh Renew current web page.
Page 300: Central Vpn Management
Vigor2960 can build virtual private network (VPN) between itself and any other TR-069 CPE by the function of central VPN management. In addition, it can be treated as a server (called CVM server) which can manage TR-069 CPE for periodical firmware upgrade, configuration backup and restoring configuration.
Page 301 Click it to save the configuration. Cancel Click it to discard the settings configured in this page. This page allows you to configure the basic settings for the VPN tunnel of Vigor2960. Available parameters are listed as follows: Item Description WAN Profile Choose a WAN interface profile to be used.
Page 302 IKE Phase1 Mode Choose Aggressive or Main as the IKE Phase1 Mode. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Vigor2960 Series User’s Guide...
Page 303 All the CPEs managed by Vigor2960 can be seen with icons from this page. This page allows you to manage the CPEs connected to Vigor2960.  Page without CPE connected  Page with CPE connected Available parameters are listed as follows:...
Page 304 Managed Devices Status This area displays icons for the CPE managed by Vigor2960. Edit – To modify the name and location of specific CPE, click the one you want and click the Edit button. A pop up window will appear. Simply change the name (for identification) and/or location manually.
Page 305 Profile – Display the name of the profile. Device – Display the name (named by Vigor2960) of the devices selected by such profile. Name – Display the name (can be modified by the administrator) of the device.
Page 306 Refer to sections “3.4 How to manage the CPE (router) through Vigor2960?” and “3.6 How to upgrade CPE firmware through Vigor2960?” for more detailed information. Follow the steps below to create a new maintenance profile. Click Add from the Maintenance area The Maintenance dialog appears.
Page 307 Usually, the name of the device will be assigned by Vigor2960 automatically. If you want to give a name easy for easy recognition, refer to 4.11.2.1 CPE Maintenance to specify another name for the device additionally. Display the name (can be modified by the administrator) of Name the device.
Page 308 A new maintenance profile has been created. An easy method is offered to configure VPN settings for building VPN connection between Vigor2960 (treated as VPN server) and other Vigor router (treated as CPE device, i.e.VPN client). Available parameters are listed as follows:...
Page 309 VJ Compression; then click Connect to build the VPN connection. Note: If the VPN connection has been established successfully, a new LAN to LAN profile will be created for the CPE automatically. See the following example. Vigor2960 Series User’s Guide...
Page 310 CPE from the Device drop down list. Then, click Apply to save the settings. Such profile will be applied to the device connecting to Vigor2960 with VPN. Delete – Click it to delete the profile. The VPN between the router and the client might not be guaranteed.
Page 311 To display the location of the selected CPE with a bird’s eye view, open Central VPN Management>>CPE Management and click the tab of Map. Vigor2960 Series User’s Guide...
Page 312: Log/Alert
The Log page offers brief information to identify the CPE connected to Vigor2960. The Alert page offers brief information to identify the CPE connected to Vigor2960. Vigor2960 Series User’s Guide...
Page 313: Bandwidth Management
The QoS function handles incoming and outgoing classes independently. Users can configure incoming or outgoing separately without any impact on the other. This page allows you to set WAN interface for QoS. Choose one of the WAN interfaces and click Apply to save the settings. Vigor2960 Series User’s Guide...
Page 314 Description Status Click Enable to enable such function. Bandwidth Type the number as the total transmission rate for the outgoing data. The range can be set from 64000 to 10000000. Click the unit for such rate. Vigor2960 Series User’s Guide...
Page 315 All queues in the data group to be initialized with weights of zero, resulting in a strict service to completion (STC) mechanism across all queues.0. Type the weight of queues in bytes, range from 0 to 1000000. Vigor2960 Series User’s Guide...
Page 316: Qos Rule
Source IP Display the source IP address for the filter. Destination IP Display the destination IP address for the filter. Service Type Display the service type (e.g., IKE, HTTP, AUTH and etc) for the filter. Vigor2960 Series User’s Guide...
Page 317 Available parameters are listed as follows: Item Description Profile Type the name of the filter profile. Enable Check this box to enable such profile. Use the drop down list to specify a suitable match type. Match Type Vigor2960 Series User’s Guide...
Page 318 Source IP Group – Use the drop down list to choose one of the source IP group for such rule profile. If you want to create a new IP object, simply click open the following dialog. Vigor2960 Series User’s Guide...
Page 319 Range as Address Type. Subnet Mask – Choose the subnet mask from the drop down list if you choose Subnet as Address Type. general target Service Type - Choose one of the service types from the drop down list. Vigor2960 Series User’s Guide...
Page 320 Apply Click it to save the configuration and exit the page. Cancel Click it to exit the page without saving the configuration. Enter all the settings and click Apply. A QoS rule profiler has been created. Vigor2960 Series User’s Guide...
Page 321: Sessions Limit
Change the order of selected profile by moving it down. Allow to modify the selected profile name. Rename Profile Display the name of the profile. Enable Display the status of the profile. False means disabled; True means enabled. Vigor2960 Series User’s Guide...
Page 322 Apply Click it to save and exit the dialog. Cancel Click it to discard the settings configured in this page. Open Bandwidth Management>> Sessions Limit. Simply click the Add button. The following dialog will appear. Vigor2960 Series User’s Guide...
Page 323 Source IP Object - Click the triangle icon to display the source target profile selection box. Choose one or more IP object profiles from the drop down list. The selected profile will be treated Vigor2960 Series User’s Guide...
Page 324: Bandwidth Limit
Please use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Management menu, click Bandwidth Limit to open the web page. Each item will be explained as follows: Item Description Vigor2960 Series User’s Guide...
Page 325 Default TX Limit – Define the limitation for the speed of the upstream. Default RX Limit –Define the limitation for the speed of the upstream. Apply Click it to save and exit the dialog. Click it to discard the settings configured in this page. Cancel Vigor2960 Series User’s Guide...
Page 326 Define the limitation for the speed of the downstream. If you do not set the limit in this field, the system will use the default speed for the specific limitation you set for each index. Do not type the value with “0”, otherwise the profile Vigor2960 Series User’s Guide...
Page 327 Apply Click it to save the configuration and exit the dialog. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A bandwidth limit profile has been created. Vigor2960 Series User’s Guide...
Page 328: Temperature Sensor
Upper limit Calibration Type a value used for correcting the temperature error. Apply Click it to save the configuration and exit the dialog. Cancel Click it to exit the dialog without saving the configuration. Vigor2960 Series User’s Guide...
Page 329 Below shows an example of temperature graph: Vigor2960 Series User’s Guide...
Page 330: System Maintenance
TR-069 device through an VigorACS. Each item will be explained as follows: Item Description Enable This Profile Check this box to enable such profile. ACS Server Such data must be typed according to the ACS (Auto Vigor2960 Series User’s Guide...
Page 331 Configuration Server user’s manual for detailed information. WAN Profile Choose one of the WAN profiles which will be recognized by VigorACS. Port Type the port number for Vigor2960 which will be recognized by VigorACS. CPE URL Display the URL of such CPE. Periodic Status The default setting is Enable.
Page 332 Backup Selected Config – The configuration file will be stored with an existing file in local host. You must select which file you want to store. Config File Name The default configuration file name (file format shall be .tgz) Vigor2960 Series User’s Guide...
Page 333 Use the Browse.. button to locate the file for uploading to the router. Restore Click it to upload the selected file to the router. After finishing the restoration, the system will ask you to reboot the router. Vigor2960 Series User’s Guide...
Page 334 Vigor2960 Series User’s Guide...
Page 335: Syslog / Mail Alert
It is available when Remote or Both is selected as Status. Router Name Type the name of the router. The default name is Vigor. Firewall Log Click Enable to make the firewall log recorded in the Syslog. Vigor2960 Series User’s Guide...
Page 336 This page displays all the operation logs for the router. Available parameters are listed as follows: Item Description Refresh Renew the web page. Download Log Save or open the Syslog file. Clear Syslog Remove all of the records. Vigor2960 Series User’s Guide...
Page 337 Send A Test Mail Click it to send a test mail to the specified address. Apply Click this button to save the configuration and exit the web page. Cancel Click it to discard the settings configured in this page. Vigor2960 Series User’s Guide...
Page 338 Click Enable to enable the daylight saving. Such feature is available for certain area. Apply Click this button to save the configuration and exit the web page. Cancel Click it to discard the settings configured in this page. Vigor2960 Series User’s Guide...
Page 339 Click Enable to allow system administrator to login from the user defined IP address and management the web page of the router. If you enable such function, the system can be managed by these three IP addresses via WAN. Vigor2960 Series User’s Guide...
Page 340: Snmp Setup
Click Enable to allow system administrator to ping the router from WAN interface. Block LAN Profile Choose the LAN profile(s) that the IPs controlled under such profile will be blocked by Vigor2960. Allow Ping form LAN Click Enable to allow system administrator to ping the router from LAN interface.
Page 341: Reboot System
Reboot with Customized Click it to reboot the router using the current configuration (only the configuration settings listed and selected below). If Configurations you choose this option, Select Config File will be available for you to select. Vigor2960 Series User’s Guide...
Page 342: Firmware Upgrade
The following web page will guide you to upgrade firmware by using such page. Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 343: Diagnostics
In some cases, a user may need to know some information about the router, such as static or dynamic databases, or other routing information. The Vigor2960 supports five functions, Routing Table, ARP Cache Table, DHCP Assignment Table, NAT Sessions Table and Traffic Graph for the user to review such information.
Page 344 Metric Display the distance to the target (usually counted in hops). It may be needed by routing daemons. Iface Display the direction of such route represented with LAN/WAN profile (starting from LAN/WAN profile to LAN/WAN profile). Vigor2960 Series User’s Guide...
Page 345 Metric Display the distance to the target (usually counted in hops). It may be needed by routing daemons. Iface Display the direction of such route represented with LAN/WAN profile (starting from LAN/WAN profile to LAN/WAN profile). Vigor2960 Series User’s Guide...
Page 346: Arp Cache Table
IP Address Display the IP address for different ARP cache. HW type Display the hardware type of the address from RFC 826. MAC Address Display the MAC address for different ARP cache. C means complete entry. Flags Vigor2960 Series User’s Guide...
Page 347 The system will display the records relating to the keyword. IP Address Display the IPv6 address of the neighbor. Profile Display the interface to which this neighbor is attached. Vigor2960 Series User’s Guide...
Page 348 PROBE - The neighbor is no longer to be reachable, and unicast Neighbor Solicitation probes are being sent to verify reachability. Vigor2960 Series User’s Guide...
Page 349: Dhcp Table
Display the IP address of the static DHCP server. Start Date Display the starting date that DHCP server is activated. Start Time Display the starting time that DHCP server is activated. End Date Display the end date that DHCP server is closed. Vigor2960 Series User’s Guide...
Page 350 Display the interface used by the DHCP server. IPv6 Address Display the IPv6 address of the static DHCP server. Start Time Display the starting time that DHCP server is activated. End Time Display the end time that DHCP server is closed. Vigor2960 Series User’s Guide...
Page 351 Item Description DUID Display the detailed information for DUID. Vigor2960 Series User’s Guide...
Page 352 Display the destination IP address and port of remote host. Display the WAN interface used. Protocol Display the protocol of such NAT session used. State Display the actual state of the TCP connection. Display how long the conntrack entry has to live. Vigor2960 Series User’s Guide...
Page 353: Traffic Graph
Recent 4 Weeks – Display the information of CPU operation about recent 4 weeks. Memory Click the Memory tab. There are three selections provided for you to specify. Recent 24 Hours – Display the information of memory Vigor2960 Series User’s Guide...
Page 354 24 hours. Recent 7 Days – Display the information of WAN operation about recent 7 days. Recent 4 Weeks – Display the information of WAN operation about recent 4 weeks. Below show a graphic for CPU: Vigor2960 Series User’s Guide...
Page 355: Web Console
Click Diagnostics and click Web Console to pen the web page for typing commands used in console connection. A remote user can operate Vigor2960 from this web page without installing and opening other connection utility. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run.
Page 356: Data Flow Monitor
Prevent the specified PC accessing into Internet within 5 minutes. UnBlock Allow the specified PC accessing into Internet within 5 minutes. Recent 1 Hour/ Recent Display the records with 1 hour/24 hours/7 days recently. 24 Hours / Recent 7 Days Vigor2960 Series User’s Guide...
Page 357: External Devices
Vigor router can be used to connect with many types of external devices. In order to control or manage the external devices conveniently, open External Devices to make detailed configuration. Each item will be explained as follows: Item Description Enable External Devices Check the box to detect the external device connected to Vigor2960 Series User’s Guide...
Page 358: Register Vigor Router
Note: Only DrayTek products can be detected by this function. Please refer to section 2.3 Register Vigor Router for more detailed information. Vigor2960 Series User’s Guide...
Page 359: Checking If The Hardware Status Is Ok Or Not
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2960 Series User’s Guide...
Page 360 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2960 Series User’s Guide...
Page 361 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2960 Series User’s Guide...
Page 362 Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2960 Series User’s Guide...
Page 363 Open Online Status to check current network status. Be careful to check if the settings coming from your ISP have been typed correctly or not. Vigor2960 Series User’s Guide...
Page 364 Go to System Maintenance>> Reboot System on the web page. The following screen will appear. Choose the selection you need and click Reboot After few seconds, the router will return all the settings to the factory settings. Vigor2960 Series User’s Guide...
Page 365 If the router settings are correct at all, and the router still does not connect to internet, please contact your ISP technical support representative to help you for configuration. Also, if the router still cannot work correctly, please contact your dealer for help. For any further questions, please send e-mail to support@DrayTek.com. Vigor2960 Series User’s Guide...

Draytek Vigor2960 Series User Manual

Chapter 1: Preface

Chapter 2: Initial Configuration

Chapter 3: Application and Tutorial

Chapter 4: Advanced Configuration

Chapter 5: Trouble Shooting

Quick Links

Troubleshooting

Related Manuals for Draytek Vigor2960 Series

Summary of Contents for Draytek Vigor2960 Series

Table of Contents