Page 2 Vigor2912 Series User’s Guide...
Page 3 Vigor2912 Series Dual-WAN Security Router User’s Guide Version: 1.7 Firmware Version: V3.8.1.3 (For future update, please visit DrayTek web site) Date: September 20, 2016 Vigor2912 Series User’s Guide...
Page 4 Web registration is preferred. You can register your Vigor router via Owner http://www.DrayTek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 5: Regulatory Information
Product: Vigor2912 Series Router DrayTek Corp. declares that Vigor2912 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 6 Vigor2912 Series User’s Guide...
Page 7: Table Of Contents
2.6 Registering Vigor Router....................... 53 Tutorials and Applications.................57 3.1 How to configure settings for IPv6 Service in Vigor2912............57 3.2 How can I get the files from USB storage device connecting to Vigor router? ..... 67 3.3 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec Tunnel (Main Mode) ..........................
Page 8 4.6.4 User Online Status......................219 4.7 Objects Settings ........................220 4.7.1 IP Object ........................221 4.7.2 IP Group ........................224 4.7.3 IPv6 Object ........................225 4.7.4 IPv6 Group........................227 4.7.5 Service Type Object ..................... 228 Vigor2912 Series User’s Guide viii...
Page 9 4.13.6 WDS..........................333 4.13.7 Advanced Setting......................336 4.13.8 Station Control ......................339 4.13.9 AP Discovery ......................340 4.13.10 Airtime Fairness......................341 4.13.11 Station List ........................ 343 4.14 USB Application ........................ 344 4.14.1 USB General Settings....................344 Vigor2912 Series User’s Guide...
Page 10 5.4 Checking If the ISP Settings are OK or Not ................ 400 5.5 Problems for 3G Network Connection ................400 5.6 Backing to Factory Default Setting If Necessary ..............401 5.7 Contacting DrayTek......................403 Appendix I: VLAN Applications on Vigor Router ............405 Vigor2912 Series User’s Guide...
Page 11: Introduction
By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside. Object-based firewall is flexible and allows your network be safe. In addition, Vigor2912 series supports USB interface for connecting USB printer to share printing function or 3G USB modem for network connection.
Page 12: Web Configuration Buttons Explanation
Add new settings for specified item. Edit the settings for the selected item. Delete the selected item with the corresponding settings. Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed explanation. Vigor2912 Series User’s Guide...
Page 13: Led Indicators And Connectors
The data is transmitting. WAN(W2~W1) Internet connection is ready. Internet connection is not ready. Blinking The data is transmitting. The VPN tunnel is active. USB device is connected and ready for use. Blinking The data is transmitting. Vigor2912 Series User’s Guide...
Page 14: Vigor2912/Vigor2912F
Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Vigor2912 Series User’s Guide...
Page 15: Vigor2912N/Vigor2912Fn
The data is transmitting. WAN(W2~W1) Internet connection is ready. Internet connection is not ready. Blinking The data is transmitting. The VPN tunnel is active. USB device is connected and ready for use. Blinking The data is transmitting. Vigor2912 Series User’s Guide...
Page 16 Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button. Then the router will restart with the factory default configuration. Vigor2912 Series User’s Guide...
Page 17: Hardware Installation
Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. (For the hardware connection, we take “n” model as an example.) Vigor2912 Series User’s Guide...
Page 18: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 19 A dialog will appear. Click Add a local printer and click Next. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next. Vigor2912 Series User’s Guide...
Page 20 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next. Click Standard and choose Generic Network Card. Vigor2912 Series User’s Guide...
Page 21 Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. Type a name for the chosen printer. Click Next. Vigor2912 Series User’s Guide...
Page 22 10. Choose Do not share this printer and click Next. 11. Then, in the following dialog, click Finish. Vigor2912 Series User’s Guide...
Page 23 12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties. 13. Edit the property of the new printer you have added by clicking Configure Port. Vigor2912 Series User’s Guide...
Page 24 14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Vigor2912 Series User’s Guide...
Page 25 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.DrayTek.com to find out the printer list. Open Support > FAQ/Application Notes; find out the link of Printer Server and click it;...
Page 26: Accessing Web User Interface
The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor2912 Series User’s Guide...
Page 27: Changing Password
Now, the password has been changed. Next time, use the new password to access the Web user interface for this router. Note: Even the password has been changed, the Username for logging to the web user interface is still “admin”. & & Vigor2912 Series User’s Guide...
Page 28: Web Console
The functions/settings modified under Web Console also can be reviewed on the web user interface. Click the Web Console icon on the top of the main screen to open the following screen. Vigor2912 Series User’s Guide...
Page 29: Config Backup
System Maintenance>>Configuration Backup. Simply click the icon on the top of the main screen and a pop up dialog will appear. Click OK/Save to store the setting. Click the Logout icon to exit the web user interface. Vigor2912 Series User’s Guide...
Page 30: Online Status
Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. Vigor2912 Series User’s Guide...
Page 31 RX Bytes - Displays the speed of received octets at the LAN interface. WAN IPv6 Status Enable – No in red means such interface is available but not enabled. Yes in green means such interface is enabled. No in red means such interface is not available. Vigor2912 Series User’s Guide...
Page 32: Virtual Wan
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2912 Series User’s Guide...
Page 33: Quick Setup
VPN Server Wizard – used for establishing VPN tunnel; the router is treated as a VPN server.  Wireless Wizard – used for building wireless LAN connection. Open Wizards>>Quick Start Wizard. The first screen is entering login password. After typing the password, please click Next. Vigor2912 Series User’s Guide...
Page 34 WAN1/WAN2; if 3G USB modem is used, please choose WAN3. Then click Next for next step. WAN1, WAN2 and WAN3 will bring up different configuration page. Refer to the following for detailed information. Vigor2912 Series User’s Guide...
Page 35: For Wan1 (Ethernet/Fiber) And Wan2 (Ethernet)
WAN1 is dedicated to physical mode in Ethernet (Vigor2912/Vigor2912n) or Fiber (Vigor2912F/Vigor2912Fn). WAN2 is dedicated to physical mode in Ethernet. If you choose WAN1/WAN2 based on Ethernet, please specify physical type. Then, click Next. On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP.
Page 36 Note: The maximum length of the password you can set is 62 characters. Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2912 Series User’s Guide...
Page 37 Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 38 Description User Name Assign a specific valid user name provided by the ISP. Note: The maximum length of the user name you can set is 63 characters. Password Assign a valid password provided by the ISP. Vigor2912 Series User’s Guide...
Page 39 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 40 Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Click it to get into the next setting page. Next Vigor2912 Series User’s Guide...
Page 41 Please type in the IP address information originally provided by your ISP. Then click Next for next step. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 42 Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to enter the MAC address. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Vigor2912 Series User’s Guide...
Page 43 After finished the settings above, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 44: For Wan3 (Usb)
USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of the string you can set is 47 characters. APN Name – APN means Access Point Name which is Vigor2912 Series User’s Guide...
Page 45 Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2912 Series User’s Guide...
Page 46: Service Activation Wizard
Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Page 47 When you finish the selection, please click Next. Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from retailing outlets.
Page 48 The valid time for the free trial of these services is one month. When all the trial editions for various web content filters had been enabled, the configuration page of Service Activation Wizard will be invalid as shown below. Vigor2912 Series User’s Guide...
Page 49: Vpn Client Wizard
Route Mode/NAT Mode – If the remote network only allows you to dial in with single IP, please choose this mode, otherwise please choose Route Mode. Please choose a There are 32 VPN profiles for users to set. LAN-to-LAN Profile Vigor2912 Series User’s Guide...
Page 50 In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. Vigor2912 Series User’s Guide...
Page 51 When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic:  When you choose IPsec, you will see the following graphic:  When you choose L2TP, you will see the following graphic: Vigor2912 Series User’s Guide...
Page 52 When you choose L2TP over IPsec (Nice to Have) or L2TP over IPsec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. Vigor2912 Series User’s Guide...
Page 53 Medium - Authentication Header (AH) means data will be Method authenticated, but not be encrypted. By default, this option is active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You Vigor2912 Series User’s Guide...
Page 54 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2912 Series User’s Guide...
Page 55: Vpn Server Wizard
VPN connection. Please choose a This item is available when you choose Site to Site VPN LAN-to-LAN Profile (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Vigor2912 Series User’s Guide...
Page 56 2. After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. Here we take the examples of choosing Site-to-Site VPN as the VPN Server Mode. Vigor2912 Series User’s Guide...
Page 57 When you check PPTP, you will see the following graphic:  When you check PPTP & IPsec & L2TP (three types) or PPTP&IPsec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2912 Series User’s Guide...
Page 58 Peer IP/VPN Client Type the WAN IP address or VPN client IP address for the remote client. Peer ID Type the ID name for the remote client. The length of the name is limited to 47 characters. Vigor2912 Series User’s Guide...
Page 59 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2912 Series User’s Guide...
Page 60: Wireless Wizard
Item Description Name Type the SSID name of this router for wireless 2.4GHz. The default name is defined with DrayTek. Change the name if required. Mode At present, the router can connect to 11b Only, 11g Only, 11n Only (2.4GHz), Mixed (11b+11g), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously.
Page 61 It controls the data transmission rate through wireless connection. Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbps. Vigor2912 Series User’s Guide...
Page 62 Exit the wireless wizard without saving any changes. 4. After typing the required information, click Next. 5. The following page will display the configuration summary for wireless setting. 6. Click Finish to complete the wireless settings configuration. Vigor2912 Series User’s Guide...
Page 63: Registering Vigor Router
Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login. Vigor2912 Series User’s Guide...
Page 64 When the following page appears, please type in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit. Vigor2912 Series User’s Guide...
Page 65 If you have not activated web content filter service by using Service Activation Wizard, you can activate the service from this step. Please click the serial number link. From the Device’s Service section, click the Trial. Vigor2912 Series User’s Guide...
Page 66 In the following page, check the box of “I have read and accept the above Agreement”. The system will find out the date for you to activate this version of service. Then, click Next. When this page appears, click Register. Wait for a moment until the following page appears. Click Close. Vigor2912 Series User’s Guide...
Page 67: Tutorials And Applications
Note: For the IPv6 service, you have to configure WAN/LAN settings before using the service. For the IPv6 WAN settings for Vigor2912, there are five connection types to be chosen: PPP, TSPC, AICCU, DHCPv6 Client and Static IPv6. Access into the web user interface of Viogr2925. Open WAN>> Internet Access.
Page 68 PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same time Choose PPP and type the information for PPPoE of IPv4. Access into the setting page for IPv6 service, it is not necessary for you to configure anything. Vigor2912 Series User’s Guide...
Page 69 Click OK and open Online Status. If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time. Vigor2912 Series User’s Guide...
Page 70 (In the following figure, the TSPC information is obtained from http://gogo6.com/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2912 Series User’s Guide...
Page 71 (In the following figure, the AICCU information is obtained from https://www.sixxs.net/main/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2912 Series User’s Guide...
Page 72  DHCPv6 Client Choose DHCPv6 Client. Click one of the identity associations and type the IAID number. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2912 Series User’s Guide...
Page 73  Static IPv6 Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2912 Series User’s Guide...
Page 74 In the field of HCPv6 Server Configuration, when DHCPv6 service is enabled, you can assign available IPv6 address for the client manually. Note: When both mechanisms are enabled, the client can determine which mechanism to be used (e.g., the default mechanism for Windows7 is RADVD). Vigor2912 Series User’s Guide...
Page 75 IPv4 IP and IPv6 IP services. Its IPv6 address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7. After getting the above message, it means the IPv6 service has been activated successfully. Vigor2912 Series User’s Guide...
Page 76 If not, only a steady turtle will be seen. If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to access and utilize. Vigor2912 Series User’s Guide...
Page 77: How Can I Get The Files From Usb Storage Device Connecting To Vigor Router
Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable SMB service. Vigor2912 Series User’s Guide...
Page 78 "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2912 Series User’s Guide...
Page 79 Return to USB Application >> USB Disk Status. The information for FTP server will be shown as below. Now, users in LAN of Vigor2912 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management.
Page 80: (Main Mode)
(in this case, type VPN Server), and check the box of Enable This Profile. For Vigor router will be set as a server, the call direction shall be set as Dial-in and set 0 as Idle Timeout. Vigor2912 Series User’s Guide...
Page 81 (e.g., 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote side. Click OK to save the settings. Vigor2912 Series User’s Guide...
Page 82 (in this case, type VPN Client), and check the box of Enable This Profile. For such Vigor router will be set as a client, the call direction shall be set as Dial-out. Check the box of Always on for a permanent VPN connection. Vigor2912 Series User’s Guide...
Page 83 IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the remote side. Click OK to save the settings. Vigor2912 Series User’s Guide...
Page 84: How To Optimize The Bandwidth Through Qos Technology
Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
Page 85 In the pop-up window, choose Range Address as the Address Type and type the start IP address and end IP address in relational fields. Click OK to save the settings and exit the window. Click OK again to save the settings. Vigor2912 Series User’s Guide...
Page 86 The class rule for VoIP has been set. Click OK to return to previous page. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. Vigor2912 Series User’s Guide...
Page 87 10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control. 11. Click OK to save the settings. The class rules for WAN1 are defined as shown below. Vigor2912 Series User’s Guide...
Page 88: Qos Setting Example
Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor2912 Series User’s Guide...
Page 89 E-mail using protocol POP3 and SMTP. Click OK to save the settings. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. Vigor2912 Series User’s Guide...
Page 90 If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. Vigor2912 Series User’s Guide...
Page 91 11. Click Add to open the following window. Check the ACT box, first. 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor2912 Series User’s Guide...
Page 92: How To Use Landing
Landing Page is a special feature configured under User Management. It can specify the message, content to be seen or specify which website to be accessed into when users try to access into the Internet by passing the authentication. Here, we take Vigor2912 series router as an example.
Page 93 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will see the message of Login Success from the browser you use. Vigor2912 Series User’s Guide...
Page 94 Next, enable the Landing Page function. Open User Management -> User Profile and click one of the index number (e.g., index number 3) links. In the following page, check the box of Landing page and click OK to save the settings. Vigor2912 Series User’s Guide...
Page 95 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will be directed into the website of www.draytek.com. Vigor2912 Series User’s Guide...
Page 96: How To Create An Account For Myvigor
The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
Page 97 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. Vigor2912 Series User’s Guide...
Page 98 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2912 Series User’s Guide...
Page 99 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2912 Series User’s Guide...
Page 100: Create An Account Via Myvigor Web Site
11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
Page 101 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. Vigor2912 Series User’s Guide...
Page 102 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2912 Series User’s Guide...
Page 103 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2912 Series User’s Guide...
Page 104: How To Configure Certain Computers Accessing To Internet
Firewall>>Filter Setup is used as the default setting, we has to create a new rule starting from Filter Rule 2 of Set 2. Access into the web user interface of Vigor router. Open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 2 button. Vigor2912 Series User’s Guide...
Page 105 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. Vigor2912 Series User’s Guide...
Page 106 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 107 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor2912 Series User’s Guide...
Page 108: How To Block Facebook Service Accessed By The Users Via Web Content Filter / Url Content Filter
*How to Register AI/AV/AS/WCF Service (Service Activation Wizard) (http://www.draytek.com/user/SupportFAQDetail.php?ID=1955) *How to Activate Anti-Virus/Anti-Intrusion/Anti-Spam Service (http://www.draytek.com/user/SupportFAQDetail.php?ID=286 ) How to use the Web Content Filter (WCF) (http://www.draytek.com/user/SupportFAQDetail.php?ID=1953) * What the Web Content Filter (WCF) license benefits are, (http://www.draytek.com/user/PdInfoDetail.php?Id=110) Vigor2912 Series User’s Guide...
Page 109 Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Enable this profile in Firewall>>General Setup>>Default Rule. Vigor2912 Series User’s Guide...
Page 110 In the field of Contents, please type facebook. Configure the settings as the following figure. Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. Vigor2912 Series User’s Guide...
Page 111 B. Disallow users to play games on Facebook Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Vigor2912 Series User’s Guide...
Page 112 Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. When you finished the above steps, please open Firewall>>General Setup. Vigor2912 Series User’s Guide...
Page 113 Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. Vigor2912 Series User’s Guide...
Page 114 This page is left blank. Vigor2912 Series User’s Guide...
Page 115: Advanced Configuration
These are known as private IP addresses, and are listed in the following ranges: From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 Vigor2912 Series User’s Guide...
Page 116 ISP. For 3G/4G mobile communication through Access Point is popular more and more, Vigor2912 adds the function of 3G/4G network connection for such purpose. By connecting 3G/4G USB Modem to the USB port of Vigor2912, it can support HSDPA/UMTS/EDGE/GPRS/GSM and the future 3G/4G standard (HSUPA, etc).
Page 117: General Setup
Yes in the field of Enable. For Vigor2912/Vigor2912n: For Vigor2912F/Vigor2912Fn: Available settings are explained as follows: Item Description Load Balance Mode This option is available for multiple-WAN for getting enough bandwidth for each WAN port. If you know the Vigor2912 Series User’s Guide...
Page 118 Note: In default, each WAN port is enabled. After finished the above settings, click OK to save the settings. WAN1 is dedicated to physical mode in Ethernet (Vigor2912/Vigor2912n) or Fiber (Vigor2912F/Vigor2912Fn). WAN2 is dedicated to physical mode in Ethernet. Vigor2912 Series User’s Guide...
Page 119 Priority – Type the packet priority number for such VLAN. The range is from 0 to 7. Active Mode Choose Always On to make the WAN1 connection being activated always. Load Balance: Check this box to enable auto load balance function for such WAN interface. Vigor2912 Series User’s Guide...
Page 120 WAN interfaces (checked below) disconnect.  Check boxes for WAN1 to WAN3 – Specify the WAN interface by checking the WAN box. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 121 All of the selected WAN disconnect – Such WAN connection will be activated only when all of selected WAN interfaces (checked below) disconnect.  Check boxes for WAN1 to WAN3 – Specify the WAN interface by checking the WAN box. Vigor2912 Series User’s Guide...
Page 122: Internet Access
This button will open different web page (based on IPv4) Details Page according to the access mode that you choose in WAN interface. Note that Details Page will be changed slightly based on ADSL/VDSL physical mode specified on WAN>>General Setup. Vigor2912 Series User’s Guide...
Page 123 The maximum length of the user name you can set is 63 characters. Password – Type in the password provided by ISP in this field. The maximum length of the password you can set is 62 Vigor2912 Series User’s Guide...
Page 124 “8”. The maximum MTU size is “1500”. After clicking the “detect” button, the system will calculate and get the suitable MTU value such as 1500, 1492, 1484 and etc., automatically.  Detect – Click it to detect a suitable MTU value Vigor2912 Series User’s Guide...
Page 125 Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor2912 Series User’s Guide...
Page 126 PING Interval - Enter the interval for the system to execute the PING operation. Such function allows you to verify whether network WAN Connection connection is alive or not through ARP Detect or Ping Detection Vigor2912 Series User’s Guide...
Page 127 Accept – After clicking it, the detected value will be displayed in the field of MTU. RIP Protocol Routing Information Protocol is abbreviated as RIP （RFC1058）specifying how routers exchange routing tables information. Click Enable RIP for activating this function. Vigor2912 Series User’s Guide...
Page 128 Username: Type a name as username. The maximum length of the user name you can set is 63 characters.  Password: Type a password. The maximum length of the password you can set is 62 characters. Vigor2912 Series User’s Guide...
Page 129 DSL modem on the WAN interface. Enable L2TP - Click this radio button to enable a L2TP client to establish a tunnel to a DSL modem on the WAN interface. Vigor2912 Series User’s Guide...
Page 130 WAN IP Alias - If you have multiple public IP addresses Method(IPCP) and would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses Vigor2912 Series User’s Guide...
Page 131 Specify an IP address – Click this radio button to specify some data.  IP Address – Type the IP address.  Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2912 Series User’s Guide...
Page 132 The maximum length of the string you can set is 47 characters. APN Name APN means Access Point Name which is provided and required by some ISPs. Type the name and click Apply. The maximum length of the name you can set is 43 characters. Vigor2912 Series User’s Guide...
Page 133  Ping Retry – Type the number of times that the system is allowed to execute the PING operation before WAN disconnection is judged. After finishing all the settings here, please click OK to activate them. Vigor2912 Series User’s Guide...
Page 134 APN Name APN means Access Point Name which is provided and required by some ISPs. Type the name and click Apply. The maximum length of the name you can set is 47 characters. Vigor2912 Series User’s Guide...
Page 135 Ping Retry – Type the number of times that the system is allowed to execute the PING operation before WAN disconnection is judged. After finishing all the settings here, please click OK to activate the configuration. Vigor2912 Series User’s Guide...
Page 136 Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Vigor2912 Series User’s Guide...
Page 137 Below shows an example for successful IPv6 connection based on PPP mode. Note: At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan (hinet), the Netherlands, Australia and UK. Vigor2912 Series User’s Guide...
Page 138 Type the password assigned with the user name. The maximum length of the name you can set is 19 characters. Type the address for the tunnel broker IP, FQDN or an Tunnel Broker optional port number. Vigor2912 Series User’s Guide...
Page 139 The maximum length of the name you can set is 19 characters. Password Type the password assigned with the user name. The maximum length of the password you can set is 19 characters. Vigor2912 Series User’s Guide...
Page 140 IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 141 Enable Bridge Mode - If the function is enabled, the router will work as a bridge modem. Enable Firewall – It is available when Bridge Mode is enabled. When both Bridge Mode and Firewall check boxes are enabled, the settings configured (user profiles) under Vigor2912 Series User’s Guide...
Page 142 Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry. Delete – Click it to remove an existed entry. Current IPv6 Address Display current interface IPv6 address. Vigor2912 Series User’s Guide...
Page 143 Management will be ignored. And all of the filter rules defined and enabled in Firewall menu will be activated. Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 144 IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 145 Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode. Vigor2912 Series User’s Guide...
Page 146 Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Vigor2912 Series User’s Guide...
Page 147 After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode. Vigor2912 Series User’s Guide...
Page 148 Check the box to enable the function of DHCP Option. Each DHCP option is composed by an option number with data. For example, Option number:100 Data: abcd When such function is enabled, the specified values for DHCP option will be seen in DHCP reply packets. Vigor2912 Series User’s Guide...
Page 149 DHCP option. Create a new entry and display on the Option List table. Update Edit the existing entry. Remove the existing entry. Delete After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 150: Multi-Vlan
P1 ~ P4 – Check the box(es) to build bridge connection on LAN. SSID 1 ~ SSID 4 – Check the box(es) to build bridge connection on wireless LAN. Click any index (8) to get the following web page: Vigor2912 Series User’s Guide...
Page 151 Moreover, WAN link for Channel 5, 6 and 7 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 5, 6 or 7 to configure your router. Vigor2912 Series User’s Guide...
Page 152 WAN type to be built upon. In the Multi-VLAN application, only the Ethernet WAN type is available. The user will be able to select the physical WAN interface the channel shall use here. Vigor2912 Series User’s Guide...
Page 153 ISP Access Setup, IP For other settings, refer to Details Page for PPPoE in Address From ISP, WAN WAN1. IP Network Settings, DNS Server IP Address After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 154: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2912 Series User’s Guide...
Page 155 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2912 Series User’s Guide...
Page 156: General Setup
LAN must be configured in different subnet. IPv6 – Click it to access into the settings page of IPv6. Advanced DHCP packets can be processed by adding option number and data information when such function is enabled. Vigor2912 Series User’s Guide...
Page 157 Data – Type the content of the data to be processed by the function of DHCP option. Inter-LAN Routing Check the box to link two different subnets (LAN1 and LAN2). After finished the above settings, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 158 LAN. Enable Relay Agent – Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to. DHCP Server IP Address – It is available when Enable Vigor2912 Series User’s Guide...
Page 159 DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: 194.98.0.1 to this field. The default DNS Server IP address can be found via Online Status: Vigor2912 Series User’s Guide...
Page 160 (Default) Enable – activate the RIP protocol. DHCP stands for Dynamic Host Configuration Protocol. DHCP Server The router by factory default acts a DHCP server for your Configuration Vigor2912 Series User’s Guide...
Page 161 Edit – Click it to edit the selected MAC address. Cancel – Click it to cancel the job of adding, deleting and editing. When you finish the configuration, please click OK to save and exit this page. Vigor2912 Series User’s Guide...
Page 162 WAN Primary Interface Use the drop down list to specify a WAN interface for IPv6. Static IPv6 Address IPv6 Address –Type static IPv6 address for LAN. Prefix Length – Type the fixed value for prefix length. Vigor2912 Series User’s Guide...
Page 163 Auto IPv6 Range – The default settings are enabled. If it is disabled, you need to type start and end IPv6 addresses separately. Start IPv6 Address / End IPv6 Address –Type the start and end address for IPv6 server. Vigor2912 Series User’s Guide...
Page 164 Extension WAN – Not only the IP address can be obtained from the primary WAN, but also the prefix for IPv6 LAN IP address can be assigned by extension WAN specified here. When you finish the configuration, please click OK to save and exit this page. Vigor2912 Series User’s Guide...
Page 165: Static Route
The number (1 to 10) under Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Vigor2912 Series User’s Guide...
Page 166 Type the subnet mask for such static route. Use the drop down list to specify an interface for such static Network Interface route. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 167 Displays the destination address of the static route. Status Displays the status of the static route. Click any underline of index number to get the following page. Available settings are explained as follows: Item Description Enable Check it to enable this profile. Vigor2912 Series User’s Guide...
Page 168 1st subnet (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and continuously exchange of IP routing information with different subnets. Vigor2912 Series User’s Guide...
Page 169 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Click OK. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2912 Series User’s Guide...
Page 170: Vlan
Description Click it to enable VLAN configuration. Enable P1 – P4 – Check the LAN port(s) to be grouped under the selected VLAN. SSID1 – SSID4 – Check the SSID boxes to group them Wireless LAN Vigor2912 Series User’s Guide...
Page 171 All the wire network clients are categorized to group VLAN0 in subnet 192.168.1.0/24 (LAN1). All the wireless network clients are categorized to group VLAN1 in subnet 192.168.2.0/24 (LAN2). Open LAN>>VLAN Configuration. Check the boxes according to the statement in step 1 and Step 2. Vigor2912 Series User’s Guide...
Page 172 (isolated) or common (able to communicate with each other). This is ideal for departmental or multi-occupancy applications. Note: As for the VLAN applications, refer to “Appendix I: VLAN Application on Vigor Router” for more detailed information. Vigor2912 Series User’s Guide...
Page 173: Bind Ip To Mac
Select All Click this link to select all the items in the ARP table. Sort Reorder the table based on the IP address. Refresh Refresh the ARP table listed below to obtain the newest ARP table information. Vigor2912 Series User’s Guide...
Page 174 Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. Vigor2912 Series User’s Guide...
Page 175: Lan Port Mirror
Select a port to view traffic sent from mirrored ports. Mirror Port Mirrored port Select which ports are necessary to be mirrored. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 176: Web Portal Setup
Display the number link which allows you to configure the profile. Display the content (Disable, URL Redirect or Message) of the Status profile. Interface Display the applied interfaces of the profile. Preview Open a preview window according to the configured settings. Vigor2912 Series User’s Guide...
Page 177 Button – Define the word (default word is “Continue”) shown on the button.  User must click button to proceed – Check the box to force the user click the button (with the word defined on Vigor2912 Series User’s Guide...
Page 178: Load-Balance /Route Policy
(Failback), the packets will be returned to it immediately.  Other routing. Specify routing policy to determine the direction of the data transmission. Note: For more detailed information about using policy route, refer to Support >>FAQ/Application Notes on www.draytek.com. Vigor2912 Series User’s Guide...
Page 179: General Setup
Use Up or Down link to move the order of the policy. Move UP/Move Down Wizard Mode Allows to configure frequently used settings of route policy via three setting pages Advance Mode Allows to configure detailed settings of route policy. Vigor2912 Series User’s Guide...
Page 180 Available settings are explained as follows: Item Description Interface Use the drop down list to choose a WAN or LAN interface or VPN profile. Packets match with the above criteria will be transferred to the interface chosen here. Vigor2912 Series User’s Guide...
Page 181 It determines which mechanism that the router will use to Routing forward the packet to WAN. 5. After choosing the mechanism, click Next to get the summary page for reference. 6. If there is no error, click Finish to complete wizard setting. Vigor2912 Series User’s Guide...
Page 182 To use Advance Mode, do the following steps: 1. Click the Advance Mode radio button. 2. Click Index 1 to access into the following page. Available settings are explained as follows: Item Description Vigor2912 Series User’s Guide...
Page 183 Usually, Default Gateway is selected in default. Priority Packets will be transmitted based on all routes or Route Policy. Vigor router will determine which rule will be Vigor2912 Series User’s Guide...
Page 184 Gateway IP – Specific gateway is used only when you want to forward the packets to the desired gateway. Usually, Default Gateway is selected in default. When you finish the configuration, please click OK to save and exit this page. Vigor2912 Series User’s Guide...
Page 185 Note: The web user interface will be revised later. Example 1: In the following figure, a LAN to LAN VPN tunnel is built between DrayTek VPN router (e.g., Vigor2925 series) and the remote router. Firewall Router can receive all of the traffic coming from remote PC which wants to access into Internet;...
Page 186 To route the packets coming from the Firewall Router back to the remote router, access into the web user interface of the Firewall Router. Then, set “192.168.1.1/24” as the gateway IP address and set “172.16.3.0/24” as the destination IP address. Vigor2912 Series User’s Guide...
Page 187 Click any index number (e.g., #1 in this case). In the following web page, check Enable; type “192.168.1.10” as Src IP Range; type “213.57.89.100” as the Destination IP for the remote VPN server; and choose VPN as the Interface setting. Vigor2912 Series User’s Guide...
Page 188 Click OK to save the settings. Vigor2912 Series User’s Guide...
Page 189: Diagnose
ICMP/UDP/TCP/ANY- Specify a protocol for diagnosis. Src IP – Type an IP address as the source IP. Dst IP – Type an IP address as the destination IP. Dst Port – Use the drop down list to specify the destination port. Vigor2912 Series User’s Guide...
Page 190 If required, click export analysis to export the result as a file. Note that the analysis was based on the current "load-balance/route policy" settings, we do not guarantee it will be 100% the same as the real case. Vigor2912 Series User’s Guide...
Page 191: Nat
192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor2912 Series User’s Guide...
Page 192: Port Redirection
The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor2912 Series User’s Guide...
Page 193 Select the WAN IP used for port redirection. There are WAN IP eight WAN IP alias that can be selected and used for port redirection. The default setting is All which means all the incoming data from any port will be redirected to specified Vigor2912 Series User’s Guide...
Page 194 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2912 Series User’s Guide...
Page 195: Dmz Host
Click DMZ Host to open the following page. You can set different DMZ host for each WAN interface. Click the WAN tab to switch into the configuration page for that WAN. Available settings are explained as follows: Item Description Vigor2912 Series User’s Guide...
Page 196 WAN1 only. See the following figure. If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN2 interface, you will find them in Aux. WAN IP for your selection. Vigor2912 Series User’s Guide...
Page 197 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 198: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2912 Series User’s Guide...
Page 199 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2912 Series User’s Guide...
Page 200: Port Triggering
The duration that these ports are opened depends on the type of protocol used. The "default" durations are shown below and these duration values can be modified via telnet commands. TCP: 86400 sec. UDP: 180 sec. IGMP: 10 sec. TCP WWW: 60 sec. TCP SYN: 60 sec. Vigor2912 Series User’s Guide...
Page 201 Display if the rule is active or de-active. Click the index number link to open the configuration page. Available settings are explained as follows: Item Description Enable Check to enable this entry. Service Choose the predefined service to apply for such trigger profile. Vigor2912 Series User’s Guide...
Page 202 (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Incoming Port Type the port or port range for the incoming packets. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 203: Firewall
It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2912 Series User’s Guide...
Page 204 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unassigned Numbers 8. Trace route Below shows the menu items for Firewall. Vigor2912 Series User’s Guide...
Page 205: General Setup
Instinctively as a secure firewall, Vigor router will reject these fragmented packets to prevent attack unless you enable “Accept large incoming fragmented UDP or ICMP Packets”. By checking this box, you can play these kinds of on-line games. If security concern is in higher Vigor2912 Series User’s Guide...
Page 206 IPv4 - To prevent remote client accessing into the PCs on LAN, check the box to make the incoming packets via IPv4 being blocked by such router. It is effective only for the packets routed but not for packets translated by NAT. Vigor2912 Series User’s Guide...
Page 207 For detailed information of setting QoS, please refer to the related section later. User Management Such item is available only when Rule-Based is selected in User Management>>General Setup. The general firewall rule will be applied to the user/user group/all users specified Vigor2912 Series User’s Guide...
Page 208 Or click the DNS Filter link in this page to create a new profile. Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here. Vigor2912 Series User’s Guide...
Page 209 However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 210: Filter Setup
Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Vigor2912 Series User’s Guide...
Page 211 Set the direction of packet flow. It is for Data Filter only. Direction For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other Vigor2912 Series User’s Guide...
Page 212 Service Type Click Edit to access into the following dialog to choose a suitable service type. To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In Vigor2912 Series User’s Guide...
Page 213 Sessions Control The number typed here is the total sessions of the packets that do not match the filter rule configured in this page. The Vigor2912 Series User’s Guide...
Page 214 Log box. It will be sent to Syslog server. Please refer to section Syslog/Mail Alert for more detailed information. Select one of the Web Content Filter profile settings Web Content Filter (created in CSM>> Web Content Filter) for applying with Vigor2912 Series User’s Guide...
Page 215 If you do not have any idea of choosing suitable codepage, please open Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Window size – It determines the size of TCP protocol Vigor2912 Series User’s Guide...
Page 216 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
Page 217 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2912 Series User’s Guide...
Page 218: Dos Defense
Check the box to activate the UDP flood defense function. Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router will start to randomly discard the subsequent UDP packets for a period defined in Timeout. Vigor2912 Series User’s Guide...
Page 219 The Vigor router will drop any packets having SYN flag and more fragment bit set. Block Fraggle Attack Check the box to activate the Block fraggle Attack function. Any broadcast UDP packets received from the Internet is blocked. Vigor2912 Series User’s Guide...
Page 220 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2912 Series User’s Guide...
Page 221 After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 222: User Management
Note: Filter rules configured under Firewall usually are applied to the host (the one that the router installed) only. With user management, the rules can be applied to every user connected to the router with customized profiles. Vigor2912 Series User’s Guide...
Page 223: General Setup
Landing Page Type the information to be displayed on the first web page when the LAN user accessing into Internet via such router. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 224: User Profile
To set the user profile, please click any index number link to open the following page. Notice that profile 1 (admin) and profile 2 (System Reservation) are factory default settings. Profile 2 is reserved for future use. Vigor2912 Series User’s Guide...
Page 225 Syslog. Please choose any one of the log items to take down relational records for the user(s). Pop Browser Tracking If such function is enabled, a pop up window will be displayed Window on the screen with time remaining for connection if Idle Vigor2912 Series User’s Guide...
Page 226 – Click this box to decrease the time quota for such profile. Note: A dialog will be popped up to notify how many time remained when a user accesses into Internet through Vigor router successfully. Vigor2912 Series User’s Guide...
Page 227 Default Time Quota – Type the value for the time manually. Default Data Quota – Type the value for the data manually. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 228: User Group
All the available user objects that you have created will be shown in this box. Notice that user object, Admin and Dial-In User are factory settings. User defined profiles will be numbered with 3, 4, 5 and so Vigor2912 Series User’s Guide...
Page 229: User Online Status
IP Address Display the IP address of the device. Profile Display the authority of the account. Last Login Time Display the login time that such user connects to the router last time. Vigor2912 Series User’s Guide...
Page 230: Objects Settings
Unblock – the user will be blocked. Logout – the user will be logged out forcefully. Define objects such as IP address, service type, keyword, file extension and others. These pre-defined objects can be applied in CSM. Vigor2912 Series User’s Guide...
Page 231: Ip Object
Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2912 Series User’s Guide...
Page 232 Select Any Address if this object contains any IP address. Select Mac Address if this object contains Mac address. MAC Address Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. Vigor2912 Series User’s Guide...
Page 233 If it is checked, all the IP addresses except the ones listed Invert Selection above will be applied later while it is chosen. After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. Vigor2912 Series User’s Guide...
Page 234: Ip Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2912 Series User’s Guide...
Page 235: Ipv6 Object
You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2912 Series User’s Guide...
Page 236 Prefix Len Type the number (e.g., 64) for the prefix length of IPv6 address. Invert Selection If it is checked, all the IPv6 addresses except the ones listed above will be applied later while it is chosen. Vigor2912 Series User’s Guide...
Page 237: Ipv6 Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2912 Series User’s Guide...
Page 238: Service Type Object
Display the profile number that you can configure. Name Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. Vigor2912 Series User’s Guide...
Page 239 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 240: Service Type Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Vigor2912 Series User’s Guide...
Page 241: Keyword Object
Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Display the profile number that you can configure. Index Name Display the name of the object profile. Vigor2912 Series User’s Guide...
Page 242 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 243: Keyword Group
To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Vigor2912 Series User’s Guide...
Page 244: File Extension Object
Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2912 Series User’s Guide...
Page 245 Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2912 Series User’s Guide...
Page 246 Display the service provider which offers SMS service. To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. Vigor2912 Series User’s Guide...
Page 247 Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 248 Provider. You have to contact your SMS provider to obtain the exact URL string. Username Type a user name that the sender can use to register to selected SMS provider. The maximum length of the name you can set is 31 Vigor2912 Series User’s Guide...
Page 249: Sms/Mail Service Object
Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Vigor2912 Series User’s Guide...
Page 250 Username – Type a name for authentication. The maximum length of the name you can set is 31 characters. Password – Type a password for authentication. The maximum length of the password you can set is 31 characters. Vigor2912 Series User’s Guide...
Page 251: Notification Object
Display the category selected for such profile. To set a new profile, please do the steps listed below: 1. Open Object Setting>>Notification Object, and click the number (e.g., #1) under Index column for configuration in details. Vigor2912 Series User’s Guide...
Page 252 Display the types that will be monitored. Status Display the status for the category. You can check the box you want to be monitored. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 253: Csm Profile
Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor2912 Series User’s Guide...
Page 254: App Enforcement Profile
Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and OTHERS displayed on this page. Each tab will bring out different items that you can choose to disallow people using. Vigor2912 Series User’s Guide...
Page 255 Pass – Pass all the packets with the settings configured in this page. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Vigor2912 Series User’s Guide...
Page 256 The items categorized under P2P ----- Vigor2912 Series User’s Guide...
Page 257: Url Content Filter Profile
At office, URL Content Filter can also provide a job-related only environment hence to increase the employee work efficiency. How can URL Content Filter work better than traditional firewall in the field of filtering? Because it checks Vigor2912 Series User’s Guide...
Page 258 Administration Message. You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Vigor2912 Series User’s Guide...
Page 259 Control and Web Feature below, such function can determine the priority for the actions executed. For this one, the router will process the packages with the conditions set below for web feature first, then URL second. Vigor2912 Series User’s Guide...
Page 260 Group/Object Selections – The Vigor router provides several frames for users to define keywords and each frame supports multiple keywords. The keyword could be a noun, a partial noun, or a complete URL string. Multiple Vigor2912 Series User’s Guide...
Page 261 Upload – Check the box to block the file upload by way of web page. File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Objects previously for passing or blocking the file Vigor2912 Series User’s Guide...
Page 262: Web Content Filter Profile
Please refer to section of creating MyVigor account. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
Page 263 Setup Test Server It is recommended for you to use the default setting, auto-selected. Click it to open http://myvigor.draytek.com for searching Find more another qualified and suitable server. Test a site to verify Click this link to do the verification.
Page 264 If you have and activate another web content filter license, the items will be changed simultaneously. All of the configuration made for web content filter will be deleted automatically. Therefore, please backup your data before you change the web content filter license. Vigor2912 Series User’s Guide...
Page 265 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 266: Dns Filter Profile
Pass – Only the log about Pass will be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. Vigor2912 Series User’s Guide...
Page 267 Set the time for DNS query. Cache Time (hour) Administration Message Type the words or sentences which will be displayed when a web page is blocked by Vigor router. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 268: Bandwidth Management
To activate the function of limit session, simply click Enable and set the default session limit. Available settings are explained as follows: Item Description Session Limit Enable - Click this button to activate the function of limit session. Disable - Click this button to close the function of limit Vigor2912 Series User’s Guide...
Page 269 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 270: Bandwidth Limit
Disable - Click this button to close the function of limit bandwidth. Default TX limit - Define the default speed of the upstream for each computer in LAN. Default RX limit - Define the default speed of the Vigor2912 Series User’s Guide...
Page 271 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2912 Series User’s Guide...
Page 272: Quality Of Service
The core routers in the backbone will do the same checking before executing treatments in order to ensure service-level consistency throughout the whole QoS-enabled network. Vigor2912 Series User’s Guide...
Page 273 Direction – Display which direction that such function will influence. Class 1/Class2/Class 3/Others – Display the bandwidth percentage for each class. UDP Bandwidth Control –Display the UDP bandwidth control is enabled or not. Online Statistics –Display an online statistics for quality of Vigor2912 Series User’s Guide...
Page 274 There are four queues allowed for QoS control. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Vigor2912 Series User’s Guide...
Page 275 Enable UDP Bandwidth Check this and set the limited bandwidth ratio on the right Control field. This is a protection of TCP application traffic since UDP application traffic such as streaming video will exhaust lots of bandwidth. Vigor2912 Series User’s Guide...
Page 276 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2912 Series User’s Guide...
Page 277 QoS control. It can also be edited. You can choose the predefined service type from the Service Type drop down list. Those types are predefined in factory. Simply choose the one that you want for using by current QoS. Vigor2912 Series User’s Guide...
Page 278 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. Vigor2912 Series User’s Guide...
Page 279 For example, in the following illustration, the VoIP packets in LAN go into Vigor router without any header. However, when they go forward to the Server on ISP through Vigor router, all of the packets are tagged with AF (configured in Bandwidth >>QoS>>Class) automatically. Vigor2912 Series User’s Guide...
Page 280: Applications
DDNS service providers such as www.dyndns.org, www.no-ip.com, www.dtdns.com, www.changeip.com, www.dynamic- nameserver.com. You should visit their websites to register your own domain name for the router. Enable the Function and Add a Dynamic DNS Account Vigor2912 Series User’s Guide...
Page 281 Account, and choose correct Service Provider: dyndns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. Vigor2912 Series User’s Guide...
Page 282 Type in the password that you set for applying domain. Wildcard and The Wildcard and Backup MX (Mail Exchange) features Backup MX are not supported for all Dynamic DNS providers. You could get more detailed information from their websites. Vigor2912 Series User’s Guide...
Page 283 Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. Vigor2912 Series User’s Guide...
Page 284: Lan Dns
FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2912 series will respond the specified private IP address.
Page 285 The IP address listed here will be used for mapping with the domain name specified above. In general, one domain name maps with one IP address. If required, you can configure two IP addresses mapping with the same domain name. Vigor2912 Series User’s Guide...
Page 286 Delete – Click it to remove an existed IP address on the list. Click OK button to save the settings. If you need to configure LAN DNS settings, click index 1 to edit the LAN DNS profile just created. Vigor2912 Series User’s Guide...
Page 287: Schedule
You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule: Click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. Vigor2912 Series User’s Guide...
Page 288 How often -Specify how often the schedule will be applied. Once -The schedule will be applied just once. Weekdays -Specify which days in one week should perform the schedule. Click OK button to save the settings. Vigor2912 Series User’s Guide...
Page 289: Radius
Check to enable RADIUS client feature. Enable Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using. The default value is 1812, based on RFC 2138. Vigor2912 Series User’s Guide...
Page 290: Active Directory/ Ldap
LDAP to search or list the directory object, inquire or manage the active directory. This page allows you to create several profiles, enable the function and specify general settings for LDAP server. Available settings are explained as follows: Item Description Enable Check to enable such function. Vigor2912 Series User’s Guide...
Page 291 Specify a password if Regular Mode is selected as Bind Type. After finished the above settings, click OK button to save the settings. You can configure eight AD/LDAP profiles. These profiles would be used with User Management for different purposes in management. Vigor2912 Series User’s Guide...
Page 292 AD/LDAP Server to assist you finish the setup. After finished the above settings, click OK to save and exit this page. A new profile has been created. Vigor2912 Series User’s Guide...
Page 293: Upnp
Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2912 Series User’s Guide...
Page 294: Igmp
This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P4 It indicates the LAN port used for the multicast group. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 295: Wake On Lan
MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2912 Series User’s Guide...
Page 296: Sms / Mail Alert Service
Available settings are explained as follows: Item Description Index Check the box to enable such profile. SMS Provider Use the drop down list to choose SMS service provider. You can click SMS Provider link to define the SMS server. Vigor2912 Series User’s Guide...
Page 297 You can click the Notify Profile link to define the content of the mail message. Schedule Type the schedule number that the notification will be sent out. Vigor2912 Series User’s Guide...
Page 298: Bonjour
Below shows an example for applying the bonjour feature that Vigor router can be used as the FTP server. 1. Here, we use Firefox and DNSSD to discover the service in such case. Therefore, just ensure the Bonjour client program and DNSSD for Firefox have been installed on the computer. Vigor2912 Series User’s Guide...
Page 299 (DNSSD) and see the following results. 3. Open System Maintenance>>Management. Type a name (e.g., Vigor Router) as the Router Name and click OK. 4. Next, open Applications>>Bonjour. Check the service that you want to use via Bonjour. Vigor2912 Series User’s Guide...
Page 300 Vigor router (based on Bonjour protocol) is ready to be used as a printer server, FTP server, SSH Server, Telnet Server, and HTTP Server. 6. Now, any page or document can be printed out through Vigor router (installed with a printer). Vigor2912 Series User’s Guide...
Page 301: Vpn And Remote Access
LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 302: Ppp General Setup
The Mutual Authentication function is mainly used to Mutual Authentication (PAP) communicate with other routers or clients who need bi-directional authentication in order to provide stronger security, for example, Cisco routers. So you should enable this function when your peer router requires mutual Vigor2912 Series User’s Guide...
Page 303 While using Radius or If PPP connection will be authenticated via RADIUS server LDAP Authentication or LDAP profiles, it is necessary to specify the LAN profile for the dial-in user to get IP from. Vigor2912 Series User’s Guide...
Page 304: Ipsec General Setup
This usually applies to those are remote dial-in user or node Method (LAN-to-LAN) which uses dynamic IP address and IPsec-related VPN connections such as L2TP over IPsec and IPsec tunnel. Pre-Shared Key- Specify a key for IKE authentication. Vigor2912 Series User’s Guide...
Page 305 High (ESP) - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 306: Ipsec Peer Identity
Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2912 Series User’s Guide...
Page 307 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 308: Remote Dial-In User
Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. Vigor2912 Series User’s Guide...
Page 309 IPsec VPN connection through Internet. L2TP with IPsec Policy - Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPsec. Select from Vigor2912 Series User’s Guide...
Page 310 (1-63) as the pre-shared key. Digital Signature (X.509) – Check the box of Digital Signature to invoke this function and Select one predefined Profiles set in the VPN and Remote Access >>IPsec Peer Vigor2912 Series User’s Guide...
Page 311: Lan To Lan
L2TP by itself or over IPsec) and corresponding security methods, etc. The router supports up to 32 VPN tunnels simultaneously. The following figure shows the summary table. The following figure shows the summary table according to the item (All/Trunk) selected for View. Vigor2912 Series User’s Guide...
Page 312 LAN-to-LAN profile includes 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. For the web page is too long, we divide the page into several sections for explanation. Vigor2912 Series User’s Guide...
Page 313 LAN-to-LAN connection. Enable this profile - Check here to activate this profile. VPN Dial-Out Through - Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. Vigor2912 Series User’s Guide...
Page 314 Idle Timeout: The default value is 300 seconds. If the connection has been idled over the value, the router will drop the connection. Enable PING to keep alive - This function is to help the router to determine the status of IPsec VPN connection, Vigor2912 Series User’s Guide...
Page 315 PPP Authentication - This field is applicable when you select, PPTP or L2TP with or without IPsec policy above. PAP/CHAP/MS-CHAP/MS-CHAP2 is the most common selection due to wild compatibility. VJ compression - This field is applicable when you select Vigor2912 Series User’s Guide...
Page 316 AES with Authentication-Use AES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. Advanced - Specify mode, proposal and key life of each IKE phase, Gateway, etc. The window of advance setup is shown as below: Vigor2912 Series User’s Guide...
Page 317 Index(1-15) - Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. Vigor2912 Series User’s Guide...
Page 318 Accordingly, the VPN connection employed the L2TP without IPsec policy can be viewed as one pure L2TP connection.  Nice to Have - Apply the IPsec policy first, if it is applicable during negotiation. Otherwise, the Vigor2912 Series User’s Guide...
Page 319 IPsec Security Method - This group of fields is a must for IPsec Tunnels and L2TP with IPsec Policy when you specify the remote node.  Medium- Authentication Header (AH) means data will be authenticated, but not be encrypted. By default, this option is active. Vigor2912 Series User’s Guide...
Page 320 More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. Vigor2912 Series User’s Guide...
Page 321 IP, please choose NAT, otherwise choose Route. Change default route to this VPN tunnel - Check this box to change the default route with this VPN tunnel. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 322: Vpn Trunk Management
VPN tunnel is off-line. Before setting VPN TRUNK backup profile, please configure at least two sets of LAN-to-LAN profiles (with fully configured dial-out settings) first, otherwise you will not have selections for grouping Member1 and Member2. Vigor2912 Series User’s Guide...
Page 323 Member 1/Member2 - Display the selection for LAN-to-LAN dial-out profiles (configured in VPN and Remote Access >> LAN-to-LAN) for you to choose for grouping under certain VPN TRUNK-VPN Backup mechanism profile.  No - Index number of LAN-to-LAN dial-out profile. Vigor2912 Series User’s Guide...
Page 324 Member2. For such reason, LAN-to-LAN profiles of 1 and 2 will be expressed in red to indicate that they are fixed. If you delete the VPN TRUNK – VPN Backup mechanism profile, the selected LAN-to-LAN profiles will be released and expressed in black. Vigor2912 Series User’s Guide...
Page 325 Peer GRE IP. See the following graphic for an example. Later, on peer side (as VPN Client): please type 192.168.50.100 in the field of My GRE IP and type IP address of the server (192.168.50.200) in the field of Peer GRE IP. Vigor2912 Series User’s Guide...
Page 326: Connection Management
Drop button. You may also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Available settings are explained as follows: Item Description Dial-out Tool General Mode - This filed displays the profile configured in LAN-to-LAN (with Index number and VPN Server IP Vigor2912 Series User’s Guide...
Page 327: Certificate Management
Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor2912 Series User’s Guide...
Page 328: Local Certificate
Click this button to open Generate Certificate Signing Request window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE again. Vigor2912 Series User’s Guide...
Page 329 Vigor router allows you to generate a certificate request and submit it the CA server, then import it as “Local Certificate”. If you have already gotten a certificate from a third party, you may import it directly. The supported types are PKCS12 Certificate and Certificate with a private key. Vigor2912 Series User’s Guide...
Page 330 CA server and enter the page of certificate request, copy the information into it and submit a request. A new certificate will be issued to you by the CA server. You can save it. Click this button to remove the selected certificate. Vigor2912 Series User’s Guide...
Page 331: Trusted Ca Certificate
Trusted CA Certificate window. For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2912 Series User’s Guide...
Page 332: Certificate Backup
Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Confirm password. Also, you can use Restore to retrieve these two settings to the router whenever you want. Vigor2912 Series User’s Guide...
Page 333: Wireless Lan
SSID as identification, located channel etc. Vigor router supports four SSID settings for wireless connections. Each SSID can be defined with different name and download/upload rate for selecting by stations connected to the router wirelessly. Vigor2912 Series User’s Guide...
Page 334 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor2912 Series User’s Guide...
Page 335: General Setup
At present, the router can connect to 11b Only, 11g Only, Mode 11n Only(2.4 GHz), Mixed (11b+11g), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mixed (11b+11g+11n) mode. Means the channel of frequency of the wireless LAN. The Channel Vigor2912 Series User’s Guide...
Page 336 You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 337: Security
By clicking the Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Available settings are explained as follows: Item Description Mode There are several modes provided for you to choose. Vigor2912 Series User’s Guide...
Page 338 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, such as 0x4142434445.) Vigor2912 Series User’s Guide...
Page 339: Access Control
SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN. For example, they can be grouped under SSID 1 and SSID 2 at the same time Vigor2912 Series User’s Guide...
Page 340: Wps
He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. There are two methods to do network connection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code. Vigor2912 Series User’s Guide...
Page 341 For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security, you will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again. Vigor2912 Series User’s Guide...
Page 342 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2912 Series User’s Guide...
Page 343: Wds
In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Vigor2912 Series User’s Guide...
Page 344 Available settings are explained as follows: Item Description Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Vigor2912 Series User’s Guide...
Page 345 Disable to cancel this function. Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 346: Advanced Setting
Aggregation MSDU combine frames with different Aggregation MSDU can sizes. It is used for improving MAC layer’s performance for some brand’s clients. The default setting is Enable. Vigor2912 Series User’s Guide...
Page 347 There are four accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM. To apply WMM parameters for wireless data transmission, please click the Enable radio button. Vigor2912 Series User’s Guide...
Page 348 Set the RTS threshold of wireless radio. Do not modify default value if you don’t know what it is, default value is 2347. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 349: Station Control
SSID will be listed on Station Control List. WEB Portal Setup Click it to access in to LAN>>Web Portal Setup page for modifying the settings if required. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 350: Ap Discovery
AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2912 Series User’s Guide...
Page 351: Airtime Fairness
(A/B) by controlling TX traffic. In the following figure, Station B(11n) has higher probability to send data packets than Station A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by Station A(slow rate). Vigor2912 Series User’s Guide...
Page 352 Airtime Fairness – Click the link to display the following screen of airtime fairness note. Triggering Client Number –Airtime Fairness function is applied only when active station number achieves this number. After finishing this web page configuration, please click OK to save the settings. Vigor2912 Series User’s Guide...
Page 353: Station List
WLAN station and click Add to Access Control below. Available settings are explained as follows: Item Description Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2912 Series User’s Guide...
Page 354: Usb Application
Vigor router, please make sure the memory format for the USB storage disk is FAT16 or FAT32. It is recommended for you to use FAT32 for viewing the filename completely (FAT16 cannot support long filename). Available settings are explained as follows: Item Description Vigor2912 Series User’s Guide...
Page 355 ; : " < > * + = \ | ?. Workgroup Name – Type a name for the workgroup. Host Name – Type the host name for the router. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 356: Usb User Management
FTP client software and type the username specified here for accessing into USB storage disk. The length of the name is limited to 11 characters. Note: “Admin” could not be typed here as username, for Vigor2912 Series User’s Guide...
Page 357 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB storage disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor2912 Series User’s Guide...
Page 358: File Explorer
Click this icon to add a new folder. Create Current Path Display current folder. Upload Click this button to upload the selected file to the USB storage disk. The uploaded file in the USB diskette can be shared for other user through FTP. Vigor2912 Series User’s Guide...
Page 359: Usb Device Status
Username It displays the username that user uses to login to the FTP server. When you insert USB storage disk into the Vigor router, the system will start to find out such device within several seconds. Vigor2912 Series User’s Guide...
Page 360: Modem Support List
Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router. SMB Client Support List provides the test status information for applications with file sharing operated under different platforms. Vigor2912 Series User’s Guide...
Page 361: System Maintenance
Below shows the menu items for System Maintenance. The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Vigor2912 Series User’s Guide...
Page 362 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. Vigor2912 Series User’s Guide...
Page 363: 353
Please refer to Auto Configuration Server user’s manual for detailed information. Test With Inform – Click it to send a message based on the event code selection to test if such CPE is able to communicate with VigorACS SI server. Vigor2912 Series User’s Guide...
Page 364 VigorAP.  AP Password – Type the password of the VigorAP that you want to apply Vigor2912’s TR-069 settings. After finishing all the settings here, please click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 365: Administrator Password
This feature allows other user in LAN who can access into the web user interface with the same privilege of the administrator. Local User – Check the box to enable the local user configuration. Local User List – It displays the username of the local user. Vigor2912 Series User’s Guide...
Page 366 LDAP Profile Setup. LDAP Profile Setup – It allows you to create a new LDAP profile. When you click OK, the login window will appear. Please use the new password to access into the web user interface again. Vigor2912 Series User’s Guide...
Page 367: User Password
Below shows an example for accessing into User Operation with User Password. 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. Vigor2912 Series User’s Guide...
Page 368 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2912 Series User’s Guide...
Page 369 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Note: Setting in User Mode can be configured as same as in Admin Mode. Vigor2912 Series User’s Guide...
Page 370: Login Page Title
Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Type words or sentences here. It will be displayed for Welcome Message and bulletin message.
Page 371 Below shows an example of login customization with the information typed in Login Description and Bulletin. Vigor2912 Series User’s Guide...
Page 372: Configuration Backup
Such function can be used to apply the router settings configured by Vigor2910 to Vigor2912. Follow the steps below to backup your configuration. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Available settings are explained as follows:...
Page 373 Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Vigor2912 Series User’s Guide...
Page 374 Click Choose File button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2912 Series User’s Guide...
Page 375: Syslog/Mail Alert
Enable syslog message - Check the box listed on this web page to send the corresponding message of firewall, VPN, User Access, Call, WAN, Router/DSL information to Syslog. AlertLog Setup Check Enable to activate function of alert log. Vigor2912 Series User’s Guide...
Page 376 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2912 Series User’s Guide...
Page 377 Vigor2912 Series User’s Guide...
Page 378: Time And Date
Select the time zone where the router is located. Time Zone Enable Daylight Saving Check the box to enable the daylight saving. Such feature is available for certain area. Advanced – Click it to open a pop up dialog. Vigor2912 Series User’s Guide...
Page 379 Use the default time setting or set user defined time for your requirement. Select a time interval for updating from the NTP server. Automatically Update Interval Click OK to save these settings. Vigor2912 Series User’s Guide...
Page 380: Snmp
Manager Host IP (IPv6) Set one host as the manager to execute SNMP function. Please type in IPv6 address to specify certain host. Trap Community Set trap community by typing a proper name. The default setting is public. Vigor2912 Series User’s Guide...
Page 381 Privacy Algorithm Choose one of the methods listed below as the privacy algorithm. Privacy Password Type a password for privacy. The maximum length of the text is limited to 23 characters. Click OK to save these settings. Vigor2912 Series User’s Guide...
Page 382: Management
Type in the router name provided by ISP. Default: Disable If it is enabled, the function of auto-logout for web user Auto-Logout interface will be disabled. The web user interface will be open until you click the Logout icon manually. Vigor2912 Series User’s Guide...
Page 383 Device Management Check the box to enable the device management function for Vigor2912. Respond to external device – If it is enabled, Vigor2912 will be regarded as slave device. When the external device (master device) sends request packet to Vigor2912,...
Page 384 A maximum of three IPs/subnet masks is allowed. IPv6 Address /Prefix Length- Indicate the IP address(es) allowed to login to the router. After finished the above settings, click OK to save the configuration. Vigor2912 Series User’s Guide...
Page 385: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2912 Series User’s Guide...
Page 386: Firmware Upgrade
Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com. Click System Maintenance>> Firmware Upgrade to launch the Firmware Upgrade Utility. Choose the right firmware by clicking Choose File. Then, click Upgrade. The system will upgrade the firmware of the router automatically.
Page 387: Activation
The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. As for authentication information of web filter, the process Authentication Message of authenticating will be displayed on this field for your reference. Vigor2912 Series User’s Guide...
Page 388 Below shows the successful activation of Web Content Filter: Vigor2912 Series User’s Guide...
Page 389: Diagnostics
(e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2912 Series User’s Guide...
Page 390: Routing Table
Click Diagnostics and click Routing Table to open the web page. And, Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2912 Series User’s Guide...
Page 391: Arp Cache Table
The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Vigor2912 Series User’s Guide...
Page 392: Dhcp Table
It displays the connection item number. IP Address It displays the IP address assigned by this router for specified PC. MAC Address It displays the MAC address for the specified PC that DHCP assigned IP address for it. Vigor2912 Series User’s Guide...
Page 393: Nat Sessions Table
It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. Vigor2912 Series User’s Guide...
Page 394: Dns Cache Table
Click OK to enable such function. It means when the TTL value of each DNS query reaches the threshold of the value specified here, the corresponding record will be deleted from router’s Cache automatically. Vigor2912 Series User’s Guide...
Page 395: Ping Diagnosis
Use the drop down list to choose the destination that you want to ping. IP Address Type the IP address of the Host/IP that you want to ping. Ping IPv6 Address Type the IPv6 address that you want to ping. Vigor2912 Series User’s Guide...
Page 396: Data Flow Monitor
Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Available settings are explained as follows: Item Description Enable Data Flow Check this box to enable this function. Vigor2912 Series User’s Guide...
Page 397 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2912 Series User’s Guide...
Page 398: Traffic Graph
WAN1/WAN2/WAN3 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2912 Series User’s Guide...
Page 399: Trace Route
Click one of them to display corresponding information for Trace through Use the drop down list to choose the interface that you want to ping through. Protocol Use the drop down list to choose the protocol that you want to ping through. Vigor2912 Series User’s Guide...
Page 400: Syslog Explorer
Display Mode There are two modes for you to choose. Stop record when fulls – when the capacity of syslog is full, the system will stop recording. Always record the new event – only the newest events Vigor2912 Series User’s Guide...
Page 401: Ipv6 Tspc Status
If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Available settings are explained as follows: Item Description Refresh Click this link to refresh this page manually. Vigor2912 Series User’s Guide...
Page 402: Dos Flood Table
Moreover, IP address detected and suspected to attack the network system can be blocked shortly by clicking the Block button shown on pages of SYN Flood, UDP Flood and ICMP Flood. Note: The icon - - means there is something wrong (e.g., attacking the system) with that IP address. Vigor2912 Series User’s Guide...
Page 403 IP list in the right frame will be blocked by Vigor system permanently. Remove – It is used to remove selected IP address from the Blocking IP List. Refresh Click this link to refresh current page. Vigor2912 Series User’s Guide...
Page 404: External Devices
You can change the device name if required or remove the information for off-line device whenever you want. When you finished the configuration, click OK to save it. Note: Only DrayTek products can be detected by this function. Vigor2912 Series User’s Guide...
Page 405: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2912 Series User’s Guide...
Page 406 Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. Vigor2912 Series User’s Guide...
Page 407 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. Vigor2912 Series User’s Guide...
Page 408 Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2912 Series User’s Guide...
Page 409: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2912 Series User’s Guide...
Page 410: Checking If The Isp Settings Are Ok Or Not
When you have trouble in using 3G network transmission, please check the following: You have to wait about 15 seconds after inserting 3G USB Modem into your Vigor2912. Later, the USB LED will light on which means the installation of USB Modem is successful. If the USB LED does not light on, please remove and reinsert the modem again.
Page 411: Backing To Factory Default Setting If Necessary
Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor2912. In addition, please refer to the manual of 3G USB Modem for LED Status to make sure if the modem connects to Internet via HSDPA mode. If you want to use the modem indoors, please put it on the place near the window to obtain better signal receiving.
Page 412 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the factory default setting, you can configure the settings for the router again to fit your personal request. Vigor2912 Series User’s Guide...
Page 413: Contacting Draytek
If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor2912 Series User’s Guide...
Page 414 This page is left blank. Vigor2912 Series User’s Guide...
Page 415: Appendix I: Vlan Applications On Vigor Router
VLAN helps you to solve these situations, and DrayTek’s products support bellow two popular types: It uses a matrix table of the physical ports to define the traffics how to exchange between each port, and the traffics will be isolated from the ports are not being ticked in the same line.
Page 416 P1 and P2 are doing NAT flow to access to the internet, but P3 and P4 will forward the packets between WAN and LAN ports directly. So far, there are two kinds of open system on Vigor router. One is DrayOS, which is DrayTek owned, and another is Linux-like which customized by DrayTek from OpenWRT. Here...
Page 417 DrayOS system is going to be introduced to you because it is the most stable and superfast booting system in DrayTek products. If the UI style of yours is different from the following. It may not DrayOS system with new web style or maybe the Linux-like model.
Page 418  Multi Subnet (VLAN of LAN) Vigor2912 Series User’s Guide...
Page 419 The benefit of Port-based is able to extend the wired ports by installing a cheaper dumb switch as many as you need, but Tag-based offers you a flexible and well-managed network. The networks are isolated, secured and reduce the broadcasting storm effectively in each of networks with VLAN.  Guest Network Vigor2912 Series User’s Guide...
Page 420 However, a switch support VLAN function is need if VLAN Tag enabled.  Triple Play (Multi-WAN) NAT mode with VLAN Vigor2912 Series User’s Guide...
Page 421 Following settings, the set-top box (STB) is able to attach with any LAN port. Video streaming which your ISP provided will be played on your monitor. Vigor2912 Series User’s Guide...
Page 422 Set-top box (STB) or the other kinds of media devices are able to attach with Port4 or Port5 of LAN. Those devices that attached with Port4 or Port5 are able to access the services network directly which your ISP provided. Vigor2912 Series User’s Guide...

This manual is also suitable for:

Vigor2912f Vigor2912n Vigor2912fn

Draytek Vigor2912 User Manual

Quick Links

Related Manuals for Draytek Vigor2912

Summary of Contents for Draytek Vigor2912