Draytek Vigor2132 Series User Manual

Draytek Vigor2132 Series User Manual

Security giga router, vigor2132 series
Table of Contents

Advertisement

Advertisement

Table of Contents
loading

Summary of Contents for Draytek Vigor2132 Series

  • Page 2 Vigor2132 Series Security Giga Router User’s Guide Version: 1.4 Firmware Version: V3.7.9 (For future update, please visit DrayTek web site) Date: August 28, 2017 Vigor2132 Series User’s Guide...
  • Page 3 Web registration is preferred. You can register your Vigor router via Owner http://www.dayTek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
  • Page 4: Table Of Contents

    3.2 How can I get the files from USB storage device connecting to Vigor router? ..... 71 3.3 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPSec Tunnel (Main Mode) ..........................73 Vigor2132 Series User’s Guide...
  • Page 5 4.4.3 Open Ports........................198 4.4.4 Port Triggering ......................200 4.4.5 ALG..........................203 4.5 Hardware Acceleration ......................204 4.5.1 Setup..........................204 4.6 Firewall ..........................206 4.6.1 Basics for Firewall......................206 4.6.2 General Setup....................... 208 4.6.3 Filter Setup ........................213 Vigor2132 Series User’s Guide...
  • Page 6 4.12.7 Connection Management ................... 319 4.13 Certificate Management ....................319 4.13.1 Local Certificate ......................320 4.13.2 Trusted CA Certificate ....................322 4.13.3 Certificate Backup....................... 324 4.14 VoIP........................... 325 4.14.1 DialPlan ........................327 4.14.2 SIP Accounts ......................335 Vigor2132 Series User’s Guide...
  • Page 7 4.18.7 DNS Cache Table....................... 407 4.18.8 Ping Diagnosis......................408 4.18.9 Data Flow Monitor....................... 409 4.18.10 Traffic Graph......................411 4.18.11 Trace Route ......................412 4.18.12 Syslog Explorer......................413 4.18.13 IPv6 TSPC Status..................... 414 4.19 External Devices ....................... 415 Trouble Shooting..................417 Vigor2132 Series User’s Guide...
  • Page 8 5.3 Pinging the Router from Your Computer ................421 5.4 Checking If the ISP Settings are OK or Not ................ 422 5.5 Backing to Factory Default Setting If Necessary ..............422 5.6 Contacting DrayTek......................423 Vigor2132 Series User’s Guide viii...
  • Page 9: Introduction

    Vigor2132 Series integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. The entertainment applications running over the home network infrastructure and home-based productivity for SOHO are growing while the broadband bandwidth is increasingly available within affordable budget along with deployment of FTTx.
  • Page 10: Web Configuration Buttons Explanation

    Add new settings for specified item. Edit the settings for the selected item. Delete the selected item with the corresponding settings. Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed explanation. Vigor2132 Series User’s Guide...
  • Page 11: Led Indicators And Connectors

    A phone call comes. LED on Connector Left The port is connected. LAN1~ The port is disconnected. LAN4 Blinking The data is transmitting. Right The port is connected with 1000Mbps. The port is connected with 10/100Mbps Vigor2132 Series User’s Guide...
  • Page 12 Then the router will restart with the factory default configuration. USB1~USB2 Connecter for a USB device. Fiber connection (100Mbps) for accessing the Internet. LAN1~LAN4 Connecters for local network devices. Phone1~ Phone2 Connecter for analog phone(s). Connecter for a power adapter. ON/OFF Power Switch. Vigor2132 Series User’s Guide...
  • Page 13: Vigor2132Ac/Vac

    The port is connected with 1000Mbps. The port is connected with 10/100Mbps Left The port is connected. LAN1~ The port is disconnected. LAN4 Blinking The data is transmitting. Right The port is connected with 1000Mbps. The port is connected with 10/100Mbps Vigor2132 Series User’s Guide...
  • Page 14 USB1~USB2 Connecter for a USB device. Connecter for local network devices or modem for accessing Internet. LAN1~LAN4 Connecters for local network devices. Phone1~ Phone2 Connecter for analog phone(s). Connecter for a power adapter. ON/OFF Power Switch. Vigor2132 Series User’s Guide...
  • Page 15: Hardware Installation

    Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. Vigor2132 Series User’s Guide...
  • Page 16: Printer Installation

    You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
  • Page 17 A dialog will appear. Click Add a local printer and click Next. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next. Vigor2132 Series User’s Guide...
  • Page 18 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next. Click Standard and choose Generic Network Card. Vigor2132 Series User’s Guide...
  • Page 19 Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. Type a name for the chosen printer. Click Next. Vigor2132 Series User’s Guide...
  • Page 20 10. Choose Do not share this printer and click Next. 11. Then, in the following dialog, click Finish. Vigor2132 Series User’s Guide...
  • Page 21 12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties. 13. Edit the property of the new printer you have added by clicking Configure Port. Vigor2132 Series User’s Guide...
  • Page 22 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click it.
  • Page 23: Accessing Web Page

    Please type “admin/admin” as the Username/Password and click Login. Notice: If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Now, the Main Screen will appear. Vigor2132 Series User’s Guide...
  • Page 24: Changing Password

    Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type “admin/admin” as Username/Password for accessing into the web user interface with admin mode. Go to System Maintenance page and choose Administrator Password. Vigor2132 Series User’s Guide...
  • Page 25: Introducing Dashboard

    IPv6 Internet Access, Interface (physical connection), Security and Quick Access. Click Dashboard from the main menu on the left side of the main page. A web page with default selections will be displayed on the screen. Refer to the following figure: Vigor2132 Series User’s Guide...
  • Page 26: Virtual Panel

    On the top of the Dashboard, a virtual panel (simulating the physical panel of the router) displays the physical interface connection. It will be refreshed every five seconds. For detailed information about the LED display, refer to 1.2 LED Indicators and Connectors. Vigor2132 Series User’s Guide...
  • Page 27: Name With A Link

    In addition, quick access for VPN security settings such as Remote Dial-in User and LAN to LAN are located on the bottom of this page. Scroll down the page to find them and use them if required. Vigor2132 Series User’s Guide...
  • Page 28: Gui Map

    All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions. Vigor2132 Series User’s Guide...
  • Page 29: Web Console

    The functions/settings modified under Web Console also can be reviewed on the web user interface. Click the Web Console icon on the top of the main screen to open the following screen. Vigor2132 Series User’s Guide...
  • Page 30: Config Backup

    System Maintenance>>Configuration Backup. Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting. Click the Logout icon to exit the web user interface. Vigor2132 Series User’s Guide...
  • Page 31: Online Status

    Secondary DNS -Displays the secondary DNS server address for WAN interface. IP Address-Displays the IP address of the LAN interface. TX Packets-Displays the total transmitted packets at the LAN interface. RX Packets-Displays the total received packets at the LAN interface. Vigor2132 Series User’s Guide...
  • Page 32 Note: The words in green mean that the WAN connection of that interface is ready for accessing Internet; the words in red mean that the WAN connection of that interface is not ready for accessing Internet. Vigor2132 Series User’s Guide...
  • Page 33: Virtual Wan

    Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2132 Series User’s Guide...
  • Page 34 This page is left blank. Vigor2132 Series User’s Guide...
  • Page 35: Quick Setup

    If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next. Vigor2132 Series User’s Guide...
  • Page 36 Enter the description of the specific network service. Service Name (Optional) Username Assign a specific valid user name provided by the ISP. Note: The maximum length of the user name you can set is 63 characters. Vigor2132 Series User’s Guide...
  • Page 37 Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2132 Series User’s Guide...
  • Page 38 Confirm Password Retype the password. WAN IP Obtain an IP address automatically – the router will get Configuration an IP address automatically from DHCP server. Specify an IP address – you have to type relational settings manually. Vigor2132 Series User’s Guide...
  • Page 39 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2132 Series User’s Guide...
  • Page 40 Type in secondary IP address for necessity in the future. Secondary DNS Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2132 Series User’s Guide...
  • Page 41 Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Click DHCP as the Internet Access type. Simply click Next to continue. Vigor2132 Series User’s Guide...
  • Page 42 Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. After finished the settings above, click Next for viewing summary of such connection. Vigor2132 Series User’s Guide...
  • Page 43 Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2132 Series User’s Guide...
  • Page 44: Service Activation Wizard

    Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
  • Page 45 The service will be activated and applied as the default rule configured in Firewall>>General Setup. Now, the web page will display the service that you have activated according to your selection(s). The valid time for the free trial of these services is one month. Vigor2132 Series User’s Guide...
  • Page 46: Vpn Client Wizard

    Route Mode/NAT Mode – If the remote network only allows you to dial in with single IP, please choose this mode, otherwise please choose Route Mode. Please choose a There are 64 VPN profiles for users to set. LAN-to-LAN Profile Vigor2132 Series User’s Guide...
  • Page 47 In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. Vigor2132 Series User’s Guide...
  • Page 48 Note: The following descriptions for VPN Type are based on the Route Mode specified in LAN-to-LAN Client Mode Selection.  When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic:  When you choose IPsec, you will see the following graphic: Vigor2132 Series User’s Guide...
  • Page 49 Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. Always On Check to enable router always keep VPN connection. Vigor2132 Series User’s Guide...
  • Page 50 3. After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Vigor2132 Series User’s Guide...
  • Page 51 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2132 Series User’s Guide...
  • Page 52: Vpn Server Wizard

    VPN connection. Please choose a This item is available when you choose Site to Site VPN LAN-to-LAN Profile (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Vigor2132 Series User’s Guide...
  • Page 53 2. After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. Here we take the examples of choosing Site-to-Site VPN as the VPN Server Mode. Vigor2132 Series User’s Guide...
  • Page 54 When you check PPTP, you will see the following graphic:  When you check PPTP & IPsec & L2TP (three types) or PPTP & IPsec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2132 Series User’s Guide...
  • Page 55 Type the ID name for the remote client. The length of the name is limited to 47 characters. Remote Network IP Please type one LAN IP address (according to the real location of the remote host) for building VPN connection. Vigor2132 Series User’s Guide...
  • Page 56 Click this radio button to set another profile of VPN Server Do another VPN through VPN Server Wizard. Server Wizard Setup View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2132 Series User’s Guide...
  • Page 57: Wireless Wizard

    Description Wireless 2.4GHz Settings Name Type the SSID name of this router for wireless 2.4GHz. The default name is defined with DrayTek. Change the name if required. Mode At present, the router can connect to 11n Only, 11g Only, Mixed (11b+11g), Mixed (11a+11n), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously.
  • Page 58 Note that, for the communication, all wireless devices must support the same encryption bit length and share the same key. If WEP mode is selected, only one of four preset keys can be selected at one time. Vigor2132 Series User’s Guide...
  • Page 59 Click it to enable or disable settings in this page. Use the same SSID Check the box to use the same settings configured above. and Security Key as above SSID Type the SSID name of this router. (SSID2) Vigor2132 Series User’s Guide...
  • Page 60 4. After typing the required information, click Next. 5. The following page will display the configuration summary for wireless setting. 6. Click Finish to complete the wireless settings configuration. Vigor2132 Series User’s Guide...
  • Page 61: Voip Wizard

    Password – Type the password for the account registered to your ISP. Use the same Account as phone 1 – If you don’t need to configure Phone 2 settings, simply check this box. Click it to get into the next setting page. Next Vigor2132 Series User’s Guide...
  • Page 62 Cancel Click it to give up the quick start wizard. 3. After finished the settings above, click Next for viewing summary of such connection. 4. Click Finish. A page of VoIP Wizard Setup OK!!! will appear. Vigor2132 Series User’s Guide...
  • Page 63: Registering Vigor Router

    Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login. Vigor2132 Series User’s Guide...
  • Page 64 When the following page appears, please type in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit. Vigor2132 Series User’s Guide...
  • Page 65 When the following page appears, your router information has been added to the database. Now, you have finished the product registration. After clicking OK, you will see the following page. Your router has been registered to myvigor website successfully. Vigor2132 Series User’s Guide...
  • Page 66 This page is left blank. Vigor2132 Series User’s Guide...
  • Page 67: Tutorials And Applications

    PPP, TSPC, AICCU, DHCPv6 Client and Static IPv6. Access into the web user interface of Vigor2132FVn. Open WAN>> Internet Access. Choose one of the WAN interfaces as the one supporting IPv6 service. Then, click the IPv6 button of the selected WAN. Vigor2132 Series User’s Guide...
  • Page 68 PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same time Choose PPP and type the information for PPPoE of IPv4. Access into the setting page for IPv6 service, it is not necessary for you to configure anything. Vigor2132 Series User’s Guide...
  • Page 69 Click OK and open Online Status. If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time. Vigor2132 Series User’s Guide...
  • Page 70 (In the following figure, the TSPC information is obtained from http://gogo6.com/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2132 Series User’s Guide...
  • Page 71 (In the following figure, the AICCU information is obtained from https://www.sixxs.net/main/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2132 Series User’s Guide...
  • Page 72  DHCPv6 Client Choose DHCPv6 Client. Click one of the identity associations and type the IAID number. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2132 Series User’s Guide...
  • Page 73  Static IPv6 Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2132 Series User’s Guide...
  • Page 74 Choose 6in4 Static Tunnel. Type remote endpoint IPv4 address, 6in4 IPv6 Address, LAN Routed Prefix and Tunnel TTL. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2132 Series User’s Guide...
  • Page 75  Choose 6rd. Type IPv4 Border Relay, IPv4 Mask Length, 6rd Prefix and 6rd Prefix Length. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: Vigor2132 Series User’s Guide...
  • Page 76 In the field of DHCPv6 Server Configuration, when DHCPv6 service is enabled, you can assign available IPv6 address for the client manually. Note: When both mechanisms are enabled, the client can determine which mechanism to be used (e.g., the default mechanism for Windows7 is router advertisement service). Vigor2132 Series User’s Guide...
  • Page 77 IPv4 IP and IPv6 IP services. Its IPv6 address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7. After getting the above message, it means the IPv6 service has been activated successfully. Vigor2132 Series User’s Guide...
  • Page 78 If not, only a steady turtle will be seen. If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to access and utilize. Vigor2132 Series User’s Guide...
  • Page 79: How Can I Get The Files From Usb Storage Device Connecting To Vigor Router

    "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2132 Series User’s Guide...
  • Page 80 Now, users in LAN of Vigor2132FVn can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. Vigor2132 Series User’s Guide...
  • Page 81: (Main Mode)

    (in this case, type VPN Server), and check the box of Enable This Profile. For Vigor router will be set as a server, the call direction shall be set as Dial-in and set 0 as Idle Timeout. Vigor2132 Series User’s Guide...
  • Page 82 (e.g., 218.242.130.19 in this case). Press the IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote side. Click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 83 (in this case, type VPN Client), and check the box of Enable This Profile. For such Vigor router will be set as a client, the call direction shall be set as Dial-out. Check the box of Always on for a permanent VPN connection. Vigor2132 Series User’s Guide...
  • Page 84 IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the remote side. Click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 85: How To Optimize The Bandwidth Through Qos Technology

    Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
  • Page 86 In the pop-up window, choose Range Address as the Address Type and type the start IP address and end IP address in relational fields. Click OK to save the settings and exit the window. Click OK again to save the settings. Vigor2132 Series User’s Guide...
  • Page 87 The class rule for VoIP has been set. Click OK to return to previous page. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. Vigor2132 Series User’s Guide...
  • Page 88 10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control. 11. Click OK to save the settings. The class rules for WAN1 are defined as shown below. Vigor2132 Series User’s Guide...
  • Page 89: Qos Setting Example

    Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor2132 Series User’s Guide...
  • Page 90 E-mail using protocol POP3 and SMTP. Click OK to save the settings. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. Vigor2132 Series User’s Guide...
  • Page 91 Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. Click Edit for Class 3 to open a new window. In this index, the user will set reserved bandwidth for VPN. Vigor2132 Series User’s Guide...
  • Page 92 10. Click Add to open the following window. Check the ACT box, first. 11. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor2132 Series User’s Guide...
  • Page 93: How To Use Landing

    Landing Page is a special feature configured under User Management. It can specify the message, content to be seen or specify which website to be accessed into when users try to access into the Internet by passing the authentication. Here, we take Vigor2132 Series router as an example.
  • Page 94 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will see the message of Login Success from the browser you use. Vigor2132 Series User’s Guide...
  • Page 95 In the field of Landing Page, please type the words as below: “ <body stats=1><script language='javascript'> window.location='http://www.draytek.com'</script></body>” Next, enable the Landing Page function. Open User Management -> User Profile and click one of the index number (e.g., index number 3) links. Vigor2132 Series User’s Guide...
  • Page 96 In the following page, check the box of Landing page and click OK to save the settings. Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Vigor2132 Series User’s Guide...
  • Page 97 Click Login. If the logging is successful, you will be directed into the website of www.draytek.com. Vigor2132 Series User’s Guide...
  • Page 98: How To Send A Notification To Specified Phone Number Via Sms Service In Wan Disconnection

    Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider setting. In the following page, type the username and password and set the quota that the router can send the message out. Vigor2132 Series User’s Guide...
  • Page 99 Choose any index number (e.g., Index 1 in this case) to configure conditions for sending the SMS. In the following page, type the name of the profile and check the Disconnected and Reconnected boxes for WAN to work in concert with the topic of this paper. Vigor2132 Series User’s Guide...
  • Page 100 Click OK to save the settings. Later, if one of the WAN connections fails in your router, the system will send out SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully. Vigor2132 Series User’s Guide...
  • Page 101 URL string of the SMS provider and type the username and password. After clicking OK, the new added SMS provider will be added and will be available for you to specify for sending SMS out. Vigor2132 Series User’s Guide...
  • Page 102: How To Create An Account For Myvigor

    The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
  • Page 103 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. Vigor2132 Series User’s Guide...
  • Page 104 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2132 Series User’s Guide...
  • Page 105 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2132 Series User’s Guide...
  • Page 106: Create An Account Via Myvigor Web Site

    11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
  • Page 107 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. Vigor2132 Series User’s Guide...
  • Page 108 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2132 Series User’s Guide...
  • Page 109 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2132 Series User’s Guide...
  • Page 110: How To Configure Certain Computers Accessing To Internet

    Firewall>>Filter Setup is used as the default setting, we has to create a new rule starting from Filter Rule 2 of Set 2. Access into the web user interface of Vigor router. Open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 2 button. Vigor2132 Series User’s Guide...
  • Page 111 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. Vigor2132 Series User’s Guide...
  • Page 112 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 113 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor2132 Series User’s Guide...
  • Page 114: How To Block Facebook Service Accessed By The Users Via Web Content Filter / Url Content Filter

    *How to Register AI/AV/AS/WCF Service (Service Activation Wizard) (http://www.draytek.com/user/SupportFAQDetail.php?ID=1955) *How to Activate Anti-Virus/Anti-Intrusion/Anti-Spam Service (http://www.draytek.com/user/SupportFAQDetail.php?ID=286 ) How to use the Web Content Filter (WCF) (http://www.draytek.com/user/SupportFAQDetail.php?ID=1953) * What the Web Content Filter (WCF) license benefits are, (http://www.draytek.com/user/PdInfoDetail.php?Id=110) Vigor2132 Series User’s Guide...
  • Page 115 Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Enable this profile in Firewall>>General Setup>>Default Rule. Vigor2132 Series User’s Guide...
  • Page 116 In the field of Contents, please type facebook. Configure the settings as the following figure. Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. Vigor2132 Series User’s Guide...
  • Page 117 B. Disallow users to play games on Facebook Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Vigor2132 Series User’s Guide...
  • Page 118 Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. When you finished the above steps, please open Firewall>>General Setup. Vigor2132 Series User’s Guide...
  • Page 119 Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. Vigor2132 Series User’s Guide...
  • Page 120: How To Setup Address Mapping

    We will take an example to introduce how to make use of this feature. Log into the web user interface of Vigor2132FVn. Open WAN>>Internet Access. For WAN1, choose Static or Dynamic IP as the Access Mode. Vigor2132 Series User’s Guide...
  • Page 121 WAN IP address as 202.211.100.10. Click the WAN IP Alias button to configure the other P address which is 202.211.100.11. Make sure Join IP NAT Pool is not checked. Click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 122 After finished configuration for WAN1, open Route Policy. Click Index number 1 and 2 to configure the details. After finished the settings, click OK to save the settings respectively. Vigor2132 Series User’s Guide...
  • Page 123 Upon completing the above configuration, you have specified the outgoing IP address(es) for some specific computers. Now, you bind some specific computers to some WAN IP alias for outgoing traffic. Vigor2132 Series User’s Guide...
  • Page 124: How To Setup Load Balance For Packets

    Internet. The PC in LAN1 can send the data to the remote PC through the specified WAN1. Access into web user interface of Vigor2132FVn series. Open Route Policy. From the following web page, simply click index number #1. Vigor2132 Series User’s Guide...
  • Page 125 203.65.1.35; choose WAN1 as the Interface; click default gateway; do not check Auto Failover To The Other WAN. After finished the above settings, click OK to save the configuration. Now, the packets sent to the remote PC (IP address: 203.65.1.35) will be forcefully to pass through WAN1. Vigor2132 Series User’s Guide...
  • Page 126: How To Authenticate Clients Via User Management

    With User Management authentication function, before a valid username and password have been correctly supplied, a particular client will not be allowed to access Internet through the router. There are three ways for authentication: Web, Telnet and Alert Tool. Vigor2132 Series User’s Guide...
  • Page 127 Web authentication interface first. Then, the client is trying to access http://www.draytek.com and but brought to the Vigor router. Since this is an SSL connection, some web browsers will display warning messages.
  • Page 128 With Crome browser, you may get the following warning. Click Proceed anyway. After that, the web authentication window will appear. Input the user name and the password for your account (defined in User Management) and click Login. Vigor2132 Series User’s Guide...
  • Page 129 If the authentication is successful, the client will be redirected to the original web site that he tried to access. In this example, it is http://www.draytek.com . Furthermore, you will get a popped up window as the following. Then you can access the Internet.
  • Page 130 With the default setup <body stats=1><script language='javascript'> window.location='http://www.draytek.com'</script></body>, you will be redirected to http://www.draytek.com . You may change it if you want. For example, you will get the following welcome message if you enter Login Successful in the Welcome Message table.
  • Page 131 If SSL Tunnel or SSL Web Proxy is disabled in the VPN profile, a User Management account and a remote dial-in VPN profile can use the same Username, even with different passwords. However, we recommend you to use different usernames for different user profiles in User Management and VPN profiles. Vigor2132 Series User’s Guide...
  • Page 132 Note: Here expired time is “Unlimited” means the Time Quota function is not enabled for this account. After login, this account will not be expired until it is logout. In the Web interface of router, the configuration page of Time Quota is shown as below. Vigor2132 Series User’s Guide...
  • Page 133 You will get the following message. The expired time is shown after you login. After you run out the available time, you can’t use this account any more until the administrator manually adds additional time for you. Vigor2132 Series User’s Guide...
  • Page 134 Any modification to the Firewall policy will break down the connections of all current users. They all have to authenticate again for Internet access.  The administrator may check the current users from User Online Status page. Vigor2132 Series User’s Guide...
  • Page 135: How To Use Dns Filter

    1. Open CSM>>Web Content Filter Profile to set the categories. Make sure WCF License has already been activated. 2. Click Index 1 link to open the following page. Disable all of the categories first. Then, enable Search Engine, Portals, and Social Networking. Vigor2132 Series User’s Guide...
  • Page 136 WCF-1 Default. 6. Click OK to save the DNS filter configuration. Now, all settings about blocking search engine and social website are complete. Please try to access into www.google.com (the search engine) to see the result. Vigor2132 Series User’s Guide...
  • Page 137 From the Syslog, we can find out “google” is blocked. Vigor2132 Series User’s Guide...
  • Page 138: How To Prevent Cpe's Settings From Being Changed By The End-Users

    Click Provision Setting >> KeepProfile Setting  From Network View, select the device which network administrator want to keep the setting  Click on drop menu to select on the setting menu, and choose SystemMaintenance _AdminPassword Vigor2132 Series User’s Guide...
  • Page 139 3. Check ACS log: Go to Log page, select Device Action >> SetParameterLog, and we could see there's one log says that parameter has been applied. 1. Go to the CPE router, login with the password (admin123) set in KeepProfile Setting, and it could login successfully. Vigor2132 Series User’s Guide...
  • Page 140 4. Go back to login the router, type 123 as password, we will find the password is incorrect, which means ACS has kept the password as admin123. Vigor2132 Series User’s Guide...
  • Page 141: Advanced Configuration

    These are known as private IP addresses, and are listed in the following ranges: From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 Vigor2132 Series User’s Guide...
  • Page 142: General Setup

    V means such WAN interface is enabled and ready to be used. Display the physical mode and physical type of such WAN Physical Mode / Type interface (Ethent/Fiber/AUTO). Click WAN1 link to get the following setting page. Vigor2132 Series User’s Guide...
  • Page 143: Internet Access

    The range is from 0 to 7. After finished the above settings, click OK to save the settings. This page allows you to configure the access mode for building Internet connection. Available settings are explained as follows: Vigor2132 Series User’s Guide...
  • Page 144 Interface – Specify the WAN interface(s) that will be overwritten by such function. WAN5 ~ WAN7 can be located under WAN>>Multi-VLAN. Option Number – Type a number for such function. Note If you choose to configure option 61 here, the Vigor2132 Series User’s Guide...
  • Page 145 WAN>>Interface Access will be overwritten. DataType – Choose the type (ASCII or Hex) for the data to be stored. Data – Type the content of the data to be processed by the function of DHCP option. Vigor2132 Series User’s Guide...
  • Page 146 Such function allows you to verify whether network Detection connection is alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Vigor2132 Series User’s Guide...
  • Page 147 Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor2132 Series User’s Guide...
  • Page 148 PING to the IP - If you enable the PING function, please specify the IP address for the system to PING it for keeping alive. PING Interval - Enter the interval for the system to execute the PING operation. Vigor2132 Series User’s Guide...
  • Page 149  Enable: Check the box to specify username and password as the DHCP client identifier for some ISP.  Username: Type a name as username. The maximum length of the user name you can set is Vigor2132 Series User’s Guide...
  • Page 150 Type in the primary IP address for the router if you want to use Static IP mode. If necessary, type in secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. Vigor2132 Series User’s Guide...
  • Page 151 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2132 Series User’s Guide...
  • Page 152 Specify an IP address – Click this radio button to specify some data.  IP Address – Type the IP address.  Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2132 Series User’s Guide...
  • Page 153 PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix. No need to type any other information for PPP mode. Below shows an example for successful IPv6 connection based on PPP mode. Vigor2132 Series User’s Guide...
  • Page 154 After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet. Available settings are explained as follows: Item Description Vigor2132 Series User’s Guide...
  • Page 155 The maximum length of the name you can set is 19 characters. Type the password assigned with the user name. Password The maximum length of the password you can set is 19 characters. Confirm Password Type the password again to make the confirmation. Vigor2132 Series User’s Guide...
  • Page 156 Available settings are explained as follows: Item Description Identify Association Choose Prefix Delegation or Non-temporary Address as the identify association. IAID Type a number as IAID. After finished the above settings, click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 157 Delete – Click it to remove an existed entry. Current IPv6 Address Display current interface IPv6 address. Table IPv6 Gateway Address - Type your IPv6 gateway address Static IPv6 Gateway here. Configuration After finished the above settings, click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 158 Type the static IPv6 address for LAN routing with the value for prefix length. Type the number for the data lifetime in tunnel. Tunnel TTL After finished the above settings, click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 159 Type the IPv4 addresses of the 6rd Border Relay for a given 6rd domain. IPv4 Mask Length Type a number of high-order bits that are identical across all CE IPv4 addresses within a given 6rd domain. It may be any value between 0 and 32. Vigor2132 Series User’s Guide...
  • Page 160 Type the IPv6 prefix length for the 6rd IPv6 prefix in number of bits. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode. Vigor2132 Series User’s Guide...
  • Page 161: Multi-Vlan

    Enable - Check this box to enable the port-based bridge function on this channel. P1 ~ P4 – Check the box(es) to build bridge connection on LAN. Click any index (8, 9 and 10) to get the following web page: Vigor2132 Series User’s Guide...
  • Page 162 Moreover, WAN link for Channel 5, 6 and 7 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 5, 6 or 7 to configure your router. Vigor2132 Series User’s Guide...
  • Page 163 Open Port-based Bridge The settings here will create a bridge between the LAN ports selected and the WAN. The WAN interface of the Connection for this bridge connection will be built upon the WAN type selected Channel Vigor2132 Series User’s Guide...
  • Page 164 ISP Access Setup, IP For other settings, refer to Details Page for PPPoE in Address From ISP, WAN WAN1. IP Network Settings, DNS Server IP Address After finished the above settings, click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 165: Lan

    IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2132 Series User’s Guide...
  • Page 166 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2132 Series User’s Guide...
  • Page 167: General Setup

    Details Page - Click it to access into the setting page. Each LAN will have different LAN configuration page. Each LAN must be configured in different subnet. IPv6 – Click it to access into the settings page of IPv6. Vigor2132 Series User’s Guide...
  • Page 168 Internet Access server (PPPoE, PPTP, L2TP or DHCP server). Inter-LAN Routing Check the box to link two or more different subnets (LAN and LAN). When you finish the configuration, please click OK to save and exit this page. Vigor2132 Series User’s Guide...
  • Page 169 LAN. Disable Server – Let you manually assign IP address to every host in the LAN. Enable Relay Agent –Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to. Vigor2132 Series User’s Guide...
  • Page 170 DNS Server. If your ISP does not provide it, the router will automatically apply default secondary DNS Server IP address: 194.98.0.1 to this field. The default DNS Server IP address can be found via Online Status: Vigor2132 Series User’s Guide...
  • Page 171 Below shows the settings page for IPv6. It provides 2 daemons for LAN side IPv6 address configuration. One is Router Advertisement Server (stateless) and the other is DHCPv6 Server (Stateful). Available settings are explained as follows: Vigor2132 Series User’s Guide...
  • Page 172 Add – Click it to add a new entry. Delete – Click it to remove an existed entry. Current IPv6 Address Display current used IPv6 addresses. Table When you finish the configuration, please click OK to save and exit this page. Vigor2132 Series User’s Guide...
  • Page 173 DHCP Server IP Address – It is available when Enable Relay Agent is checked. Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server. Vigor2132 Series User’s Guide...
  • Page 174 The default DNS Server IP address can be found via Online Status: If both the Primary IP and Secondary IP Address fields are left empty, the router will assign its own IP address to local users as a DNS proxy server and maintain a DNS cache. Vigor2132 Series User’s Guide...
  • Page 175 IP settings to any local user configured as a DHCP client. It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network. Vigor2132 Series User’s Guide...
  • Page 176 Edit – Click it to edit the selected MAC address. Cancel – Click it to cancel the job of adding, deleting and editing. When you finish the configuration, please click OK to save and exit this page. Vigor2132 Series User’s Guide...
  • Page 177: Static Route

    The number (1 to 30) under Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Vigor2132 Series User’s Guide...
  • Page 178 Type the subnet mask for such static route. Subnet Mask Network Interface Use the drop down list to specify an interface for such static route. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 179 Displays the destination address of the static route. Status Displays the status of the static route. Click any underline of index number to get the following page. Available settings are explained as follows: Item Description Enable Check it to enable this profile. Vigor2132 Series User’s Guide...
  • Page 180 1st subnet (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and continuously exchange of IP routing information with different subnets. Vigor2132 Series User’s Guide...
  • Page 181 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Click OK. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2132 Series User’s Guide...
  • Page 182: Vlan

    Note: Settings in this page only applied to LAN port but not WAN port. Available settings are explained as follows: Item Description Enable Click it to enable VLAN configuration. P1 – P4 – Check the LAN port(s) to be grouped under the Vigor2132 Series User’s Guide...
  • Page 183 Note: Leave one VLAN untagged at least to prevent from not connecting to Vigor router due to unexpected error. Vigor2132 Series features a hugely flexible VLAN system. In its simplest form, each of the Gigabit LAN ports can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated.
  • Page 184 Click OK to save the settings. The Vigor router also supports up to six private IP subnets on the LAN. Each can be independent (isolated) or common (able to communicate with each other). This is ideal for departmental or multi-occupancy applications. Vigor2132 Series User’s Guide...
  • Page 185: Bind Ip To Mac

    Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below Select All Click this link to select all the items in the ARP table. Reorder the table based on the IP address. Sort Vigor2132 Series User’s Guide...
  • Page 186 Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. Vigor2132 Series User’s Guide...
  • Page 187: Lan Port Mirror

    Select which ports are necessary to be mirrored for transmitting the packets. Mirrored Rx Port Select which ports are necessary to be mirrored for receiving the packets. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 188: Wired 802.1X

    Check the box to enable LAN 802.1x function. 802.1x ports After enabling the function, simply specify the LAN port(s) to apply such function. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 189: Web Portal Setup

    Display the content (Disable, URL Redirect or Message) of the Status profile. Interface Display the applied interfaced of the profile. Preview Open a preview window according to the configured settings. To configure the profile, click any index number link to open the following page. Vigor2132 Series User’s Guide...
  • Page 190 The advantage is that each LAN (1/2/3/4) interface and/or each SSID (1/2/3/4) for wireless network can be applied with different web portal separately. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 191: Route Policy

    Specify routing policy to determine the direction of the data transmission. Note: For more detailed information about using policy route, refer to Support >>FAQ/Application Notes on www.draytek.com. Available settings are explained as follows: Item Description Index Click the number of index to access into the configuration Vigor2132 Series User’s Guide...
  • Page 192 WAN interface. Src IP End - Type the source IP end for the specified WAN interface. If this field is blank, it means that all the source IPs inside the LAN will be passed through the WAN Vigor2132 Series User’s Guide...
  • Page 193 4. After specifying the interface, click Next to get the following page. Available settings are explained as follows: Item Description Force NAT /Force It determines which mechanism that the router will use to Routing forward the packet to WAN. Vigor2132 Series User’s Guide...
  • Page 194 To use Advance Mode, do the following steps: 1. Click the Advance Mode radio button. 2. Click any Index number link (e.g., 2 in this case) to access into the following page. Available settings are explained as follows: Vigor2132 Series User’s Guide...
  • Page 195 Failover to – Check this button to lead the data passing through specific interface (WAN/LAN/VPN/Route Policy) automatically when the selected interface (defined in Send via if criteria matched) is down.  WAN/LAN – Use the drop down list to choose an Vigor2132 Series User’s Guide...
  • Page 196 When you finish the configuration, please click OK to save and exit this page. Example 1: In the following figure, a LAN to LAN VPN tunnel is built between DrayTek VPN router (e.g., Vigor2132 series) and the remote router. Firewall Router can receive all of the traffic coming from remote PC which wants to access into Internet;...
  • Page 197 Table are fixed as “150”. You can adjust the value for such route policy with lower value, e.g., 100 to ensure it will be applied to packets transmission with the highest priority. After finished the above settings, click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 198 Click any index number (e.g., #1 in this case). In the following web page, check Enable; type “192.168.1.10” as Src IP Range; type “213.57.89.100” as the Destination IP for the remote VPN server; and choose VPN as the Interface setting. Vigor2132 Series User’s Guide...
  • Page 199: Nat

    192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor2132 Series User’s Guide...
  • Page 200: Port Redirection

    The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor2132 Series User’s Guide...
  • Page 201 Display the IP address of the internal host providing the service. Status Display if the profile is enabled (v) or not (x). Press any number under Index to access into next page for configuring port redirection. Available settings are explained as follows: Vigor2132 Series User’s Guide...
  • Page 202 80 to avoid conflict, such as 8925. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2132 Series User’s Guide...
  • Page 203: Dmz Host

    LAN. Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption. DMZ Host allows a defined internal user to be totally exposed to the Internet, which usually helps some special applications such as Netmeeting or Internet Games etc. Vigor2132 Series User’s Guide...
  • Page 204 IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2132 Series User’s Guide...
  • Page 205 Vigor2132 Series User’s Guide...
  • Page 206: Open Ports

    Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2132 Series User’s Guide...
  • Page 207 Protocol or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2132 Series User’s Guide...
  • Page 208: Port Triggering

    "default" durations are shown below and these duration values can be modified via telnet commands. TCP: 86400 sec. UDP: 180 sec. IGMP: 10 sec. TCP WWW: 60 sec. TCP SYN: 60 sec. Available settings are explained as follows: Item Description Vigor2132 Series User’s Guide...
  • Page 209 Check to enable this entry. Service Choose the predefined service to apply for such trigger profile. Type the text to memorize the application of this rule. Comment Triggering Protocol Select the protocol (TCP, UDP or TCP/UDP) for such triggering profile. Vigor2132 Series User’s Guide...
  • Page 210 (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Incoming Port Type the port or port range for the incoming packets. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 211: Alg

    Type a port number for SIP or RTSP protocol. Check the box to make correspond protocol message packet from TCP transmit and receive via NAT. Check the box to make correspond protocol message packet from UDP transmit and receive via NAT. Vigor2132 Series User’s Guide...
  • Page 212: Hardware Acceleration

    Hardware Acceleration is also called PPA in DrayTek for it is based on Protocol Processing Engine (PPE) of Infinion. It can only support 128 sessions for network traffic (IN & OUT) with implementing three kinds of modes - Disable, Auto and Manual.
  • Page 213 For checking whether the rule of PPA is working or not, a user can login toVigor2132 Series by using telnet. User can view how many sessions is transferring in each direction of PPA table after entering “ppa –v”. Vigor2132 Series User’s Guide...
  • Page 214: Firewall

    It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2132 Series User’s Guide...
  • Page 215 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor2132 Series User’s Guide...
  • Page 216: General Setup

    “Accept large incoming fragmented UDP or ICMP Packets”. By checking this box, you can play these kinds of on-line games. If security concern is in higher priority, you cannot enable “Accept large incoming Vigor2132 Series User’s Guide...
  • Page 217 IPv4 - To prevent remote client accessing into the PCs on LAN, check the box to make the incoming packets via IPv4 being blocked by such router. It is effective only for the packets routed but not for packets translated by NAT. Vigor2132 Series User’s Guide...
  • Page 218 Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Such item is available only when Rule-Based is selected in User Management Vigor2132 Series User’s Guide...
  • Page 219 CSM>> DNS Filter web page first. Or click the DNS Filter link in this page to create a new profile. Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here. Vigor2132 Series User’s Guide...
  • Page 220 However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 221: Filter Setup

    Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Vigor2132 Series User’s Guide...
  • Page 222 Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other LAN. Source/Destination IP Click Edit to access into the following dialog to choose the source/destination IP or IP ranges. Vigor2132 Series User’s Guide...
  • Page 223 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Vigor2132 Series User’s Guide...
  • Page 224 The default setting is 60000. Strict –Make the MAC address and IP address settings MAC Bind IP configured in IP Object for Source IP and Destination IP Vigor2132 Series User’s Guide...
  • Page 225 (created in CSM>> Web Content Filter) for applying with this router. Please set at least one profile for anti-virus in CSM>> Web Content Filter web page first. Or choose [Create New] from the drop down list in this page to create Vigor2132 Series User’s Guide...
  • Page 226 Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the Vigor2132 Series User’s Guide...
  • Page 227 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
  • Page 228 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2132 Series User’s Guide...
  • Page 229: Dos Defense

    10 seconds. Enable UDP flood defense Check the box to activate the UDP flood defense function. Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router Vigor2132 Series User’s Guide...
  • Page 230 Check the box to activate the Block SYN fragment function. The Vigor router will drop any packets having SYN flag and more fragment bit set. Block Fraggle Attack Check the box to activate the Block fraggle Attack function. Vigor2132 Series User’s Guide...
  • Page 231 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2132 Series User’s Guide...
  • Page 232 After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 233: User Management

    Note: Filter rules configured under Firewall usually are applied to the host (the one that the router installed) only. With user management, the rules can be applied to every user connected to the router with customized profiles. Vigor2132 Series User’s Guide...
  • Page 234: General Setup

    Landing Page Type the information to be displayed on the first web page when the LAN user accessing into Internet via such router. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 235: User Profile

    To set the user profile, please click any index number link to open the following page. Notice that profile 1 (admin) and profile 2 (System Reservation) are factory default settings. Profile 2 is reserved for future use. Vigor2132 Series User’s Guide...
  • Page 236 Firewall can be adopted for such user profile. Create New Policy – If you choose such item, the following page will be popped up for you to define another filter rule as a new policy. Vigor2132 Series User’s Guide...
  • Page 237 Next, the user can access Internet through any browser on Windows. Note that Alert Tool can be downloaded from DrayTek web site. Telnet – If it is selected, the user can use Telnet command to Vigor2132 Series User’s Guide...
  • Page 238 – Click this box to decrease the data quota for such profile. Set default time quota and data quota for such profile. When Reset quota to default when scheduling time the scheduling time is up, the router will use the default quota expired settings automatically. Vigor2132 Series User’s Guide...
  • Page 239: User Group

    This page allows you to bind several user profiles into one group. These groups will be used in Firewall>>General Setup as part of filter rules. Please click any index number link to open the following page. Available settings are explained as follows: Item Description Name Type a name for this user group. Vigor2132 Series User’s Guide...
  • Page 240: User Online Status

    Display the users which connect to Vigor router currently. You can click the link under the username to open the user profile setting page for that user. IP Address Display the IP address of the device. Profile Display the authority of the account. Vigor2132 Series User’s Guide...
  • Page 241: Objects Settings

    Unblock – the user will be unblocked. Logout – the user will be logged out forcefully. Define objects such as IP address, service type, keyword, file extension and others. These pre-defined objects can be applied in CSM. Vigor2132 Series User’s Guide...
  • Page 242: Ip Object

    Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2132 Series User’s Guide...
  • Page 243 Select Any Address if this object contains any IP address. Select Mac Address if this object contains Mac address. Type the MAC address of the network card which will be MAC Address controlled. Start IP Address Type the start IP address for Single Address type. Vigor2132 Series User’s Guide...
  • Page 244 If it is checked, all the IP addresses except the ones listed Invert Selection above will be applied later while it is chosen. After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. Vigor2132 Series User’s Guide...
  • Page 245: Ip Group

    Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2132 Series User’s Guide...
  • Page 246: Ipv6 Object

    You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2132 Series User’s Guide...
  • Page 247 Prefix Len Type the number (e.g., 64) for the prefix length of IPv6 address. Invert Selection If it is checked, all the IPv6 addresses except the ones listed above will be applied later while it is chosen. Vigor2132 Series User’s Guide...
  • Page 248: Ipv6 Group

    Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2132 Series User’s Guide...
  • Page 249: Service Type Object

    Display the profile number that you can configure. Name Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. Vigor2132 Series User’s Guide...
  • Page 250 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. After finishing all the settings, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 251: Service Type Group

    To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Vigor2132 Series User’s Guide...
  • Page 252: Keyword Object

    Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2132 Series User’s Guide...
  • Page 253 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 254: Keyword Group

    Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2132 Series User’s Guide...
  • Page 255: File Extension Object

    Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2132 Series User’s Guide...
  • Page 256 Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2132 Series User’s Guide...
  • Page 257: Sms/Mail Service Object

    Display the service provider which offers SMS service. To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. Vigor2132 Series User’s Guide...
  • Page 258 Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 259 Type the URL string in the box under the filed of Service Provider. You have to contact your SMS provider to obtain the exact URL string. Username Type a user name that the sender can use to register to Vigor2132 Series User’s Guide...
  • Page 260 Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Vigor2132 Series User’s Guide...
  • Page 261 Check the box to enable the function. Username – Type a name for authentication. The maximum length of the name you can set is 31 characters. Password – Type a password for authentication. The Vigor2132 Series User’s Guide...
  • Page 262: Notification Object

    Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Display the name for such mail server profile. Profile Settings Display the category selected for such profile. Vigor2132 Series User’s Guide...
  • Page 263 Display the types that will be monitored. Status Display the status for the category. You can check the box you want to be monitored. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 264: Csm Profile

    Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor2132 Series User’s Guide...
  • Page 265: App Enforcement Profile

    Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Others displayed on this page. Each tab will bring out different items with supported versions that you can choose to disallow people using. Vigor2132 Series User’s Guide...
  • Page 266 APP. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Below shows the items which are categorized under Protocol. Vigor2132 Series User’s Guide...
  • Page 267 The items categorized under P2P ----- Vigor2132 Series User’s Guide...
  • Page 268 The items categorized under Others ----- Vigor2132 Series User’s Guide...
  • Page 269: Appe Signature Upgrade

    The APPE Enforcement Profile adopted by Vigor router will be treated as the APPE signature. DrayTek will periodically upgrade versions for all of the APPs supported by Vigor router. However, it might be inconvenient for users to upgrade the APP version one by one. This feature is specially designed to offer a quick method to execute APP version upgrade.
  • Page 270 Upgrade and wait for the system completing the process. Upgrade Automatically Scheduled Update - Check the box to make Vigor router upgrading the APPE signature based on the schedule configured here. Vigor2132 Series User’s Guide...
  • Page 271: Url Content Filter Profile

    Each item is explained as follows: Item Description Set to Factory Default Clear all profiles. Display the number of the profile which allows you to click Profile to set different policy. Name Display the name of the URL Content Filter Profile. Vigor2132 Series User’s Guide...
  • Page 272 For this one, the router will process the packages with the conditions set below for URL first, then Web feature second. Either: Web Feature First –When all the packages Vigor2132 Series User’s Guide...
  • Page 273 If the web pages do not match with the keyword set here, it will be processed with reverse action. Group/Object Selections – The Vigor router provides several frames for users to define keywords and each frame Vigor2132 Series User’s Guide...
  • Page 274 Upload – Check the box to block the file upload by way of web page. File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Vigor2132 Series User’s Guide...
  • Page 275: Web Content Filter Profile

    Note: If you have used Service Activation Wizard to activate WCF service, you can skip this section. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
  • Page 276 Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Test a site to verify Click this link to do the verification.
  • Page 277 Therefore, please backup your data before you change the web content filter license. Available settings are explained as follows: Item Description Profile Name Type a name for the profile. The maximum length of the name you can set is 15 characters. Vigor2132 Series User’s Guide...
  • Page 278 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 279: Dns Filter Profile

    It displays a list of different DNS filter profiles (with specified WCF and UCF). Click the profile link to open the following page. Then, type the name of the profile and specify WCF/UCF based on your requirement. Vigor2132 Series User’s Guide...
  • Page 280 Type the words or sentences which will be displayed when Administration Message a web page is blocked by Vigor router. After finishing all the settings, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 281: Bandwidth Management

    To activate the function of limit session, simply click Enable and set the default session limit. Available settings are explained as follows: Item Description Enable - Click this button to activate the function of limit Session Limit session. Disable - Click this button to close the function of limit Vigor2132 Series User’s Guide...
  • Page 282 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 283: Bandwidth Limit

    Disable - Click this button to close the function of limit bandwidth. Default TX limit - Define the default speed of the upstream for each computer in LAN. Default RX limit - Define the default speed of the Vigor2132 Series User’s Guide...
  • Page 284 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2132 Series User’s Guide...
  • Page 285: Quality Of Service

    The core routers in the backbone will do the same checking before executing treatments in order to ensure service-level consistency throughout the whole QoS-enabled network. Vigor2132 Series User’s Guide...
  • Page 286 100Mbps. Hence, how to reserve and prioritize bandwidth for the essential applications is critical to operation. The Vigor2132 Series has VoIP QoS (the option of Enable the First Priority for VoIP SIP/RTP) to guarantee the priority for VoIP calls automatically once VoIP calls was detected.
  • Page 287 You can configure general setup for the WAN interface, edit the Class Rule, and edit the Service Type for the Class Rule for your request. Display an online statistics for quality of service for your reference. This feature is available only when the Quality of Service for WAN interface is enabled. Vigor2132 Series User’s Guide...
  • Page 288 Available settings are explained as follows: Item Description Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will apply to. Vigor2132 Series User’s Guide...
  • Page 289 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one. Vigor2132 Series User’s Guide...
  • Page 290 Check this box to invoke these settings. Hardware Check this box to enable the hardware acceleration when Acceleration such rule is applied. Ethernet Type Please specify which protocol (IPv4 or IPv6) will be used for this rule. Vigor2132 Series User’s Guide...
  • Page 291 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. Vigor2132 Series User’s Guide...
  • Page 292 Range, you have to type in the starting port number and the end porting number on the boxes below. Port Number – Type in the starting port number and the end porting number here if you choose Range as the type. Vigor2132 Series User’s Guide...
  • Page 293 For example, in the following illustration, the VoIP packets in LAN go into Vigor router without any header. However, when they go forward to the Server on ISP through Vigor router, all of the packets are tagged with AF (configured in Bandwidth >>QoS>>Class) automatically. Vigor2132 Series User’s Guide...
  • Page 294: Applications

    Enable the Function and Add a Dynamic DNS Account Assume you have a registered domain name from the DDNS provider, say hostname.dyndns.org, and an account with username: test and password: test. In the DDNS setup menu, check Enable Dynamic DNS Setup. Vigor2132 Series User’s Guide...
  • Page 295 Service Provider Select the service provider for the DDNS account. Service Type Select a service type (Dynamic, Custom or Static). If you choose Custom, you can modify the domain that is chosen in the Domain Name field. Vigor2132 Series User’s Guide...
  • Page 296 Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. Vigor2132 Series User’s Guide...
  • Page 297: Lan Dns / Dns Forwarding

    FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2132 Series will respond the specified private IP address.
  • Page 298 In general, one domain name maps with one IP address. If required, you can configure two IP addresses mapping with the same domain name. Add – Click it to open a dialog to type the host’s IP address. Vigor2132 Series User’s Guide...
  • Page 299 Domain Name DNS Server IP Type the IP address of the DNS server you want to use for Address DNS forwarding. Click OK button to save the settings. A new LAN DNS profile has been created. Vigor2132 Series User’s Guide...
  • Page 300: Schedule

    Status Display if this schedule setting is active or inactive. You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. Vigor2132 Series User’s Guide...
  • Page 301 How often -Specify how often the schedule will be applied Once -The schedule will be applied just once Weekdays -Specify which days in one week should perform the schedule. Click OK button to save the settings. Vigor2132 Series User’s Guide...
  • Page 302 Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Vigor2132 Series User’s Guide...
  • Page 303: Radius

    The maximum length of the shared secret you can set is 36 characters. Re-type the Shared Secret for confirmation. Confirm Shared Secret After finished the above settings, click OK button to save the settings. Vigor2132 Series User’s Guide...
  • Page 304: Upnp

    Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2132 Series User’s Guide...
  • Page 305: Igmp

    This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P4 It indicates the LAN port used for the multicast group. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 306: Wake On Lan

    MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2132 Series User’s Guide...
  • Page 307: Sms / Mail Alert Service

    SMS. Schedule(1-15) Type the schedule number that the SMS will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 308 Schedule (1-15) Type the schedule number that the notification will be sent out. You can click the Schedule (1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 309: Vpn And Remote Access

    Secure connection between Teleworker, staff on business trip and main office  Exchange data between remote office and main office  POS between chain store and headquarters Below shows the menu items for VPN and Remote Access. Vigor2132 Series User’s Guide...
  • Page 310: Remote Access Control

    PAP/CHAP/MS-CHAP/MS-CHAPv2 - Selecting this option means the router will attempt to authenticate dial-in users with the CHAP protocol first. If the dial-in user does not support this protocol, it will fall back to use the PAP Vigor2132 Series User’s Guide...
  • Page 311 IP address from the local private network. For example, if the local private network is 192.168.1.0/255.255.255.0, you could choose 192.168.1.200 as the Start IP Address. You can configure up to four start IP addresses for LAN1 ~ LAN4. Vigor2132 Series User’s Guide...
  • Page 312: Ipsec General Setup

    (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. There is one method offered by Vigor router for you to authenticate the incoming data coming from remote dial-in user, Pre-Shared Key. Vigor2132 Series User’s Guide...
  • Page 313: Ipsec Peer Identity

    Item Description Set to Factory Default Click it to clear all indexes. Index Click the number below Index to access into the setting page of IPSec Peer Identity. Name Display the profile name of that index. Vigor2132 Series User’s Guide...
  • Page 314 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 315: Remote Dial-In User

    Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. Vigor2132 Series User’s Guide...
  • Page 316  Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection.  Must -Specify the IPSec policy to be definitely Vigor2132 Series User’s Guide...
  • Page 317 (1-63) as the pre-shared key. Digital Signature (X.509) – Check the box of Digital Signature to invoke this function and Select one predefined Profiles set in the VPN and Remote Access >>IPSec Peer Vigor2132 Series User’s Guide...
  • Page 318: Lan To Lan

    L2TP by itself or over IPSec) and corresponding security methods, etc. The router supports up to 2 VPN tunnels simultaneously. The following figure shows the summary table. Available settings are explained as follows: Item Description Set to Factory Default Click to clear all indexes. Vigor2132 Series User’s Guide...
  • Page 319 LAN-to-LAN connection. Enable this profile - Check here to activate this profile. Netbios Naming Packet  Pass – click it to have an inquiry for data transmission between the hosts located on both sides of VPN Vigor2132 Series User’s Guide...
  • Page 320 IPSec Tunnel - Build an IPSec VPN connection to the server through Internet. L2TP with IPSec Policy - Build a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: Vigor2132 Series User’s Guide...
  • Page 321 (data) will be encrypted and authenticated. Select from below:  DES without Authentication -Use DES encryption algorithm and not apply any authentication scheme.  DES with Authentication-Use DES encryption algorithm and apply MD5 or SHA-1 Vigor2132 Series User’s Guide...
  • Page 322 The default value is 3600 seconds. You may specify a value in between 600 and 86400 seconds.  Perfect Forward Secret (PFS)-The IKE Phase 1 key will be reused to avoid the computation complexity in Vigor2132 Series User’s Guide...
  • Page 323 IPSec VPN connection through Internet.  L2TP with IPSec Policy - Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You can select to use L2TP alone or with Vigor2132 Series User’s Guide...
  • Page 324 Local ID – Specify which one will be inspected first.  Alternative Subject Name First – The alternative subject name (configured in Certificate Management>>Local Certificate) will be inspected first.  Subject Name First – The subject name (configured in Certificate Management>>Local Certificate) will be Vigor2132 Series User’s Guide...
  • Page 325 More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. Vigor2132 Series User’s Guide...
  • Page 326 IP, please choose NAT, otherwise choose Route. Change default route to this VPN tunnel - Check this box to change the default route with this VPN tunnel. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 327: Connection Management

    Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor2132 Series User’s Guide...
  • Page 328: Local Certificate

    Click this button to open Generate Certificate Signing Request window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE again. Vigor2132 Series User’s Guide...
  • Page 329 Vigor router allows you to generate a certificate request and submit it the CA server, then import it as “Local Certificate”. If you have already gotten a certificate from a third party, you may import it directly. Vigor2132 Series User’s Guide...
  • Page 330: Trusted Ca Certificate

    Therefore, Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience for general user. Later, such root CA generated by DrayTek server can perform the issuing of local certificate. Note: Root CA can be deleted but not edited.
  • Page 331 For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2132 Series User’s Guide...
  • Page 332: Certificate Backup

    Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Retype password. Also, you can use Restore to retrieve these two settings to the router whenever you want. Vigor2132 Series User’s Guide...
  • Page 333: Voip

    Then, both parties’ SIP proxies will forward the sequence of messages to caller to establish the session. If you both register to the same SIP Registrar, then it will be illustrated as below: Vigor2132 Series User’s Guide...
  • Page 334 QoS Assurance assists to assign high priority to voice traffic via Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor2132 Series User’s Guide...
  • Page 335: Dialplan

    Secure Phone but not Enable SAS Voice Prompt, then: 1. After the connection established, vigor router A will NOT send SAS voice prompt to vigor router A and vigor router B will NOT send the SAS voice prompt to vigor router B. Vigor2132 Series User’s Guide...
  • Page 336 SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor2132V series for setting the phone book. Click any index number to display the dial plan setup page. Vigor2132 Series User’s Guide...
  • Page 337 Note: If the incoming or outgoing calls do not match any entry on the phonebook, the router will try to make the call "being protected". But, if the call ends up "unprotected"(e.g. peer side does not support ZRTP+SRTP), the router will not play out a warning message. Vigor2132 Series User’s Guide...
  • Page 338 VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” will be changed to “88631111111” and sent to SIP server. Vigor2132 Series User’s Guide...
  • Page 339 After finishing all the settings here, please click OK to save the configuration. Call barring is used to block phone calls coming from the one that is not welcomed. Click any index number to display the dial plan setup page. Vigor2132 Series User’s Guide...
  • Page 340 Unknown Domain or Block IP Address. Simply click the relational links to open the web page. For Block Anonymous – this function can block the incoming calls without caller ID on the interface (Phone port) specified in the following window. Such control also can be done based on preconfigured schedules. Vigor2132 Series User’s Guide...
  • Page 341 SIP accounts. Such control also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Such control also can be done based on preconfigured schedules. Vigor2132 Series User’s Guide...
  • Page 342 Call Forward [No Dial the number typed in this field to forward all the Ans][Act] incoming calls to the specified place while there is no answer of the connected phone. Vigor2132 Series User’s Guide...
  • Page 343: Sip Accounts

    As Vigor VoIP Router is turned on, it will first register with Registrar using AuthorizationUser@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity. Note: Selection items for Ring Port will differ according to the router you have. Vigor2132 Series User’s Guide...
  • Page 344 Type in the IP address or domain of the STUN server. Type in the gateway IP address. External IP SIP PING interval The default value is 150 (sec). It is useful for a Nortel server NAT Traversal Support. Vigor2132 Series User’s Guide...
  • Page 345 The default value is 5060. Your peer must set the same value in his/her Registrar. Domain/Realm Set the domain name or IP address of the SIP Registrar server. Proxy Set domain name or IP address of SIP proxy server. By the Vigor2132 Series User’s Guide...
  • Page 346 URL only when the local system is busy. No Answer means if the incoming calls do not receive any response, they will be forwarded to the SIP URL by the time out. SIP URL – Type in the SIP URL (e.g., aaa@draytel.org or Vigor2132 Series User’s Guide...
  • Page 347 If not, the router will do something to save the bandwidth for other using. Click On to invoke this function; click off to close the function. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 348: Phone Settings

    Dynamic RTP Port End - Specifies the end port for RTP stream. The default value is 15000. RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Vigor2132 Series User’s Guide...
  • Page 349 After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 350 Check this box to hide the caller ID on the display panel of the phone set. Call Waiting Check this box to invoke this function. A notice sound will appear to tell the user new phone call is waiting for your Vigor2132 Series User’s Guide...
  • Page 351 Caller ID Type, Dial tone, Ringing tone, Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the Vigor2132 Series User’s Guide...
  • Page 352 Interdigit Timeout – Type a value in this field to specify time limit for interdidig. DTMF DTMF Mode – There are four DTMF modes for you to choose.  InBand - Choose this one then the Vigor will send the Vigor2132 Series User’s Guide...
  • Page 353: Status

    008865972727. When the callee receives such number, he can use re-dial function to dial back to the caller. From this page, you can find codec, connection and other important call status for each port. Available settings are explained as follows: Vigor2132 Series User’s Guide...
  • Page 354 Accumulation for the times of in call. Accumulation for the times of out call. Out Calls Miss Calls Accumulation for the times of missing call. Speaker Gain The volume of present call. Display logs of VoIP calls. Vigor2132 Series User’s Guide...
  • Page 355: Wireless Lan(2.4Ghz/5Ghz)

    SSID as identification, located channel etc. Vigor router supports four SSID settings for wireless connections. Each SSID can be defined with different name and download/upload rate for selecting by stations connected to the router wirelessly. Vigor2132 Series User’s Guide...
  • Page 356 136 will be restricted in the USA. In some countries, there are restrictions on DFS channels as well. We will implement country code to restrict uncertified channels. Below shows the menu items for Wireless LAN (2.4Ghz) and Wireless LAN(5GHz): Vigor2132 Series User’s Guide...
  • Page 357 The following sections explain setting for wireless LAN. Here we take menu items under Wireless LAN (2.4 GHz) as the examples. The differences for the settings between 2.4 GHz and 5 GHz will be pointed out. Vigor2132 Series User’s Guide...
  • Page 358: General Setup

    Mode selections will vary according to the router you have. Mode For 2.4GHz: At present, the router can connect to 11g Only, 11n Only (2.4 GHz), Mixed (11b+11g), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mixed (11b+11g+11n) mode. Vigor2132 Series User’s Guide...
  • Page 359 SSID or just cannot see any thing about Vigor wireless router while site surveying. The system allows you to set four sets of SSID for different usage. In default, the first set of SSID will be Vigor2132 Series User’s Guide...
  • Page 360 You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 361: Security

    By clicking the Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Available settings are explained as follows: Item Description Mode There are several modes provided for you to choose. Vigor2132 Series User’s Guide...
  • Page 362 All wireless devices must support the same WEP encryption bit size and have the same key. Four keys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCII or Hexadecimal. Check the key Vigor2132 Series User’s Guide...
  • Page 363: Access Control

    After entering the client’s MAC address, check the box of the SSIDs desired to insert this MAC address into their access control list. Attribute s: Isolate the station from LAN - select to isolate the wireless connection of the wireless client of the MAC Vigor2132 Series User’s Guide...
  • Page 364: Wps

    Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time. He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. Vigor2132 Series User’s Guide...
  • Page 365 Start PBC button or using PIN Code.  On the side of Vigor2132 Series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card.
  • Page 366 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2132 Series User’s Guide...
  • Page 367: Wds

    In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Vigor2132 Series User’s Guide...
  • Page 368 Available settings are explained as follows: Item Description Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Vigor2132 Series User’s Guide...
  • Page 369 Disable to cancel this function. Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 370: Advanced Setting

    Streams (NSS) Vigor2132Vac. Default value is 2 and connection rate could reach 1.3GBps. This option is to define the length of the sync field in an Long Preamble 802.11 packet. Most modern wireless network uses short Vigor2132 Series User’s Guide...
  • Page 371 Set the RTS threshold of wireless radio. Do not modify default value if you don’t know what it is, default value is 2347. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 372: Wmm Configuration

    1 to 15. Be aware that CWMax value must be greater than CWMin or equals to CWMin value. Both values will influence the time delay for WMM accessing categories. The difference between AC_VI and AC_VO Vigor2132 Series User’s Guide...
  • Page 373 “Check” the box means the AP router will not answer any response request for the transmitting packets. It will have better performance with lower reliability. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 374: Ap Discovery

    AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2132 Series User’s Guide...
  • Page 375: Station List

    “1 day”. Thus, the guest can finish his job within one hour and will not occupy the wireless network for a long time. Note: Up to 300 Wireless Station records are supported by Vigor router. Vigor2132 Series User’s Guide...
  • Page 376 SSID will be listed on Station Control List. WEB Portal Setup Click it to access in to LAN>>Web Portal Setup page for modifying the settings if required. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 377: Usb Application

    FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage disk at one time. Default Charset - At present, Vigor router supports four types of character sets. Default Charset is for English based file name. Vigor2132 Series User’s Guide...
  • Page 378: Usb User Management

    Available settings are explained as follows: Item Description Enable – Click this button to activate this profile (account) for FTP service. Later, the user can use the username specified in this page to login into FTP server. Vigor2132 Series User’s Guide...
  • Page 379 USB storage disk, must follow the rule specified here. File – Check the items (Read, Write and Delete) for such profile. Directory –Check the items (List, Create and Remove) for such profile. Vigor2132 Series User’s Guide...
  • Page 380: File Explorer

    Click this icon to add a new folder. Create Current Path Display current folder. Upload Click this button to upload the selected file to the USB storage disk. The uploaded file in the USB diskette can be shared for other user through FTP. Vigor2132 Series User’s Guide...
  • Page 381: Usb Device Status

    Username It displays the username that user uses to login to the FTP server. When you insert USB storage disk into the Vigor router, the system will start to find out such device within several seconds. Vigor2132 Series User’s Guide...
  • Page 382: Temperature Sensor

    A USB Thermometer is now available that complements your installed DrayTek router installations that will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating. During summer in particular, it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures.
  • Page 383 Below shows an example of temperature graph: Vigor2132 Series User’s Guide...
  • Page 384: System Maintenance

    Below shows the menu items for System Maintenance. The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Vigor2132 Series User’s Guide...
  • Page 385 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. Vigor2132 Series User’s Guide...
  • Page 386: 378

    Last Inform Response Time – Display the time that VigorACS server made a response while receiving Inform message from CPE last time. CPE Client Such information is useful for Auto Configuration Server. Vigor2132 Series User’s Guide...
  • Page 387 Gateway. Please type a number as the maximum period. A value of “-1” indicates that no maximum period is specified. After finishing all the settings here, please click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 388: Administrator Password

    Password – Type the password for the local user. Confirm Password – Type the password again for confirmation. Add – After typing the user name and password above, simply click it to create a new local user. The new one will Vigor2132 Series User’s Guide...
  • Page 389 It can ensure any user accessing into web user interface of Vigor router through Internet by username/password of “admin/admin”. When you click OK, the login window will appear. Please use the new password to access into the web user interface again. Vigor2132 Series User’s Guide...
  • Page 390: User Password

    Below shows an example for accessing into User Operation with User Password. 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. Vigor2132 Series User’s Guide...
  • Page 391 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2132 Series User’s Guide...
  • Page 392 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Note: Setting in User Mode can be configured as same as in Admin Mode. Vigor2132 Series User’s Guide...
  • Page 393: Login Page Title

    Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Type words or sentences here. It will be displayed for Welcome Message and bulletin message.
  • Page 394 Below shows an example of login customization with the information typed in Login Description and Bulletin. Vigor2132 Series User’s Guide...
  • Page 395: Configuration Backup

    Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. Vigor2132 Series User’s Guide...
  • Page 396 Click Select button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2132 Series User’s Guide...
  • Page 397: Syslog/Mail Alert

    Mail Syslog – Check the box to recode the mail event on Syslog. Enable syslog message - Check the box listed on this web page to send the corresponding message of firewall, VPN, User Access, Call, WAN, Router/DSL information to Vigor2132 Series User’s Guide...
  • Page 398 For viewing the Syslog, please do the following: Just set your monitor PC’s IP address in the field of Server IP Address Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. Vigor2132 Series User’s Guide...
  • Page 399 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2132 Series User’s Guide...
  • Page 400: Time And Date

    Check the box to enable the daylight saving. Such feature is available for certain area. Advanced – Click it to open a pop up dialog. Use the default time setting or set user defined time for your requirement. Vigor2132 Series User’s Guide...
  • Page 401: Snmp

    DES) and authentication method (support MD5 and SHA) for the management needs. Available settings are explained as follows: Item Description Enable SNMP Agent Check it to enable this function. Get Community Set the name for getting community by typing a proper Vigor2132 Series User’s Guide...
  • Page 402 Privacy Algorithm Choose one of the methods listed below as the privacy algorithm. Privacy Password Type a password for privacy. The maximum length of the text is limited to 23 characters. Click OK to save these settings. Vigor2132 Series User’s Guide...
  • Page 403: Management

    Available settings are explained as follows: Item Description Router Name Type in the router name provided by ISP. Default: Disable If it is enabled, the function of auto-logout for web user Auto-Logout interface will be disabled. Vigor2132 Series User’s Guide...
  • Page 404 If you are using old browser(e.g. IE6.0) or old SmartVPN Client, you may still need to enable SSL 3.0 to make sure you can connect, however, it's not recommended. After finished the above settings, click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 405 A maximum of three IPs/subnet masks is allowed. IPv6 Address /Prefix Length- Indicate the IP address(es) allowed to login to the router. After finished the above settings, click OK to save the configuration. Vigor2132 Series User’s Guide...
  • Page 406: Reboot System

    Note: When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2132 Series User’s Guide...
  • Page 407: Firmware Upgrade

    Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
  • Page 408: Activation

    The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. Vigor2132 Series User’s Guide...
  • Page 409: Diagnostics

    Below shows the successful activation of Web Content Filter: Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. Vigor2132 Series User’s Guide...
  • Page 410: Dial-Out Triggering

    (e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2132 Series User’s Guide...
  • Page 411: Routing Table

    Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2132 Series User’s Guide...
  • Page 412: Arp Cache Table

    The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Vigor2132 Series User’s Guide...
  • Page 413: Dhcp Table

    Click Diagnostics and click DHCP Table to open the web page. Available settings are explained as follows: Item Description Index It displays the connection item number. IP Address It displays the IP address assigned by this router for specified PC. Vigor2132 Series User’s Guide...
  • Page 414: Nat Sessions Table

    It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. Vigor2132 Series User’s Guide...
  • Page 415: Dns Cache Table

    Click OK to enable such function. It means when the TTL value of each DNS query reaches the threshold of the value specified here, the corresponding record will be deleted from router’s Cache automatically. Vigor2132 Series User’s Guide...
  • Page 416: Ping Diagnosis

    Type the IP address of the Host/IP that you want to ping. Ping IPv6 Address Type the IPv6 address that you want to ping. Click this button to start the ping work. The result will be Vigor2132 Series User’s Guide...
  • Page 417: Data Flow Monitor

    Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Available settings are explained as follows: Item Description Enable Data Flow Check this box to enable this function. Monitor Vigor2132 Series User’s Guide...
  • Page 418 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2132 Series User’s Guide...
  • Page 419: Traffic Graph

    Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2132 Series User’s Guide...
  • Page 420: Trace Route

    Click one of them to display corresponding information for Trace through Use the drop down list to choose the interface that you want to ping through. Protocol Use the drop down list to choose the protocol that you want to ping through. Vigor2132 Series User’s Guide...
  • Page 421: Syslog Explorer

    Click this link to refresh this page manually. Clear Click this link to clear information on this page. Display Mode There are two modes for you to choose. Stop record when fulls – when the capacity of syslog is Vigor2132 Series User’s Guide...
  • Page 422: Ipv6 Tspc Status

    If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Available settings are explained as follows: Item Description Refresh Click this link to refresh this page manually. Vigor2132 Series User’s Guide...
  • Page 423: External Devices

    You can change the device name if required or remove the information for off-line device whenever you want. When you finished the configuration, click OK to save it. Note: Only DrayTek products can be detected by this function. Vigor2132 Series User’s Guide...
  • Page 424 This page is left blank. Vigor2132 Series User’s Guide...
  • Page 425: Trouble Shooting

    Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2132 Series User’s Guide...
  • Page 426: Checking If The Network Connection Settings On Your Computer Is Ok Or Not

    Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. Vigor2132 Series User’s Guide...
  • Page 427 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. Vigor2132 Series User’s Guide...
  • Page 428 Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2132 Series User’s Guide...
  • Page 429: Pinging The Router From Your Computer

    Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2132 Series User’s Guide...
  • Page 430: Checking If The Isp Settings Are Ok Or Not

    Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click Reboot Now. After few seconds, the router will return all the settings to the factory settings. Vigor2132 Series User’s Guide...
  • Page 431: Contacting Draytek

    After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor2132 Series User’s Guide...

Table of Contents