Page 2 Vigor2762 Series ADSL2/2+ & VDSL2 Router User’s Guide Version: 1.0 (UK) Firmware Version: V3.8.8 BT (For future updates, please visit www.draytek.co.uk/support) Date: April 12, 2018 Vigor2762 Series User’s Guide...
Page 3 Note: The product specification is subject to continuous evolution which may not always be reflected in current documentation. For the formal and supported current specification, please refer only to the web site at www.draytek.co.uk Vigor2762 Series User’s Guide...
Page 4 We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship or materials for a period of two (2) years from the date of purchase from a DrayTek authorized dealer in the UK/Ireland.
Page 5: Table Of Contents
II-1-2-4 Details Page for Static or Dynamic IP in Ethernet WAN........67 II-1-2-5 Details Page for PPTP/L2TP in Ethernet WAN..........71 II-1-2-6 Details Page for 3G/4G USB Modem (PPP mode) in USB WAN.......72 II-1-2-7 Details Page for 3G/4G USB Modem (DHCP mode) in USB WAN....75 Vigor2762 Series User’s Guide...
Page 6 II-5-4 Schedule........................147 II-5-5 UPnP..........................151 II-5-6 IGMP..........................152 II-5-6-1 General Setting....................152 II-5-6-2 Working Group....................153 II-5-7 Wake on LAN......................... 154 II-5-8 SMS / Mail Alert Service....................155 II-5-8-1 SMS Alert......................155 II-5-8-2 Mail Alert......................156 Vigor2762 Series User’s Guide...
Page 7 A-1 How to Build a LAN-to-LAN VPN Between Vigor Routers via IPsec Main Mode...211 IV-2 SSL VPN.......................216 IV-2-1 General Setup......................217 IV-2-2 User Account........................ 218 IV-2-3 Online User Status....................... 222 IV-3 Certificate Management................223 IV-3-1 Local Certificate......................224 IV-3-2 Trusted CA Certificate....................228 IV-3-3 Certificate Backup......................230 Part V Security...................231 Vigor2762 Series User’s Guide...
Page 8 VI-1-14 Modem Code Upgrade....................317 VI-1-15 Activation........................318 Application Notes........................320 A-1 How to prevent CPE's settings from being changed by the end-users?....320 VI-2 Bandwidth Management................323 VI-2-1 Sessions Limit......................325 VI-2-2 Bandwidth Limit......................327 VI-2-3 Quality of Service......................329 viii Vigor2762 Series User’s Guide...
Page 9 VII-2-6 Modem Support List....................391 VII-2-6 SMB Client Support List....................392 VII-2-7 SMB Client Support List....................393 Application Notes........................394 A-1 How can I get the files from USB storage device connecting to Vigor router?..394 Part VIII Troubleshooting................398 VIII-1 Diagnostics....................399 Vigor2762 Series User’s Guide...
Page 10 Appendix I: VLAN Applications on Vigor Router..........431 Part IX DrayTek Tools................439 X-1 SmartVPN Client...................440 X-1-1 DrayTek Android-based SmartVPN for SSL VPN tunnels..........440 X-1-2 How to Use SmartVPN Android APP to Establish SSL VPN Tunnel?......441 Part X Telnet Commands................445 Accessing Telnet of Vigor2762................446...
Page 11: Part I Installation
Part I Installation Part I Installation This part will introduce Vigor router and guide to install the device in hardware and software. Vigor2762 Series User’s Guide...
Page 12: Introduction
I-1 Introduction I-1 Introduction The Vigor2762 series is an ADSL2+ / VDSL2 router / firewall with guest network capability for fast and secure home and small office connectivity, designed for bandwidth-intensive applications such as high-definition video streaming, online gaming and Internet telephony.
Page 13: I-1-1 Indicators And Connectors
Data is being transmitted over USB DSL connection synchronised Blinking DSL connection not currently synchronising or (Slowly) (DSL) not detected Blinking DSL connection is synchronising (Quickly) Ethernet LAN (RJ45) is connected Blinking Data is transmitting (sending/receiving) Ethernet LAN is disconnected (LAN1/2/3/4) Vigor2762 Series User’s Guide...
Page 14 GigaLAN4 can be configured as the Ethernet WAN port, see Section 5.3 for details RJ-11 connector for ADSL or VDSL line I / O Power Switch. Turns the unit on (I) or off (O) Connector for the power adapter Vigor2762 Series User’s Guide...
Page 15: Hardware Installation
– Section II-1-1-2 details how to do that. With the GigaLAN4 port configured for Ethernet WAN mode, connect the cable Modem/DSL Modem/Media Converter to the WAN port of the router with Ethernet cable (RJ-45). Vigor2762 Series User’s Guide...
Page 16: I-2-2 Wall-Mounted Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com. Vigor2762 Series User’s Guide...
Page 17 Before using it, please follow the steps below to configure settings for connected computers (or wireless clients). Connect the printer with the router through USB/parallel port. Open All Programs>>Getting Started>>Devices and Printers. Click Add a printer. A dialog will appear. Click Add a local printer and click Next. Vigor2762 Series User’s Guide...
Page 18 In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next. Vigor2762 Series User’s Guide...
Page 19 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next. Click Standard and choose Generic Network Card. Vigor2762 Series User’s Guide...
Page 20 Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. Type a name for the chosen printer. Click Next. Vigor2762 Series User’s Guide...
Page 21 10. Choose Do not share this printer and click Next. 11. Then, in the following dialog, click Finish. Vigor2762 Series User’s Guide...
Page 22 12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties. 13. Edit the property of the new printer you have added by clicking Configure Port. Vigor2762 Series User’s Guide...
Page 23 14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. Vigor2762 Series User’s Guide...
Page 24 If please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click Then, click the What types of printers are compatible with Vigor router? link.
Page 25: Accessing Web Page
Please type “admin/admin” as the Username/Password and click Login. Info If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Vigor2762 Series User’s Guide...
Page 26 The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor2762 Series User’s Guide...
Page 27: Changing Password
Now, the password has been changed. Next time, use the new password to access the Web user interface for this router. Info Even the password is changed, the Username for logging onto the web user interface is still “admin”. Vigor2762 Series User’s Guide...
Page 28: Dashboard
It will be refreshed every five seconds. When you move and click the mouse cursor on LEDs (except ACT), USB ports, LAN, or WAN, related web setting page will be open for you to configure if required. Vigor2762 Series User’s Guide...
Page 29: I-5-2 Name With A Link
I-5-2 Name with a Link I-5-2 Name with a Link A name with a link (e.g., Router Name, Current Time, WAN1~4 and etc.) below means you can click it to open the configuration page for modification. Vigor2762 Series User’s Guide...
Page 30: I-5-3 Quick Access For Common Used Menu
LAN are located on the bottom of this page. Scroll down the page to find them and use them if required. Note that there is a plus ( ) icon located on the left side of VPN/LAN. Click it to review the VPN connection(s) used presently. Vigor2762 Series User’s Guide...
Page 31: I-5-4 Gui Map
All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions. Vigor2762 Series User’s Guide...
Page 32: I-5-5 Web Console
The functions/settings modified under Web Console also can be reviewed on the web user interface. Click the Web Console icon on the top of the main screen to open the following screen. Vigor2762 Series User’s Guide...
Page 33: I-5-6 Config Backup
It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup. Simply click the icon on the top of the main screen to store the setting. I-5-7 Logout I-5-7 Logout Click this icon to exit the web user interface. Vigor2762 Series User’s Guide...
Page 34: I-5-8 Online Status
I-5-8 Online Status I-5-8 Online Status I-5-8-1 Physical Connection I-5-8-1 Physical Connection Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. Physical Connection for IPv4 Protocol Vigor2762 Series User’s Guide...
Page 35 TX Packets - Displays the total transmitted packets at the WAN interface. TX Rate - Displays the speed of transmitted octets at the WAN interface. RX Packets - Displays the total number of received packets at the WAN interface. Vigor2762 Series User’s Guide...
Page 36: I-5-8-2 Virtual Wan
I-5-8-2 Virtual WAN I-5-8-2 Virtual WAN Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list i-9the purpose of such WAN connection. Vigor2762 Series User’s Guide...
Page 37: Quick Start Wizard
WAN2; if 3G/4G USB modem is used, please choose WAN3. For WAN2, choose Auto negotiation as the physical type for your router. WAN1~ WAN3 will bring up different configuration page. Refer to the following sections for detailed information. Vigor2762 Series User’s Guide...
Page 38: I-6-1 For Wan1 (Adsl)
Internet. Your service provider will provide you information about user name, password, and authentication mode. Choose WAN1 as WAN Interface and click the Next button; you will get the following page. Choose PPPoE XXXX or PPPoA XXXXX as the protocol. Vigor2762 Series User’s Guide...
Page 39 Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. After finished the above settings, simply click Next. Vigor2762 Series User’s Guide...
Page 40 Please manually enter the Username/Password provided by your ISP. Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2762 Series User’s Guide...
Page 41 Type the IP address as the default gateway. Primary DNS Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Vigor2762 Series User’s Guide...
Page 42: I-6-2 For Wan2 (Ethernet)
WAN2 is dedicated to physical mode in Ethernet. Please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 43 Internet. Your service provider will provide you information about user name, password, and authentication mode. Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2762 Series User’s Guide...
Page 44 62 characters. Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2762 Series User’s Guide...
Page 45 Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2762 Series User’s Guide...
Page 46 The maximum length of the user name you can set is 63 characters. Password Assign a valid password provided by the ISP. The maximum length of the password you can set is 62 characters. Confirm Password Retype the password. Vigor2762 Series User’s Guide...
Page 47 ISP. Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2762 Series User’s Guide...
Page 48 Type the IP address of gateway. Primary DNS Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Vigor2762 Series User’s Guide...
Page 49 Please type in the IP address information originally provided by your ISP. Then click Next for next step. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2762 Series User’s Guide...
Page 50 In such cases you need to enter the MAC address. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Vigor2762 Series User’s Guide...
Page 51 After finished the settings above, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2762 Series User’s Guide...
Page 52: I-6-3 For Wan3 (Usb)
Modem Initial String – Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of the string you can set is 47 characters. Vigor2762 Series User’s Guide...
Page 53 Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2762 Series User’s Guide...
Page 54: Service Activation Wizard
Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Page 55 The service will be activated and applied as the default rule configured in Firewall>>General Setup. Now, the web page will display the service that you have activated according to your selection(s). The valid time for the free trial of these services is one month. Vigor2762 Series User’s Guide...
Page 56: Registering Vigor Router
Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login. Vigor2762 Series User’s Guide...
Page 57 Registration Date). Click Add. When the following page appears, your router information has been added to the database. After clicking OK, you will see the following page. Your router has been registered to myvigor website successfully. Vigor2762 Series User’s Guide...
Page 58: Part Ii Connectivity
Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. DNS, LAN DNS, UPnP, IGMP, WOL … Vigor2762 Series User’s Guide...
Page 59: Wan
Users can use LAN ports on the router to access Internet. Also, they can access Internet via 802.11(a/b/g/n/ac) wireless standard, and enjoy the powerful firewall, bandwidth management, and VPN features of Vigor2762n series. Vigor2762 Series User’s Guide...
Page 60 Besides, 3G/4G USB Modem in WAN3/WAN4 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G/4G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information.
Page 61: Ii-1-1 General Setup
Physical Mode / Type Display the physical mode and physical type of such WAN interface. Active Mode Display whether such WAN interface is Active device or backup device. After finished the above settings, click OK to save the settings. Vigor2762 Series User’s Guide...
Page 62: Ii-1-1-1 Wan1 (Adsl/Vdsl)
Vigor router will detect the physical line is connected by ADSL automatically. Therefore, this page allows you to configure settings for ADSL at one time. That is, it is not necessary for you to configure different profile settings for ADSL respectively. Vigor2762 Series User’s Guide...
Page 63 Disable – Disable the function of VLAN with tag. Tag value – Type the value as the VLAN ID number. The range is form 0 to 4095. Priority – Type the packet priority number for such VLAN. The range is from 0 to 7. Vigor2762 Series User’s Guide...
Page 64: Ii-1-1-2 Wan2 (Ethernet)
Tag value – Type the value as the VLAN ID number. The range is form 0 to 4095. Priority – Type the packet priority number for such VLAN. The range is from 0 to 7. Active Mode Choose Always On to make the WAN connection being Vigor2762 Series User’s Guide...
Page 65: Ii-1-1-3 Wan3 / Wan4 (Usb)
Choose Always On to make the WAN connection being activated always. If you choose Failover as the Active Mode, the option of Active When will appear. Failover – Choose it to make the WAN connection as a backup connection. Vigor2762 Series User’s Guide...
Page 66 Traffic Threshold – When the data traffic of active WAN reaches the traffic threshold (specified here), the failover WAN will be enabled automatically to share the overloaded data traffic. After finished the above settings, click OK to save the settings. Vigor2762 Series User’s Guide...
Page 67: Ii-1-2 Internet Access
/WAN3 (3G/4G USB Modem) according to the real network connection. Access Mode Use the drop down list to choose a proper access mode. The details page of that mode will be popped up. If not, click Vigor2762 Series User’s Guide...
Page 68 Data – Type the content of the data to be processed by the function of DHCP option. Info If you choose to configure option 61 here, the detailed settings in WAN>>Internet Access will be overwritten. Vigor2762 Series User’s Guide...
Page 69: Ii-1-2-1 Details Page For Pppoe/Pppoa In Wan1 (Physical Mode: Adsl)
If you have already used Quick Start Wizard to set the protocol, then it is not necessary for you to change any settings in this group. Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. Vigor2762 Series User’s Guide...
Page 70 It means Max Transmit Unit for packet. Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit path. Click Detect to open the following dialog. Vigor2762 Series User’s Guide...
Page 71 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page. Vigor2762 Series User’s Guide...
Page 72 ISP. VPI - Type in the value provided by ISP. VCI - Type in the value provided by ISP. Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. Vigor2762 Series User’s Guide...
Page 73 Click Enable RIP for activating this function. Bridge Mode Enable Bridge Mode - If the function is enabled, the router will work as a bridge modem. WAN IP Network Settings This group allows you to obtain an IP address automatically Vigor2762 Series User’s Guide...
Page 74 DNS Server IP Address Type in the primary IP address for the router. If necessary, type in secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. Vigor2762 Series User’s Guide...
Page 75: Ii-1-2-3 Details Page For Pppoe In Ethernet Wan
The maximum length of the password you can set is 62 characters. Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and Vigor2762 Series User’s Guide...
Page 76 Live) for a packet transmitted through Vigor router. Enable - TTL value will be reduced (-1) when it passess through Vigor router. It will cause the client, accessing Internet through Vigor router, be blocked by certain ISP when TTL value becomes “0”. Vigor2762 Series User’s Guide...
Page 77: Ii-1-2-4 Details Page For Static Or Dynamic Ip In Ethernet Wan
If you have a public subnet, you could assign an IP address or many IP address to the WAN interface. To use Static or Dynamic IP as the accessing protocol of the internet, please click the Static or Dynamic IP tab. The following web page will be shown. Vigor2762 Series User’s Guide...
Page 78 Secondary IP address in this field for pinging.  Ping Gateway IP – If you choose Ping Detect as detection mode, you also can enable this setting to use current WAN gateway IP address for pinging. With the IP Vigor2762 Series User’s Guide...
Page 79 IP address manually. Obtain an IP address automatically – Click this button to obtain the IP address automatically if you want to use Dynamic IP mode.  Router Name: Type in the router name provided Vigor2762 Series User’s Guide...
Page 80 Type in the primary IP address for the router if you want to use Static IP mode. If necessary, type in secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. Vigor2762 Series User’s Guide...
Page 81: Ii-1-2-5 Details Page For Pptp/L2Tp In Ethernet Wan
It means Max Transmit Unit for packet. Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific Vigor2762 Series User’s Guide...
Page 82: Ii-1-2-6 Details Page For 3G/4G Usb Modem (Ppp Mode) In Usb Wan
To use 3G/4G USB Modem (PPP mode) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select 3G/4G USB Modem (PPP mode) for WAN5. The following web page will be shown. Vigor2762 Series User’s Guide...
Page 83 The maximum length of the PIN code you can set is 15 characters. Modem Initial String Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to Vigor2762 Series User’s Guide...
Page 84  Ping Retry – Type the number of times that the system is allowed to execute the PING operation before WAN disconnection is judged. After finishing all the settings here, please click OK to activate them. Vigor2762 Series User’s Guide...
Page 85: Ii-1-2-7 Details Page For 3G/4G Usb Modem (Dhcp Mode) In Usb Wan
Type PIN code of the SIM card that will be used to access Internet. The maximum length of the PIN code you can set is 19 characters. Network Mode Force Vigor router to connect Internet with the mode specified here. If you choose 4G/3G/2G as network mode, Vigor2762 Series User’s Guide...
Page 86 MTU value such as 1500, 1492, 1484 and etc., automatically. Detect – Click it to detect a suitable MTU value   Accept – After clicking it, the detected value will be displayed in the field of MTU. Vigor2762 Series User’s Guide...
Page 87: Ii-1-2-8 Details Page For Ipv6 - Offline In Wan1/Wan2/Wan3
The network connection will be on always.  Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as Vigor2762 Series User’s Guide...
Page 88: Ii-1-2-10 Details Page For Ipv6 - Tspc In Wan1/Wan2/Wan3
After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet. Vigor2762 Series User’s Guide...
Page 89 IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Vigor2762 Series User’s Guide...
Page 90: Ii-1-2-11 Details Page For Ipv6 - Aiccu In Wan1/Wan2/Wan3
Type the ID offered by Tunnel Broker. Subnet Prefix Type the subnet prefix address obtained from service provider. The maximum length of the prefix you can set is 128 characters. WAN Connection Such function allows you to verify whether network Vigor2762 Series User’s Guide...
Page 91 IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Vigor2762 Series User’s Guide...
Page 92: Ii-1-2-12 Details Page For Ipv6 - Dhcpv6 Client In Wan1/Wan2
Enable Bridge Mode - If the function is enabled, the router will work as a bridge modem. Enable Firewall – It is available when Bridge Mode is enabled. When both Bridge Mode and Firewall check boxes Vigor2762 Series User’s Guide...
Page 93: Ii-1-2-13 Details Page For Ipv6 - Static Ipv6 In In Wan1/Wan2
After finished the above settings, click OK to save the settings. II-1-2-13 Details Page for IPv6 – Static IPv6 in in WAN1/WAN2 II-1-2-13 Details Page for IPv6 – Static IPv6 in in WAN1/WAN2 This type allows you to setup static IPv6 address for WAN interface. Vigor2762 Series User’s Guide...
Page 94 User Management will be ignored. And all of the filter rules defined and enabled in Firewall menu will be activated. Bridge Subnet – Make a bridge between the selected LAN subnet and such WAN interface. After finished the above settings, click OK to save the settings. Vigor2762 Series User’s Guide...
Page 95: Ii-1-2-14 Details Page For Ipv6 - 6In4 Static Tunnel In Wan1 / Wan2
The network connection will be on always.  Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as Vigor2762 Series User’s Guide...
Page 96 Item Description detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode. Vigor2762 Series User’s Guide...
Page 97: Ii-1-2-15 Details Page For Ipv6 - 6Rd In Wan1 / Wan2
WAN detection. Always On means no detection will be executed. The network connection will be on always.  Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. Vigor2762 Series User’s Guide...
Page 98 TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode. Vigor2762 Series User’s Guide...
Page 99: Ii-1-3 Multi-Pvc/Vlan
WAN type may not configure the same VLAN tag value. Enable - Check this box to enable the port-based bridge function on this channel. P1 ~ P4 – Check the box(es) to build bridge connection on LAN. Vigor2762 Series User’s Guide...
Page 100 VLAN. The range is from 0 to 7. Bridge mode Enable – Click it to enable Bridge mode for such channel. Physical Members – Group the physical ports by checking the corresponding check box(es) for applying the bridge Vigor2762 Series User’s Guide...
Page 101 Disable –Click it to disable the configuration of this channel. WAN Type The connections and interfaces created in every channel may select a specific WAN type to be built upon. In the Multi-PVC application, only the Ethernet WAN type is Vigor2762 Series User’s Guide...
Page 102 Secondary IP address in this field for pinging.  Ping Gateway IP – If you choose Ping Detect as detection mode, you also can enable this setting to use current WAN gateway IP address for pinging. Vigor2762 Series User’s Guide...
Page 103 After finished the above settings, click OK to save the settings and return to previous page. Advanced Advanced Such configuration is applied to upstream packets. Such information will be provided by ISP. Please contact with your ISP for detailed information. Vigor2762 Series User’s Guide...
Page 104: Ii-1-4 Wan Budget
ISP. Please note that the Quota Limit and Billing cycle day of month settings will need to be configured correctly first in order for some period calculations to be performed correctly. II-1-4-1 General Setup II-1-4-1 General Setup Vigor2762 Series User’s Guide...
Page 105 However, the connection charges will be calculated continuously.  Set SMS message - The system will send out SMS message to the administrator when the quota is running out. Monthly Some ISP might apply for the network limitation based on Vigor2762 Series User’s Guide...
Page 106 Today is day – Specify the day in the cycle as the starting point which Vigor router will reset the traffic record. For example, “3” means the third day of the cycle duration. After finished the above settings, click OK to save the settings. Vigor2762 Series User’s Guide...
Page 107: Ii-1-4-2 Status
Send Mail Alert to Administrator is selected. Or, the system will send out SMS message to the administrator if Send SMS messages to Administrator is selected. Vigor2762 Series User’s Guide...
Page 108: Application Notes
1. Make sure there is a WAN interface that has IPv6 access available. (See How to configure IPv6 on WAN interface?) 2. Go to LAN >> General Setup, and click on "IPv6" for the LAN subnet to enter IPv6 setting page. Vigor2762 Series User’s Guide...
Page 109 3. In IPv6 Setup page, set WAN Primary Interface to the WAN interface that has IPv6 service available, enable DHCPv6 Server, and click OK to apply. Vigor2762 Series User’s Guide...
Page 110 4. With the above configuration, LAN clients will be able to obtain an IPv6 address and an IPv6 Gateway from Vigor Router. For Windows PC, we may check this by command "ipconfig". PC will be able to ping and get response from an IPv6 host, e.g. "ipv6.google.com". Vigor2762 Series User’s Guide...
Page 111: How To Configure Ipv6 On Wan Interface
Go to WAN >> Internet Access, click on IPv6 of the WAN interface that you would like to configure an IPv6 address. Select a Connection Type from the drop-down list, enter the required parameters. Then click OK and reboot the router to apply the settings. Vigor2762 Series User’s Guide...
Page 112 Furthermore, Network Administrator may test the connectivity of IPv6 from the router by going to Diagnostics >> Ping Diagnosis and selecting "IPv6". 　 Below we will provide some examples of configuring IPv6 with different connection types. Vigor2762 Series User’s Guide...
Page 113 Set Connection Type to TSPC. Enter the Username and Password registered at the TSP server. Enter the IP or Domain Name of the TSPC server for Tunnel Broker. 　　 Vigor2762 Series User’s Guide...
Page 114 Enter the IPv6 address and Prefix Length which provided by the ISP, and click Add. You should see the IPv6 address in Current IPv6 Address Table. Then, specify the IP address of IPv6 Gateway. 　　 Vigor2762 Series User’s Guide...
Page 115 Set Connection Type to 6in4 Static Tunnel. Enter the tunnel server's IPv4 address in Remote Endpoint IPv4 Address. Enter the router's IPv6 address in 6in4 IPv6 Address. Enter the routed IPv6 prefix in LAN Routed Prefix. Vigor2762 Series User’s Guide...
Page 116: Lan
IP address to private IP address to forward the right packets to the right host and vice versa. Besides, Vigor router has a built-in DHCP server that assigns private IP address to each local host. See the following diagram for a briefly understanding. Vigor2762 Series User’s Guide...
Page 117 You can group local hosts by physical ports and create up to 8 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2762 Series User’s Guide...
Page 118: Ii-2-1 General Setup
IPv6 – Click it to access into the settings page of IPv6. Advanced DHCP packets can be processed by adding option number and data information when such function is enabled. Vigor2762 Series User’s Guide...
Page 119 Access server (PPPoE, PPTP, L2TP or DHCP server). Inter-LAN Routing Check the box to link two or more different subnets (LAN and LAN). When you finish the configuration, please click OK to save and exit this page. Vigor2762 Series User’s Guide...
Page 120: Ii-2-1-1 Details Page For Lan1 - Ethernet Tcp/Ip And Dhcp Setup
Enable Relay Agent –Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request  DHCP Server IP Address – It is available when Enable Relay Agent is checked. Set the IP address of the Vigor2762 Series User’s Guide...
Page 121 IP address to local users as a DNS proxy server and maintain a DNS cache. If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name Vigor2762 Series User’s Guide...
Page 122: Ii-2-1-2 Details Page For Lan1~ Lan2 - Ipv6 Setup
Below shows the settings page for IPv6. It provides 2 daemons for LAN side IPv6 address configuration. One is SLAAC(stateless) and the other is DHCPv6 Server (Stateful). Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 123 Server could assign IPv6 address to PC according to the Start/End IPv6 address configuration. Auto IPv6 range – IPv6 address(es) will be assigned by DHCPv6 server automatically. Start IPv6 Address / End IPv6 Address –Type the start and end address for IPv6 server. Vigor2762 Series User’s Guide...
Page 124 Default Preference – It determines the priority of the host behind the router when RA (Router Advertisement) packets are transmitted. MTU – It means Max Transmit Unit for packet. If Auto is selected, the router will determine the MTU value for LAN. Vigor2762 Series User’s Guide...
Page 125: Ii-2-1-3 Details Page For Lan2
Agent is checked. Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server. Start IP Address - Enter a value of the IP address pool for Vigor2762 Series User’s Guide...
Page 126 IP back from inactive clients (i.e. doesn't use the IP but the server still reserves the IP for him. When you finish the configuration, please click OK to save and exit this page. Vigor2762 Series User’s Guide...
Page 127: Ii-2-2 Vlan
Go to LAN page and select VLAN. The following page will appear. Click Enable to invoke VLAN function. Below is an example page in Vigor2762ac: Info Settings in this page only applied to LAN port but not WAN port. Vigor2762 Series User’s Guide...
Page 128 Leave one VLAN untagged at least to prevent from not connecting to Vigor router due to unexpected error. Vigor2762 Series features a hugely flexible VLAN system. In its simplest form, each of the Gigabit LAN ports can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated.
Page 129: Ii-2-3 Bind Ip To Mac
When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC address, it might cause you not access into the Internet. Click LAN and click Bind IP to MAC to open the setup page. Vigor2762 Series User’s Guide...
Page 130 Click this radio button to block the connection of the IP/MAC which is not listed in IP Bind List. Apply Strict Bind to Subnet – Choose the subnet(s) for applying the rules of Bind IP to MAC. Vigor2762 Series User’s Guide...
Page 131 PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. Vigor2762 Series User’s Guide...
Page 132: Ii-2-4 Lan Port Mirror
Select which ports are necessary to be mirrored for transmitting the packets. Mirrored Rx Port Select which ports are necessary to be mirrored for receiving the packets. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 133: Hardware Acceleration
II-3 Hardware Acceleration II-3 Hardware Acceleration Hardware Acceleration is also called PPA in DrayTek for it is based on Protocol Processing Engine (PPE) of Infineon. It can only support 128 sessions for network traffic (IN & OUT) with implementing three kinds of modes - Disable, Auto and Manual.
Page 134 For checking whether the rule of PPA is working or not, a user can login to Vigor2862 series by using telnet. User can view how many sessions are transferring in each direction of PPA table after entering “ppa –v”. Vigor2762 Series User’s Guide...
Page 135 Vigor2762 Series User’s Guide...
Page 136: Nat
Usually we use the 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Vigor2762 Series User’s Guide...
Page 137: Ii-4-1 Port Redirection
The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 40 port-mapping entries for the internal hosts. Vigor2762 Series User’s Guide...
Page 138 Display the IP address of the internal host providing the service. Status Display if the profile is enabled (v) or not (x). Press any number under Index to access into next page for configuring port redirection. Vigor2762 Series User’s Guide...
Page 139 IP address in the first box (as the starting point). The second one will be assigned automatically later. Private Port Specify the private port number of the service offered by the internal host. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 140 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2762 Series User’s Guide...
Page 141: Ii-4-2 Dmz Host
Click DMZ Host to open the following page. You can set different DMZ host for each WAN interface. Click the WAN tab to switch into the configuration page for that WAN. Vigor2762 Series User’s Guide...
Page 142 IP address will be shown on the screen. Click OK to save the setting. DMZ Host for WAN2, or WAN3 is slightly different with WAN1. Active True IP selection is available for WAN1 only. See the following figure. Vigor2762 Series User’s Guide...
Page 143: Ii-4-3 Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2762 Series User’s Guide...
Page 144 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2762 Series User’s Guide...
Page 145: Ii-4-4 Port Triggering
The duration that these ports are opened depends on the type of protocol used. The "default" durations are shown below and these duration values can be modified via telnet commands. TCP: 86400 sec. UDP: 180 sec. IGMP: 10 sec. TCP WWW: 60 sec. TCP SYN: 60 sec. Vigor2762 Series User’s Guide...
Page 146 Display the port for the incoming data of such triggering profile. Status Display if the rule is active or de-active. Click the index number link to open the configuration page. Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 147: Ii-4-5 Alg
RTSP ALG makes RTSP message, RTCP message, and RTP packets of voice and video be transmitted and received correctly via NAT by Vigor router. However, SIP ALG makes SIP message and RTP packets of voice be transmitted and received correctly via NAT by Vigor router. Vigor2762 Series User’s Guide...
Page 148 Type a port number for SIP or RTSP protocol. Check the box to make correspond protocol message packet from TCP transmit and receive via NAT. Check the box to make correspond protocol message packet from UDP transmit and receive via NAT. Vigor2762 Series User’s Guide...
Page 149: Applications
FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2762 Series will respond the specified private IP address.
Page 150: Ii-5-1 Dynamic Dns
Account, and choose correct Service Provider: dyndns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. Vigor2762 Series User’s Guide...
Page 151 IP address for DDNS update. There are two methods offered for you to choose: WAN IP - If it is selected and the WAN IP of Vigor  router is private, DDNS update will take place right Vigor2762 Series User’s Guide...
Page 152 Uncheck Enable Dynamic DNS Setup, and click Clear All button to disable the function and clear all accounts from the router. Delete a Dynamic DNS Account Delete a Dynamic DNS Account Click the Index number you want to delete and then click Clear All button to delete the account. Vigor2762 Series User’s Guide...
Page 153: Ii-5-2 Lan Dns / Dns Forwarding
FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on Vigor2762 Series will respond the specified private IP address.
Page 154 Such option is used to record the domain name or the host alias. Add – Click it to add a new host with specified reference. IP Address List The IP address listed here will be used for mapping with the Vigor2762 Series User’s Guide...
Page 155 LAN DNS automatically. Domain Name Type the domain name for such profile. DNS Server IP Type the IP address of the DNS server you want to use for Address DNS forwarding. Click OK button to save the settings. Vigor2762 Series User’s Guide...
Page 156: Ii-5-3 Dns Security
Sometime, Vigor router might encounter packets from bogus DNS inquiry. There are two ways to reply such DNS inquiry. Drop – Discard the packets. Pass – Accept the packets and let them pass through Vigor router. Vigor2762 Series User’s Guide...
Page 157: Ii-5-3-2 Domain Diagnose
The clock will reset once if you power down or reset the router. There is another way to set up time. You can inquiry an NTP server (a time server) on the Internet to synchronize the router’s clock. This method can only be applied when the WAN connection has been built Vigor2762 Series User’s Guide...
Page 158 - If it lights in green, it means such schedule is active. You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule: Click any index, say Index No. 1. Vigor2762 Series User’s Guide...
Page 159 Then, any action applied such schedule will be executed per several days. For example, “3” is selected as cycle duration. That means, the action applied such schedule will be executed every three days since the date defined on the Start Date. Vigor2762 Series User’s Guide...
Page 160 Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Vigor2762 Series User’s Guide...
Page 161: Ii-5-5 Upnp
Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2762 Series User’s Guide...
Page 162: Ii-5-6 Igmp
IGMP Fast Leave Check this box to make the router stop forwarding multicast traffic to a LAN port as soon as it receives a leave message from that port. Each LAN port should have one IGMP host connected. Vigor2762 Series User’s Guide...
Page 163: Ii-5-6-2 Working Group
Group ID This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P4 It indicates the LAN port used for the multicast group. Vigor2762 Series User’s Guide...
Page 164: Ii-5-7 Wake On Lan
MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2762 Series User’s Guide...
Page 165: Ii-5-8 Sms / Mail Alert Service
You can click the Notify Profile link to define the content of the SMS. Schedule (1-15) Type the schedule number that the SMS will be sent out. You can click the Schedule(1-15) link to define the schedule. Vigor2762 Series User’s Guide...
Page 166: Ii-5-8-2 Mail Alert
Schedule (1-15) Type the schedule number that the notification will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 167: Ii-5-9 Bonjour
Below shows an example for applying the bonjour feature that Vigor router can be used as the FTP server. 1. Here, we use Firefox and DNSSD to discover the service in such case. Therefore, just ensure the Bonjour client program and DNSSD for Firefox have been installed on the computer. Vigor2762 Series User’s Guide...
Page 168 5. Open the DNSSD page again. The available items will be changed as the follows. It means the Vigor router (based on Bonjour protocol) is ready to be used as a printer server, FTP server, SSH Server, Telnet Server, and HTTP Server. Vigor2762 Series User’s Guide...
Page 169 6. Now, any page or document can be printed out through Vigor router (installed with a printer). Vigor2762 Series User’s Guide...
Page 170: Application Notes
Part A : Changeip.org Note that, Username: jo*** Password: jo******** Host name: j*****.changeip.org WAN IP address: 1.169.185.242 Following is the screenshot of editing the HTML script on the browser to update your IP to the DDNS server. Vigor2762 Series User’s Guide...
Page 171 DDNS service is running. In this case the IP will be 1.169.185.242. After setting, the Customized DDNS service will be up, and our IP will be updated to the DDNS server. Part B : 3322.net Part B : 3322.net Username: bi******* Password: 88******** Host name: bi*******.3322.org Vigor2762 Series User’s Guide...
Page 172 Set the Provider Host as member.3322.net. Set the Service API as: /dyndns/update? hostname=yourhost.3322.org&myip=###IP###&wildcard=OFF&mx=mail.exchanger.ext& backmx=NO&offline=NO Enter your account and password. After the setting, the Customized DDNS service will be up, and our IP will be updated to the DDNS server automatically. Vigor2762 Series User’s Guide...
Page 173 Part C : Extend Note Part C : Extend Note The customized Service Provider is also eligible with the ClouDNS.net. Vigor2762 Series User’s Guide...
Page 174: Part Iii Wireless Lan
Part III Wireless LAN Part III Wireless LAN Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access. Vigor2762 Series User’s Guide...
Page 175: Wireless Lan
Real-time Hardware Encryption Real-time Hardware Encryption Vigor Router is equipped with a hardware AES encryption engine so it can apply the highest protection to your data without influencing user experience. Vigor2762 Series User’s Guide...
Page 176 The password (PSK) of default security mode is provided and stated on the label pasted on the bottom of the router. For the wireless client who wants to access into Internet through such router, please input the default PSK value for connection. Vigor2762 Series User’s Guide...
Page 177 It will display all the stations in your wireless network and the status of their connection. WPS (Wi-Fi Protected Setup) provides easy procedure to make network connection between wireless station and wireless access point (vigor router) with the encryption of WPA and WPA2. Vigor2762 Series User’s Guide...
Page 178: Iii-1-1 Wireless Wizard
Item Description Name Type the SSID name of this router for wireless 2.4GHz. The default name is defined with DrayTek. Change the name if required. Mode Available modes are different based on 2.4GHz and / or 5GHz supported by Vigor router.
Page 179 Either 8~63 ASCII characters, such as 012345678(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). Next Click it to get into the next setting page. Cancel Exit the wireless wizard without saving any changes. 4. After typing the required information, click Next. Vigor2762 Series User’s Guide...
Page 180 5. The following page will display the configuration summary for wireless setting. 6. Click Finish to complete the wireless settings configuration. Vigor2762 Series User’s Guide...
Page 181: Iii-1-2 General Setup
LAN. Depending on the wireless utility, the user may only see the information except SSID or just cannot see any thing about Vigor wireless router while site surveying. The system allows you to set four sets of SSID for different usage. In Vigor2762 Series User’s Guide...
Page 182: Iii-1-3 Security
For the wireless client who wants to access into Internet through such router, please input the default PSK value for connection. By clicking the Security, a new web page will appear so that you could configure the settings of WPA and WEP. Vigor2762 Series User’s Guide...
Page 183 The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Either 8~63 ASCII characters, such as 012345678(or 64 Hexadecimal digits leading by 0x, such Vigor2762 Series User’s Guide...
Page 184: Iii-1-4 Access Control
MAC addresses into a black list, or only let them be able to connect by inserting their MAC addresses into a white list. In the Access Control web page, users may configure the white/black list modes used by each SSID and the MAC addresses applied to their lists. Vigor2762 Series User’s Guide...
Page 185 Type a brief description for the specified client’s MAC address. Add a new MAC address into the list. Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. Vigor2762 Series User’s Guide...
Page 186: Iii-1-5 Wps
He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. There are two methods to do network connection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code. Vigor2762 Series User’s Guide...
Page 187 For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security, you will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again. Vigor2762 Series User’s Guide...
Page 188 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2762 Series User’s Guide...
Page 189: Iii-1-6 Wds
In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Vigor2762 Series User’s Guide...
Page 190 Type – There are some types for you to choose. WPA and WPA2 are used for WDS devices (e.g.2920n wireless router, you can set the encryption mode as WPA or WPA2 to establish your WDS system between AP and the router. Vigor2762 Series User’s Guide...
Page 191 Disable to cancel this function. Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 192: Iii-1-7 Advanced Setting
56 bit sync field instead of long preamble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Click Enable to use Long Preamble if needed to communicate with this kind of devices. Vigor2762 Series User’s Guide...
Page 193 Therefore, changing the country code to ensure successful network connection may be necessary for some clients. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 194: Iii-1-8 Station Control
SSID will be listed on Station Control List. Hotspot Web Portal Click it to access into Hotspot Web Portal page for modifying the settings if required. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 195: Iii-1-8 Bandwidth Management
It is available when Per Station Limit is selected Type a value to define the maximum data traffic (downloading) for each wireless client connecting to Vigor2762. After finishing this web page configuration, please click OK to save the settings Vigor2762 Series User’s Guide...
Page 196: Iii-1-9 Ap Discovery
AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2762 Series User’s Guide...
Page 197: Iii-1-10 Airtime Fairness
(A/B) by controlling TX traffic. In the following figure, Station B(11n) has higher probability to send data packets than Station A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by Station A(slow rate). Vigor2762 Series User’s Guide...
Page 198: Iii-1-11 Roaming
III-1-11 Roaming III-1-11 Roaming The network signal for a single wireless access point might be limited by its coverage range. Therefore, if you want to expand the wireless network in a large exhibition with a quick Vigor2762 Series User’s Guide...
Page 199: Iii-1-12 Station List
Minimum RSSI - When the signal strength of the wireless station is below the value (dBm) set here and adjacent AP (must be DrayTek AP and support such feature too) with higher signal strength value (defined in the field of With...
Page 200 Available settings are explained as follows: Item Description Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2762 Series User’s Guide...
Page 201 This page is left blank. Vigor2762 Series User’s Guide...
Page 202: Part Iv Vpn
Here Vigor router support digital certificates conforming to standard X.509. Vigor2762 Series User’s Guide...
Page 203: Vpn And Remote Access
SSL/TLS technology - the same encryption that you use for secure web sites such as your bank. Site to site VPN tunnels can connect branch offices to a main office, with DrayTek SSL VPN encryption securing the connection between the two offices, a TLS encrypted HTTPS tunnel which can be more secure than PPTP, and easier to configure than an IPsec VPN tunnel.
Page 204: Iv-1-1 Remote Access Control
After finishing all the settings here, please click OK to save the configuration. IV-1- PPP General Setup IV-1- PPP General Setup This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPsec. Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 205 IP Address Assignment for Enter a start IP address for the dial-in PPP connection for Dial-In Users (when DHCP LAN1. Disable set) LAN2 will be available if it is enabled. Refer to LAN>>General Setup for enabling the LAN interface. Vigor2762 Series User’s Guide...
Page 206: Iv-1-3 Ipsec General Setup
(LAN-to-LAN) which uses dynamic IP address and IPsec- related VPN connections such as L2TP over IPsec and IPsec tunnel. There are two methods offered by Vigor router for you to authenticate the incoming data coming from remote Vigor2762 Series User’s Guide...
Page 207: Iv-1-4 Ipsec Peer Identity
32 entries of digital certificates for peer dial-in users. Available settings are explained as follows: Item Description Set to Factory Default Click it to clear all indexes. Index Click the number below Index to access into the setting page of IPsec Peer Identity. Vigor2762 Series User’s Guide...
Page 208 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 209: Iv-1-5 Remote Dial-In User
Click the number below Index to access into the setting page of Remote Dial-in User. User Display the username for the specific dial-in user of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Active Check the box to activate such profile. Vigor2762 Series User’s Guide...
Page 210 VPN connection employed the L2TP without IPsec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPsec policy first, if it is  applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. Vigor2762 Series User’s Guide...
Page 211 This group of fields is a must for IPsec Tunnels and L2TP with IPsec Policy when you specify the remote node. Check the Medium, DES, 3DES or AES box as the security method. Medium-Authentication Header (AH) means data will be Vigor2762 Series User’s Guide...
Page 212: Iv-1-6 Lan To Lan
You may set parameters including connection peer ID, connection type (VPN connection - including PPTP, IPsec Tunnel, and L2TP by itself or over IPsec) and corresponding security methods, etc. The following figure shows the summary table according to the item (All/Trunk/Online/Offline) selected for View. Vigor2762 Series User’s Guide...
Page 213 Click each index to edit each profile and you will get the following page. Each LAN-to- LAN profile includes 5 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. Vigor2762 Series User’s Guide...
Page 214 Check to enable the transmission of PING packets to a specified IP address. Enable PING to keep IPsec tunnel alive is used to handle abnormal IPsec VPN connection disruption. It will help to provide the state of a VPN connection for router’s judgment Vigor2762 Series User’s Guide...
Page 215 Peer ID - Select one of the predefined Profiles set in VPN and Remote Access >>IPsec Peer Identity. Local ID – Specify a local ID (Alternative Subject Name First or Subject Name First) to be used for Dial- Vigor2762 Series User’s Guide...
Page 216  IKE phase 2 proposal-To propose the local available algorithms to the VPN peers, and get its feedback to find a match. Three combinations are available for both modes. We suggest you select the combination Vigor2762 Series User’s Guide...
Page 217 Do not change the default value if you do not select PPTP or L2TP. Remote Network IP/ Remote Network Mask - Add a static route to direct all traffic destined to this Remote Network IP Address/Remote Network Mask through the VPN Vigor2762 Series User’s Guide...
Page 218 Remote Network IP Address/Remote Network Mask through the VPN connection. For IPSec, this is the destination clients IDs of phase 2 quick mode. Translated Local Network – This function is enabled in Vigor2762 Series User’s Guide...
Page 219 Virtual IP Mapping – A pop up dialog will appear for you to specify the local IP address and the mapping virtual IP address. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 220: Iv-1-9 Connection Management
Drop button. You may also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Available settings are explained as follows: Item Description Dial-out Tool Dial - Click this button to execute dial out function. Vigor2762 Series User’s Guide...
Page 221: Application Notes
Create a Dial-In profile for VPN user, go to VPN and Remote Access >> LAN to LAN, click on an available index to add a new profile. Set up the dial-in profile. In Common Settings, Enter the Profile Name. Vigor2762 Series User’s Guide...
Page 222 Click on IKE Pre-Shared Key and enter the Pre-shared Key. Select the IPsec Security Method that are allowed to use.　　 In TCP/IP Network Settings, enter VPN Client's LAN network in Remote Network IP and Remote Network Mask. Click OK to save the profile. Vigor2762 Series User’s Guide...
Page 223 Create a Dial-out profile to VPN server: Go to VPN and Remote Access >> LAN to LAN, click on an available index to add a new profile. Setup the dial-out profile. In Common Settings, Enter a Profile Name. Enable this profile. Set Call Direction to Dial-Out.　　 In Dial-out Setting, Vigor2762 Series User’s Guide...
Page 224 (m) Make sure phase 1 and phase 2 proposal are using the security methods which are accepted by VPN server. Click OK to save.　　 In TCP/IP Network Settings, enter VPN Server's LAN Network in Remote Network IP and Remote Network Mask. Click OK to save the profile. Vigor2762 Series User’s Guide...
Page 225 To initiate the VPN connection, go to VPN and Remote Access >> Connection Management on VPN Client, select the profile to VPN Sever and click Dial. If all the settings are matched, the VPN will be established, and the statistics will be displayed on the same page. Vigor2762 Series User’s Guide...
Page 226: Ssl Vpn
There are two benefits that SSL VPN provides:  It is not necessary for users to preinstall VPN client software for executing SSL VPN connection.  There are less restrictions for the data encrypted through SSL VPN in comparing with traditional VPN. Vigor2762 Series User’s Guide...
Page 227: Iv-2-1 General Setup
Self-signed to use the router’s built-in default certificate. The default certificate can be used in SSL VPN server and HTTPS Web Proxy. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 228: Iv-2-2 User Account
The SSL technology is the same as the encryption that you use for secure web sites such as your online bank. The SSL VPN can be operated in either full tunnel mode or proxy mode. Now, Vigor2762 Series allows up to 16 simultaneous incoming users.
Page 229 Internet. You should set the User Name and Password of remote dial-in user below. IPSec Tunnel - Allow the remote dial-in user to make an IPSec VPN connection through Internet. L2TP with IPSec Policy - Allow the remote dial-in user to Vigor2762 Series User’s Guide...
Page 230 IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node. Check the Medium, DES, 3DES or AES box as the security method. Vigor2762 Series User’s Guide...
Page 231 Local ID - Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 232: Iv-2-3 Online User Status
If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into DrayTek SSL VPN portal interface. Next, users can open SSL VPN>> Online User Status to view logging status of SSL VPN.
Page 233: Certificate Management
Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Vigor2762 Series User’s Guide...
Page 234: Iv-3-1 Local Certificate
Click this button to open Generate Certificate Signing Request window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE again. Vigor2762 Series User’s Guide...
Page 235 Vigor router allows you to generate a certificate request and submit it the CA server, then import it as “Local Certificate”. If you have already gotten a certificate from a third party, you may import it directly. The supported types are PKCS12 Certificate and Certificate with a private key. Vigor2762 Series User’s Guide...
Page 236 Note: PKCS12 is a standard for storing private keys and certificates securely. It is used in (among other things) Netscape and Microsoft Internet Explorer with their import and export options. Upload Certificate and It is useful when users have separated certificates and private Vigor2762 Series User’s Guide...
Page 237 Next, access your CA server and enter the page of certificate request, copy the information into it and submit a request. A new certificate will be issued to you by the CA server. You can save it. Delete Delete Click this button to remove the selected certificate. Vigor2762 Series User’s Guide...
Page 238: Iv-3-2 Trusted Ca Certificate
Therefore, Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience for general user. Later, such root CA generated by DrayTek server can perform the issuing of local certificate.
Page 239 Trusted CA Certificate window. For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2762 Series User’s Guide...
Page 240: Iv-3-3 Certificate Backup
Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Confirm password. Also, you can use Restore to retrieve these two settings to the router whenever you want. Vigor2762 Series User’s Guide...
Page 241: Part V Security
It also restricts users in the local network from accessing the Internet. CSM is an abbreviation of Central Security Management which is used to control IM/P2P usage, filter the web content and URL content to reach a goal of security management. Vigor2762 Series User’s Guide...
Page 242: Firewall
It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2762 Series User’s Guide...
Page 243 3. ICMP flood attack 11. TCP flag scan 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unassigned Numbers 8. Trace route Vigor2762 Series User’s Guide...
Page 244: V-1-1 General Setup
Click Firewall and click General Setup to open the general setup page. General Setup Page General Setup Page Such page allows you to enable / disable Call Filter and Data Filter, determine general rule for filtering the incoming and outgoing data. Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 245 It is effective only for the packets routed but not for packets translated by NAT. Backup Firewall Click Backup to save the firewall configuration. Restore Firewall Click Select to choose a firewall configuration file. Then click Restore to apply the file. Vigor2762 Series User’s Guide...
Page 246 APP Enforcement profile selected here. For detailed information, refer to the section of APP Enforcement profile setup. For troubleshooting needs, you can specify to record information for IM/P2P by checking the Log box. It will be Vigor2762 Series User’s Guide...
Page 247 Please use the drop-down list to choose a codepage. If you do not have any idea of choosing suitable codepage, please open Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Vigor2762 Series User’s Guide...
Page 248 However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 249: V-1-2 Filter Setup
Enable or disable the filter rule. Comment Enter filter set comments/description. Maximum length is 23–character long. Direction Display the direction of packet flow Src IP Dst IP Display the source IP address and destination IP address of the rule. Vigor2762 Series User’s Guide...
Page 250 Enter filter set comments/description. Maximum length is 14- character long. Direction Set the direction of packet flow. It is for Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Vigor2762 Series User’s Guide...
Page 251 (<) – the port number less than this value is available for this profile. 3. Click Next to get the following page. 4. After configuring the above settings, click Next to get the summary page for reference. Vigor2762 Series User’s Guide...
Page 252 5. If there is no error, click Finish to complete wizard setting. To use Advance Mode, do the following steps: 1. Click the Advance Mode radio button. 2. Click one of the indexe number linke (e.g., Index 2) to access into the following page. Vigor2762 Series User’s Guide...
Page 253 Set the direction of packet flow. It is for Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other LAN. Vigor2762 Series User’s Guide...
Page 254 Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Vigor2762 Series User’s Guide...
Page 255 No-Strict - no limitation. Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Vigor2762 Series User’s Guide...
Page 256 Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here. Codepage - This function is used to compare the characters Vigor2762 Series User’s Guide...
Page 257 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
Page 258: V-1-3 Dos Defense
Check the box to activate the UDP flood defense function. Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router will start to randomly discard the subsequent UDP packets Vigor2762 Series User’s Guide...
Page 259 Internet is blocked. Activating the DoS/DDoS defense functionality might block some legal packets. For example, when you activate the fraggle attack defense, all broadcast UDP packets coming from the Internet are blocked. Therefore, the RIP packets Vigor2762 Series User’s Guide...
Page 260 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2762 Series User’s Guide...
Page 261 Vigor2762 Series User’s Guide...
Page 262: V-1-4 Diagnose
Src IP Type the IPv4/IPv6 address of the packet’s source. Src Port Type the port number of the packet’s source. Src MAC Type the MAC address of the packet’s source. Vigor2762 Series User’s Guide...
Page 263 Simply type 16 HEX characters which represent certain packet (e.g., DNS packet) if you want to set the data transfered with protocol (ICMP/UDP/TCP) which is different to Type setting. Analyze Execute the test and analyze the result. Vigor2762 Series User’s Guide...
Page 264 The following figure shows the test result after clicking Analyze. Processing state for the fuctions (MAC Filter, QoS, User management, etc.,) related to the firewall will be displayed by green or red LED. Vigor2762 Series User’s Guide...
Page 265: Application Notes
Open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 2 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., block_all). Choose Block If No Further Match for the Filter setting. Then, click OK. Vigor2762 Series User’s Guide...
Page 266 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. Vigor2762 Series User’s Guide...
Page 267 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. Vigor2762 Series User’s Guide...
Page 268 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor2762 Series User’s Guide...
Page 269: Csm (Central Security Management)
Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Info The priority of URL Content Filter is higher than Web Content Filter. Vigor2762 Series User’s Guide...
Page 270: V-2-1 App Enforcement Profile
Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Others displayed on this page. Each tab will bring out different items with supported versions that you can choose to disallow people using. Vigor2762 Series User’s Guide...
Page 271 A button under Enable check box allows you to open a pop up window to specify activity for that APP. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Vigor2762 Series User’s Guide...
Page 272: V-2-2 Appe Signature Upgrade
The APPE Enforcement Profile adopted by Vigor router will be treated as the APPE signature. DrayTek will periodically upgrade versions for all of the APPs supported by Vigor router. However, it might be inconvenient for users to upgrade the APP version one by one.
Page 273: V-2-3 Url Content Filter Profile
Or you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”. Also the Vigor router will discard any request that tries to retrieve the malicious code. Click CSM and click URL Content Filter Profile to open the profile setting page. Vigor2762 Series User’s Guide...
Page 274 Administration Message. You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 275 IP address, such as http://202.6.3.2. The reason for this is to prevent someone dodges the URL Access Control. You must clear your browser cache first so that the URL content filtering facility Vigor2762 Series User’s Guide...
Page 276  Block - Restrict accessing into the corresponding webpage with the keywords listed on the box below. If the web pages do not match with the specified feature set here, it will be processed with reverse Vigor2762 Series User’s Guide...
Page 277: V-2-4 Web Content Filter Profile
WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request. Be aware that service provider matching with Vigor router currently offers a period of time for trial version for users to experiment.
Page 278 Setup Test Server It is recommended for you to use the default setting, auto- selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Set to Factory Default Click this link to retrieve the factory settings.
Page 279 All of the configuration made for web content filter will be deleted automatically. Therefore, please backup your data before you change the web content filter license. Available settings are explained as follows: Item Description Vigor2762 Series User’s Guide...
Page 280 If the web pages do not match with the specified feature set here, it will be processed with reverse action. After finishing all the settings, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 281: V-2-5 Dns Filter Profile
DNS server is used, DNS Filter Profile will be applied to DNS query coming from clients on LAN. Info For DNS filter must use the WCF service profile to filter the packets, therefore WCF license must be activated first. Otherwise, DNS filter does not have any effect on packets. Vigor2762 Series User’s Guide...
Page 282 DNS Filter - Check Enable to enable such feature. Syslog - The filtering result can be recorded according to the setting selected for Syslog.  None – There is no log file will be recorded for this Vigor2762 Series User’s Guide...
Page 283 Vigor router. Administration Message Type the words or sentences which will be displayed when a web page is blocked by Vigor router. After finishing all the settings, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 284: V-2-6 Appe Support List
V-2-6 APPE Support List V-2-6 APPE Support List This page offers the software versions for each applications managed by APP Enforcement Profiles by Vigor router. Click the IM/P2P/PROTOCOL/OTHERS tab to open the information page for different APP type. Vigor2762 Series User’s Guide...
Page 285: Application Notes
A-1 How to Create an Account for MyVigor A-1 How to Create an Account for MyVigor The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system.
Page 286 Click the Activate link. A login page for MyVigor web site will pop up automatically. Click the link of Create an account now. Check to confirm that you accept the Agreement and click Accept. Vigor2762 Series User’s Guide...
Page 287 Type your personal information in this page and then click Continue. Choose proper selection for your computer and click Continue. Vigor2762 Series User’s Guide...
Page 288 Check to see the confirmation email with the title of Letter from myvigor.draytek.com. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2762 Series User’s Guide...
Page 289 (e.g., WCF) that you want. Create an Account via MyVigor Web Site Create an Account via MyVigor Web Site Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page. Vigor2762 Series User’s Guide...
Page 290 Check to confirm that you accept the Agreement and click Accept. Type your personal information in this page and then click Continue. Choose proper selection for your computer and click Continue. Now you have created an account successfully. Click START. Vigor2762 Series User’s Guide...
Page 291 Check to see the confirmation email with the title of Letter from myvigor.draytek.com. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2762 Series User’s Guide...
Page 292 Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2762 Series User’s Guide...
Page 293: How To Block Facebook Service Accessed By The Users Via Web Content Filter / Url Content Filter
I. Via Web Content Filter I. Via Web Content Filter Make sure the Web Content Filter (powered by Commtouch) license is valid. Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Vigor2762 Series User’s Guide...
Page 294 A. Block the web page containing the word of “Facebook” Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type facebook. Configure the settings as the following figure. Vigor2762 Series User’s Guide...
Page 295 Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. When you finished the above steps, click OK. Then, open Firewall>>General Setup. Vigor2762 Series User’s Guide...
Page 296 B. Disallow users to play games on Facebook Open Object Settings>>Keyword Object. Click an index number to open the setting page. In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Vigor2762 Series User’s Guide...
Page 297 When you finished the above steps, please open Firewall>>General Setup. Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. Vigor2762 Series User’s Guide...
Page 298: Part Vi Management
Configuration Backup, Syslog /Mail Alert, Time and Date, Management, Reboot System, Firmware Upgrade and Activation. It is used to control the bandwith of data transmission through configuration of Sessions Limit, Bandwidth Limit, and Quality of Servie (QoS). Vigor2762 Series User’s Guide...
Page 299: System Maintenance
System Status, TR-069, Administrator Password, User Password, Login Page Greeting, Configuration Backup, Syslog /Mail Alert, Time and Date, SNMP, Management, Self-Signed Certificate, Reboot System, Firmware Upgrade, Modem Code Upgrade and Activation. Below shows the menu items for System Maintenance. Vigor2762 Series User’s Guide...
Page 300: Vi-1-1 System Status
IP Address - Display the IP address of the LAN interface. Subnet Mask - Display the subnet mask address of the LAN interface. DHCP Server - Display the current status of DHCP server of the LAN Vigor2762 Series User’s Guide...
Page 301 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. Vigor2762 Series User’s Guide...
Page 302 VI-1-2 TR-069 VI-1-2 TR-069 This device supports TR-069 standard. It is very convenient for an administrator to manage a TR-069 device through an Auto Configuration Server e.g., VigorACS. Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 303 AP Password – Type the password of the VigorAP that  you want to apply Vigor2762’s TR-069 settings. Apply Specific STUN Settings to APs – After clicking the Enable radio button for Apply Settings to APs, if you want Vigor2762 Series User’s Guide...
Page 304: Vi-1-3 Admin Setting
Line Speed – Set the transmission rate and receiving rate for specified WAN interface. After finishing all the settings here, please click OK to save the configuration. VI-1-3 Admin Setting VI-1-3 Admin Setting This page allows you to set new password for administrator. Vigor2762 Series User’s Guide...
Page 305 Confirm Password – Type the password again for confirmation. Add – After typing the user name and password above, simply click it to create a new local user. The new one will be shown on the Local User List immediately. Vigor2762 Series User’s Guide...
Page 306 Vigor router through Internet by username/password of “admin/admin”. When you click OK, the login window will appear. Please use the new password to access into the web user interface again. Vigor2762 Series User’s Guide...
Page 307: Vi-1-4 User Password
Below shows an example for accessing into User Operation with User Password. 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. Vigor2762 Series User’s Guide...
Page 308 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2762 Series User’s Guide...
Page 309 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Info Setting in User Mode can be configured as same as in Admin Mode. Vigor2762 Series User’s Guide...
Page 310: Vi-1-5 Login Page Greeting
Enable Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Welcome Message and Type words or sentences here. It will be displayed for Bulletin bulletin message.
Page 311 Vigor2762 Series User’s Guide...
Page 312: Vi-1-6 Configuration Backup
Choose File – Click it to specify a file to be restored. Click Restore to restore the configuration. Backup Click it to perform the configuration backup of this router. Click Backup button to get into the following dialog. Click Save button to open Vigor2762 Series User’s Guide...
Page 313 The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Info Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Vigor2762 Series User’s Guide...
Page 314 Click Choose File button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2762 Series User’s Guide...
Page 315: Vi-1-7 Syslog/Mail Alert
Check Enable to activate function of mail alert. Send a test e-mail - Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for Vigor2762 Series User’s Guide...
Page 316 For viewing the Syslog, please do the following: Just set your monitor PC’s IP address in the field of Server IP Address Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. Vigor2762 Series User’s Guide...
Page 317 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2762 Series User’s Guide...
Page 318: Vi-1-8 Time And Date
Advanced – Click it to open a pop up dialog. Use the default time setting or set user defined time for your requirement. Automatically Update Select a time interval for updating from the NTP server. Interval Vigor2762 Series User’s Guide...
Page 319: Vi-1-9 Snmp
DES) and authentication method (support MD5 and SHA) for the management needs. Available settings are explained as follows: Item Description Enable SNMP Agent Check it to enable this function. Get Community Set the name for getting community by typing a proper character. The default setting is public. Vigor2762 Series User’s Guide...
Page 320 Privacy Algorithm Choose one of the methods listed below as the privacy algorithm. Privacy Password Type a password for privacy. The maximum length of the text is limited to 23 characters. Click OK to save these settings. Vigor2762 Series User’s Guide...
Page 321: Vi-1-10 Management
Type in the router name provided by ISP. Default: Disable Auto- If it is enabled, the function of auto-logout for web user Logout interface will be disabled. The web user interface will be open until you click the Logout icon manually. Vigor2762 Series User’s Guide...
Page 322 (master device) sends request packet to Vigor2762, Vigor2762 would send back information to respond the request coming from the external device which is able to manage Vigor2762. After finished the above settings, click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 323 IPs/subnet masks is allowed. Index in IP Object - Type the index number of the IP object profile. Related IP address will appear automatically. After finished the above settings, click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 324 Vigor router. Index in IP Object - Type the index number of the IP object profile. Related IP address will appear automatically. After finished the above settings, click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 325: Vi-1-11 Self-Signed Certificate
Click Regeneration to open Regenerate Self-Signed Certificate window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE. Vigor2762 Series User’s Guide...
Page 326 Vigor2762 Series User’s Guide...
Page 327: Vi-1-12 Reboot System
When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2762 Series User’s Guide...
Page 328: Vi-1-13 Firmware Upgrade
VI-1-13 Firmware Upgrade VI-1-13 Firmware Upgrade Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com. Click System Maintenance>> Firmware Upgrade to launch the Firmware Upgrade Utility.
Page 329: Vi-1-15 Activation
Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. Below shows the successful activation of Web Content Filter: Vigor2762 Series User’s Guide...
Page 330 Vigor2762 Series User’s Guide...
Page 331: Application Notes
From Network View, select the device which network administrator want to keep the setting Click on drop menu to select on the setting menu, and choose  SystemMaintenance _AdminPassword Click Password parameter then drag it to left block  Vigor2762 Series User’s Guide...
Page 332 1. Go to the CPE router, login with the password (admin123) set in KeepProfile Setting, and it could login successfully. 2. Try to modify the admin password to 123, then check whether ACS server will detect the changes and keep the original setting. Vigor2762 Series User’s Guide...
Page 333 4. Go back to login the router, type 123 as password, we will find the password is incorrect, which means ACS has kept the password as admin123. Vigor2762 Series User’s Guide...
Page 334: Bandwidth Management
Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic, to allocate certain amount of resource execute appropriate policing, classification or scheduling. The core routers in the backbone will do the same Vigor2762 Series User’s Guide...
Page 335 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s effort. Vigor2762 Series User’s Guide...
Page 336: Vi-2-1 Sessions Limit
To activate the function of limit session, simply click Enable and set the default session limit. Available settings are explained as follows: Item Description Session Limit Enable - Click this button to activate the function of limit session. Disable - Click this button to close the function of limit session. Vigor2762 Series User’s Guide...
Page 337 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 338: Vi-2-2 Bandwidth Limit
LAN. Default RX limit - Define the default speed of the downstream for each computer in LAN. Limitation List Display a list of specific limitations that you set on this web page. Vigor2762 Series User’s Guide...
Page 339 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. Vigor2762 Series User’s Guide...
Page 340: Vi-2-3 Quality Of Service
Service Type – Allow to configure detailed settings for the service type. Enable the First Priority When this feature is enabled, the VoIP SIP/UDP packets will for VoIP SIP/RTP be sent with highest priority. SIP UDP Port – Set a port number used for SIP. Vigor2762 Series User’s Guide...
Page 341 Service Type for the Class Rule for your request. Online Statistics Online Statistics Display an online statistics for quality of service for your reference. This feature is available only when the Quality of Service for WAN interface is enabled. Vigor2762 Series User’s Guide...
Page 342 Check this and set the limited bandwidth ratio on the right Control field. This is a protection of TCP application traffic since UDP application traffic such as streaming video will exhaust lots of bandwidth. Outbound TCP ACK The difference in bandwidth between download and upload Vigor2762 Series User’s Guide...
Page 343 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2762 Series User’s Guide...
Page 344 It determines the service type of the data for processing with QoS control. It can also be edited. You can choose the predefined service type from the Service Type drop down list. Those types are predefined in factory. Simply choose Vigor2762 Series User’s Guide...
Page 345 Edit the Service Type for Class Rule To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. Vigor2762 Series User’s Guide...
Page 346 After finishing all the settings here, please click OK to save the configuration. By the way, you can set up to 10 service types. If you want to edit/delete an existed service type, please select the radio button of that one and click Edit/Edit for modification. Vigor2762 Series User’s Guide...
Page 347: Vi-2-4 App Qos
By combining the function of QoS (adjustment on Inbound/Outbond bandwidth and bandwidth ratio), Vigor router can perform the bandwidth management for the protocols, streaming, remote control, web HD and so on. Click Bandwidth Management>>APP QoS to open the following page. Vigor2762 Series User’s Guide...
Page 348 Click it to select all of the protocols. Clear All Click it to de-select all of the protocols. Apply to all Choose one of the actions from the drop down list. It is prepared for applying to all protocols. Vigor2762 Series User’s Guide...
Page 349: Application Notes
Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below. Scenario: The Internet connection you got from ISP line is 2MB/512Kb. There are VoIP telephony network, IPTV set top box and data server at your home.
Page 350 In the following page, type a name (e.g., VoIP) for such class and click Add. Check the box of ACT. Click Edit to specify the local address. Vigor2762 Series User’s Guide...
Page 351 Click OK again to save the settings. The class rule for VoIP has been set. Click OK to return to previous page. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. Vigor2762 Series User’s Guide...
Page 352 VoIP, IPTV and Data/Email. 10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control. Vigor2762 Series User’s Guide...
Page 353 11. Click OK to save the settings. The class rules for WAN1 are defined as shown below. Vigor2762 Series User’s Guide...
Page 354: Central Management (Ap)
Load Balance for AP The parameters configured for Load Balance can help to distribute the traffic for all of the access points registered to Vigor router. Thus, the bandwidth will not be occupied by certain access points. Vigor2762 Series User’s Guide...
Page 355 The number displayed on the left side means 2.4GHz; and the number displayed on the right side means 5GHz. AP List Display the number of the AP around the device. Uptime Display the duration of the AP powered up. Vigor2762 Series User’s Guide...
Page 356: Vi-3-2 Wlan Profile
First, you have to check the box of the existing profile as the original profile. Second, click Clone. The following dialog will appear. Third, choose the profile index to accept the settings from the original profile. Forth, type a new name in the field of Vigor2762 Series User’s Guide...
Page 357 Simply choose the device you want from Existing Device field. Click >> to move the device to Selected Device field. Then, click OK. The selected WLAN profile will be applied to the selected access point immediately. Later the access point will reboot. Vigor2762 Series User’s Guide...
Page 358 1. Select the WLAN profile (index number 1 to 5) you want to edit. 2. Click the index number link to display the following page. Info The function of Auto Provision is available for the default WLAN profile. Vigor2762 Series User’s Guide...
Page 359 3. After finished the general settings configuration, click Next to open the following page for 2.4G wireless security settings. Vigor2762 Series User’s Guide...
Page 360 4. After finished the above web page configuration, click Next to open the following page for 5G wireless security settings. 5. When you finished the above web page configuration, click Finish to exit and return to the first page. The modified WLAN profile will be shown on the web page. Vigor2762 Series User’s Guide...
Page 361: Vi-3-3 Ap Maintenance
AP, reboot the selected AP remotely and perform the factory reset for the selected File/Path Specify the file and the path which will be used to perform Config Restore or Firmware Upgrade. Vigor2762 Series User’s Guide...
Page 362: Vi-3-4 Traffic Graph
LAN-B, daily or weekly for viewing data transmission chart. Click Refresh to renew the graph at any time. The horizontal axis represents time; the vertical axis represents the transmission rate (in kbps). Info Enabling/Disabling such function will also enable/disable the External Devices function. Vigor2762 Series User’s Guide...
Page 363: Vi-3-5 Load Balance
Set the number of stations as a threshold to activate AP load Threshold balance. Traffic Threshold Upload Limit –Use the drop down list to specify the traffic limit for uploading. Download Limit – Use the drop down list to specify the traffic limit for downloading. Vigor2762 Series User’s Guide...
Page 364 After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 365: Vi-3-6 Function Support List
VI-3-6 Function Support List VI-3-6 Function Support List List the AP management functions that the Access Points support under different firmware versions. Vigor2762 Series User’s Guide...
Page 366: Part Vii Others
USB device connected on Vigor router can be regarded as a server or WAN interface. By way of Vigor router, clients on LAN can access, write and read data stored in USB storage disk with different applications. Vigor2762 Series User’s Guide...
Page 367: Objects Settings
Later, we can select that object/group for applying it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address) You can set up to 192 sets of IP Objects with different conditions. Vigor2762 Series User’s Guide...
Page 368 IP objecsts as a CSV file. Such file can be restored for future use. Download the default CSV template to edit – After clicking it, press Download to store the default CSM template (a Vigor2762 Series User’s Guide...
Page 369 Select Range Address if this object contains several IPs within a range. Select Subnet Address if this object contains one subnet for IP address. Select Any Address if this object contains any IP address. Select Mac Address if this object contains Mac address. Vigor2762 Series User’s Guide...
Page 370 If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. Vigor2762 Series User’s Guide...
Page 371: Vii-1-2 Ip Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2762 Series User’s Guide...
Page 372: Vii-1-3 Ipv6 Object
You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2762 Series User’s Guide...
Page 373 Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Vigor2762 Series User’s Guide...
Page 374: Vii-1-4 Ipv6 Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2762 Series User’s Guide...
Page 375: Vii-1-5 Service Type Object
After finishing all the settings, please click OK to save the configuration. VII-1-5 Service Type Object VII-1-5 Service Type Object You can set up to 96 sets of Service Type Objects with different conditions. Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 376 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. Vigor2762 Series User’s Guide...
Page 377: Vii-1-6 Service Type Group
This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. Vigor2762 Series User’s Guide...
Page 378 Objects Setting>>Service Type Object will be shown in this box. Selected Service Click >> button to add the selected IP objects in this box. Type Objects After finishing all the settings, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 379: Vii-1-7 Keyword Object
You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2762 Series User’s Guide...
Page 380 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 381: Vii-1-8 Keyword Group
Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2762 Series User’s Guide...
Page 382: Vii-1-9 File Extension Object
Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. Vigor2762 Series User’s Guide...
Page 383 Type a name for this profile. The maximum length of the name you can set is 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2762 Series User’s Guide...
Page 384: Vii-1-10 Sms/Mail Service Object
To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Vigor2762 Series User’s Guide...
Page 385 Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 386 Type the URL string in the box under the filed of Service Provider. You have to contact your SMS provider to obtain the exact URL string. Username Type a user name that the sender can use to register to Vigor2762 Series User’s Guide...
Page 387 Each item is explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. Vigor2762 Series User’s Guide...
Page 388: Vii-1-11 Notification Object
3. After finishing all the settings here, please click OK to save the configuration. VII-1-11 Notification Object VII-1-11 Notification Object This page allows you to set ten profiles which will be applied in Application>>SMS/Mail Alert Service. You can set an object with different monitoring situation. Vigor2762 Series User’s Guide...
Page 389: Vii-1-12 String Object
3. After finishing all the settings here, please click OK to save the configuration. VII-1-12 String Object VII-1-12 String Object This page allows you to set several profiles of string object. Click Add to open the following dialog. Vigor2762 Series User’s Guide...
Page 390 Type the string you want and click OK. A new profile (e.g., index #1) with the defined string will be shown on the web page. In general, there is no limit in the number of string profiles created. Each page can display 10, 20, 30, 40 or 50 profiles. Vigor2762 Series User’s Guide...
Page 391: Application Notes
Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider setting. In the following page, type the username and password and set the quota that the router can send the message out. Vigor2762 Series User’s Guide...
Page 392 Choose any index number (e.g., Index 1 in this case) to configure conditions for sending the SMS. In the following page, type the name of the profile and check the Disconnected and Reconnected boxes for WAN to work in concert with the topic of this paper. Vigor2762 Series User’s Guide...
Page 393 Click OK to save the settings. Later, if one of the WAN connections fails in your router, the system will send out SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully. Vigor2762 Series User’s Guide...
Page 394 URL string of the SMS provider and type the username and password. After clicking OK, the new added SMS provider will be added and will be available for you to specify for sending SMS out. Vigor2762 Series User’s Guide...
Page 395: Usb Application
Vigor router, please make sure the memory format for the USB storage disk is FAT16 or FAT32. It is recommended for you to use FAT32 for viewing the filename completely (FAT16 cannot support long filename). Vigor2762 Series User’s Guide...
Page 396 Host Name – Type the host name for the router. Printer Server Enable – Click it to make Vigor router act as a printer server (with USB printer attached). After finishing all the settings here, please click OK to save the configuration. Vigor2762 Series User’s Guide...
Page 397: Vii-2-2 Usb User Management
USB storage disk in anonymity. Later, you can open FTP client software and type the username specified here for accessing into USB storage disk. The length of the name is limited to 11 characters. Note: “Admin” could not be typed here as username, for Vigor2762 Series User’s Guide...
Page 398: Vii-2-3 File Explorer
Before you click OK, you have to insert a USB storage disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. VII-2-3 File Explorer VII-2-3 File Explorer File Explorer offers an easy way for users to view and manage the content of USB storage disk connected on Vigor router. Vigor2762 Series User’s Guide...
Page 399: Vii-2-4 Usb Device Status
Available settings are explained as follows: Item Description Connection Status If there is no USB device connected to Vigor router, “No Disk Connected” will be shown here. Disk Capacity It displays the total capacity of the USB storage disk. Vigor2762 Series User’s Guide...
Page 400: Vii-2-5 Temperature Sensor
VII-2-5 Temperature Sensor VII-2-5 Temperature Sensor A USB Thermometer is now available. It complements your installed DrayTek router installations which will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating.
Page 401 Enable Syslog Alarm - The temperature log will be recorded on Syslog if it is enabled. Upper temperature limit/Lower temperature limit - Type the upper limit and lower limit for the system to send out temperature alert. Vigor2762 Series User’s Guide...
Page 402: Vii-2-6 Modem Support List
Below shows an example of temperature graph: VII-2-6 Modem Support List VII-2-6 Modem Support List Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router. Vigor2762 Series User’s Guide...
Page 403: Vii-2-6 Smb Client Support List
VII-2-6 SMB Client Support List VII-2-6 SMB Client Support List SMB Client Support List provides the test status information for applications with file sharing operated under different platforms. Vigor2762 Series User’s Guide...
Page 404: Vii-2-7 Smb Client Support List
VII-2-7 SMB Client Support List VII-2-7 SMB Client Support List SMB Client Support List provides the test status information for applications with file sharing operated under different platforms. Vigor2762 Series User’s Guide...
Page 405: Application Notes
Plug the USB device to the USB port on the router. Open USB Application>>USB Device Status. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable SMB service. Vigor2762 Series User’s Guide...
Page 406 Here we add a new account "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. Vigor2762 Series User’s Guide...
Page 407 Now, users in LAN of Vigor2762 can access into the USB storage device by typing ftp:// 192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. Vigor2762 Series User’s Guide...
Page 408 This page is left blank. Vigor2762 Series User’s Guide...
Page 409: Part Viii Troubleshooting
Part VIII Troubleshooting Part VIII Troubleshooting This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration Vigor2762 Series User’s Guide...
Page 410: Viii-1 Diagnostics
Backing to factory default setting if necessary. If all above stages are done and the router still cannot run normally, it is the time for you to contact your dealer or DrayTek technical support for advanced help. Web User Interface Web User Interface Fisrt, take a look at the menu items under Diagnostics.
Page 411 Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2762 Series User’s Guide...
Page 412: Viii-1-2 Routing Table
VIII-1-2 Routing Table VIII-1-2 Routing Table Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigor2762 Series User’s Guide...
Page 413: Viii-1-3 Arp Cache Table
The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Vigor2762 Series User’s Guide...
Page 414: Viii-1-5 Dhcp Table
It displays the host ID name of the specified PC. Refresh Click it to reload the page. -1-6 NAT Sessions Table -1-6 NAT Sessions Table Click Diagnostics and click NAT Sessions Table to open the list page. Vigor2762 Series User’s Guide...
Page 415 It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. Vigor2762 Series User’s Guide...
Page 416: Viii-1-7 Dns Cache Table
Click OK to enable such function. It means when the TTL value of each DNS query reaches the threshold of the value specified here, the corresponding record will be deleted from router’s Cache automatically. Vigor2762 Series User’s Guide...
Page 417: Viii-1-8 Ping Diagnosis
IPV4 /IPV6 Choose the interface for such function. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Vigor2762 Series User’s Guide...
Page 418: Viii-1-9 Data Flow Monitor
Data Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Vigor2762 Series User’s Guide...
Page 419 Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock –The device with the IP address will be blocked for Vigor2762 Series User’s Guide...
Page 420 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2762 Series User’s Guide...
Page 421: Viii-1-10 Traffic Graph
WAN2/WAN3 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2762 Series User’s Guide...
Page 422: Viii-1-11 Trace Route
Available settings are explained as follows: Item Description IPv4 / IPv6 Click one of them to display corresponding information for Trace through Use the drop down list to choose the interface that you want to ping through. Vigor2762 Series User’s Guide...
Page 423: Viii-1-12 Syslog Explorer
Always record the new event – only the newest events will be recorded by the system. Time Display the time of the event occurred. Message Display the information for each event. Vigor2762 Series User’s Guide...
Page 424: Viii-1-13 Ipv6 Tspc Status
Available settings are explained as follows: Item Description Refresh Click this link to refresh this page manually. VIII-1-14 DSL Status VIII-1-14 DSL Status Such page is useful for RD debug or web technician. Vigor2762 Series User’s Guide...
Page 425: Viii-1-15 Dos Flood Table
Moreover, IP address detected and suspected to attack the network system can be blocked shortly by clicking the Block button shown on pages of SYN Flood, UDP Flood and ICMP Flood. Vigor2762 Series User’s Guide...
Page 426 Info The icon - - means there is something wrong (e.g., attacking the system) with that IP address. Vigor2762 Series User’s Guide...
Page 427 IP list in the right frame will be blocked by Vigor system permanatly. Remove – It is used to remove selected IP address from the Blocking IP List. Refresh Click this link to refresh current page. Vigor2762 Series User’s Guide...
Page 428: Viii-1-16 Route Policy Diagnosis
It is available when Analyze multiple packets.. is selected as Mode. Select – Click the download link to get a blank example file. Then, click such button to select that blank “.csv” file for saving the result of analysis. Vigor2762 Series User’s Guide...
Page 429 Note that the analysis was based on the current "load- balance/route policy" settings, we do not guarantee it will be 100% the same as the real case. Vigor2762 Series User’s Guide...
Page 430: Viii-2 Checking If The Hardware Status Is Ok Or Not
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “I-2 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2762 Series User’s Guide...
Page 431 Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. Vigor2762 Series User’s Guide...
Page 432 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. Vigor2762 Series User’s Guide...
Page 433 For Mac Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2762 Series User’s Guide...
Page 434: Viii-4 Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2762 Series User’s Guide...
Page 435 Vigor2762 Series User’s Guide...
Page 436  If the problem of LEDs cannot be solved by the above measures, please contact with the nearest reseller, or send an e-mail to DrayTek FAE for technical support.  Check if the settings offered by ISP are configured well or not.
Page 437: Viii-6 Problems For 3G/4G Network Connection
Modem to disable PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek. Transmission Rate is not fast enough...
Page 438: Viii-7 Backing To Factory Default Setting If Necessary
Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click Reboot Now. After few seconds, the router will return all the settings to the factory settings. Vigor2762 Series User’s Guide...
Page 439 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the factory default setting, you can configure the settings for the router again to fit your personal request. Vigor2762 Series User’s Guide...
Page 440: Viii-8 Contacting Draytek
VIII-8- 3 Keep up to date with our mailing list Now that you have your DrayTek product, you should keep up to date with product updates (firmware), security advisories and other product news, advice or special offers. Users in the UK/Ireland can subscribe to our mailing list. For details and to subscribe, please visit In other countries or regions, please contact your local distributor/supplier for local options.
Page 441: Viii-8-4 Firmware Updates
- simple mistakes which could then be exploited by others. We've produced our free guide "Router Best Practice" which contains essential information for anyone installing, configuring or using a broadband router or wireless LAN. Available to download: https://www.draytek.co.uk/best Vigor2762 Series User’s Guide...
Page 442: Appendix I: Vlan Applications On Vigor Router
VLAN helps you to solve these situations, and DrayTek’s products support bellow two popular types:...
Page 443 Web User Interface Web User Interface So far, there are two kinds of open system on Vigor router. One is DrayOS, which is DrayTek owned, and another is Linux-like which customized by DrayTek from OpenWRT. Here DrayOS system is going to be introduced to you because it is the most stable and superfast booting system in DrayTek products.
Page 444 Vigor2762 Series User’s Guide...
Page 445 VLAN applications on Vigor router VLAN applications on Vigor router  Multi Subnet (VLAN of LAN) Vigor2762 Series User’s Guide...
Page 446 Tag-based offers you a flexible and well-managed network. The networks are isolated, secured and reduce the broadcasting storm effectively in each of networks with VLAN.  Guest Network Vigor2762 Series User’s Guide...
Page 447 VLAN Tag enabled.  Triple Play (Multi-WAN) NAT mode with VLAN Following settings, the set-top box (STB) is able to attach with any LAN port. Video streaming which your ISP provided will be played on your monitor. Vigor2762 Series User’s Guide...
Page 448 Vigor2762 Series User’s Guide...
Page 449 Set-top box (STB) or the other kinds of media devices are able to attach with Port4 or Port5 of LAN. Those devices that attached with Port4 or Port5 are able to access the services network directly which your ISP provided. Vigor2762 Series User’s Guide...
Page 450: Part Ix Draytek Tools
Part IX DrayTek Tools Part IX DrayTek Tools Vigor2762 Series User’s Guide...
Page 451: Smartvpn Client
X-1-1 DrayTek Android-based SmartVPN for SSL VPN tunnels DrayTek has been the world-leading company to integrate VPN with Vigor SOHO routers to serve professionals and business customers with secure data transactions over Internet. The facilities of VPN let businesses are able to receive and send data over Internet with secure tunnels.
Page 452: X-1-2 How To Use Smartvpn Android App To Establish Ssl Vpn Tunnel
On VPN server, create a SSL user account. Please refer to “How to Set up SSL VPN” on www.draytek.com for detailed instructions. Download the APP from Google play, and run the APP. Click “+” to add a new profile. Vigor2762 Series User’s Guide...
Page 453 If you check “Use default gateway on remote network”, all the traffic of this smart device will be forwarded to the remote gateway. Tap the profile bar to establish SSL VPN tunnel. Enter Username and Password, then tap Dial. Vigor2762 Series User’s Guide...
Page 454 When the tunnel is up, the profile will turn green. Tap the bar again will disconnect the tunnel. Tap the pencil icon to edit or remove the profile. Vigor2762 Series User’s Guide...
Page 455 This page is left blank. Vigor2762 Series User’s Guide...
Page 456: Part X Telnet Commands
Part X Telnet Commands Part X Telnet Commands Vigor2762 Series User’s Guide...
Page 457: Accessing Telnet Of Vigor2762
IP address in the example is the default address of the router. If you have changed the default, enter the current IP address of the router. Next, type admin/admin for Account/Password. Then, type ?. You will see a list of valid/common commands depending on the router that your use. Vigor2762 Series User’s Guide...
Page 458 For users using previous Windows system (e.g., 2000/XP), simply click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Next, type admin/admin for Account/Password. And, type ? to get a list of valid/common commands. Vigor2762 Series User’s Guide...
Page 459 Times ITU Version[0] : b5004946 ITU Version[1] : 544e0000 ADSL Firmware Version : 06-06-01-07-00-01 Power Management Mode : DSL_G997_PMS_NA Test Mode : DISABLE ----------------------- ATU-C Info --------------------------------- Far Current Attenuation : 0 dB Far SNR Margin Vigor2762 Series User’s Guide...
Page 460 -1: always on, else idle timeout secs. Only for PPPoE/PPPoA. Username This parameter is used only for PPPoE/PPPoA. Password This parameter is used only for PPPoE/PPPoA. You have to reboot the system when you set it on Route mode. Vigor2762 Series User’s Guide...
Page 461 Example Example > adsl ppp o 35 8 1 1 4 1 -1 draytek draytek pvc no.=0 vci=35 vpi=8 encap=LLC(1) proto=PPPoE(1) modu=MULTI(4) AcquireIP: Dhcp_client(1) Idle timeout:-1 Username=draytek Password=draytek Telnet Command: adsl bridge Telnet Command: adsl bridge This command can specify a LAN port (LAN1 to LAN4) for mapping to certain PVC, and the mapping port/PVC will be operated in bridge mode.
Page 462 4. Now, it is on continuous sending mode, and adsl2/2+ led is always ON. 5. Use 'adsl reboot' to restart dsl to normal mode. Telnet Command: adsl reboot Telnet Command: adsl reboot This command can wake up the idle router. Example Example > adsl reboot % Adsl is Rebooting... Vigor2762 Series User’s Guide...
Page 463 Do not set the number greater than 254. adsl vcilimit [n] Syntax Description Syntax Description Parameter Parameter Description Description The number shall be between 1 ~ 254. Example Example > adsl vcilimit 33 change VCI limitation from 32 to 33. Vigor2762 Series User’s Guide...
Page 464 [startbin endbin |up] Syntax Description Syntax Description Parameter Description startbin The number is between 0 ~ 4092. endbin The number is between 4 ~ 4095. Show upstream information. Example Example > adsl showbins 2 30 DOWNSTREAM : ----------------------------------------------------------------------------- Vigor2762 Series User’s Guide...
Page 465 This command can save the configuration into FLASH with a file format of cfg. Example Example > adsl savecfg % Xdsl Cfg Save OK! Telnet Command: adsl vendorid Telnet Command: adsl vendorid This command allows you to configure user-defined CPE vendor ID. Vigor2762 Series User’s Guide...
Page 466 Maximum Burst Size. The range for the number is “1” to “2539”. status Display PCR/SCR/MBS setting. Example Example > adsl atm pcr 1 % PCR is for pvc 1. > adsl atm pcr status channel --------------------------- Vigor2762 Series User’s Guide...
Page 467 It means DSLAM (Digital Subscriber Line Access Multiplexer) or CO (Central Office). It means CPE (Customer Premise Equipment). Example Example > adsl inventory co xDSL inventory info only available in showtime. > adsl inventory cpe G.994 vendor ID : 0XB5004946544E5444 G.994.1 country code : 0XB500 Vigor2762 Series User’s Guide...
Page 468 > bpa 1 -a 1 -n testUser -p testPassword -s 4 > bpa -l -------index: 1 active------ UserName[1]: testUser PassWord[1]: testPassword ServerIP[1]:4 -------index: 2 inactive------ UserName[2]: PassWord[2]: ServerIP[2]:0 > Telnet Command: csm appe prof Telnet Command: csm appe prof Vigor2762 Series User’s Guide...
Page 469 ACTION Specify the action of the application, 0 or 1. 0: Block. All of the applications meet the CSM rule will be blocked. 1: Pass. All of the applications meet the CSM rule will be passed. Vigor2762 Series User’s Guide...
Page 470 It is used to display the configuration status (enabled or disabled) for IM/P2P/Protocol/Other applications. Syntax Syntax csm appe config -v INDEX [-i|-p|-t|-m] Syntax Description Syntax Description Parameter Description INDEX Specify the index number of CSM profile, from 1 to 32. View the configuration status of IM group. Vigor2762 Series User’s Guide...
Page 471 It is used to set notification e-mail for APPE signature based on the settings configured in System Maintenance>>SysLog/Mail Alert Setup (in which, the box of APPE Signature is checkd under Enable E-Mail Alert). Syntax Syntax csm appe email [-e|-d|-s] Syntax Description Syntax Description Vigor2762 Series User’s Guide...
Page 472 1: It means Bundle: Block. 2: It means Either: URL Access Control First. 3: It means Either: Web Feature First. It means the log type of the profile. They are: P: Pass, B: Block, A: All, N: None Vigor2762 Series User’s Guide...
Page 473 P: Pass. The web access meets the URL Access Control will be passed. Prevent the web access from any IP address. E: Enable the function. The Internet access from any IP address will be blocked. D: Disable the function. Set the keyword object. Vigor2762 Series User’s Guide...
Page 474 Profile Index: 1 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] [v]Prevent web access from IP address. Obj NO. Object Name --- -------- --------------------------------- Grp NO. Group Name --- -------- --------------------------------- Vigor2762 Series User’s Guide...
Page 475 Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] [v] Prevent web access from IP address. Obj NO. Object Name --- -------- --------------------------------- Grp NO. Group Name --- -------- --------------------------------- [ ]Enable Restrict Web Feature Action:[pass] Vigor2762 Series User’s Guide...
Page 476 P: Pass. The web access meets the web feature will be passed. Set the profile name. PROFILE_NAME Specify the name of the profile (less than 16 characters) It means the log type of the profile. They are: P: Pass, B: Block, A: All, N: None Vigor2762 Series User’s Guide...
Page 477 Pop-Ups, Arts, Transportation, Compromised, Dating & Personals, , Education, Finance, Government,Health & Medcine, News, Non- profits & NGOs, Personal Sites,Politics, Real Estate, Rligion, Restaurants & Dining,Shopping, Translators, General, Cults,Greetig cards, Image Sharing, Network Errors, Parked Domains, Private IP Addresses) Vigor2762 Series User’s Guide...
Page 478 CACHE_TIME csm dnsf blockpage show/on/off csm dnsf profile_show csm dnsf profile_edit INDEX csm dnsf profile_edit INDEX -n PROFILE_NAME csm dnsf profile_edit INDEX -l N|P|B|A csm dnsf profile_edit INDEX -w WCF_PROFILE csm dnsf profile_edit INDEX -u UCF_PROFILE Vigor2762 Series User’s Guide...
Page 479 1 to 24; 1 is one hour, 2 is two hours, and so on ...) for DNS filter. Example Example > csm dnsf service 2 dns service set up!!! >csm dnsf service 3 wcf profile 3 is empty..>csm dnsf cachetime 1 dns cache time set up!!! Vigor2762 Series User’s Guide...
Page 480 Set a value larger than 20. TIMEOUT It means the time (seconds) that a flooding attack will be blocked. Set a value larger than 5. Enable the defense function for all attacks listed in ATTACK_0. Vigor2762 Series User’s Guide...
Page 481 It means to set PPP Authentication Type and n means different types (represented by 0-1). n=0: PAP/CHAP (this is default setting) n=1: PAP Only -t n Set connection duration and n means different conditions. n=-1: Always-on Vigor2762 Series User’s Guide...
Page 482 -N <apn name> Set (DHCP mode) APN Name (max. 47 characters) -U n (DHCP mode) MTU(1000-1440) Example Example >internet -M 1 -S tcom -u username -p password -a 0 -t -1 0.0.0.0 WAN1 Internet Mode set to PPPoE/PPPoA Vigor2762 Series User’s Guide...
Page 483 Syntax Description Syntax Description Parameter Description Display an IP address which allows users set as the public subnet IP address. public subnet IP address Specify an IP address. The system will set the one that you Vigor2762 Series User’s Guide...
Page 484 It means the auxiliary WAN IP address. Join to NAT Pool 0 (disable) or 1 (enable). wanX Add or remove an address for WAN interface. index Type the index number of the table displayed on your screen. Vigor2762 Series User’s Guide...
Page 485 Telnet Command: ip nmask This command allows users to set/add a specified netmask for your router. Syntax Syntax ip nmask [IP netmask] Syntax Description Syntax Description Parameter Description IP netmask The netmask of LAN IP. Example Example Vigor2762 Series User’s Guide...
Page 486 Time Available settings will be 10, 20, 30,..2550 seconds. Example Example > ip arp status [ARP Table] Index IP Address MAC Address Netbios Name Interface VLAN Port 192.168.1.5 00-05-5D-E4-D8-EE LAN1 VLAN0 > Vigor2762 Series User’s Guide...
Page 487 : 172.16.3.40 WAN Netmask : 255.255.255.0 WAN Gateway : 172.16.3.1 Primary DNS : 168.95.192.1 Secondary DNS : 0.0.0.0 Leased Time : 259200 Leased Time T1 : 129600 Leased Time T2 : 226800 Leased Elapsed : 259194 Vigor2762 Series User’s Guide...
Page 488 Traceroute to 22.128.2.62, 30 hops max 172.16.3.7 10ms 172.16.1.2 10ms Request Time out. 168.95.90.66 50ms 211.22.38.134 50ms 220.128.2.62 50ms Trace complete Telnet Command: telnet Telnet Command: telnet This command allows users to access specified device by telnet. Vigor2762 Series User’s Guide...
Page 489 1: WAN1,2: WAN2, 3: PVC3,4: PVC4,5: PVC5 Note: PVC3 ~PVC5 are virtual WANs. It means to disable or enable RIP setting for specified WAN interface. 1: Enable the function of setting RIP of WAN IP. 0: Disable the function. Example Example Vigor2762 Series User’s Guide...
Page 490 It means the IP address of the destination. netmask It means the netmask of the specified IP address. gateway It means the gateway of the connected router. ifno It means the connection interface. 3=WAN1, 4=WAN2, 5=WAN3, 6=WAN4 Vigor2762 Series User’s Guide...
Page 491 > ip route status Codes: C - connected, S - static, R - RIP, * - default, ~ - private 192.168.9.0/ 255.255.255.0 is directly connected, DMZ 192.168.1.0/ 255.255.255.0 is directly connected, LAN1 172.16.2.0/ 255.255.255.0 via 172.16.2.4, WAN1 Vigor2762 Series User’s Guide...
Page 492 The default value is 125000 ms Current Setting is:130000 ms > ip igmp_proxy set % ip igmp_proxy [set|reset|wan|status], IGMP Proxy is ON > ip igmp_proxy status %% ip igmp_proxy [set|reset|wan|status], IGMP Proxy is ON %%% igmp_proxy WAN: 239.255.255.250 state=1 239.255.255.250 timer=0 Vigor2762 Series User’s Guide...
Page 493 Syntax ip igmp_fl enable ip igmp_fl disable ip igmp_fl status Syntax Description Syntax Description Parameter Description enable Enable IGMP fast leave. disable Disable IGMP fast leave. status Display current status of IGMP Fast Leave. Example Example Vigor2762 Series User’s Guide...
Page 494 %% ip dmzswitch [off|private|active_trueip], DMZ is OFF > ip dmzswitch private %% ip dmzswitch [off|private|trueip|active_trueip], PRIVATE IP DMZ is ON > ip dmzswitch trueip > ip dmzswitch active_trueip %% ip dmzswitch [off|private|trueip|active_trueip], ACTIVE TRUE IP DMZ is ON Vigor2762 Series User’s Guide...
Page 495 >ip session default 100 > ip session add 192.168.1.5-192.168.1.100 100 50 > ip session on > ip session status IP range: 192.168.1.5 - 192.168.1.100 : 100 Current ip session limit is turn on Current default session number is 100 Vigor2762 Series User’s Guide...
Page 496 Current ip Bandwidth limit is turn off Auto adjustment is off Telnet Command: ip bindmac Telnet Command: ip bindmac This command allows users to set IP-MAC binding for LAN host. ip bindmac on ip bindmac off ip bindmac strict_on Vigor2762 Series User’s Guide...
Page 497 Delete all the IP bindmac settings. Example Example > ip bindmac add 192.168.1.46 00:50:7f:22:33:55 just for test > ip bindmac show ip bind mac function is turned ON IP : 192.168.1.46 bind MAC : 00-50-7f-22-33-55 Comment : just Vigor2762 Series User’s Guide...
Page 498 Any: No need to specify an IP address for any IP address will be omain] treated as destination IP address. ip_range: Indicates a range of IP addresses. ip_subnet: Indicates the IP subnet. domain: Indicates the domain name. -3 [any/range] Specify the destination port mode. Vigor2762 Series User’s Guide...
Page 499 Indicates to enable the function of failover. 0: Disable the function. 1: Enable the function. -f [value] It means to specify the interface for failover. Value: Avaialbe interfaces include, NO_FAILOVER, Default_WAN, Policy1 ~ Policy60 LAN1 ~ LAN8 IP_Routed_Subnet, DMZ_Subnet, WAN1 ~ WAN5, Vigor2762 Series User’s Guide...
Page 500 Syntax ip lanDNSRes [-<command> <parameter> | ... ] Syntax Description Syntax Description Parameter Description [<command> The available commands with parameters are listed below. <parameter>|…] […] means that you can type in several commands in one line. Vigor2762 Series User’s Guide...
Page 501 1: enable such function. -i <profile setting index Type the index number of the profile. number> List the content of LAN DNS profile (including domain name, IP address and message). -n <domain name> Set domain name. Vigor2762 Series User’s Guide...
Page 502 Set profile name for LAN DNS. Reset the settings for selected profile. Example Example > ip dnsforward -i 1 -n ftp.drayTek.com % Configure Set1's DomainName:ftp.drayTek.com > ip dnsforward -i 1 -a 172.16.1.1 % Configure Set1's IP:172.16.1.1 > ip dnsforward -i 1 -l...
Page 503 It means to show current DHCPv6 status. -p [IAID] It means to request identity association ID for Prefix Delegation. -n [IAID] It means to request identity association ID for Non-temporary Address. -c [parameter] It means to send rapid commit to server. Vigor2762 Series User’s Guide...
Page 504 > ip6 dhcp server -d FF02::1 > ip6 dhcp server -i ff02::1 > ip6 dhcp server -x ff02::3 > ip6 dhcp server -a % Interface LAN has following DHCPv6 server settings: DHCPv6 server disabled maximum address of the pool: FF02::3 Vigor2762 Series User’s Guide...
Page 505 FF02::1 1st DNS IPv6 Addr: FF02::1 Vigor2762 Series User’s Guide...
Page 506 Set 6in4 IPv6 WAN prefix length. n=1 to 64. (Default number is 64) -p [prefix] Set 6in4 LAN Routed Prefix. prefix= IPv6 address -l n Set 6in4 LAN Routed Prefix length. n=1 to 64. (Default number is 64) Vigor2762 Series User’s Guide...
Page 507 0 ~ 255. -x [hostname/IPv6 address] Set Ping Detect Host (hostname or IPv6 address). -I [interval] Set ipv6 connection interval. Interval = 1500-60000 (unit:10ms). -b [0/1] Enable DNSv6 based on DHCPv6. 0= off 1= on Example Example Vigor2762 Series User’s Guide...
Page 508 > ip6 neigh -s 2001:2222:3333::1111 00:50:7F:11:ac:22:WAN2 Neighbour 2001:2222:3333::1111 successfully added! > ip6 neigh -a ADDR STATE ------------------------------------------------------------------------- LAN FF02::1 33-33-00-00-00-01 CONNECTED WAN2 2001:5C0:1400:B::10B8 00-00-00-00-00-00 CONNECTED WAN2 2001:2222:3333::1111 00-00-00-00-00-00 CONNECTED WAN2 2001:2222:6666::1111 00-00-00-00-00-00 CONNECTED WAN2 :: 00-00-00-00-00-00 CONNECTED NONE > Vigor2762 Series User’s Guide...
Page 509 It means to type a fixed value as the length of the prefix. gateway It means the gateway of the router. LAN1|LAN2|...|LAN4|WAN1| It means to specify LAN or WAN interface for such address. WAN2|USB1|USB2|VPN1|...| VPN32] Vigor2762 Series User’s Guide...
Page 510 It means to specify the IPv6 address or host for ping. LAN1|LAN2|...|LAN4| It means to specify LAN or WAN interface for such address. WAN1|WAN2|USB1|USB2 Example Example > ip6 ping 2001:4860:4860::8888 WAN2 Pinging 2001:4860:4860::8888 with 64 bytes of Data: Receive reply from 2001:4860:4860::8888, time=330ms Vigor2762 Series User’s Guide...
Page 511 Telnet Command: ip6 tspc This command allows you to display TSPC status. Syntax Syntax ip6 tspc [ifno] Syntax Description Syntax Description Parameter Description ifno It means the connection interface. Ifno=1 (means WAN1) Info=2 (means WAN2) … etc. Example Example Vigor2762 Series User’s Guide...
Page 512 Set MTU value for RADVD server. Range: 1280-1500. auto - auto select MTU from WAN. -e <time> Set reachable time. -a <time/infinity> Set retransmit timer /infinity. -p <0/1/2> Set default preference Low/Medium/High for RADVD server. View the RADVD server configuration. Vigor2762 Series User’s Guide...
Page 513 It means to type a fixed value as the length of the prefix. remove It means to remove (delete) the specified index number with IPv6 settings. flush It means to clear the IPv6 access table. http|telnet|ping|https|ssh These protocols are used for accessing Internet. Vigor2762 Series User’s Guide...
Page 514 Telnet Command: ip6 aiccu This command allows you to view IPv6 settings for WAN interface with connection type of AICCU. Syntax Syntax ip6 aiccu -i <ifno> -r ip6 aiccu -i <ifno> -s Syntax Description Syntax Description Vigor2762 Series User’s Guide...
Page 515 The following lists all of the available commands with parameters. -l n Select LAN interface to be set. n = 1: LAN1. Default is LAN1. n = 2: LAN2 n = x: LANx -w n Select WAN interface to be primary. Vigor2762 Series User’s Guide...
Page 516 It means to show the version of this IP filter. It means to show the running call filter rules. It means to show the running data filter rules. It means to show the hit-number of the filter rules. Vigor2762 Series User’s Guide...
Page 517 -L [VALUE] Enable/Disable Strict Security Firewall, e.g., -L 1. 0:Disable, 1:Enable -C [VALUE] Setup the code page, e.g., -C 12. Type 1 ~ 12 as the code page number. If “0” is set, the code page Vigor2762 Series User’s Guide...
Page 518 Mac Bind IP : Non-Strict QOS Class : None APP Enforcement : None URL Content Filter: None Load-Balance policy : Auto-select -------------------------------------------------------------- CodePage : ANSI(1252)-Latin I Window size : 65535 Session timeout : 1440 DrayTek Banner : Enable Vigor2762 Series User’s Guide...
Page 519 Address> | <Address Mask> u – It means “user defined”. Address Type - Type the number (representing different address type). 0 - Subnet Address 1 - Single Address 2 - Any Address 3 - Range Address Vigor2762 Series User’s Guide...
Page 520 WAN1), 2 (means WAN2) and 3 (means WAN3). log flag – 0 means disable to save and display in Syslog; 1 means enable to save and display in Syslog. -E<index> It means to enable APP Enforcement for Strict Security Checking. Vigor2762 Series User’s Guide...
Page 521 It means to set Window size and Session timeout (Minute). <Session_Timeout> <Windows Size> - Available settings range from 1 ~ 65535. <Session_Timeout> - Make the best utilization of network resources. -M <Your Comments> Set the content of the comments for a rule. Vigor2762 Series User’s Guide...
Page 522 [ ]APP Enforcement > Telnet Command: ipf flowtrack Telnet Command: ipf flowtrack This command is used to set and view flowtrack sessions. ipf flowtrack set [-re] ipf flowtrack view [-fb] ipf flowtrack [-i][-p][-t] Syntax Description Syntax Description Vigor2762 Series User’s Guide...
Page 523 Syntax Description Parameter Description It means to show the latest call log. It means to show the IP filter log. It means to show the flush log buffer. a: flush all logs c: flush the call log Vigor2762 Series User’s Guide...
Page 524 This command is used to configure the LDAP profile. Syntax Syntax ldap user [INDEX][OPTION] Syntax Description Syntax Description Parameter Description INDEX Specify the index number (1 to 8) of the LDAP profile. OPTION -n VALUE Setup Profile Name. -b VALUE Setup Base Distinguished Name. Vigor2762 Series User’s Guide...
Page 525 Enable or disable LDAP function via SSL tunnel. 0 – Disable the function. 1 – Enable the function. IP <VALUE> Set IP address for LDAP server. port <VALUE> Set port number for LDAP server. dn <VALUE> Set Regular DN value Vigor2762 Series User’s Guide...
Page 526 [port number] radius client [add] [idx] -i [address] -m [mask] -p [prefix] -l [length] -s [secret] radius client [del] [idx] radius show radius set_dot1x_phase1 -e [method_idx] radius set_dot1x_phase1 -d [method_idx] radius set_dot1x_phase2 -e [method_idx] Vigor2762 Series User’s Guide...
Page 527 This command allows users to configure general settings for TACACS+ server Syntax Syntax tacacspluse set [Options][Value] Syntax Description Syntax Description Parameter Description enable [0-1] Disable (0)/enable(1) the TACACS+ server. IP <VALUE> Set the IP address of TACACS+ server. Vigor2762 Series User’s Guide...
Page 528 It means to type the number for FTP port. The default setting is Example Example > mngt ftpport 21 % Set FTP server port to 21 done. Telnet Command: mngt httpport Telnet Command: mngt httpport This command allows users to set HTTP port for management. Vigor2762 Series User’s Guide...
Page 529 This command allows users to set SSH port for management. mngt sshport [ssh port] Syntax Description Syntax Description Parameter Description ssh port It means to type the number for SSH port. The default setting is Vigor2762 Series User’s Guide...
Page 530 It means to display a log of ping action, including source MAC and source IP. clearlog It means to clear the log of ping action. Example Example > mngt noping off No Ping Packet Out is OFF!! Vigor2762 Series User’s Guide...
Page 531 It means to allow the system administrators to login from the Internet. disable It means to deny the system administrators to login from the Internet. http/https/ftp/telnet/ssh/ It means to specify one of the servers/protocols for enabling or tr069 disabling. on/off on – enable the function. Vigor2762 Series User’s Guide...
Page 532 It means to get the usage of such command. Example Example > mngt lanaccess -e 1 > mngt lanaccess -s FTP,TELNET > mngt lanaccess -i LAN3 > > mngt lanaccess -v Current LAN Access Control Setting: * Enable:Yes Vigor2762 Series User’s Guide...
Page 533 Parameter Description list It can display current setting for your reference. It means adding a new entry. index It means to specify the number of the entry. ip addr It means to specify an IP address. Vigor2762 Series User’s Guide...
Page 534 It means to set the trap timeout <0~999>. It means to list SNMP setting. Example Example > mngt snmp -e 1 -g draytek -s DK -m 192.168.1.1 -t trapcom -n 10.20.3.40 -T 88 SNMP Agent Turn on!!! Get Community set to draytek Set Community set to DK Manager Host IP set to 192.168.1.1...
Page 535 Please use "sys reboot" command to reboot the router. Telnet Command: msubnet nmask Telnet Command: msubnet nmask This command is used to configure net mask address for the specified LAN interface. msubnet nmask [2/3/4][IP address] Syntax Description Syntax Description Parameter Description Vigor2762 Series User’s Guide...
Page 536 It means LAN interface. 2=LAN2 3=LAN3 4=LAN4 On/Off On means enabling the DHCP server for the specified LAN interface. Off means disabling the DHCP server. Example Example > msubnet dhcps 3 off % LAN3 Subnet DHCP Server disabled! Vigor2762 Series User’s Guide...
Page 537 This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. Telnet Command: msubnet ipcnt Telnet Command: msubnet ipcnt This command is used to defined the total number allowed for each LAN interface. Vigor2762 Series User’s Guide...
Page 538 > msubnet talk % msubnet talk <1/2/3/4> <1/2/3/4> <On/Off> % where 1:LAN1, 2:LAN2, 3:LAN3, 4:LAN4 % Now: LAN1 LAN2 LAN3 LAN4 % LAN1 % LAN2 % LAN3 % LAN4 Telnet Command: msubnet startip Telnet Command: msubnet startip Vigor2762 Series User’s Guide...
Page 539 % msubnet pppip <2/3/4> <Start IP> % Now: LAN2 192.168.2.250; LAN3 192.168.3.200; LAN4 192.168.4.200 Telnet Command: msubnet nodetype Telnet Command: msubnet nodetype This command is used to specify the type for node which is required by DHCP option. msubnet nodetype [2/3/4][count] Vigor2762 Series User’s Guide...
Page 540 Type the IP address as the WINS IP. Example Example > > msubnet primWINS ? % msubnet primWINS <2/3/4> <WINS IP> % Now: LAN2 0.0.0.0; LAN3 0.0.0.0; LAN4 0.0.0.0 > msubnet primWINS 2 192.168.3.5 % Set LAN2 Dhcp Primary WINS IP done !!! Vigor2762 Series User’s Guide...
Page 541 Type the IP address as the WINS IP. Example Example > > msubnet secWINS 2 192.168.3.89 % Set LAN2 Dhcp Secondary WINS IP done !!! > msubnet secWINS ? % msubnet secWINS <2/3/4> <WINS IP> % Now: LAN2 192.168.3.89; LAN3 0.0.0.0; LAN4 0.0.0.0 Vigor2762 Series User’s Guide...
Page 542 1000 ~ 1508 (Bytes), default: 1500 (Bytes) Example Example > msubnet mtu LAN1 1492% Set LAN1 subnet mtu as 1492 > msubnet mtu ? Usage: >msubnet mtu <interface> <value> <interface>: LAN1~LAN4,IP_Routed_Subnet, <value>: 1000 ~ 1496 (Bytes), de Vigor2762 Series User’s Guide...
Page 543 TYPE=0, means Mask TYPE=1, means Single TYPE=2, means Any TYPE=3, means Rang Example: object ip obj 3 -a 2 [START_IP] When the TYPE is set with 2, you have to type an IP address as a Vigor2762 Series User’s Guide...
Page 544 :object ip grp 3 -a 1 2 3 4 5 The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. Example Example > object ip grp 2 -n First IP Group Profile 2 Vigor2762 Series User’s Guide...
Page 545 [6:][0] [7:][0] > object ip grp 2 -i 1 > object ip grp 2 -a 1 2 IP Group Profile 2 Name :[First] Interface:[Lan] Included ip object index: [0:][1] [1:][2] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] Vigor2762 Series User’s Guide...
Page 546 Type an IP address (different with START_IP) as the end IP address. Example Example > object ip obj 1 -n marketing > object ip obj 1 -a 1 192.168.1.45 > object ip obj 1 -v IP Object Profile 1 Name :[marketing] Interface:[Any] Vigor2762 Series User’s Guide...
Page 547 The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. Example Example > object ip grp 2 -n First IP Group Profile 2 Name :[First] Interface:[Any] Included ip object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] Vigor2762 Series User’s Guide...
Page 548 1=not equal(!=), when the starting port and ending port values are Vigor2762 Series User’s Guide...
Page 549 NAME: Type a name with less than 15 characters. Example: object service grp 8 -n bruce -a SER_OBJ_INDEX It means to specify service object profiles for the group profile. Example: :object service grp 3 -a 1 2 3 4 5 Vigor2762 Series User’s Guide...
Page 550 It means to show the contents for all of the profiles. INDEX It means the index number of the specified keyword profile. It means to view the information of the specified keyword profile. -n NAME It means to define a name for the keyword profile. Vigor2762 Series User’s Guide...
Page 551 Image, Video, Audio, Java, ActiveX, Compression, Executation Example: object fe obj 1 -e Image FILE_EXTENSION: ".bmp", ".dib", ".gif", ".jpeg", ".jpg", ".jpg2", ".jp2", ".pct", ".pcx", ".pic", ".pict", ".png", ".tif", ".tiff", ".asf", ".avi", ".mov", ".mpe", ".mpeg", ".mpg", ".mp4", ".qt", ".rm", ".wmv", Vigor2762 Series User’s Guide...
Page 552 [ ].arj [ ].bzip2 [ ].bz2 [ ].cab [ ].gz [ ].gzip [ ].rar [ ].sit [ ].zip ------------------------------------------------------------------------- ------ Executation category: [ ].bas [ ].bat [ ].com [ ].exe [ ].inf [ ].pif [ ].reg Vigor2762 Series User’s Guide...
Page 553 [ ].scr Vigor2762 Series User’s Guide...
Page 554 Addport: Set the interface (LAN port 1 ~ 4) for applying 802.1x. E.g., 802.1x addport 1 Delport: Delete the interface (LAN port 1~4) with 802.1x applied. E.g., 802.1x delport 1 wanfc It means to set WAN flow control. Example Example > port 1 100F Vigor2762 Series User’s Guide...
Page 555 [-<command> <parameter> | ... ] Syntax Description Syntax Description Parameter Description [<command> The available commands with parameters are listed below. <parameter>|…] […] means that you can type in several commands in one line. -m <mode> Specify a mode. 1=auto Vigor2762 Series User’s Guide...
Page 556 %TWO way accleration is disable > ppa -v % PPA mode is Auto %PPA Protocol TCP 1, UDP 0 %PPA two way disable %PPA time is 10 %PPA range is 192 %PPA LAN entries 0 %PPA WAN entries 0 Vigor2762 Series User’s Guide...
Page 557 This command allows you to view current status (interface and driver) of USB printer. prn status prn debug Example Example > prn status Interface: USB bus 2.0 Printer: NotReady > prn debug conn[0] : none conn[1] : none conn[2] : none conn[3] : none LPD_data_total=0 usblp_ptr=0 UsbPrintReady=0, UsbIsPrinting=0 Vigor2762 Series User’s Guide...
Page 558 WAN2 class 3 ratio set to 20 WAN2 udp bandwidth control set to enable WAN2 udp bandwidth limit ratio set to 50 WAN2 Outbound TCP ACK Prioritizel set to enable QoS WAN2 set complete; restart QoS Vigor2762 Series User’s Guide...
Page 559 -s <Service type> Specify the service type by typing the number. The available types are listed as below: 1:ANY 2:DNS 3:FTP 4:GRE 5:H.323 6:HTTP 7:HTTPS 8:IKE 9:IPSEC-AH 10:IPSEC-ESP 11:IRC 12:L2TP 13:NEWS 14:NFS 15:NNTP 16:PING 17:POP3 18:PPTP 19:REAL-AUDIO 20:RTSP Vigor2762 Series User’s Guide...
Page 560 It means that you can type in several commands in one line. Example Example > qos class -c 2 -n draytek -a -m 1 -l 192.168.1.50:192.168.1.80 Following setting will set in the class2 class 2 name set to draytek Add a rule in class2 Class2 the 1 rule enabled Set local address type to Range, 192.168.1.50:192.168.1.80...
Page 561 Example Example > qos type -a draytek -t 6 -p 510:1330 service name set to draytek service type set to 6:TCP Port type set to Range Service Port set to 510 ~ 1330 > Telnet Command: voip Telnet Command: voip This command allows user to enable or disable the QoS for VoIP and RTP.
Page 562 Secondary DNS: [Not set] LAN4 Primary DNS: [Not set] LAN4 Secondary DNS: [Not set] Telnet Command: show openport Telnet Command: show openport This command displays current status of open port setting. Example Example > show openport Vigor2762 Series User’s Guide...
Page 563 Telnet Command: show pmtime This command displays the reuse time of NAT session. Level0: It is the default setting. Level1: It will be applied when the NAT sessions are smaller than 25% of the default setting. Vigor2762 Series User’s Guide...
Page 564 IP:--- GW IP:--- TX Packets:0 TX Rate:0 RX Packets:0 RX Rate:0 WAN 3 Status: Disconnected Enable:Yes Line:USB Name: Mode:--- Up Time:0:00:00 IP:--- GW IP:--- TX Packets:0 TX Rate:0 RX Packets:0 RX Rate:0 WAN 4 Status: Disconnected Vigor2762 Series User’s Guide...
Page 565 : DSL_G997_PMS_NA Test Mode : DISABLE -------------------------------- ATU-C Info --------------------------------- Far Current Attenuation : 0 dB Far SNR Margin CO ITU Version[0] : 00000000 CO ITU Version[1] : 00000000 DSLAM CHIPSET VENDOR : < ----- > > Vigor2762 Series User’s Guide...
Page 566 WAN5 total TX: 0 Bytes ,RX: 0 Bytes WAN6 total TX: 0 Bytes ,RX: 0 Bytes WAN7 total TX: 0 Bytes ,RX: 0 Bytes > show statistic reset wan1 Reset WAN1 tx/rx Bytes to zero > Vigor2762 Series User’s Guide...
Page 567 [IP address] srv dhcp public cnt [IP counts] srv dhcp public status srv dhcp public add [MAC Addr XX-XX-XX-XX-XX-XX] srv dhcp public del [MAC Addr XX-XX-XX-XX-XX-XX/all/ALL] Syntax Description Syntax Description Parameter Description Vigor2762 Series User’s Guide...
Page 568 Telnet Command: srv dhcp dns2 This command allows users to set Secondary IP Address for DNS Server in LAN. srv dhcp dns2 [?] srv dhcp dns2 [DNS IP address] Syntax Description Syntax Description Vigor2762 Series User’s Guide...
Page 569 Note: The IP Routed Subnet DNS must be the same as NAT Subnet DNS). Example Example > srv dhcp dns2 10.1.1.1 % srv dhcp dns2 <DNS IP address> % Now: 10.1.1.1 (IP Routed Subnet dns same as NAT Subnet dns) Vigor2762 Series User’s Guide...
Page 570 Gateway IP It means to specify a gateway address used for DHCP server. Example Example > srv dhcp gateway 192.168.2.1 This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. Vigor2762 Series User’s Guide...
Page 571 > srv dhcp relay servip ? % srv dhcp relay servip <server ip> % Now: 192.168.1.46 Telnet Command: srv dhcp startip Telnet Command: srv dhcp startip srv dhcp startip [?] srv dhcp startip [IP address] Syntax Description Syntax Description Vigor2762 Series User’s Guide...
Page 572 This command can display general information for the DHCP server, such as IP address, MAC address, leased time, host ID and so on. Example Example > srv dhcp status DHCP server: Relay Agent Default gateway: 192.168.1.1 Index IP Address MAC Address Leased Time HOST ID 192.168.1.113 00-05-5D-E4-D8-EE 17:20:08 A1000351 Vigor2762 Series User’s Guide...
Page 573 1. B-node 2. P-node 4. M-node 8. H-node Example Example > srv dhcp nodetype 1 > srv dhcp nodetype ? %% srv dhcp nodetype <count> %% 1. B-node 2. P-node 4. M-node 8. H-node % Now: 1 Vigor2762 Series User’s Guide...
Page 574 It means to remove the IP address settings of second WINS server. Example Example > srv dhcp secWINS 192.168.1.180 > srv dhcp secWINS ? %% srv dhcp secWINS <WINS IP address> %% srv dhcp secWINS clear % Now: 192.168.1.180 Vigor2762 Series User’s Guide...
Page 575 It means to display usage of this command. It means to display all the user defined DHCP options. -d[idx] It means to delete the option number by specifying its index number. -e [1 or 0] It means to enable/disable custom option feature. Vigor2762 Series User’s Guide...
Page 576 It means to set option number with the format of Hexadecimal characters. It means to update the option value of the sepecified index. idx number It means the index number of the option value. Example Example >srv dhcp option -e 1 -i 2/r -c 44 -a 192.168.1.10,192.168.1.20 Vigor2762 Series User’s Guide...
Page 577 It means to enable IPSec ESP tunnel passthrough and IKE source port (500) preservation. It means to disable IPSec ESP tunnel passthrough and IKE source port (500) preservation. status It means to display current status for checking. Example Example Vigor2762 Series User’s Guide...
Page 578 > srv nat openport 1 1 -a 1 -c games -i 192.168.1.100 -w 1 -p TCP -s 23 -e 83 > srv nat openport -v %% Status: Enable %% Comment: games %% Private IP address: 192.168.1.100 Index Protocal Start Port End Port ***************************************************************** Vigor2762 Series User’s Guide...
Page 579 It means to clear all the port mapping settings. table It means to display Port Redirection Configuration Table. Example Example > srv nat portmap add 1 game tcp 80 192.168.1.11 100 wan1 > srv nat portmap table Vigor2762 Series User’s Guide...
Page 580 Private Port ifno game 192.168.1.11 Protocol: 0 = Disable, 6 = TCP, 17 = UDP Telnet Command: srv nat trigger Telnet Command: srv nat trigger This command allows users to configure port triggering settings for NAT. Syntax Syntax Vigor2762 Series User’s Guide...
Page 581 Comment:after_dinner2000 Triggering Protocol:TCP Triggering Port:2000 Incoming Protocol:UDP Incoming Port:3000 Telnet Command: srv nat status Telnet Command: srv nat status This command allows users to view NAT Port Redirection Running Table. Example Example > srv nat status Vigor2762 Series User’s Guide...
Page 582 R:Port Redirection, O:Open Ports, D:DMZ Telnet Command: switch -i Telnet Command: switch -i This command is used to obtain the TX (transmitted) or RX (received) data for each connected switch. Syntax Syntax switch -i [switch idx_no] [option] Vigor2762 Series User’s Guide...
Page 583 Enable the option of "No Respond to External Device packets". Example Example > switch not_respond 1 slave not respond! > Telnet Command: switch on Telnet Command: switch on This command is used to turn on the auto discovery for external devices. Example Example Vigor2762 Series User’s Guide...
Page 584 This command is used to enable or disable the switch query. Example Example > switch query on Extern Device status query is Enable > switch query off Extern Device status query is Disable Telnet Command: admin Telnet Command: admin Vigor2762 Series User’s Guide...
Page 585 [-<command> <parameter> | ... ] Syntax Description Syntax Description Parameter Description -e <enable> It is used to disable/enable bonjour service (0: disable, 1: enable). -h <enable> It is used to disable/enable http (web) service (0: disable, 1: Vigor2762 Series User’s Guide...
Page 586 It is used to disable/enable SSH service (0: disable, 1: enable). -p <enable> It is used to disable/enable printer service (0: disable, 1: enable). -6 <enable> It is used to disable/enable IPv6 (0: disable, 1: enable). Example Example > sys bonjour -s 1 > Vigor2762 Series User’s Guide...
Page 587 It means to turn on the FTP server of the system. It means to turn off the FTP server of the system. Example Example > sys ftpd on % sys ftpd turn on !!! Telnet Command: sys domainname Telnet Command: sys domainname Vigor2762 Series User’s Guide...
Page 588 MAC: 00-50-7F-00-00-02 Interface 5 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-03 Interface 6 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-04 Interface 7 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 Vigor2762 Series User’s Guide...
Page 589 Interface 8 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-06 Interface 9 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-07 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- > Vigor2762 Series User’s Guide...
Page 590 23. Example Example > sys passwd admin123 > Telnet Command: sys reboot Telnet Command: sys reboot This command allows users to restart the router immediately. Example Example > sys reboot > Vigor2762 Series User’s Guide...
Page 591 This command can display current country code and wireless region of this device. Example Example > sys cc Country Code : 0x 0 [International] Wireless Region Code: 0x30 > Telnet Command: sys version Telnet Command: sys version This command can display current version for the system. Vigor2762 Series User’s Guide...
Page 592 This command can turn on or turn off polling buffer for the router. sys pollbuf [on] sys pollbuf [off] Syntax Description Syntax Description Parameter Description It means to turn on pulling buffer. It means to turn off pulling buffer. Example Example Vigor2762 Series User’s Guide...
Page 593 It means to set parameter notification value. It means to display the TR-069 log. debug [on/off] on: turn on the function of sending debug message to syslog. off: turn off the function of sending debug message to syslog. Vigor2762 Series User’s Guide...
Page 594 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- Telnet Command: sys sip_alg Telnet Command: sys sip_alg This command can turn on/off SIP ALG (Application Layer Gateway) for traversal. sys sip_alg [1] Vigor2762 Series User’s Guide...
Page 595 [idx] [trial] [service type] [sp_id] [start_date] [License Key] reg: register service in portal dev_chg It means to change the device key. dev_key It means to show device key. Example Example > sys license licifno Vigor2762 Series User’s Guide...
Page 596 [DSL] xtseCfg=04 00 04 00 0c 01 00 07 0:00:02 [DSL] don't have last showtime mode!! set next mode to VDSL!! 0:00:02 [DSL] Status has changed: Stopped(0) -> FwWait(3) 0:00:02 [DSL] Status has changed: FwWait(3) -> Starting(1) Vigor2762 Series User’s Guide...
Page 597 – 1 ~ 31 hour – 0 ~ 23 e.g., sys daylightsave -d 2014 9 10 12 -y <month> <th weekday> Set the detailed settings of the starting day for yearly type. <day in week> <hour> Vigor2762 Series User’s Guide...
Page 598 % Set TTL limit: 65 seconds. % When TTL larger than 65s , delete the DNS entry in the router's DNS cache tabl > Telnet Command: syslog Telnet Command: syslog This command is used to configure Syntax Syntax Vigor2762 Series User’s Guide...
Page 599 4 - GMT-09:00 Alaska 5 - GMT-08:00 Pacific Time (US & Canada) 6 - GMT-08:00 Tijuana 7 - GMT-07:00 Mountain Time (US & Canada) 8 - GMT-07:00 Arizona 9 - GMT-06:00 Central Time (US & Canada) Vigor2762 Series User’s Guide...
Page 600 67 - GMT+10:00 Hobart 68 - GMT+10:00 Vladivostok 69 - GMT+10:00 Guam, Port Moresby 70 - GMT+11:00 Magadan, Solomon Is. 71 - GMT+11:00 New Caledonia 72 - GMT+12:00 Fiji, Kamchatka, Marshall Is. 73 - GMT+12:00 Auckland, Wellington Example Example Vigor2762 Series User’s Guide...
Page 601 Send out test mail Mail Alert:[Disable] SMTP_Server:[0.0.0.0] Mail to:[] Return-Path:[] Telnet Command: upnp off Telnet Command: upnp off This command can close UPnP function. Example Example >upnp off UPNP say bye-bye Telnet Command: upnp on Telnet Command: upnp on Vigor2762 Series User’s Guide...
Page 602 This command can display the information of the UPnP service. UPnP service must be enabled first. Example Example > upnp on UPNP start. > upnp service >>>>> SERVICE TABLE1 <<<<< serviceType urn:schemas-microsoft-com:service:OSInfo:1 serviceId urn:microsoft-com:serviceId:OSInfo1 SCPDURL /upnp/OSInfo.xml controlURL /OSInfo1 eventURL /OSInfoEvent1 uuid:774e9bbe-7386-4128-b627-001daa843464 Vigor2762 Series User’s Guide...
Page 603 >>>> (2) serviceType urn:schemas-upnp- org:service:WANCommonInterfaceConfig:1 ----- Subscribtion1 ------- sid = d9cd47a5-d9c9-4d3d-8043-d03a82f27983 eventKey =1, ToSendEventKey = 1 Telnet Command: upnp tmpvs Telnet Command: upnp tmpvs This command can display current status of temp Virtual Server of your router. Example Example Vigor2762 Series User’s Guide...
Page 604 USB modems which are supported by Vigor router. Example Example > usb list ? Brand Module Standard ------------------------ -------- Aiko Aiko 83D 3.5G BandRich Bandluxe C170 3.5G BandRich Bandluxe C270 3.5G BandRich Bandluxe C321 3.5G BandRich Bandluxe C330 3.5G BandRich Bandluxe C331 3.5G Vigor2762 Series User’s Guide...
Page 605 Type a text (maximum 11 characters) as the password for the user profile. Permission Specify the action (RWDLCR) permitted. If one of the actions is not allowed, simple type “-” instead. R – Read File. W – Write File. D – Delete File. Vigor2762 Series User’s Guide...
Page 606 [WAN1] IPv4 bridge is enable. Set subnet[LAN1] Telnet Command: vigbrg status Telnet Command: vigbrg status This command can show whether the Vigor Bridge Function is enabled or disabled. Example Example > vigbrg status %Vigor Bridge Function is enable! %Wan1 management is disable! Vigor2762 Series User’s Guide...
Page 607 Vigor2762 Series User’s Guide...
Page 608 This command allows you to set VLAN group. You can set four VLAN groups. Please run vlan restart command after you change any settings. Syntax Syntax vlan group id [set/set_ex] [p1/p2/p3/p4/s1/s2/s3/s4 Syntax Description Syntax Description Parameter Description Vigor2762 Series User’s Guide...
Page 609 This command is used to define the priority for each VLAN profile setting. Syntax Syntax vlan pri n pri_no Syntax Description Syntax Description Parameter Description It means VLAN ID number. n=VLAN ID number (from 0 to 7). pri_no It means the priority of VLAN profile. Vigor2762 Series User’s Guide...
Page 610 Permit untagged device in P1 to access router: ON. Telnet Command: vlan subnet Telnet Command: vlan subnet This command is used to configure the LAN interface used by the VLAN group. Syntax Syntax vlan subnet group_id [1/2/3/4] Syntax Description Syntax Description Vigor2762 Series User’s Guide...
Page 611 Syntax Description Parameter Description It means VLAN channel. The ranage is from 0 to 7. on/off It means to enable/disable the tagged VLAN. [unlimited] [on/off] unlimited on: It allows the incoming of untagged packets even all Vigor2762 Series User’s Guide...
Page 612 > vlan sysvid 100 You have set system VLAN ID to range: 100 ~ 177, We recommend that you reboot the system now. > vlan sysvid 200 You have set system VLAN ID to range: 200 ~ 263, Vigor2762 Series User’s Guide...
Page 613 <list index> vpn dinset <list index> <on/off> vpn dinset <list index> motp <on/off> vpn dinset <list index> pin_secret <pin> <secret> Syntax Description Syntax Description Parameter Description <list index> It means the index number of the profile. Vigor2762 Series User’s Guide...
Page 614 Status: Active Mobile OTP: Enabled PIN: 1234 Secret: e759bb6f0e94c7ab4fe6 Idle Timeout: 300 sec Telnet Command: vpn subnet Telnet Command: vpn subnet This command allows users to specify a subnet selection for the specified remote dial-in VPN profile. Vigor2762 Series User’s Guide...
Page 615 It means the name of the profile. <ip> It means the IP address to dial to. <key> It means the value of IPsec Pre-Shared Key. <nip> <nmask> It means the remote network IP and the mask. Vigor2762 Series User’s Guide...
Page 616 % Remote NEtwork Mask : 255.255.255.0 > Telnet Command: vpn option Telnet Command: vpn option This command allows users to configure settings for LAN to LAN profile. vpn option <index> <cmd1>=<param1> [<cmd2>=<para2> | ... ] Syntax Description Syntax Description Vigor2762 Series User’s Guide...
Page 617 “ctype= l” means L2TP(IPSec Policy None). “ctype= l1” means L2TP(IPSec Policy Nice to Have). “ctype= l2” means L2TP(IPSec Policy Must). dialto It means Server IP/Host Name for VPN. (such as draytek.com or 123.45.67.89). ltype It means Link Type. “ltype=0” means “Disable”.
Page 618 Type “off” means any remote IP is allowed to dial in. peerid It means the peer ID for Remote VPN Gateway. Type “draytek” means the word is used as local ID. iname It means Dial-in Username. “iname=admin” means to set username as “admin”.
Page 619 It means to add a new route. It means to delete specified route. <index> It means the index number of the profile. Available index numbers: 1 ~ 32 <network ip>/<mask> Type the IP address with the network mask address. Example Example Vigor2762 Series User’s Guide...
Page 620 % Pre-Shared Key % IPSec Security Method : AH % Schedule : 0,0,0,0 % Remote Callback : off % Provide ISDN Number : off % IKE phase 1 mode : Main mode % IKE Local ID Vigor2762 Series User’s Guide...
Page 621 This command allows users to enable second subnet IP as VPN server IP. vpn 2ndsubnet on vpn 2ndsubnet off Syntax Description Syntax Description Parameter Description on/off It means to enable or disable second subnet. Example Example > vpn 2ndsubnet on %Enable second subnet IP as VPN server IP! Vigor2762 Series User’s Guide...
Page 622 Vigor2762 Series User’s Guide...
Page 623 Recover – Indicate the duration of VPN backup operation. Resume – When VPN connection breaks down or disconnects, Member 1 will be the top priority for the system to do VPN connection. Second – “0” means to dial each six seconds automatically. “60 ~ Vigor2762 Series User’s Guide...
Page 624 DstI p:A~B - Specify the destination IP range (e.g., 192.168.1.0~192.168.1.255. DstPort:A~B – Specify the destination port range (1~65535). Proto – Specify the protocol. 0 – any 1 – ICMP 2 – IGMP 6 – TCP 17 – UDP Vigor2762 Series User’s Guide...
Page 625 % Type of Server : PPTP % Dial to : 1.2.3.4 % Remote NEtwork IP : 192.168.1.0 % Remote NEtwork Mask : 255.255.255.0 > vpn setup 2 market pptp_out 5.6.7.8 vigor 5678 192.168.1.31 255.255.255.0 % Profile Change Log ... Vigor2762 Series User’s Guide...
Page 626 VPN Tunnel while connecting. Block – When there is conflict occurred between the hosts on both sides of VPN Tunnel in connecting, set it block data transmission of Netbios Naming Packet inside the tunnel. Example Example Vigor2762 Series User’s Guide...
Page 627 L2TP = 1360 IPSec = 1360 L2TP over IPSec = 1360 Telnet Command: vpn ike Telnet Command: vpn ike This command is used to display IKE memory status and leakage list. vpn ike -q Example Example Vigor2762 Series User’s Guide...
Page 628 % 2nd subnet is allowed to pass VPN tunnel! Telnet Command: vpn pass2nat Telnet Command: vpn pass2nat This command allows users to determine if the packets passing through by NAT or not when the VPN tunnel disconnects. vpn pass2nat [on] vpn pass2nat [off] Vigor2762 Series User’s Guide...
Page 629 % translated LAN1 to Virtual subnet: 10.10.10.0 Telnet Command: wan ppp_mru Telnet Command: wan ppp_mru This command allows users to adjust the size of PPP LCP MRU. It is used for specific network. wan ppp_mru <WAN interface number> <MRU size > Vigor2762 Series User’s Guide...
Page 630 % Now: 1100 Telnet Command: wan DF_check Telnet Command: wan DF_check This command allows you to enable or disable the function of DF (Don’t fragment) wan DF_check [on] wan DF_check [off] Syntax Description Syntax Description Parameter Description Vigor2762 Series User’s Guide...
Page 631 This command allows you to display the status of WAN connection, including connection mode, TX/RX packets, DNS settings and IP address. Example Example > wan status WAN1: Offline, stall=N Mode: ---, Up Time=00:00:00 IP=---, GW IP=--- Vigor2762 Series User’s Guide...
Page 632 (255) as the ttl value. status It means to show the current status. Example Example > wan detect status WAN1: always on WAN2: off WAN3: off WAN4: off WAN5: off > wan detect wan1 target 192.168.1.78 Vigor2762 Series User’s Guide...
Page 633 It means index number of PVC. There are 10 PVC, 0(Channel-1) to 9(Channel-9) allowed to be configured. However, only 2 to 9 are available for configuration. status It means to display the whole Bridge status. save It means to save the configuration into flash of Vigor router. Vigor2762 Series User’s Guide...
Page 634 5=Channel 5 WAN interface # Type a number to indicate the WAN interface. 1=WAN1 status It means to display current bridge status. Example Example > wan multifno 5 1 % Configured channel 5 uplink to WAN1 Vigor2762 Series User’s Guide...
Page 635 This command allows you determine the data traffic volume for each WAN interface respectively to prevent from overcharges for data transmission by the ISP. Syntax Syntax wan budget wan [#] rdate [day] [hour] wan budget wan [#] [enable|disable] Vigor2762 Series User’s Guide...
Page 636 This command allows you to run a WAN MTU Discovery. The user can specify an IPv4 target to ping and find the suitable MTU size of the WAN interface. Syntax Syntax wan detect_mtu -w [number] -i [Host/IP address] -s [base_size] -d [decrease_size] (-c [count]) Vigor2762 Series User’s Guide...
Page 637 -p <profile> [-l <lan>] [-s <ssid>] [-m <message> | -u <url> | -f <url>] [-e | -d] Syntax Description Syntax Description Parameter Description profile It means to specify one of the SSID profiles for configuration. The range is from 1 to 4. Vigor2762 Series User’s Guide...
Page 638 -h<0/1> Disable(0)/enable(1) redirection of HTTPS. Example Example > wptl -e -p 1 -l 1,2 -s 1 -u http://www.draytek.com Profile 1 enable ... [OK] Applied LAN interfaces ... [OK] Applied WLAN interfaces ... [OK] Redirect to URL mode ... [OK] >...
Page 639 [number] wl config preamble [enable] wl config txburst [enable] wl config ssid [ssid_num enable ssid_name [hidden_ssid]] wl config security [SSID_NUMBER] [mode] wl config ratectl [ssid_num enable upload download ] wl config isolate [ssid_num lan member] Vigor2762 Series User’s Guide...
Page 640 It means to set the rate control for the specified SSID. upload download] ssid_num: Choose 1, 2, 3 or 4 to specify SSID1, SSID2, SSID3 or SSID4. enable: It means to enable the function of the rate control for the Vigor2762 Series User’s Guide...
Page 641 It means to enhance the performance in data transmission about 40%* more (by enabling Tx Burst). It is active only when both sides of Access Point and Station (in wireless client) invoke this function at the same time. 0: disable the function. Vigor2762 Series User’s Guide...
Page 642 > wl iso_vpn 1 on % ssid: 1 isolate vpn on :1 Telnet Command: wl wpa Telnet Command: wl wpa This command allows you to configure WPA wireless settings. wl wpa 1/2/3 Syntax Description Syntax Description Vigor2762 Series User’s Guide...
Page 643 Window-Max. Specify the value ranging from 1 to 15. Txop It means transmission opportunity. Specify the value ranging from 0 to 65535. It can restrict stations from using specific category class if it is enabled. 0: disable 1: enable Example Example Vigor2762 Series User’s Guide...
Page 644 The value you can type ranges from 0-3. 0: 2T3R 1: 2T2R 2: 1T2R 3: 1T1R wl ht greenfield value The value you can type is 0 (for mixed mode) and 1 (for green field). Vigor2762 Series User’s Guide...
Page 645 WEP keys must be in 5/13 ASCII text string or 10/26 Hexadecimal digit format; WPA keys must be in 8~63 ASCII text string or 64 Hexadecimal digit format. e.g., wl dual wds security disable Vigor2762 Series User’s Guide...
Page 646 This command is reserved for RD debug. Do not use them. Telnet Command: wl set8021x Telnet Command: wl set8021x This command allows you to configure the external or internal server used by Vigor router for wireless authentication. Vigor2762 Series User’s Guide...
Page 647 These commands will allow the user to configure the LAN clients that the user may wake up from the Internet through the use of the WoL packet. ip address - It means the WAN IP address. mask - It means the mask of the IP address. Vigor2762 Series User’s Guide...
Page 648 It means to set login service. 0:HTTPS 1:HTTP e.g.,-s 1 -buser [user name] Block specifies user or IP address. -b ip [ ip address] user name – type the user name that you want to block. Vigor2762 Series User’s Guide...
Page 649 0: None 1: LDAP 2: Radius 3: TACACS+ e.g., -x 2 -l [Param] It means to set log type. 0: None 1: Login 2: Event 3: All -P [Param] It means to set pop browser tracking window. Vigor2762 Series User’s Guide...
Page 650 It means to enable or disable the function of APP QoS. traceable/ untraceable The APPs are divided into traceable and untraceable based on their properties. It means to view the content of all traceable APs. Vigor2762 Series User’s Guide...
Page 651 4186384 bin_web 33554432 11869493 21684939 cfg-bak 4194304 7920 4186384 bin_web-bak 33554432 11869493 21684939 > nand bad Show NAND Flash Bad Blocks: Block Address Partition 1020 0x07f80000 unused 1021 0x07fa0000 unused 1022 0x07fc0000 unused 1023 0x07fe0000 unused Vigor2762 Series User’s Guide...

Draytek Vigor2762 series User Manual

Part I Installation

Part II Connectivity

Part III Wireless LAN

Part IV VPN

Part V Security

Part VI Management

Part VII Others

Part VIII Troubleshooting

Or Not

VIII-3 Checking if the Network Connection Settings on Your Computer Is OK

VIII-5 Checking if the ISP Settings Are OK or Not

Appendix I: VLAN Applications on Vigor Router

Part IX Draytek Tools

Part X Telnet Commands

Quick Links

Related Manuals for Draytek Vigor2762 series

Summary of Contents for Draytek Vigor2762 series