Draytek Vigor 160 Series User Manual

Draytek Vigor 160 Series User Manual

Hide thumbs Also See for Vigor 160 Series:
Table of Contents

Advertisement

Advertisement

Table of Contents
loading

Summary of Contents for Draytek Vigor 160 Series

  • Page 2 Vigor160 Series 35b/G.Fast Modem User’s Guide Version: 1.1 Firmware Version: V4.0.5 (For future update, please visit DrayTek web site) Date: December 4, 2019 Vigor160 Series User’s Guide...
  • Page 3 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com. Firmware & Tools Updates  Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents. More update, please visit www.draytek.com.
  • Page 4: Table Of Contents

    Part I Installation .........................i I-1 Introduction ........................... 1 I-1-1 Indicators and Connectors ....................2 I-2 Hardware Installation ........................3 I-2-1 Installing Vigor Router ......................3 I-2-2 Wall-Mounted Installation ....................4 I-3 Accessing Web Page ........................5 I-4 Changing Password........................7 I-5 Dashboard.............................
  • Page 5 II-2-2 Bind IP to MAC ......................... 59 II-3 NAT ............................61 Web User Interface ........................62 II-3-1 Port Redirection........................ 62 II-3-2 DMZ Host ......................... 66 II-3-3 Open Ports ........................69 II-3-4 ALG........................... 71 II-4 Applications ..........................72 Web User Interface ........................73 II-4-1 Dynamic DNS ........................
  • Page 6 IV-1-2-2 Reporting Configuration ............. 139 IV-1-2-3 Export Parameters ..............139 IV-1-3 Administrator Password ....................140 IV-1-4 Configuration Backup....................141 IV-1-5 Syslog/Mail Alert ......................144 IV-1-6 Time and Date....................... 146 IV-1-7 Management ......................... 147 IV-1-8 Self-Signed Certificate ....................150 IV-1-9 Panel Control ........................ 152 For Button ..................
  • Page 7 VI-4 Pinging the Router from Your Computer ................197 VI-5 Checking If the ISP Settings are OK or Not................199 VI-6 Backing to Factory Default Setting If Necessary ..............200 VI-7 Contacting DrayTek ........................ 201 Part IX Telnet Commands....................203 Accessing Telnet of Vigor Device ....................204 Index ..........................356...
  • Page 9: Part I Installation

    This part will introduce Vigor router and guide to install the device in hardware and software.
  • Page 11: Introduction

    Vigor160 series (family member including Vigor165) is a 35b/G.Fast Modem. As the following figure shown, Vigor160 series supports triple play application like Video, VoIP and Data via the Internet. The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy with ease.
  • Page 12: I-1-1 Indicators And Connectors

    Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. Status Explanation The system is not ready or is failed. Blinking The system is ready and can work normally. P1/P2 A normal connection is through its corresponding port.
  • Page 13: Hardware Installation

    This section will guide you to install the modem through hardware connection and configure the modem’s settings through web browser. Before starting to configure the modem, you have to connect your devices correctly. Connect the DSL interface to the MODEM port of external splitter with a DSL line cable. (splitter) Connect the LAN port to your computer with a RJ-45 cable.
  • Page 14: I-2-2 Wall-Mounted Installation

    Vigor160 series has keyhole type mounting slots on the underside. 1. A template is provided on the Vigor160 series packaging box to enable you to space the screws correctly on the wall. 2. Place the template on the wall and drill the holes according to the recommended instruction.
  • Page 15: Accessing Web Page

    Make sure your PC connects to the router correctly. You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1.
  • Page 16 Now, the Main Screen will appear. Info The home page will be different slightly in accordance with the type of the router you have. The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation.
  • Page 17: Changing Password

    Please change the password for the original security of the router. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type “admin/admin” as Username/Password for accessing into the web user interface with admin mode.
  • Page 18: Dashboard

    The Dashboard (home page) shows the connection status including System Information, IPv4 Internet Access, Interface (physical connection) and Quick Access. On the top of the Dashboard, a virtual panel (simulating the physical panel of the modem) displays the physical interface connection. It will be refreshed every five seconds. Port Color Explanation...
  • Page 19: I-5-2 Name With A Link

    A name with a link (e.g., Current Time, WAN1/LAN and etc.) below means you can click it to open the configuration page for modification. All the menu items can be accessed and arranged orderly on the left side of the main page for your request.
  • Page 20: I-5-4 Gui Map

    All of the hosts (including wireless clients) displayed with Host ID, IP Address and MAC address indicates that the traffic would be transmitted through LAN port(s) and then the WAN port. The purpose is to perform the traffic monitor of the host(s). All the functions the router supports are listed with table clearly in this page.
  • Page 21: I-5-6 Config Backup

    There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup. Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting.
  • Page 22 Detailed explanation (for IPv4) is shown below: Item Description LAN Status IP Address-Displays the IP address of the LAN interface. TX Packets-Displays the total transmitted packets at the LAN interface. RX Packets-Displays the total received packets at the LAN interface. Primary DNS-Displays the primary DNS server address for WAN interface.
  • Page 23: I-5-8-2 Virtual Wan

    Item Description TX Packets - Displays the total transmitted packets at the WAN interface. TX Rate - Displays the speed of transmitted octets at the WAN interface. RX Packets - Displays the total number of received packets at the WAN interface. RX Rate - Displays the speed of received octets at the WAN interface.
  • Page 24: Quick Start Wizard

    Quick Start Wizard can help you to deploy and use the router easily and quickly. Go to Wizards>>Quick Start Wizard. The first screen of Quick Start Wizard is entering login password. After entering the password, please click Next. Vigor160 Series User’s Guide...
  • Page 25 Choose WAN1 as WAN Interface and click the Next button; you will get the following page. Choose PPPoE / PPPoA as the protocol. Available settings are explained as follows: Item Description For ADSL Only You have to select an appropriate WAN connection type for connecting to the Internet through this modem according to the settings that your ISP provided.
  • Page 26 Subnet Mask Assign a subnet mask value for the protocol of MPoA/Static or Dynamic IP. Default Gateway Assign an IP address to the gateway for the protocol of MPoA/Static or Dynamic IP. Primary DNS Assign an IP address to the primary DNS. Second DNS Assign an IP address to the secondary DNS.
  • Page 27 Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. Please manually enter the Username/Password provided by your ISP. Click Next for viewing summary of such connection.
  • Page 28 Choose WAN1 as WAN Interface and click the Next button; you will get the following page. Choose MPoA / Static or Dynamic IP as the protocol. Please enter in the IP address/mask/gateway information originally provided by your ISP. Then click Next for viewing summary of such connection. Click Finish.
  • Page 29: Registering Vigor Device

    You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the steps below to finish the router registration. Please login the web configuration interface of Vigor router by typing “admin/admin”...
  • Page 30 Info If you haven’t an accessing account, please refer to section Creating an Account for MyVigor to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account. The following page will be displayed after you logging in MyVigor. Type a nickname for the router, then click Add.
  • Page 31: Part Ii Connectivity

    It means wide area network. Public IP will be used in WAN. It means local area network. Private IP will be used in LAN. Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP.
  • Page 32: Internet Access

    It allows users to access Internet. IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC).
  • Page 33: Web User Interface

    This section will introduce some general settings of Internet and explain the connection modes for WAN in details. Available settings are explained as follows: Item Description Display Name Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. DSL Mode Specify which DSL mode can be used for such WAN connection.
  • Page 34 VLAN Tag insertion Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the WAN while sending them out. Please type the tag value and specify the priority for the packets sending by WAN interface.
  • Page 35: Ii-1-2 Pppoe/Pppoa

    PPPoA, included in RFC1483, can be operated in either Logical Link Control-Subnetwork Access Protocol or VC-Mux mode. As a CPE device, Vigor modem encapsulates the PPP session based for transport across the ADSL loop and your ISP’s Digital Subscriber Line Access Multiplexer (SDLAM).
  • Page 36 PPPoE Pass-through The modem offers PPPoE dial-up connection. Besides, you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor modem. When PPPoA protocol is selected, the PPPoE package transmitted by PC will be transformed into PPPoA package and sent to WAN server.
  • Page 37: Ii-1-3 Mpoa /Static Or Dynamic Ip

    Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address. Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the modem.
  • Page 38 Available settings are explained as follows: Item Description MPoA Click Enable for activating this function. If you click Disable, this function will be closed and all the settings that you adjusted in this page will be invalid. DSL Modem Settings Set up the DSL parameters required by your ISP.
  • Page 39 With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.  TTL (Time to Live) – Set TTL value of PING operation. It means Max Transmit Unit for packet. RIP Protocol Routing Information Protocol is abbreviated as RIP (RFC1058) specifying how modems exchange routing tables information.
  • Page 40 Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. Default MAC Address Type in MAC address for the modem. You can use Default MAC Address or specify another MAC address for your necessity.
  • Page 41: Ii-1-4 Ipv6

    – – When Offline is selected, the IPv6 connection will be disabled. – – During the procedure of IPv4 PPPoE connection, we can get the IPv6 Link Local Address between the gateway and Vigor router through IPv6CP. Later, use DHCPv6 or accept RA to acquire the IPv6 prefix address (such as: 2001:B010:7300:200::/64) offered by the ISP.
  • Page 42: Ii-1-4-3 Details Page For Ipv6 - Tspc

    detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Below shows an example for successful IPv6 connection based on PPP mode. Info At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan (hinet), the Netherlands, Australia and UK.
  • Page 43 Available settings are explained as follows: Item Description Username Type the name obtained from the broker. It is suggested for you to apply another username and password for http://gogonet.gogo6.com/page/freenet6-account. The maximum length of the name you can set is 63 characters.
  • Page 44: Ii-1-4-4 Details Page For Ipv6 - Aiccu

    – – Available settings are explained as follows: Item Description Always On Check this box to keep the network connection always. Username Type the name obtained from the broker. Please apply new account at http://www.sixxs.net/. It is suggested for you to apply another username and password.
  • Page 45: Ii-1-4-5 Details Page For Ipv6 - Dhcpv6 Client

    will be executed. The network connection will be on always.  Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value.
  • Page 46: Ii-1-4-6 Details Page For Ipv6 - Static Ipv6

    – – This type allows you to setup static IPv6 address for WAN interface. Available settings are explained as follows: Item Description Static IPv6 Address IPv6 Address – Type the IPv6 Static IP Address. configuration Prefix Length – Type the fixed value for prefix length. Add –...
  • Page 47: Ii-1-4-7 Details Page For Ipv6 - 6In4 Static Tunnel

    detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Bridge Mode Enable Bridge Mode - If the function is enabled, the router will work as a bridge modem.
  • Page 48  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode. Vigor160 Series User’s Guide...
  • Page 49: Ii-1-4-8 Details Page For Ipv6 - 6Rd

    – – This type allows you to setup 6rd for WAN interface. Available settings are explained as follows: Item Description 6rd Mode Auto 6rd – Retrieve 6rd prefix automatically from 6rd service provider. The IPv4 WAN must be set as "DHCP". Static 6rd - Set 6rd options manually.
  • Page 50 Below shows an example for successful IPv6 connection based on 6rd mode. Vigor160 Series User’s Guide...
  • Page 51: Ii-1-5 Multi-Pvc/Vlan

    Multi-PVC/VLAN allows users to create profiles for specific WAN interface and bridge connections for user applications that require very high network throughput. Simply go to WAN and select Multi-PVC/VLAN. This page shows the basic configurations used by every channel. Available settings are explained as follows: Item Description Channel...
  • Page 52 Available settings are explained as follows: Item Description Enable Channel 3/4/5 Check it to enable this channel. WAN Type The connections and interfaces created in every channel may select a specific WAN type to be built upon. General Settings VPI - Type in the value provided by your ISP. VCI - Type in the value provided by your ISP.
  • Page 53 Add VLAN Header – Check the box to enable VLAN tag configuration. VLAN Tag – Type the value as the VLAN ID number. Valid settings are in the range from 1 to 4095. The network traffic flowing on each channel will be identified by the system via their VLAN Tags.
  • Page 54  Ping Detect - The router sends an ICMP (Internet Control Message Protocol) echo request every second to the host, whose address is specified in the Ping IP field, to verify the WAN connection. If the remote host does not respond within 30 seconds, the WAN connection is deemed to have failed.
  • Page 55  Subnet Mask – Type in the subnet mask.  Gateway IP Address – Type in gateway IP address. DNS Server IP Address - Type in the primary IP address for the router if you want to use Static IP mode. If necessary, type in secondary IP address for necessity in the future.
  • Page 56 ISP for detailed information. QoS Type - Select a proper QoS type for the channel. PCR - It represents Peak Cell Rate. The default setting is “0”. SCR - It represents Sustainable Cell Rate. The value of SCR must be smaller than PCR. MBS - It represents Maximum Burst Size.
  • Page 57 It represents Peak Cell Rate. The default setting is “0”. SCR - It represents Sustainable Cell Rate. The value of SCR must be smaller than PCR. It represents Maximum Burst Size. The range of the value is 10 to 50. PVC to PVC Binding It allows the enabled PVC channel to use the same ADSL connection settings of another PVC channel.
  • Page 58: Lan

    Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP. The most generic function of Vigor router is NAT. It creates a private subnet of your own. As mentioned previously, the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address.
  • Page 59 Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing. This allows users to change the information of the router such as IP address and the routers will automatically inform for each other. Vigor160 Series User’s Guide...
  • Page 60: Web User Interface

    A LAN comprises a collection of LAN clients, which are networked devices on your premises. A LAN client can be a computer, a printer, a Voice-over-IP (VoIP) phone, a mobile phone, a gaming console, an Internet Protocol Television (IPTV), etc, and can have either a wired (using Ethernet cabling) or wireless (using Wi-Fi) network connection.
  • Page 61: Ii-2-1-1 Details Page For Lan1 - Ethernet Tcp/Ip And Dhcp Setup

    – – There are two configuration pages for LAN1, Ethernet TCP/IP and DHCP Setup (based on IPv4) and IPv6 Setup. Click the tab for each type and refer to the following explanations for detailed information. Available settings are explained as follows: Item Description LAN IP Network...
  • Page 62  Start IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your modem is 220.135.240.1, the starting IP address must be 220.135.240.2 or greater, but smaller than 220.135.240.254.
  • Page 63 host in the LAN. Enable Server - Let the modem assign IP address to every host in the LAN. Relay Agent – (1 subnet/2 subnet) Specify which  subnet that DHCP server is located the relay agent should redirect the DHCP request to. ...
  • Page 64: Ii-2-1-2 Details Page For Lan1 - Ipv6 Setup

    When you finish the configuration, please click OK to save and exit this page. Private IP addresses can be assigned automatically to LAN clients using Dynamic Host Configuration Protocol (DHCP), or manually assigned. The DHCP server can either be the router (the most common case), or a separate server, that hands out IP addresses to DHCP clients.
  • Page 65 It provides 2 daemons for LAN side IPv6 address configuration. One is SLAAC(stateless) and the other is DHCPv6 (Stateful) server. Available settings are explained as follows: Item Description Enable IPv6 Check the box to enable the configuration of LAN 1 IPv6 Setup.
  • Page 66 Manually ULA Prefix - LAN clients will be assigned ULAs generated based on the prefix manually entered. Auto ULA Prefix - LAN clients will be assigned ULAs using an automatically-determined prefix. Current IPv6 Address Display current used IPv6 addresses. Table DNS Server IPv6 Address Deploy when WAN is up –...
  • Page 67 Start IPv6 Address / End IPv6 Address –Type the start and end address for IPv6 server. Advance setting – Click the Edit button to configure advanced IPv6 settings for DHCPv6 server. Advance setting The Advanced Settings page has additional settings for Router Advertisement and enabling multiple WANs for IPv6 traffic.
  • Page 68 behind the router when RA (Router Advertisement) packets are transmitted. MTU – It means Max Transmit Unit for packet. If Auto is selected, the router will determine the MTU value for LAN. After making changes on the Advance setting page, click the OK button to retain the changes and return to the LAN IPv6 Setup page.
  • Page 69: Ii-2-2 Bind Ip To Mac

    This function is used to bind the IP and MAC address in LAN to have a strengthening control in network. With the Bind IP to MAC feature you can reserve LAN IP addresses for LAN clients. Each reserved IP address is associated with a Media Access Control (MAC) address. Click LAN and click Bind IP to MAC to open the setup page.
  • Page 70 information for IP and MAC will be displayed in this field. Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below. Select All Select all entries in the ARP Table for manipulation. Sort Reorder the entry based on the IP address.
  • Page 71: Nat

    Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that one or more private IP addresses can be mapped into a single public one. Public IP address is usually assigned by your ISP, for which you may get charged. Private IP addresses are recognized only among internal hosts.
  • Page 72: Web User Interface

    Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address for each server and this public IP address/domain name are recognized by all users. Since the server is actually located inside the LAN, the network well protected by NAT of the router, and identified by its private IP address/port, the goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping...
  • Page 73 Each item is explained as follows: Item Description Index Display the number of the profile. Enable Check the box to enable the profile. Service Name Display the description of the specific network service. WAN Interface Display the WAN IP address used by the profile. Protocol Display the transport layer protocol (TCP or UDP).
  • Page 74 Available settings are explained as follows: Item Description Enable Check this box to enable such port redirection setting. Mode Two options (Single and Range) are provided here for you to choose. To set a range for the specific service, select Range. In Range mode, if the public port (start port and end port) and the starting IP of private IP had been entered, the system will calculate and display the ending IP of private IP...
  • Page 75 Note that the router has its own built-in services (servers) such as Telnet, HTTP and FTP etc. Since the common port numbers of these services (servers) are all the same, you may need to reset the router in order to avoid confliction. For example, the built-in web user interface in the router is with default port 80, which may conflict with the web server in the local network, http://192.168.1.13:80.
  • Page 76: Ii-3-2 Dmz Host

    As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN.
  • Page 77 Available settings are explained as follows: Item Description WAN1 Choose Private IP or None. Private IP Enter the private IP address of the DMZ host, or click Choose IP to select one. Choose IP Click this button and then a window will automatically pop up, as depicted below.
  • Page 78 Choose IP Click this button and then a window will automatically pop up, as depicted below. The window consists of a list of private IP addresses of all hosts in your LAN network. Select one private IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the screen.
  • Page 79: Ii-3-3 Open Ports

    Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application involved up-to-date to avoid falling victim to any security exploits.
  • Page 80 Source IP Display the name of source IP object. Local IP Address Display the private IP address of the local host offering the service. Backup Click it to backup current settings of Open Ports as a file. Restore Click it to restore Open Ports configuration file. To add or edit port settings, click one index number on the page.
  • Page 81: Ii-3-4 Alg

    ALG means Application Layer Gateway. There are two methods provided by Vigor router, RTSP (Real Time Streaming Protocol) ALG and SIP (Session Initiation Protocol) ALG, for processing the packets of voice and video. RTSP ALG makes RTSP message, RTCP message, and RTP packets of voice and video be transmitted and received correctly via NAT by Vigor router.
  • Page 82: Applications

    The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP. It means that the public IP address assigned to your router changes each time you access the Internet. The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address.
  • Page 83: Web User Interface

    Assume you have a registered domain name from the DDNS provider, say hostname.dyndns.org, and an account with username: test and password: test. Open Applications>>Dynamic DNS. In the DDNS setup menu, check Enable Dynamic DNS Setup. Available settings are explained as follows: Item Description Enable Dynamic DNS...
  • Page 84 Domain Name Display the domain name that you set on the setting page of DDNS setup. Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account, and choose correct Service Provider: dyndns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block.
  • Page 85 provides related service. Note that such option is available when Customized is selected as Service Provider. Service API Type the API information obtained from DDNS server. Note that such option is available when Customized is selected as Service Provider. (e.g: /dynamic/dns/update.asp?u=jo***&p=jo********&hostname=j* ***.changeip.org&ip=###IP### &cmd=update&offline=0) Auth Type...
  • Page 86: Ii-4-2 Schedule

    The Vigor router has a built-in clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As a result, you can not only schedule the router to dialup to the Internet at a specified time, but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours, say, business hours.
  • Page 87 Index Click the index number link to access into the setting page of schedule. Comment Display the name of the time schedule. Time Display the valid time period by time bar. Frequency Display which day(s) will be always on and which day(s) will be always off of the schedule profile by color boxes.
  • Page 88 Action Specify which action should be applied during the period of the schedule. Force On -Force the connection to be always on. Force Down -Force the connection to be always down. How Often Specify how often the schedule will be applied. ...
  • Page 89: Ii-4-3 Upnp

    The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices the ease of installation and configuration which is already available for directly connected PC peripherals with the existing Windows 'Plug and Play' system. For NAT routers, the major feature of UPnP on the router is “NAT Traversal”.
  • Page 90: Ii-4-4 Igmp

    IGMP is the abbreviation of Internet Group Management Protocol. It is a communication protocol which is mainly used for managing the membership of Internet Protocol multicast groups. Available settings are explained as follows: Item Description IGMP Proxy Check this box to enable this function. The application of multicast will be executed through WAN /PVC/VLAN port.
  • Page 91: Ii-4-4-2 Working Status

    IGMP Fast Leave Check this box to make the router stop forwarding multicast traffic to a LAN port as soon as it receives a leave message from that port. Each LAN port should have one IGMP host connected. After finishing all the settings here, please click OK to save the configuration. Available settings are explained as follows: Item Description...
  • Page 92: Application Notes

    Vigor router supports various DDNS service providers, user can set up user-defined profile to update the DDNS even the service provider is not on the list. Now, DrayTek starts to support our own DDNS service - DrayDDNS. We will provide a domain name for each Vigor Router, this single domain name can record IP addresses of all WAN.
  • Page 93 Tick Enable Dynamic DNS Setup b. Click an available profile index c. Tick Enable Dynamic DNS Account d. Select DrayTek Global (www.drayddns.com) as Service Provider e. Select the WAN you would like to upload the IP to DDNS server f. Click Get domain g.
  • Page 94 Currently, only the domain name is allowed to be modified MyVigor website. We will need to register the router to MyVigor server, and log in to MyVigor website to modify it. Please visit https://myvigor.draytek.com/ or go to Applications >> Dynamic DNS Setup >> DrayDDNS profile and click Edit domain.
  • Page 95 Input the desired Domain name (e.g., XXXX25) and click Update. Vigor router will get the modified domain name when the it performs next DDNS updating. We can click Sync domain to accelerate this process. After few seconds, the router will get the new domain name and print it on the profiles list.
  • Page 96 Vigor160 Series User’s Guide...
  • Page 97: How To Configure Customized Ddns

    This article describes how to configure customized DDNS on Vigor routers to update your IP to the DDNS server. We will take “Changeip.org” and “3322.net” as example. Before setting, please make sure that the WAN connection is up. Note that, Username: jo*** Password: jo******** Host name: j*****.changeip.org...
  • Page 98 Now we have to configure the router so it can do the same job for us automatically. Please go to Applications >> Dynamic DNS to create a profile for user-defined DDNS client. Set the Service Provider as User-Defined. Set the Service API as: /dynamic/dns/update.asp?u=jo***&p=jo********&hostname=j****.changeip.org&ip=###IP ### &cmd=update&offline=0 In which, ###IP### is a value which will be replaced with the current interface IP...
  • Page 99 To update the IP to the DDNS server via editing the HTML script, we can type the following script on the browser: “good 111.243.178.53” means our IP has been updated to the server successfully. Now we have to configure the router so it can do the same job for us automatically. Please go to Applications >>...
  • Page 100 The customized Service Provider is also eligible with the ClouDNS.net. Vigor160 Series User’s Guide...
  • Page 101: Routing

    Static routes function rather than other method. You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP. Info For more detailed information about using policy route, refer to Support >>FAQ/Application Notes on www.draytek.com. Vigor160 Series User’s Guide...
  • Page 102: Web User Interface

    Static routing is an alternative to dynamic routing. It is a process that the system network administrator can configure network routers with all the required information for packet forwarding. Go to Routing >> Static Route. The router offers IPv4 and IPv6 for you to configure the static route.
  • Page 103 Available settings are explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Viewing Routing Table Displays the routing table for your reference. Index The number (1 to 30) under Index allows you to open next page to set up static route.
  • Page 104 Go to LAN page and click General Setup, select 1st Subnet as the RIP Protocol Control. Then click the OK button. Info There are two reasons that we have to apply RIP Protocol Control on 1st Subnet. The first is that the LAN interface can exchange RIP packets with the neighboring routers via the 1st subnet (192.168.1.0/24).
  • Page 105 Network Interface Use the drop down list to specify an interface for such static route. Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3.
  • Page 106 Available settings are explained as follows: Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Viewing IPv6 Routing Displays the routing table for your reference. Table Index The number (1 to 40) under Index allows you to open next page to set up static route.
  • Page 107 Available settings are explained as follows: Item Description Enable Click it to enable this profile. Destination IPv6 Address / Type the IP address with the prefix length for this entry. Prefix Len Gateway IPv6 Address Type the gateway address for this entry. Network Interface Use the drop down list to specify an interface for this static route.
  • Page 108 This page is left blank. Vigor160 Series User’s Guide...
  • Page 109: Part Iii Security

    While the broadband users demand more bandwidth for multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders. It also restricts users in the local network from accessing the Internet.
  • Page 110 While the broadband users demand more bandwidth for multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders. It also restricts users in the local network from accessing the Internet.
  • Page 111 Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a packet based on the information in its header, stateful inspection builds up a state machine to track each connection traversing all interfaces of the firewall and makes sure they are valid.
  • Page 112: Firewall

    Below shows the menu items for Firewall. General Setup allows you to adjust settings of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter. Under some circumstance, your filter set can be linked to work in a serial manner. So here you assign the Start Filter Set only. Also you can configure the Log Flag settings, Apply IP filter to VPN incoming packets, and Accept incoming fragmented UDP packets.
  • Page 113 Data Filter Check Enable to activate the Data Filter function. Assign a start filter set for the Data Filter. Always pass inbound Some on-line games (for example: Half Life) will use lots of fragmented large fragmented UDP packets to transfer game data. Instinctively packets…...
  • Page 114 Such page allows you to choose filtering profiles including QoS, Load-Balance policy, WCF, APP Enforcement, URL Content Filter, for data transmission via Vigor router. Available settings are explained as follows: Item Description Filter Select Pass or Block for the packets that do not match with the filter rules.
  • Page 115 Codepage - This function is used to compare the characters among different languages. Choose correct codepage can help the system obtain correct ASCII after decoding data from URL and enhance the correctness of URL Content Filter. The default value for this setting is ANSI 1252 Latin I. If you do not choose any codepage, no decoding job of URL will be processed.
  • Page 116: Iii-1-2 Filter Setup

    Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set number to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule number button to edit each rule.
  • Page 117 Action Display the packets to be passed /blocked. Display the content security managed Move Up/Down Use Up or Down link to move the order of the filter rules. Next Filter Set Set the link to the next filter set to be executed after the current filter run.
  • Page 118 (!=) – when the first and last value are the same, it indicates all the ports except the port defined here; when the first and last values are different, it indicates that all the ports except the range defined here are available for this service type.
  • Page 119 4. After choosing the mechanism, click Next to get the summary page for reference. 5. If there is no error, click Finish to complete wizard setting. Vigor160 Series User’s Guide...
  • Page 120 To use Advance Mode, do the following steps: 1. Click the Advance Mode radio button. 2. Click Index 1 to access into the following page. Available settings are explained as follows: Item Description Enable Check this box to enable the filter rule. Comments Enter filter set comments/description.
  • Page 121 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Address Type and type them in this dialog. In addition, if you want to use the IP range from defined groups or objects, please choose Group and Objects as the Address Type.
  • Page 122 apply to. Source/Destination Port – (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this service type.
  • Page 123 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
  • Page 124 3. When you finish the configuration, please click OK to save and exit this page. Vigor160 Series User’s Guide...
  • Page 125: Iii-1-3 Defense Setup

    As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click Defense Setup to open the setup page. Available settings are explained as follows: Item Description Enable Dos Defense...
  • Page 126 Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value, the Vigor router will start to randomly discard the subsequent UDP packets for a period defined in Timeout. The default setting for threshold and timeout are 2000 packets per second and 10 seconds, respectively.
  • Page 127 some legal packets. For example, when you activate the fraggle attack defense, all broadcast UDP packets coming from the Internet are blocked. Therefore, the RIP packets from the Internet might be dropped. Block TCP flag scan Check the box to activate the Block TCP flag scan function. Any TCP packet with anomaly flag setting is dropped.
  • Page 128: Iii-1-3-2 Spoofing Defense

    Open Firewall >> Defense Setup and click Spoofing Defense to open the setup page. Vigor160 Series User’s Guide...
  • Page 129: Application Notes

    We can specify certain computers (e.g., 192.168.1.10 ~ 192.168.1.20) accessing to Internet through Vigor router. Others (e.g., 192.168.1.31 and 192.168.1.32) outside the range can get the source from LAN only. The way we can use is to set two rules under Firewall. For Rule 1 of Set 2 under Firewall>>Filter Setup is used as the default setting, we have to create a new rule starting from Filter Rule 2 of Set 2.
  • Page 130 Check the box of Check to enable the Filter Rule. Type the comments (e.g., block_all). Choose Block If No Further Match for the Filter setting. Then, click OK. Info In default, the router will check the packets starting with Set 2, Filter Rule 2 to Filter Rule 7.
  • Page 131 A dialog box will be popped up. Choose Range Address as Address Type by using the drop down list. Type 192.168.1.10 in the field of Start IP, and type 192.168.1.20 in the field of End IP. Then, click OK to save the settings. The computers within the range can access into the Internet.
  • Page 132 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. Vigor160 Series User’s Guide...
  • Page 133: Central Security Management (Csm)

    CSM is an abbreviation of Central Security Management which is used to control URL content to reach a goal of security management. To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal.
  • Page 134: Web User Interface

    To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web feature where malicious code may conceal. Once a user type in or click on an URL with objectionable keywords, URL keyword blocking facility will decline the HTTP request to that web page thus can limit user’s access to the website.
  • Page 135 Item Description Set to Factory Default Clear all profiles. Profile Display the number of the profile which allows you to click to set different policy. Name Display the name of the URL Content Filter Profile. Administration Message You can type the message manually for your necessity. Default Message - You can type the message manually for your necessity or click this button to get the default message which will be displayed on the field of Administration Message.
  • Page 136 Either: Web Feature First –When all the packages matching with the conditions specified in URL Access Control and Web Feature below, such function can determine the priority for the actions executed. For this one, the router will process the packages with the conditions set below for web feature first, then URL second.
  • Page 137 matched to any user-defined keyword. It should be noticed that the more simplified the blocking keyword list is, the more efficiently the Vigor router performs. Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed. Action - This setting is available only when Either: URL Access Control First or Either: Web Feature First is selected.
  • Page 138: Application Notes

    The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
  • Page 139  If not, click I am under 16 years old to get the following page. Then, click I and my legal guardian agree. 5. After reading the terms of service/privacy policy, click Agree. Vigor160 Series User’s Guide...
  • Page 140 7. Choose proper selection for your computer and click Continue. 8. Now you have created an account successfully. Click START. 9. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com Vigor160 Series User’s Guide...
  • Page 141 10. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor160 Series User’s Guide...
  • Page 142 11. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password. 12. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want.
  • Page 143: Part Iv Management

    There are several items offered for the Vigor router system setup: System Status, TR-069, Administrator Password, User Password, Login Page Greeting, Configuration Backup, Syslog /Mail Alert, Time and Date, Management, Reboot System, Firmware Upgrade and Activation. Vigor160 Series User’s Guide...
  • Page 144: System Maintenance

    For the system setup, there are several items that you have to know the way of configuration: System Status, TR-069, Administrator Password, Configuration Backup, Syslog /Mail Alert, Time and Date, Management, Self-Signed Certificate, Panel Control, Reboot System, and Firmware Upgrade. Below shows the menu items for System Maintenance.
  • Page 145: Web User Interface

    The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Available settings are explained as follows: Item Description Model Name Display the model name of the router.
  • Page 146 - Display the assigned IP address of the default gateway. IPv6 Address - Display the IPv6 address for LAN. Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet.
  • Page 147: Iv-1-2-1 Acs And Cpe Settings

    This device supports TR-069 standard. It is very convenient for an administrator to manage a TR-069 device through an Auto Configuration Server e.g., VigorACS. Available settings are explained as follows: Item Description TR-069 Click Enable to activate the settings on this page. ACS Server On Choose the interface for the router connecting to ACS server.
  • Page 148 URL – Enter the URL for connecting to the ACS. Please refer to the Auto Configuration Server user’s manual for detailed information. Wizard – Click it to enter the IP address of VigorACS  server, port number and the handler. ...
  • Page 149 Information related to the router's health are divided into several categories and listed in this field. After checking the item(s), Vigor router will arrange and send corresponding data to VigorACS as a reference for the system administrator. Available settings are explained as follows: Item Description CPE Notification Settings...
  • Page 150 This page allows you to set new password. Available settings are explained as follows: Item Description Administrator Password Old Password - Type in the old password. The factory default setting for password is “admin”. New Password -Type in new password in this field. The length of the password is limited to 23 characters.
  • Page 151 Such function can be used to apply the router settings configured by Vigor165 to other Vigor device. Follow the steps below to backup your configuration. Go to System Maintenance >> Configuration Backup. The following page will be popped-up, as shown below. Available settings are explained as follows: Item Description...
  • Page 152 In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. Click Save button, the configuration will download automatically to your computer as a file named config.cfg. The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available.
  • Page 153 Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Click Choose File button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful.
  • Page 154 SysLog function is provided for users to monitor router. Available settings are explained as follows: Item Description SysLog Access Setup Enable - Check Enable to activate function of syslog. Syslog Save to – Check Syslog Server to save the log to Syslog server.
  • Page 155 Use SSL - Check this box to use port 465 for SMTP server for some e-mail server uses https as the transmission method. Authentication - Check this box to activate this function while using e-mail application. User Name - Type the user name for authentication. Password - Type the password for authentication.
  • Page 156 It allows you to specify where the time of the router should be inquired from. Available settings are explained as follows: Item Description Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time from the remote administrator PC host as router’s system time.
  • Page 157 Send NTP Request Specify a WAN interface to send NTP request for time Through synchronization. Click OK to save these settings. This page allows you to manage the settings for Internet/LAN Access Control, Access List from Internet, Management Port Setup, TLS/SSL Encryption Setup, CVM Access Control and Device Management.
  • Page 158 The web user interface will be open until you click the Logout icon manually. Internet Access Control Allow management from the Internet - Enable the checkbox to allow system administrators to login from the Internet. There are several servers provided by the system to allow you managing the router from Internet.
  • Page 159 SNMP function. Please type in IPv4 address to specify certain host. Trap Community - Set trap community by typing a proper name. The default setting is public. Notification Host IP - Set the IPv4 address of the host that will receive the trap community. Trap Timeout - The default setting is 10 seconds.
  • Page 160 There are several servers provided by the system to allow you managing the router from Internet. Check the box(es) to specify. Disable PING from the Internet - Check the checkbox to disable all PING packets from the Internet. For security issue, this function is enabled by default.
  • Page 161 certificate), subject alternative name type and relational settings for subject name. Then click GENERATE. Vigor160 Series User’s Guide...
  • Page 162 The behavior of the Factory Reset button of the Vigor router can be customized as desired. The Factory Reset is enabled by default and can be enabled or disabled if required. Disabling the Factory Reset button will prevent tampering by unauthorized parties. Click the Button tab to get the following page.
  • Page 163 The LAN ports can be individually enabled or disabled. When a LAN port is disabled, attached devices will not be recognized by the router. Available settings are explained as follows: Item Description Refresh Click to refresh the page to display the latest information. Port The number corresponds to the LAN port number shown on the front panel.
  • Page 164 The Web user interface may be used to restart your router. Click Reboot System from System Maintenance to open the following page. Available settings are explained as follows: Item Description Reboot System Select one of the following options, and press the Reboot Now button to reboot the router.
  • Page 165 Click System Maintenance>> Firmware Upgrade to proceed to firmware upgrade. Click Select to specify the one you just download. When the above page appears, click Upgrade. The system will upgrade the firmware of the router automatically. Vigor160 Series User’s Guide...
  • Page 166 This page is left blank. Vigor160 Series User’s Guide...
  • Page 167 Define objects such as IP address, service type, keyword, file extension and others. These pre-defined objects can be applied in CSM. Vigor160 Series User’s Guide...
  • Page 168 Define objects such as IP address, service type, keyword, file extension and others. These pre-defined objects can be applied in CSM. Vigor160 Series User’s Guide...
  • Page 169 For IPs in a range and service ports in a limited range usually will be applied in configuring router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/group that can apply it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address).
  • Page 170 Item Description View Use the drop down list to choose a type (Single Address, Range Address, Subnet Address, Mac Address or all) that IP object with the selected type will be shown on this page. Set to Factory Default Clear all profiles. Search Type a string of the IP object that you want to search.
  • Page 171 Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen.
  • Page 172 This page allows you to bind several IP objects into one IP group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. To set a new profile, please do the steps listed below: 1.
  • Page 173 Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or Any to display all the available IP objects with the specified interface. Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box.
  • Page 174 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile.
  • Page 175 This page allows you to bind several IPv6 objects into one IPv6 group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. To set a new profile, please do the steps listed below: 1.
  • Page 176 Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Available IPv6 All the available IPv6 objects with the specified interface Objects chosen above will be shown in this box. Selected IPv6 Objects Click >>...
  • Page 177 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile.
  • Page 178 After finishing all the settings, please click OK to save the configuration. This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure.
  • Page 179 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile.
  • Page 180 You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile.
  • Page 181 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Name Type a name for this profile, e.g., game.
  • Page 182 This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles.
  • Page 183 Available settings are explained as follows: Item Description Name Type a name for this group. Maximum 15 characters are allowed. Available Keyword You can gather keyword objects from Keyword Object page Objects within one keyword group. All the available Keyword objects that you have created will be shown in this box.
  • Page 184 To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Profile column for configuration in details. 2. The configuration page will be shown as follows: Available settings are explained as follows: Item Description Profile Name Type a name for this profile.
  • Page 185 All of the objects (or the template) can be exported as a file by clicking Download. Then the user can open the CSV file through Microsoft Excel and modify all the objects at the same time. Simply check the box for the object type that you want to backup. Available settings are explained as follows: Item Description...
  • Page 186 This page is left blank. Vigor160 Series User’s Guide...
  • Page 187 This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Vigor160 Series User’s Guide...
  • Page 188 Backing to factory default setting if necessary.  If all above stages are done and the router still cannot run normally, it is the time for you to contact your dealer or DrayTek technical support for advanced help. Vigo160 Series User’s Guide...
  • Page 189 Fisrt, take a look at the menu items under Diagnostics. Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Click Diagnostics and click Dial-out Triggering to open the web page. The internet connection (e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description...
  • Page 190 Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. Vigo160 Series User’s Guide...
  • Page 191 Click Diagnostics and click ARP Cache Table to view the content of the ARP (Address Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Available settings are explained as follows: Item Description Show...
  • Page 192 The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Item Description...
  • Page 193 The facility provides information on IP address assignments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Available settings are explained as follows: Item Description Index It displays the connection item number.
  • Page 194 Click Diagnostics and click NAT Sessions Table to open the list page. Available settings are explained as follows: Item Description Private IP:Port It indicates the source IP address and port of local PC. #Pseudo Port It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host.
  • Page 195 Click Diagnostics and click DNS Cache Table to open the web page. The record of domain Name and the mapping IP address for answering the DNS query from LAN will be stored on Vigor router’s Cache temporarily and displayed on Diagnostics >> DNS Cache Table.
  • Page 196 Click Diagnostics and click Ping Diagnosis to open the web page. Available settings are explained as follows: Item Description IPV4 /IPV6 Choose the interface for such function. Ping to Use the drop down list to choose the destination that you want to ping.
  • Page 197 This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Available settings are explained as follows: Item Description...
  • Page 198 Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock –The device with the IP address will be blocked for five minutes. The remaining time will be shown on the session column. Click it to cancel the IP address blocking. Current /Peak/Speed Current means current transmission rate and receiving rate for WAN interface.
  • Page 199 Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run. The result of route trace will be shown on the screen. Available settings are explained as follows: Item Description...
  • Page 200 Click this button to start route tracing work. Clear Click this link to remove the result on the window. IPv6 TSPC status web page could help you to diagnose the connection status of TSPC. If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully.
  • Page 201 DSL status web page could help you to diagnose the connection status of DSL. Vigor160 Series User’s Guide...
  • Page 202 This page can display content of IP connection detected by DoS Flooding Defense mechanism. It is useful and convenient for network engineers (e.g., MIS engineer) to inspect the network environment to find out if there is any abnormal connection. Information of IP traced and destination port used for SYN Flood, UDP Flood and ICMP Flood attacks will be detected and shown respectively on different pages.
  • Page 203 Follow the steps below to verify the hardware status. Check the power line and WLAN/LAN cable connections. Refer to “I-2 Hardware Installation” for details. Turn on the router. Make sure the Activity LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status.
  • Page 204 Info The example is based on Windows 7. As to the examples for other operation systems, please refer to the similar steps or find support notes in www.DrayTek.com. Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings.
  • Page 205 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. Vigor160 Series User’s Guide...
  • Page 206 Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigo160 Series User’s Guide...
  • Page 207 The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most important thing is that the computer will receive a reply from 192.168.1.1. If not, please check the IP address of your computer.
  • Page 208 Vigo160 Series User’s Guide...
  • Page 209  If the problem of LEDs cannot be solved by the above measures, please contact with the nearest reseller, or send an e-mail to DrayTek FAE for technical support.  Check if the settings offered by ISP are configured well or not.
  • Page 210 Sometimes, a wrong connection can be improved by returning to the default settings. Try to reset the router by software or hardware. Such function is available in Admin Mode only. Info After pressing factory default setting, you will loose all settings you did before.
  • Page 211 If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor160 Series User’s Guide...
  • Page 212 This page is left blank. Vigo160 Series User’s Guide...
  • Page 213 Vigor160 Series User’s Guide...
  • Page 214 This chapter also gives you a general description for accessing telnet and describes the firmware versions for the routers explained in this manual. Info For Windows 7 user, please make sure the Windows Features of Telnet Client has been turned on under Control Panel>>Programs. Type cmd and press Enter.
  • Page 215 Next, enter admin/admin for Account/Password. Then, enter ?. You will see a list of valid/common commands depending on the router that your use. Vigor160 Series User’s Guide...
  • Page 216 This command allows the user to adjust the percentage of data transmission for QoS application. adsl txpct [auto:percent] adsl rxpct [auto:percent] Parameter Description auto It means auto detection of ADSL transmission packet. percent It means to specify the percentage of ADSL transmission packet.
  • Page 217 This parameter is used only for PPPoE/PPPoA Password This parameter is used only for PPPoE/PPPoA You have to reboot the system when you set it on Route mode. > adsl ppp o 35 8 1 1 4 1 -1 draytek draytek pvc no.=0 vci=35 vpi=8...
  • Page 218 Idle timeout:-1 Username=draytek Password=draytek This command can specify a LAN port (LAN1 to LAN4) for mapping to certain PVC, and the mapping port/PVC will be operated in bridge mode. adsl bridge [pvc_no/status/save/enable/disable] [on/off/clear/tag tag_no] [service type] [px ... ] Parameter...
  • Page 219 > adsl idle %Idle Mode! You has to use {adsl reboot} to restart booting. This command is useful for laboratory to measure largest power of data transmission. Please follow the steps below to set adsl drivermode. 1. Please connect dsl line to the DSLAM. 2.
  • Page 220 This command is used to test if the connection between CPE and CO is OK or not. adsl oamlb [n][type] adsl oamlb chklink [on/off] adsl oamlb [log_on/log_off] Parameter Description It means the total number of transmitted packets. type It means the protocol that you can use. 1 –...
  • Page 221 This command can display the annex interface of this router. > adsl annex % hardware is annex B. % modem code is annex B; built at 01/15,07:34. This command is used to add or remove ADSL modes (such as ANNEXL, ANNEXM and ANNEXJ) supported by Multimode.
  • Page 222 > adsl showbins 2 30 ----------------------------------------------------------------------------- Bin SNR Gain Bi - Bin SNR Gain Bi - Bin SNR Gain Bi - Bin SNR Gain Bi dB ts dB ts dB ts dB ts --- ----- ---- -- - --- ----- ---- -- - --- ----- ---- -- - --- ----- ---- -- 0 0.0 0.0 0 * 0.0 0.0 0 * 0.0 0.0 0 *...
  • Page 223 This command allows you to set FDM or EC mode for wireless setting. It may cause sync problem when change this setting. adsl fdmec [mode] Parameter Description mode Type the value for enabling the specified mode. 0: default (EC) 1: EC 2: FDM >...
  • Page 224 adsl atm scr [pvc_no][SCR] adsl atm mbs [pvc_no][MBS] adsl atm status Parameter Description pvc_no It means pvc number and must be between 0(Channel 1) to 7(Channel 8). It means Peak Cell Rate for upstream. The range for the number is “1” to “2539”. It means to get the highest speed for the upstream.
  • Page 225 CO ITU Version[1] : 00000000 DSLAM CHIPSET VENDOR : < unknown > Note: We can provide prompt support (support@draytek.com) if you refer to the telnet command and have any queries. adsl idle [on | tcpmessage | tcpmessage_off] Vigor160 Series User’s Guide...
  • Page 226 Vigor> vdsl idle on % DSL is under [IDLE/QUIET] test mode. % DSL debug tool mode is off. Note: We can provide prompt support (support@draytek.com) if you refer to the telnet command and have any queries. > vdsl drivermode %ADSL Enter Driver Mode! % 1.
  • Page 227 This command is used to display each Bin(Tone) SNR, Gain, and Bits allocated. Note: We can provide prompt support (support@draytek.com) if you refer to the telnet command and have any queries. adsl showbins [startbin endbin | up] Parameter Description startbin Available setting: 0 to 4092.
  • Page 228 Off – Disable the function. > This command is used to save the confugration. Note: We can provide prompt support (support@draytek.com) if you refer to the telnet command and have any queries. > Vigor> vdsl savecfg ? % Xdsl Cfg Save OK! This command is used to set user defined CPE vender ID.
  • Page 229 The range is from -50 to 50. Current ADSL SNR Margin is 0 dB. > vdsl snr 25 ADSL SNR update successfully ! Restarting ADSL modem ... Commands under CSM allow you to set CSM profile to define policy profiles for different policy of IM (Instant Messenger)/P2P (Peer to Peer) application.
  • Page 230 Specify the index number of the application here. If you have no idea of the inex number, do the following (Take IM as an example): Type “csm appe set –I 1 –v IM”, the system will list all of the index numbers of the applications categorized under IM.
  • Page 231 > csm appe config -v 1 -m Group Type Index Name Enable vance Enable Advance abbreviation: Message, File Transfer, Game, Conference, and Other Advance abbreviation: : M, F, G, C, and O ------------------------------------------------------------------- OTHERS TUNNEL DNSCrypt Disable OTHERS TUNNEL DynaPass Disable OTHERS TUNNEL...
  • Page 232 It is used to set notification e-mail for APPE signature based on the settings configured in System Maintenance>>SysLog/Mail Alert Setup (in which, the box of APPE Signature is checkd under Enable E-Mail Alert). csm appe email [-e|-d|-s] Enable notification e-mail mechanism. Disable notification e-mail mechanism.
  • Page 233 VALUE Number 0 to 3 represent different conditions. 0: It means Bundle: Pass. 1: It means Bundle: Block. 2: It means Either: URL Access Control First. 3: It means Either: Web Feature First. It means the log type of the profile. They are: P: Pass, B: Block, A: All,...
  • Page 234 KEY_WORD_Object_Index Specify the index number of the object profile. Set the keyword group. KEY_WORD_Group_Index Specify the index number of the group profile. > csm ucf obj 1 uac -i E Log:[none] Priority Select : [Bundle : Pass] ----------------------------------------------- URL Access Control [ ]Enable URL Access Control Action:[pass] [v]Prevent web access from IP address.
  • Page 235 It means to configure the settings regarding to Web Feature (wf). csm ucf obj INDEX wf -v csm ucf obj INDEX wf -e csm ucf obj INDEX wf -d csm ucf obj INDEX wf -a P|B csm ucf obj INDEX wf -s WEB_FEATURE csm ucf obj INDEX wf -u WEB_FEATURE csm ucf obj INDEX wf -f File_Extension_Object_index Parameter...
  • Page 236 csm wcf cache csm wcf server WCF_SERVER csm wcf msg MSG csm wcf setdefault csm wcf obj INDEX -v csm wcf obj INDEX -a P|B csm wcf obj INDEX -n PROFILE_NAME csm wcf obj INDEX -l N|P|B|A csm wcf obj INDEX -o KEY_WORD Object Index csm wcf obj INDEX -g KEY_WORD Group Index csm wcf obj INDEX -w E|D|P|B csm wcf obj INDEX -s CATEGORY|WEB_GROUP...
  • Page 237 P:Pass, B:Block It means to choose the items under CATEGORY or WEB_GROUP. It means to discard items under CATEGORY or WEB_GROUP. WEB_GROUP Child_Protection, Leisure, Business, Chating, Computer Internet, Other CATEGORY Includes: Alcohol & Tobacco, Criminal Activity, Gambling, Hate & Intoleranc, Illegal Drug, Nudity, Pornography/Sexually Explicit, Weapons, Violence, School Cheating,Sex Education, Tasteless, Child Abuse Imges, Entertainment, Games, Sports, Travel, Leisure &...
  • Page 238 > csm wcf obj 1 -n test_wcf Profile Index: 1 Profile Name:[test_wcf] []White/Black list Action:[block] No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- Action:[block] Log:[block] -------------------------------------------------------------------------- child Protection Group: [v]Alcohol & Tobacco [v]Criminal &...
  • Page 239 Parameter Description enable Enable or disable DNS Filter. ON: enable. OFF: disable. syslog Determine the content of records transmitting to Syslog. P: Pass. Records for the packets passing through DNS filter will be sent to Syslog. B: Block. Records for the packets blocked by DNS filter will be sent to Syslog.
  • Page 240 c: clear config and reset to default setting > csm dnsf enable ON DNS Filter enable! > csm dns profile_edit 1 -n Plant_1 Profile Index: 1 Profile Name:[Plant_1] Log:[none] WCF Profile Index: 0 UCF Profile Index: 0 Displays the DDNS log. >ddns log >...
  • Page 241 dos [-a | e [ATTACK_F][ATTACK_0] | d [ATTACK_F][ATTACK_0]] Parameter Description It means to view the configuration of DoS defense system. It means to deactivate the DoS defense system. It means to activate the DoS defense system. It means to enable the defense function for a specific attack and set its parameter(s).
  • Page 242 n=2: Dynamic IP n=3: Static IP n=4: PPTP with Dynamic IP, n=5: PPTP with Static IP, n=6: L2TP with Dynamic IP n=7: L2TP with Static IP n=A: 3G/4G USB Modem(PPP mode) n=B: 3G/4G USB Modem(DHCP mode -S <isp name> It means to set ISP Name (max. 23 characters). -P <on/off>...
  • Page 243 -x n Set the second schedule for USB PPP mode. -y n Set the third schedule for USB PPP mode. -z n Set the fourth schedule for USB PPP mode. -Q <mode> Set (PPP mode or DHCP mode) WAN Connection Detection Mode. <mode>...
  • Page 244 Parameter Description Enable Enable the function. Disable Disable the function. > ip pubsubnet enable public subnet enabled! This command allows to set the IP routed subnet for the router. ip pubaddr ? ip pubaddr <public subnet IP address> Parameter Description Display an IP address which allows users set as the public subnet IP address.
  • Page 245 Type the index number of the table displayed on your screen. > ip aux add 192.168.1.65 1 % 192.168.1.65 has added in index 2. DrayTek> ip aux ? %% ip aux add [IP] [Join to NAT Pool] %% ip aux remove [Index] Where IP = Auxiliary WAN IP Address.
  • Page 246 This command allows users to set/add a specified LAN IP your router. ip addr [IP address] Parameter Description IP address It means the LAN IP address. >ip addr 192.168.50.1 % Set IP address OK !!! Info When the LAN IP address is changed, the start IP address of DHCP server are still the same.
  • Page 247 ip arp setCacheLife [time] In which, arp add allows users to add a new IP address into the ARP table; arp del allows users to remove an IP address; arp flush allows users to clear arp cache; arp status allows users to review current status for the arp table;...
  • Page 248 ip dhcpc renew [wan number] ip dhcpc status Parameter Description option It is an optional setting for DHCP server. -h: display usage -l: list all custom set DHCP options -d: delete custom dhcp client option by index number -e: enable/disable option feature, 1:enable, 0:disable -w: set WAN number (e.g., 1=WAN1) -c: set option number: 0~255 -v: set option value by string...
  • Page 249 This command allows users to trace the routes from the router to the host. ip tracert [Host/IP address] [WAN1/WAN2/WAN3] [Udp/Icmp] Parameter Description IP address It means the target IP address. WAN1/WAN2/WAN3 It means the WAN port that the above IP address passes through. Udp/Icmp It means the UDP or ICMP.
  • Page 250 0/1/2 0 means disable; 1 means first subnet and 2 means second subnet. > ip rip 1 %% Set RIP LAN1. Vigo160 Series User’s Guide...
  • Page 251 This command allows users to set the RIP (routing information protocol) of WAN IP. ip wanrip [ifno] -e [0/1] Parameter Description ifno It means the connection interface. 1: WAN1, 3: PVC3,4: PVC4,5: PVC5 Note: PVC3 ~PVC5 are virtual WANs. It means to disable or enable RIP setting for specified WAN interface.
  • Page 252 This command allows users to set static route. ip route add [dst] [netmask][gateway][ifno][rtype] ip route del [dst] [netmask][rtype] ip route status ip route cnc ip route default [off/?] ip route clean [1/0] Parameter Description It means to add an IP address as static route. It means to delete specified IP address.
  • Page 253 This command allows users to enable/disable igmp proxy server. ip igmp_proxy set ip igmp_proxy reset ip igmp_proxy wan ip igmp_proxy query ip igmp_proxy ppp [0/1] ip igmp_proxy status Parameter Description It means to enable proxy server. reset It means to disable proxy server. It means to specify WAN interface for IGMP service.
  • Page 254 enable It means to enable igmp snoop function disable It means to disable igmp snoop function. status It means to display current igmp configuration. txquery It means to send out IGMP QUERY to LAN periodically. chkleave It means to check the leave status. On: enable the IGMP snoop leave checking function.
  • Page 255 Specify MAC address of certain device as the DMZ host. ip dmz [mac] Parameter Description It means the MAC address of the device that you want to specify >ip dmz ? % ip dmz <mac>, now : 00-00-00-00-00-00 > ip dmz 11-22-33-44-55-66 >...
  • Page 256 ip session timer [num] ip session [block/unblock][IP] ip session [add/del][IP1-IP2][num][p2pnum] Parameter Description It means to turn on session limit for each IP. It means to turn off session limit for each IP. default [num] It means to set the default number of session num limit. Defautlp2p [num] It means to set the default number of session num limit for p2p.
  • Page 257 ip bandwidth [add/del] [IP1-IP2][tx][rx][shared] Parameter Description It means to turn on the IP bandwidth limit. It means to turn off the IP bandwidth limit. default [tx_rate][rx_rate] It means to set default tx and rx rate of bandwidth limit. The range is from 0 – 65535 Kpbs. status It means to display the current settings.
  • Page 258 It means to turn on IP bandmac policy. Even the IP is not in the policy table, it can still access into network. It means to turn off all the bindmac policy. strict_on / strict_off It means that only those IP address in IP bindmac policy table can / can not access into network.
  • Page 259 This command is used to set the maximum number of NAT users. ip maxnatuser user no Parameter Description User no A number specified here means the total NAT users that Vigor router supports. 0 – It means no limitation. > ip maxnatuser 100 % Max NAT user = 100 This command is used to set the IP policy route profile.
  • Page 260 Any: It means any port number can be used as destination port. -G [default/specific] Specify the gateway mode. -L [default/specific] Specify the failover gateway mode. -s [value] Indicate the source IP start. Value: The type format shall be “xxx.xxx.xxx.xxx”. (e.g, 192.168.1.0) -S [value] Indicate the source IP end.
  • Page 261 -v: View current failback setting. Diagnose for Policy Route -s [value] It means “source IP”. Value: Available settings include: Any: It indicates any IP address can be used as source IP address. “xxx.xxx.xxx.xxx”: The type format (e.g, 192.168.1.0). -d [value] It means “destination IP”.
  • Page 262 0: reply all subnet packets. 1: reply only same subnet packet. It means to update LAN DNS configuration to DNS cache. > ip lanDNSRes -i 1 -n ftp.drayTek.com % Configure Set1's DomainName:ftp.drayTek.com > ip lanDNSRes -i 1 -n ftp.drayTek.com > ip lanDNSRes -i 1 -a 172.16.2.10 -s 1 >...
  • Page 263 -p <profile name> Set profile name for LAN DNS. Reset the settings for selected profile. > ip dnsforward -i 1 -n ftp.drayTek.com % Configure Set1's DomainName:ftp.drayTek.com > ip dnsforward -i 1 -a 172.16.1.1 % Configure Set1's IP:172.16.1.1 > ip dnsforward -i 1 -l...
  • Page 264 FE80::250:7FFF:FE00:0/64 (Link) Multicast Address: FF02::2 FF02::1:FF00:0 FF02::1 This command is used to configure option-request settings for DHCPv6 client. ip6 dhcp req_opt [LAN1 ~LAN |WAN1|WAN2|USB] [-<command> <parameter>| ... ] Parameter Description req_opt It means option-request. LAN1~4|WAN1|WAN2|USB It means to specify LAN or WAN interface for such address. [<command>...
  • Page 265 ip6 dhcp client [WAN1|WAN2|USB] [-<command> <parameter>| ... ] Parameter Description client It means the dhcp client settings. [<command> The available commands with parameters are listed below. <parameter>|…] […] means that you can type in several commands in one line. It means to show current DHCPv6 status. -p [IAID] It means to request identity association ID for Prefix Delegation.
  • Page 266 Parameter Description server It means the dhcp server settings. [<command> The available commands with parameters are listed below. <parameter>|…] […] means that you can type in several commands in one line. It means to show current DHCPv6 status. It means to show current DHCPv6 IP Assignment Table. -n <name>...
  • Page 267 DHCPv6 server disabled maximum address of the pool: FF02::3 minimum address of the pool: FF02::1 1st DNS IPv6 Addr: FF02::1 This command allows you to configure settings for accessing Internet. ip6 internet [-<command> <parameter> | ... ] Parameter Description [<command> The available commands with parameters are listed below.
  • Page 268 -p <prefix> It means to set 6in4 LAN Routed Prefix. -l n It means to set 6in4 LAN Routed Prefix length. -T n It means to set 6in4 Tunnel TTL. TSPC/AICCU -u <username> It means to set Username (max. 63 characters). -P <password>...
  • Page 269 This command allows you to display IPv6 neighbour table. ip6 neigh -s[ inet6_addr] [eth_addr] [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] ip6 neigh -d [inet6_addr] [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] ip6 neigh -a [inet6_addr] [-N LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] Parameter Description It means to add a neighbour. It means to delete a neighbour. It means to show neighbour status.
  • Page 270 This command allows you to add a proxy neighbour. ip6 pneigh -s inet6_addr [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] ip6 pneigh -d inet6_addr [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB]] ip6 pneigh -a [inet6_addr] [-N LAN1|LAN2|...|LAN4|WAN1|WAN2|USB]] Parameter Description It means to add a proxy neighbour. It means to delete a proxy neighbour. It means to show proxy neighbour status.
  • Page 271 PREFIX/PREFIX-LEN I/F METRIC FLAG NEXT-HOP ------------------------------------------------------------------------- ::0.0.0.1/128 LAN1 0 U :: FE80::/128 LAN1 0 U :: FE80::21D:AAFF:FE00:0/128 LAN1 0 U :: FE80::/64 LAN1 256 U :: FE80::/16 LAN1 1024 UGS FE80::250:7FFF:FE12:100 FF00::/8 LAN1 256 U :: This command allows you to pin an IPv6 address or a host. ip6 ping [IPV6 address/Host] [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] <send count>...
  • Page 272 This command allows you to trace the routes from the router to the host. ip6 tracert [IPV6 address/Host] [LAN1|LAN2|...|LAN4|WAN1|WAN2|USB] Parameter Description IPV6 address/Host It means to specify the IPv6 address or host for ping. [LAN1|LAN2|...|LAN4|WAN1 It means to specify LAN or WAN interface for such address. |WAN2|USB] >...
  • Page 273 Status: Connected > This command allows you to enable or disable RADVD server. Ip6 radvd <LAN1|LAN2|...|LAN4> [-<command> <parameter>| ... ] ip6 radvd –V Parameter Description [<command> The available commands with parameters are listed below. <parameter>|…] […] means that you can type in several commands in one line. It means to enable or disable the default lifetime of the RADVD server.
  • Page 274 min interval time : 200 seconds MAX interval time : 600 seconds Hop limit : 64 Reachable time Retransmit time Preference : Medium This command allows you to manage the settings for access list. ip6 mngt list ip6 mngt list [add <Index> <IPv6 Object Index> |remove <Index>|flush] ip6 mngt status ip6 mngt [http|telnet|ping|https|ssh] [on|off] Parameter...
  • Page 275 Parameter Description [WAN1|WAN2|USB] It means the connection interface. 0=LAN1 1=WAN1 2=WAN2 > ip6 online WAN1 % WAN1 online status : % IPv6 WAN1 TSPC % Default Gateway : :: % Interface : DOWN % UpTime : 0:00:00 % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % Tx packets = 0, Tx bytes = 0, Rx packets = 0, Rx bytes = 0...
  • Page 276 Parameter Description –h It is used to display the usage of such command. It is used to show the NTP state. -p <0/1> It is used to specify NTP server for IPv6. 0 – Auto 1 – First Query IPv6 NTP Server. >...
  • Page 277 -E n It means to delete an extension WAN. n: 1: WAN1 ,2: WAN2, ... x: WANx. -b map It means to set bit map(decimal) for extension WAN. map: bit 0: WAN1 bit 1: WAN2, ... bit n: WAN(n+1). -f n It means to disable IPv6.
  • Page 278 % ULA Type : OFF % RIPng : Enable This command allows you to set sessions limit for IPv6 address. ip6 session [on/off/default num/status/show] ip6 session [add/del] [IP1-IP2] [num] Parameter Description It means to turn on session limit for each IP. It means to turn off session limit for each IP.
  • Page 279 default <tx> <rx> It means to set the default transmission (tx), receiving (rx) rate of bandwidth limit (0-30000 Kbps/Mbps). status It means to display the current settings. show It means to display all IP range bandwidth limit settings. It means to add the bandwidth limit for an IPv6 range. <IP1-IP2>...
  • Page 280 This command is used to set general rule for firewall. ipf set [Options] ipf set [SET_NO] rule [RULE_NO] [Options] Parameter Description Options There are several options provided here, such as -v, -c [SET_NO], -d [SET_NO],… and etc. SET_NO It means to specify the index number (from 1 to 12) of filter set. RULE_NO It means to specify the index number (from 1 to 7) of filter rule set.
  • Page 281 Load-Balance policy : Auto-select --------------------------------------------------------------------- CodePage : ANSI(1252)-Latin I Window size : 65535 Session timeout : 1440 DrayTek Banner : Enable --------------------------------------------------------------------- Accept large incoming fragmented UDP or ICMP packets: Enable Transparent Mode : Disable --------------------------------------------------------------------- Block routing packet from WAN:...
  • Page 282 Such word means Filter Rule, range from 1~7. <Command><parameter> The following lists all of the available commands with parameters. It means to enable or disable the rule setting. 0- disable 1- enable -D [value] It means to set direction. 0, LAN//DMZ/RT/VPN -> WAN 1, WAN ->...
  • Page 283 <obj> – indicates index number of object or index number of group. Available settings range from 1-96. For example, “-S 0 1" means the first service type object profile. -S u <protocol> It means to configure advanced settings for Service Type, such as <source_port__value>...
  • Page 284 <index> – Available settings range from 0 ~ 8. “0” means no profile will be applied. <log flag> - Enable (1) the log; disable (0) the log -n<index><log flag> It means to specify which DNS filter profile will be applied. <index>...
  • Page 285 ---------------------------------------------------------------------- CodePage : ANSI(1252)-Latin I Window size : 65535 Session timeout : 1440 DrayTek Banner : Enable --------------------------------------------------------------------- Strict Security Checking [ ]APP Enforcement This command is used to set and view flowtrack sessions. ipf flowtrack set [-re] ipf flowtrack view [-f]...
  • Page 286 Available settings include: icmp >ipf flowtrack set -r Refresh the flowstate ok > ipf flowtrack view -f Start to show the flowtrack sessions state: ORIGIN>> 192.168.1.11:59939 -> 8.8.8.8: 53 ,ifno=0 REPLY >> 8.8.8.8: 53 -> 192.168.1.11:59939 ,ifno=3 proto=17, age=93023180(3920), flag=203 ORIGIN>>...
  • Page 287 > log -w 25:36:25.580 ---->DHCP (WAN-5) Len = 548XID = 0x7880fdd4 Client IP = 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0 Relay agent IP = 0.0.0.0 25:36:33.580 ---->DHCP (WAN-5) Len = 548XID = 0x7880fdd4 Client IP = 0.0.0.0 Your IP = 0.0.0.0 Next server IP = 0.0.0.0...
  • Page 288 > mngt httpport 80 % Set web server port to 80 done. This command allows users to set HTTPS port for management. mngt httpsport [Https port] Parameter Description Https port It means to type the number for HTTPS port. The default setting is 443.
  • Page 289 % Set ssh port to 23 done. This command is used to pass or block Ping from LAN PC to the internet. mngt noping [on] mngt noping [off] mngt noping [viewlog] mngt noping [clearlog] Parameter Description All PING packets will be forwarded from LAN PC to Internet. All PING packets will be blocked from LAN PC to Internet.
  • Page 290 > mngt defenseworm add 21 Add TCP port 21 Block TCP port list: 135, 137, 138, 139, 445, 21 > mngt defenseworm del 21 Delete TCP port 21 Block TCP port list: 135, 137, 138, 139, 445 This command can allow the system administrators to login from the Internet. By default, it is not allowed.
  • Page 291 mngt lanaccess –d mngt lanaccess –v mngt lanaccess –h Parameter Description -e[0/1] It means to enable/disable the function. 0-disable the function. 1-enable the function. -s[value] It means to specify service offered. Available values include: FTP, HTTP, HTTPS, TELNET, SSH, None, All -i[value] It means the interface which is allowed to access.
  • Page 292 This command allows users to reject or accept PING packets from the Internet. mngt echoicmp [enable] mngt echoicmp [disable] Parameter Description enable It means to accept the echo ICMP packet. disable It means to drop the echo ICMP packet. > mngt echoicmp enable %% Echo ICMP packet enabled.
  • Page 293 -T <seconds> It means to set the trap timeout <0~999>. It means to list SNMP setting. > mngt snmp -e 1 -g draytek -s DK -m 192.168.1.20,192.168.5.192/26,10.20.3.40/24 -t trapcom -n 192.168.1.20,10.20.3.40 -T 88 SNMP Agent Turn on!!! Get Community set to draytek Set Community set to DK Manager Host IP set to 192.168.1.20,192.168.5.192/26,10.20.3.40/24...
  • Page 294 Parameter Description setdefault It means to return to default settings for all profiles. INDEX It means the index number of the specified object profile. It means to view the information of the specified object profile. Example: object ip obj 1 -v -n NAME It means to define a name for the IP object.
  • Page 295 object ip grp setdefault object ip grp INDEX -v object ip grp INDEX -n NAME object ip grp INDEX -i INTERFACE object ip grp INDEX -a IP_OBJ_INDEX Parameter Description setdefault It means to return to default settings for all profiles. INDEX It means the index number of the specified group profile.
  • Page 296 [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] [8:][0] [9:][0] [10:][0] [11:][0] Set ok! Vigo160 Series User’s Guide...
  • Page 297 This comman is used to create an IPv6 object profile. obj ipv6 obj setdefault obj ipv6 obj INDEX -v obj ipv6 obj INDEX -n NAME obj ipv6 obj INDEX -s INVERT obj ipv6 obj INDEX -e MATCH_TYPE obj ipv6 obj INDEX -a TYPE [START_IP] [END_IP]|[Prefix Length] Parameter Description setdefault...
  • Page 298 > obj ipv6 obj 3 -e 1 You can not set 64 bits Interface ID for Subnet type. Setting saved. > obj ipv6 obj 3 -a 3 2607:f0d0:1002:51::4 2607:f0d0:1002:51::4 Setting saved. > obj ipv6 obj 3 -v IPv6 Object Profile 3 Name Address Type:[range] Start IPv6 Address:[2607:F0D0:1002:51::4]...
  • Page 299 [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] > object ipv6 grp 8 -a 1 2 3 4 5 IPv6 Group Profile 8 Name :[bruce] Included ip object index: [0:][1] [1:][2] [2:][3] [3:][4] [4:][5] [5:][0] [6:][0] [7:][0] This command is used to create service object profile. object service obj setdefault object service obj INDEX -v object service obj INDEX -n NAME...
  • Page 300 0=equal(=), when the starting port and ending port values are the same, it indicates one port; when the starting port and ending port values are different, it indicates a range for the port and available for this service type. 1=not equal(!=), when the starting port and ending port values are the same, it indicates all the ports except the port defined here;...
  • Page 301 NAME: Type a name with less than 15 characters. Example: object service grp 8 –n bruce -a SER_OBJ_INDEX It means to specify service object profiles for the group profile. Example: :object service grp 3 –a 1 2 3 4 5 The service object profiles with index number 1,2,3,4 and 5 will be group under such profile.
  • Page 302 Show It means to show the contents for all of the profiles. INDEX It means the index number of the specified keyword profile. It means to view the information of the specified keyword profile. -n NAME It means to define a name for the keyword profile. NAME: Type a name with less than 15 characters.
  • Page 303 CATEGORY|FILE_EXTENSION CATEGORY: Image, Video, Audio, Java, ActiveX, Compression, Executation Example: object fe obj 1 -e Image FILE_EXTENSION: ".bmp", ".dib", ".gif", ".jpeg", ".jpg", ".jpg2", ".jp2", ".pct", ".pcx", ".pic", ".pict", ".png", ".tif", ".tiff", ".asf", ".avi", ".mov", ".mpe", ".mpeg", ".mpg", ".mp4", ".qt", ".rm", ".wmv", ".3gp", ".3gpp", ".3gpp2", ".3g2", ".flv", ".swf", ".aac", ".aiff"...
  • Page 304 This command is used to create short message object profile. object sms show object sms setdefault object sms obj INDEX -v object sms obj INDEX -n NAME object sms obj INDEX -s Service Provider object sms obj INDEX -u Username object sms obj INDEX -p Password object sms obj INDEX -q Quota object sms obj INDEX -i Interval...
  • Page 305 Note that one credit equals to one SMS text message on the standard route. -I [Interval] It means to set the sending interval for the SMS to be delivered. Type the shortest time interval for the system to send SMS. -l [URL] It means to set the URL of SMS object profile 9 and 10.
  • Page 306 Profile Name: Type a name with less than 15 characters. -s [SMTP Server] It means to set the IP address of the mail server. -l [Use SSL] It means to use port 465 for SMTP server for some e-mail server uses https as the transmission method.
  • Page 307 Parameter Description show It means to show the contents for all of the profiles. setdefault It means to return to default settings for all profiles. [INDEX] It means the index number (from 1 to 8) of the specified notification object profile. It means to view the information of the specified notification object profile.
  • Page 308 object schedule set [INDEX] option object schedule view [INDEX] object schedule setdefault Parameter Description It means to set the schedule profile. [INDEX] It means the index number (from 1 to 15) of the specified object profile. option Available options for schedule includes: -e , -c, -D, -T, -d, -a -e [value] It means to enable the schedule setup.
  • Page 309 > object schedule set 1 -h 3 10" view [INDEX] It means to show the content of the profile. setdefault It means to return to default settings for all profiles. > object schedule set 1 -e 1 > object schedule set 1 -c Working >...
  • Page 310 wan1 It means the WAN1 interface. AN… 10H It means the physical type for the specific port. AN: auto-negotiate. 1000F: 1000M Full Duplex. 100F: 100M Full Duplex. 100H: 100M Half Duplex. 10F: 10M Full Duplex. 10H: 10M Half Duplex. status It means to view the Ethernet port status.
  • Page 311 TCP WWW Timeout: 60 sec. TCP SYN Timeout: 60 sec. This command allows user to set general settings for QoS. qos setup [-<command> <parameter> | ... ] Parameter Description [<command> The available commands with parameters are listed below. <parameter>|…] […] means that you can type in several commands in one line. Type it to display the usage of this command.
  • Page 312 > qos setup -m 3 -i 9500 -o 8500 -r 3:20 -u 1 -p 50 -t 1 WAN1 QOS mode is both Wan 1 is XDSL model ,don,t need to set up Wan 1 is XDSL model ,don,t need to set up WAN1 class 3 ratio set to 20 WAN1 udp bandwidth control set to enable WAN1 udp bandwidth limit ratio set to 50...
  • Page 313 Show the rule in the specified class. […] It means that you can type in several commands in one line. > qos class -c 2 -n draytek -a -m 1 -l 192.168.1.50:192.168.1.80 Following setting will set in the class2 class 2 name set to draytek...
  • Page 314 It means service port. The typing format must be [start:end] (ex., 510:330). List user defined types. “no” means the index number. Available numbers are 1~40. > qos type -a draytek -t 6 -p 510:1330 service name set to draytek service type set to 6:TCP Port type set to Range Service Port set to 510 ~ 1330 >...
  • Page 315 This command can exit the telnet command screen. This command displays current status of LAN IP address settings. > show lan The LAN settings: Status IP Mask DHCP Start IP Pool Gateway -------- --------------- --------------- ---- --------------- ---- -- [V]LAN1 192.168.1.1 255.255.255.0 V 192.168.1.10 200 192.168.1.1 [X]LAN2 192.168.2.1 255.255.255.0 V 192.168.2.10 100 192.168.2.1...
  • Page 316 This command displays current status of DNS setting. > show dns Domain name server settings: % LAN1 Primary DNS: [Not set] % LAN1 Secondary DNS: [Not set] % LAN2 Primary DNS: [Not set] % LAN2 Secondary DNS: [Not set] % LAN3 Primary DNS: [Not set] % LAN3 Secondary DNS: [Not set] % LAN4 Primary DNS: [Not set] % LAN4 Secondary DNS: [Not set]...
  • Page 317 This command displays current status of NAT. > show nat Port Redirection Running Table: Index Protocol Public Port Private IP Private Port 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page]...
  • Page 318 This command displays current status of current session. > show session % Maximum Session Number: 30000 % Maximum Session Usage: 0 % Current Session Usage: 0 % Current Session Used(include waiting for free): 0 % WAN1 Current Session Usage: 0 % WAN3 Current Session Usage: 0 This command displays current status of LAN and WAN connections.
  • Page 319 This comman can display traffic graph for WAN1, transmitted bytes, receivied bytes and sessions. show traffic [wan1] [tx/rx] [weekly] show traffic session [weekly] > show traffic session weekly0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 , 0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,0 ,...
  • Page 320 This command is used to enable DCHP2 server. srv dhcp dhcp2 [-<command> <parameter> | ... ] Parameter Description [<command> The available commands with parameters are listed below. <parameter>|…] […] means that you can type in several commands in one line. -l<enable>...
  • Page 321 It means the IP count number. IP counts It means to specify the number of IP addresses in the pool. The maximum is 10. status It means the execution result of this command. It means creating a list of hosts to be assigned. It means removing the selected MAC address.
  • Page 322 This command allows users to set Secondary IP Address for DNS Server in LAN. srv dhcp dns2 [?] srv dhcp dns2 [LAN1/LAN2/LAN3/LAN4][DNS IP address] Parameter Description It means to display current IP address of DNS 2 for the DHCP server. LAN1/LAN2/LAN3/LAN4 It means to specify the LAN interface.
  • Page 323 This command allows users to specify gateway address for DHCP server. srv dhcp gateway [?] srv dhcp gateway [Gateway IP] Parameter Description It means to display current gateway that you can use. Gateway IP It means to specify a gateway address used for DHCP server. >...
  • Page 324 Parameter Description server ip It means the IP address that you want to used as DHCP server. Index It means subnet 1 or 2. Please type 1 or 2. The router will invoke this function according to the subnet 1 or 2 specified here. >...
  • Page 325 This command can set the lease time for the DHCP server. srv dhcp leasetime [?] srv dhcp leasetime [Lease Time (sec)] Parameter Description It means to display current leasetime used for the DHCP server. Lease Time (sec) It means the lease time that DHCP server can use. The unit is second.
  • Page 326 This command can set the primary IP address for the DHCP server. srv dhcp primWINS [WINS IP address] srv dhcp primWINS clear Parameter Description WINS IP address It means the IP address of primary WINS server. clear It means to remove the IP address settings of primary WINS server. >...
  • Page 327 This command can set the time to check if the IP address can be assigned again by DHCP server or not. srv dhcp expRecycleIP <sec time> Parameter Description sec time It means to set the time (5~300 seconds) for checking if the IP can be assigned again or not.
  • Page 328 This command can set the custom option for the DHCP server. srv dhcp option -e [1 or 0] -i [lan number] -s [Next Server IP Address] srv dhcp option -e [1 or 0] -i [lan number] -c [option number] -v [option value] srv dhcp option -e [1 or 0] -i [lan number] -c [option number] -x [option value] srv dhcp option -e [1 or 0] -i [lan number] -c [option number] -a [option value] srv dhcp option -u [idx number]...
  • Page 329 This command allows users to set DMZ host. Before using this command, please set WAN IP Alias first. srv nat dmz n m [-<command> <parameter> | … ] Parameter Description It means to map selected WAN IP to certain host. 1: wan1 m [index] It means the index number (1 ~ 32) of the DMZ host.
  • Page 330 port (500) preservation. status It means to display current status for checking. > srv nat ipsecpass status %% Status: IPsec ESP pass-thru and IKE src_port:500 preservation is OFF. This command allows users to set open port settings for NAT server. srv nat openport n m [-<command>...
  • Page 331 > srv nat openport 1 1 -v %% Status: Enable %% Comment: games %% WAN Interface: WAN1 %% Private IP address: 192.168.1.56 Index Protocal Start Port End Port ***************************************************************** TCP/UDP TCP/UDP TCP/UDP TCP/UDP TCP/UDP TCP/UDP TCP/UDP TCP/UDP TCP/UDP > This command allows users to set port redirection table for NAT server. srv nat portmap add [idx][serv name][proto][pub port][src ip idx][pri ip][pri port][wan1~wan3][alias IP] srv nat portmap del [idx]...
  • Page 332 table It means to display Port Redirection Configuration Table. > srv nat portmap add 1 name tcp 100 0 192.168.1.10 200 wan1 1 > srv nat portmap table NAT Port Redirection Configuration Table: Index Service Name Protocol Public Port Private IP Private Port ifno game 192.168.1.10...
  • Page 333 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- This command allows users to set port setting for triggering or return to factory default settings of port. srv nat trigger setdefault srv nat trigger view srv nat trigger n [-<command>...
  • Page 334 Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable This command allows users to view a summary of NAT port redirection setting, open port and DMZ settings. > srv nat showall Index Proto WAN IP:Port Private IP:Port ************************************************************************* ****...
  • Page 335 option The available commands with parameters are listed below. traffic [on/off/status/tx/rx] It means to send command to the client. It means to set the client authentication account and password. traffic It means to turn on/off or display the data transmission from the [on/off/status/tx/rx] client.
  • Page 336 This command is used to turn off the auto discovery for external devices. > switch off Disable External Device auto discovery! This command is used to display the connection status of the switch. > switch list status Dur Time Model_Name ------------------------------------------------------------------------- [1] 00-50-7f-cd-07-48 192.168.1.3 On-Line...
  • Page 337 This command is used to create user account and specify LDAP server. The server will authenticate the local user who wants to access into the web user interface of Vigor router. sys adminuser [option] sys adminuser edit [index] username password Parameter Description option...
  • Page 338 > sys board button def on > default button is on now. This command reset the router with factory default settings. When a user types this command, all the configuration will be reset to default setting. sys cfg default sys cfg status Parameter Description default...
  • Page 339 It means to turn on the FTP server of the system. It means to turn off the FTP server of the system. > sys ftpd on % sys ftpd turn on !!! This command can set and remove the domain name of the system when DHCP mode is selected for WAN.
  • Page 340 MAC: 00-50-7F-00-00-03 Interface 6 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-04 Interface 7 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-05 Interface 8 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-06 --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- >...
  • Page 341 This command allows users to set password for the administrator. sys passwd [old password] [new passoword: ASCII string] Parameter Description old password It means the old password for administrator. new passoword: ASCII string It means the password for administrator. The maximum character that you can set is 83.
  • Page 342 Status: 1 (0x4845af2c) Router IP: 192.168.1.1 Netmask: 255.255.255.0 Firmware Build Date/Time: Mar 30 2017 17:42:06 Router Name: DrayTek Revision: 63880 V385 This command can display the system memory status and leakage list. > sys qrybuf System Memory Status and Leakage List...
  • Page 343 sys pollbuf [on] sys pollbuf [off] Parameter Description It means to turn on pulling buffer. It means to turn off pulling buffer. > sys pollbuf on % Buffer polling is on! > sys pollbuf off % Buffer polling is off! This command can improve triple play quality.
  • Page 344 This command can set CPE settings for applying in VigorACS. sys tr069 get [parm] [option] sys tr069 set [parm] [value] sys tr069 getnoti [parm] sys tr069 setnoti [parm] [value] sys tr069 log sys tr069 debug [on/off] sys tr069 save sys tr069 inform [event code] sys tr069 port [port num] sys tr069 cert_auth [on/off] Parameter...
  • Page 345 Total content length of parameter is 915 InternetGatewayDevice.LANDeviceNumberOfEntries InternetGatewayDevice.WANDeviceNumberOfEntries InternetGatewayDevice.DeviceInfo. InternetGatewayDevice.ManagementServer. InternetGatewayDevice.Time. InternetGatewayDevice.Layer3Forwarding. InternetGatewayDevice.LANDevice. InternetGatewayDevice.WANDevice. InternetGatewayDevice.Services. InternetGatewayDevice.X_00507F_InternetAcc. InternetGatewayDevice.X_00507F_LAN. InternetGatewayDevice.X_00507F_NAT. InternetGatewayDevice.X_00507F_Firewall. InternetGatewayDevice.X_00507F_Bandwidth. InternetGatewayDevice.X_00507F_Applications. InternetGatewayDevice.X_00507F_VPN. InternetGatewayDevice.X_00507F_VoIP. InternetGatewayDevice.X_00507F_WirelessLAN. InternetGatewayDevice.X_00507F_System. InternetGatewayDevice.X_00507F_Status. InternetGatewayDevice.X_00507F_Diagnostics. --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- This command can turn on/off ALG (Application Layer Gateway) for traversal.
  • Page 346 Parameter Description [<command><parameter>|… The available commands with parameters are listed below. […] means that you can type in several commands in one line. -p 0/1 Set the listening port (1~65535) for SIP ALG. -u 0/1 Enable (1) or disable (0) the listening along UDP path. -t 0/1 Enable (1) or disable (0) the listening along TCP path.
  • Page 347 -Max RTSP session num: 256 -Remain RTSP session num: 256 This command can process the system license. sys license licmsg sys license licauth sys license regser sys license licera sys license licifno sys license lic_wiz [set/reg/qry] sys license trigger [-e/-d/-s] sys license dev_chg sys license dev_key Parameter...
  • Page 348 > sys license lic_trigger -e Trigger the license to update, value=1 > sys license lic_trigger -d Don't trigger the license to update, value=0 > sys license lic_trigger -s License update state=0 (0:disable, 1:enable) This command is used to configure daylight save setting. sys daylightsave [-<command>...
  • Page 349 > sys daylightsave -y 9 1 0 14 % Start: Yearly on Sep 1th Sun 14:00 This command is used to configure TTL settings which will be displayed in DNS Cache table. sys dnsCacheTbl [<command><parameter>|…] Parameter Description [<command><parameter>|… The available commands with parameters are listed below. […] means that you can type in several commands in one line.
  • Page 350 -m <1/0> Enable (1) or disable (0) Mail Syslog. -f <1/0> Enable (1) or disable (0) Filewall Log. -v <1/0> Enable (1) or disable (0) VPN Log. -e <1/0> Enable (1) or disable (0) User Access Log. -c <1/0> Enable (1) or disable (0) Call Log. -w <1/0>...
  • Page 351 > sys mailalert -v ------ Current setting for Mail Alert ------ Mail Alert: Enable SMTP Server IP Address: 172.16.3.168 SMTP Server Port: 886 Alert Mail Reciver E-maiil Address: john@draytek.com Mail Return E-mail Address: Use SSL: Disable SMTP Authentication: Disable Username for SMTP Authentication: Password for SMTP Authentication: Mail Alert for DoS Attack: Enable.
  • Page 352 11 - GMT-06:00 Mexico City, Tegucigalpa 12 - GMT-05:00 Eastern Time (US & Canada) 13 - GMT-05:00 Indiana (East) 14 - GMT-05:00 Bogota, Lima, Quito 15 - GMT-04:00 Atlantic Time (Canada) 16 - GMT-04:00 Caracas, La Paz 17 - GMT-04:00 Santiago 18 - GMT-03:30 Newfoundland 19 - GMT-03:00 Brasilia 20 - GMT-03:00 Buenos Aires, Georgetown...
  • Page 353 Set Time Zone OK > sys time show *************** System Time *************** Current System Time: [2000 Jan 01 Sat 02:09:29] Time Server: [pool.ntp.org] Time Zone Index: [8]. GMT-07:00 ********************************************* This command is used to display or hidden the information displayed on the dashboard. sys dashboard show sys dashboard -[<command>...
  • Page 354 This command can close UPnP function. >upnp off UPNP say bye-bye This command can enable UPnP function. >upnp on UPNP start. This command can display IGD NAT status. > upnp nat ? ****************** IGD NAT Status **************** ((0)) InternalClient >>192.168.1.10<<, RemoteHost >>0.0.0.0<< InternalPort >>21<<, ExternalPort >>21<<...
  • Page 355 serviceType urn:schemas-microsoft-com:service:OSInfo:1 serviceId urn:microsoft-com:serviceId:OSInfo1 SCPDURL /upnp/OSInfo.xml controlURL /OSInfo1 eventURL /OSInfoEvent1 uuid:774e9bbe-7386-4128-b627-001daa843464 >>>>> SERVICE TABLE2 <<<<< serviceType urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1 serviceId urn:upnp-org:serviceId:WANCommonIFC1 SCPDURL /upnp/WComIFCX.xml controlURL /upnp?control=WANCommonIFC1 eventURL /upnp?event=WANCommonIFC1 uuid:2608d902-03e2-46a5-9968-4a54ca499148 This command can show all UPnP services subscribed. > upnp on UPNP start. > upnp subscribe >>>>...
  • Page 356 The protocol >>0<< time >>0<< --- MORE --- ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- This command is used to specify WAN interface to apply UPnP. upnp wan [n] Parameter Description It means to specify WAN interface to apply UPnP. n=0, it means to auto-select WAN interface.
  • Page 357 index It means the index number of the user profile. There are 16 profiles allowed to be configured. So the range of such option is 1 ~ 16. Username Type a text (maximum 11 characters) as the username for the user profile.
  • Page 358 > vigbrg status Show gConfig setting of bridge mode [WAN1] IPv4 bridge is enable [LAN1]. This command allows users to transfer a bridge modem into ADSL router by accessing into and adjusting specified IP address. Users can access into Web UI of the router to manage the router through the IP address configured here.
  • Page 359 wan ppp_mru <WAN interface number> <MRU size > Parameter Description <WAN interface number> Type a number to represent the physical interface. For Vigor130, the number is 1 (which means WAN1). <MRU size > It means the number of PPP LCP MRU. The available range is from 1400 to 1600.
  • Page 360 Parameter Description wan_no It means to indicate the WAN interface. 1: WAN1 dns_select It means to set primary or secondary DNS server. ipv4_addr It means to type the IPv4 address for the DNS server. > wan dns 1 pri 192.168.1.126 % Set WAN1 primary DNS done.
  • Page 361 wan forward [on] wan forward [off] Parameter Description on/off It means to enable or disable WAN forward. > wan forward ? %WAN forwarding is Disable! > wan forward on %WAN forwarding is enable! This command allows you to display the status of WAN connection, including connection mode, TX/RX packets, DNS settings and IP address.
  • Page 362 1 and 255. The unit is times. retry : Type a number. status It means to show the current status. > DrayTek> wan detect status WAN1: off, send time=30, Interval = 5 WAN2: off, send time=30, Interval = 5 WAN3: off, send time=30, Interval = 5...
  • Page 363 wan mvlan keeptag[pvc_no][on/off] Parameter Description pvc_no It means index number of PVC. There are 10 PVC, 0(Channel-1) to 9(Channel-9) allowed to be configured. However, bridge mode can be set on PVC number 2 to 9. status It means to display the whole Bridge status. save It means to save the configuration into flash of Vigor router.
  • Page 364 > wan multifno 5 1 % Configured channel 5 uplink to WAN1 > wan multifno status % Channel 4 uplink ifno: 3 % Channel 5 uplink ifno: 3 % Channel 6 uplink ifno: 3 % Channel 7 uplink ifno: 3 % Channel 8 uplink ifno: 3 % Channel 9 uplink ifno: 3 >...
  • Page 365 Host/IP address: Type the IP address/domain name of the target. -s [mtu_size] Set the MTU size base for Discovery. base_size: Available setting is 1000 ~ 1500. -d [decrease size] Set the MTU size to decrease between detections. decrease size: Available setting is 1 ~ 100. Specify the WAN interface to be detected.
  • Page 366 DNS Server IPv6 Address, 56 Channel, 41 DoS Defense, 101, 115 Choose IP, 67 DoS Flood Table, 192 Codepage, 104 DrayTek Banner, 113 Comment, 60, 69 Dynamic DNS, 72, 73 Config Backup, 11 Dynamic DNS Account, 74 Configuration Backup, 141...
  • Page 367 E K End IPv6 Address, 56 Keyword Group, 172 End Port, 70 Keyword Object, 170 Event Code, 137 L F LAN, 48 File Extension Object, 173 LAN- General Setup, 50 Filter Setup, 106 LAN Routed Prefix, 37 Firewall, 100 Local IP Address, 70 Firmware Upgrade, 155 Log, 126 Force Update, 73...
  • Page 368 Ping Diagnosis, 186 Secondary IP Address, 53 Ping Gateway IP, 26, 28, 43 Security, 99 Ping Interval, 43 Self-Signed Certificate, 150 Ping IP/Hostname, 35, 36, 37, 39 Server Response, 75 Ping Retry, 43 Service API, 75 Port Redirection, 62 Service Name, 64 Port Triggering, 71 Service Provider, 74 PPPoE, 15...
  • Page 369 U W Unique Local Address (ULA), 55 WAN, 22 UPnP, 72, 79 WAN Application-IPTV, 43 URL Access Control, 126 WAN Application-Management, 43 URL Content Filter, 104, 123 WAN Connection Detection, 26, 28, 35, 36, 37, 39, 43 URL Content Filter Profile, 124 WAN Interface, 64, 69 Username, 26, 33, 34 WAN Type, 41...

Table of Contents