Page 2 Vigor2830 Series User’s Guide...
Page 3 Vigor2830 Series ADSL2+ Security Firewall User’s Guide Version: 2.1 Firmware Version: V3.6.3 Date: 20/11/2012 Vigor2830 Series User’s Guide...
Page 4 Web registration is preferred. You can register your Vigor router via Be a Registered http://www.DrayTek.com. Owner Due to the continuous evolution of DrayTek technology, all routers will be regularly Firmware & Tools upgraded. Please consult the DrayTek web site for more information on newest Updates firmware, tools and documents.
Page 5 Product: Vigor2830 Series Router DrayTek Corp. declares that Vigor2830 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 6 Vigor2830 Series User’s Guide...
Page 7: Table Of Contents
3.1.4 Multi-PVCs........................71 3.1.5 Load-Balance Policy ....................... 76 3.2 LAN ............................78 3.2.1 Basics of LAN ......................... 78 3.2.2 General Setup......................... 80 3.2.3 Static Route ........................88 3.2.4 VLAN (Multi-Subnet)....................... 92 3.2.5 Bind IP to MAC ....................... 94 Vigor2830 Series User’s Guide...
Page 8 3.10 VPN and Remote Access....................200 3.10.1 VPN Client Wizard ...................... 201 3.10.2 VPN Server Wizard..................... 207 3.10.3 Remote Access Control ....................211 3.10.4 PPP General Setup ....................212 3.10.5 IPSec General Setup ....................213 viii Vigor2830 Series User’s Guide...
Page 9 3.16.1 Dial-out Triggering ...................... 311 3.16.2 Routing Table ......................312 3.16.3 ARP Cache Table ....................... 313 3.16.4 IPv6 Neighbour Table ....................313 3.16.5 DHCP Table........................ 314 3.16.6 NAT Sessions Table ....................315 3.16.7 Ping Diagnosis......................316 Vigor2830 Series User’s Guide...
Page 10 5.4 Checking If the ISP Settings are OK or Not ................ 387 5.5 Problems for 3G Network Connection ................387 5.6 Backing to Factory Default Setting If Necessary ..............388 5.7 Contacting Your Dealer ....................... 389 Vigor2830 Series User’s Guide...
Page 11: Preface
Vigor2830 series is an ADSL2+ router. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP) with up to 32 VPN tunnels.
Page 12: Led Indicators And Connectors
The port is connected. WAN 2 (Giga) (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps when left LED is on. Vigor2830 Series User’s Guide...
Page 13 Connecters for local networked devices. Connecter for accessing the Internet through ADSL2/2+. WAN2(Giga) Connecters for remote networked devices. Connecter for a USB device (for 3G USB Modem or printer). Connecter for a power adapter. Power Switch. ON/OFF Vigor2830 Series User’s Guide...
Page 14: For Vigor2830N/ Vigor2830N-Plus
The port is connected. WAN 2 (Giga) (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps when left LED is on. Vigor2830 Series User’s Guide...
Page 15 Connecters for local network devices. Connecter for accessing the Internet through ADSL2/2+. WAN2(Giga) Connecters for remote networked devices. Connecter for a USB device (for 3G USB Modem or printer). Connecter for a power adapter. Power Switch. ON/OFF Vigor2830 Series User’s Guide...
Page 16: For Vigor2830Vn
The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps when left LED is on. Left LED The port is connected. WAN2 (Giga) (Green) The port is disconnected. Blinking The data is transmitting. Vigor2830 Series User’s Guide...
Page 17 Connecters for local networked devices. Connecter for accessing the Internet through ADSL2/2+. WAN2(Giga) Connecters for remote networked devices. Connecter for a USB device (for 3G USB Modem or printer). Connecter for a power adapter. Power Switch. ON/OFF Vigor2830 Series User’s Guide...
Page 18: Hardware Installation
Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. (For the hardware connection, we take “Vn” model as an example.) Vigor2830 Series User’s Guide...
Page 19: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 20 Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. Vigor2830 Series User’s Guide...
Page 21 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Vigor2830 Series User’s Guide...
Page 22 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. Vigor2830 Series User’s Guide...
Page 23 If you do not know whether your printer is supported or not, please visit www.DrayTek.com to find out the printer list. Open Support >FAQ; find out the link of Printer Server and click it; then click the What types of printers are compatible with Vigor router? link.
Page 24 This page is left blank. Vigor2830 Series User’s Guide...
Page 25: Initial Configuration
Please type “admin/admin” as the Username/Password and click Login. Notice: If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. Vigor2830 Series User’s Guide...
Page 26: Changing Password
Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type “admin/admin” as the Username/Password and click Login. Go to System Maintenance page and choose Administrator Password/User Password. Vigor2830 Series User’s Guide...
Page 27: Quick Start Wizard
If your router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next. Vigor2830 Series User’s Guide...
Page 28: For Wan1
PPP and Ethernet. It connects users through an Ethernet to the Internet with a common broadband medium, such as a single DSL line, wireless device or cable modem. All the users over the Ethernet can share a common connection. Vigor2830 Series User’s Guide...
Page 29 Fixed IP Type the IP address if Fixed IP is enabled. IP Address Type in the primary IP address for the router. Primary DNS Type in secondary IP address for necessity in the future. Secondary DNS Vigor2830 Series User’s Guide...
Page 30 ISP in this field. Type a valid password provided by the ISP. Password Retype the password. Confirm Password Please manually enter the Username/Password provided by your ISP. Then click Next for viewing summary of such connection. Vigor2830 Series User’s Guide...
Page 31 Type in the primary IP address for the router. Primary DNS Type in secondary IP address for necessity in the future. Secondary DNS Click it to return to previous setting page. Back Click it to get into the next setting page. Next Vigor2830 Series User’s Guide...
Page 32 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2830 Series User’s Guide...
Page 33: For Wan2 (Ethernet)
Ethernet can share a common connection. PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode. Vigor2830 Series User’s Guide...
Page 34 Type a valid password provided by the ISP. Password Retype the password. Confirm Password Click it to return to previous setting page. Back Click it to get into the next setting page. Next Click it to give up the quick start wizard. Cancel Vigor2830 Series User’s Guide...
Page 35 Now, you can enjoy surfing on the Internet. Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Vigor2830 Series User’s Guide...
Page 36 Click it to get into the next setting page. Next Click it to give up the quick start wizard. Cancel Please type in the IP address/mask/gateway information originally provided by your ISP. Then click Next for viewing summary of such connection. Vigor2830 Series User’s Guide...
Page 37 Choose WAN2 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. Click Static IP as the Internet Access type. Simply click Next to continue. Vigor2830 Series User’s Guide...
Page 38 Click it to get into the next setting page. Next Click it to give up the quick start wizard. Cancel Please type in the IP address information originally provided by your ISP. Then click Next for next step. Vigor2830 Series User’s Guide...
Page 39 Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2830 Series User’s Guide...
Page 40 Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to enter the MAC address. Click it to return to previous setting page. Back Click it to get into the next setting page. Next Vigor2830 Series User’s Guide...
Page 41 After finished the settings above, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2830 Series User’s Guide...
Page 42: For Wan3 (Usb)
Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2830 Series User’s Guide...
Page 43: Service Activation Wizard
Service Activation Wizard is a tool which allows you to use trial version or update the license of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Page 44 When you finish the selection, please click Next. Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from retailing outlets.
Page 45 Later, if you need to extend the license valid time for the same service, you can also use the Service Activation Wizard again to reach your goal by clicking the radio button of Formal edition with license key and clicking Next. Vigor2830 Series User’s Guide...
Page 46: Voip Wizard
Use the same Account as phone 1 – If you don’t need to configure Phone 2 settings, simply check this box. Click it to get into the next setting page. Next Click it to give up the quick start wizard. Cancel Vigor2830 Series User’s Guide...
Page 47: Online Status
3. After finished the settings above, click Next for viewing summary of such connection. 4. Click Finish. A page of VoIP Wizard Setup OK!!! will appear. Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. Vigor2830 Series User’s Guide...
Page 48 WAN interface. RX Packets - Displays the total number of received packets at the WAN interface. RX Rate - Displays the speed of received octets at the WAN interface. Detailed explanation (for IPv6) is shown below: Vigor2830 Series User’s Guide...
Page 49: Virtual Wan
Internet. Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list the purpose of such WAN connection. Vigor2830 Series User’s Guide...
Page 50: Saving Configuration
Please follow the steps below to finish the router registration. Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. Vigor2830 Series User’s Guide...
Page 51 And click Login. If not, please refer to section 4.13 Creating an Account for MyVigor. The following page will be displayed after you logging in MyVigor. From this page, please click Add or Product Registration. Vigor2830 Series User’s Guide...
Page 52 When the following page appears, your router information has been added to the database. Now, you have finished the product registration. After clicking OK, you will see the following page. Your router has been registered to myvigor website successfully. Vigor2830 Series User’s Guide...
Page 53: Advanced Configuration
These are known as private IP addresses, and are listed in the following ranges: From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 Vigor2830 Series User’s Guide...
Page 54 Besides, 3G USB Modem in WAN3 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information.
Page 55: General Setup
Auto Weigh to let the router reach the best load balance. Click the WAN interface link under Index to access into the Index WAN configuration page. V means such WAN interface is enabled and ready to be Enable used. Vigor2830 Series User’s Guide...
Page 56 In such WAN interface, no type can be selected. Physical Type If your choose According to Line Speed as the Load Line Speed Balance Mode, please type the line speed for downloading and uploading for such WAN interface. The unit is kbps. Vigor2830 Series User’s Guide...
Page 57 WAN will be activated when any master WAN interface disconnects. When all of selected WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 58 Auto negotiation for determined by the system. If your choose According to Line Speed as the Load Line Speed Balance Mode, please type the line speed for downloading and uploading for such WAN interface. The unit is kbps. Vigor2830 Series User’s Guide...
Page 59 WAN will be activated when any master WAN interface disconnects. When all of selected WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 60 If your choose According to Line Speed as the Load Line Speed Balance Mode, please type the line speed for downloading and uploading for such WAN interface. The unit is kbps. Choose Always On to make such WAN connection being Active Mode activated always. Vigor2830 Series User’s Guide...
Page 61: Internet Access
For the router supports multi-WAN function, the users can set different WAN settings (for WAN1/WAN2/WAN3) for Internet Access. Due to different Physical Mode for WAN interface, the Access Mode for these connections also varies. Refer to the following figures. Vigor2830 Series User’s Guide...
Page 62 This button will open different web page (based on Physical IPv6 Mode) to setup IPv6 Internet Access Mode for WAN interface. If IPv6 service is active on this WAN interface, the color of “IPv6” will become green. Vigor2830 Series User’s Guide...
Page 63 Protocol - Drop down the list to choose the one (PPPoE or PPPoA) provided by ISP. If you have already used Quick Start Wizard to set the protocol, then it is not necessary for you to change any Vigor2830 Series User’s Guide...
Page 64 Username – Type in the valid user name (maximum 63 characters) provided by the ISP in this field. Password – Type in the password provided by ISP in this field. PPP Authentication – Select PAP only or PAP or CHAP Vigor2830 Series User’s Guide...
Page 65 All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings here, please click OK to activate them. Vigor2830 Series User’s Guide...
Page 66 VPI - Type in the value provided by ISP. VCI - Type in the value provided by ISP. Encapsulating - Drop down the list to choose the type provided by ISP. Modulation –Default setting is Multimode. Choose the one Vigor2830 Series User’s Guide...
Page 67 WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. Vigor2830 Series User’s Guide...
Page 68 Specify a MAC Address – Type in the MAC address for the router manually. Type in the primary IP address for the router. If necessary, DNS Server IP Address type in secondary IP address for necessity in the future. Vigor2830 Series User’s Guide...
Page 69 Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. Vigor2830 Series User’s Guide...
Page 70 Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor2830 Series User’s Guide...
Page 71 IP address for the system to PING it for keeping alive. PING Interval - Enter the interval for the system to execute the PING operation. Such function allows you to verify whether network WAN Connection Vigor2830 Series User’s Guide...
Page 72 Static IP mode. IP Address: Type the IP address. Subnet Mask: Type the subnet mask. Gateway IP Address: Type the gateway IP address. Default MAC Address: Click this radio button to use default MAC address for the router. Vigor2830 Series User’s Guide...
Page 73 Server Address - Specify the IP address of the PPTP/L2TP server if you enable PPTP/L2TP client mode. Specify Gateway IP Address – Specify the gateway IP address for DHCP server. Username -Type in the username provided by ISP in this ISP Access Setup Vigor2830 Series User’s Guide...
Page 74 Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2830 Series User’s Guide...
Page 75 ISPs. Type the name and click Apply. Modem Initial String2 - The initial string 1 is shared with APN. In some cases, user may need another initial AT command to restrict 3G band or do any special settings. Vigor2830 Series User’s Guide...
Page 76 IPv6 prefix address (such as: 2001:B010:7300:200::/64) offered by the ISP. In addition, PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix. No need to type any other information for PPP mode. Vigor2830 Series User’s Guide...
Page 77 After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet. Vigor2830 Series User’s Guide...
Page 78 Type the password again to make the confirmation. Confirm Password Type the address for the tunnel broker IP, FQDN or an Tunnel Broker optional port number. After finishing all the settings here, please click OK to save the configuration. – – Vigor2830 Series User’s Guide...
Page 79 Available settings are explained as follows: Item Description Choose Prefix Delegation or Non-temporary Address as Identify Association the identify association. Type a number as IAID. IAID After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 80 Display current interface IPv6 address. Current IPv6 Address Table IPv6 Gateway Address - Type your IPv6 gateway address Static IPv6 Gateway here. Configuration After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 81: Multi-Pvcs
Internet Access. Type in the value provided by your ISP. Type in the value provided by your ISP. Select a proper QoS type for the channel. QoS Type Select a proper protocol for this channel. Protocol Vigor2830 Series User’s Guide...
Page 82 WAN link for Channel 5, 6 and 7 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 5, 6 or 7 to configure your router. Vigor2830 Series User’s Guide...
Page 83 Available settings are explained as follows: Item Description Select a proper QoS type for the channel according to the QoS Type information that your ISP provides. It represents Peak Cell Rate. The default setting is “0”. Vigor2830 Series User’s Guide...
Page 84 Normal – It means that the PVC can accept all packets. IGMP –It means that such PVC can accept IGMP packets only. Such type just meets a specific environment on some ISPs. Data and IGMP packets will be transmitted and received with different PVC. Vigor2830 Series User’s Guide...
Page 85 And type the number for VLAN ID (number). To add the packet priority number for such VLAN. The Priority range is from 0 to 7. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 86: Load-Balance Policy
Displays the IP address for the start of the destination port. Dest Port Start Displays the IP address for the end of the destination port. Dest Port End Use Up or Down link to move the order of the policy. Move Up/Move Down Vigor2830 Series User’s Guide...
Page 87 Type the destination port start for the destination IP. Dest Port Start Type the destination port end for the destination IP. If this Dest Port End field is blank, it means that all the destination ports will be passed through the WAN interface. Vigor2830 Series User’s Guide...
Page 88: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2830 Series User’s Guide...
Page 89 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2830 Series User’s Guide...
Page 90: General Setup
Details Page - Click it to access into the setting page. Each LAN will have different LAN configuration page. Each LAN must be configured in different subnet. IPv6 – Click it to access into the settings page of IPv6. Vigor2830 Series User’s Guide...
Page 91 DHCP client. It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network. If you want to use another DHCP server in the network Vigor2830 Series User’s Guide...
Page 92 DNS server assigned by ISP. If not, the router will assign its own IP address to local users as a DNS proxy server. Force router to use address for DNS- Force Vigor router Vigor2830 Series User’s Guide...
Page 93 (radvd) sends Router Advertisement messages, specified by RFC 2461, to a local Ethernet LAN periodically and when requested by a node sending a Router Solicitation message. These messages are required for IPv6 stateless auto-configuration. Vigor2830 Series User’s Guide...
Page 94 Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry. Delete – Click it to remove an existed entry. Display current used IPv6 addresses. Current IPv6 Address Table Vigor2830 Series User’s Guide...
Page 95 IP address must be 192.168.1.2 or greater, but smaller than 192.168.1.254. IP Pool Counts - Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. The default is 50 and the maximum is 253. Vigor2830 Series User’s Guide...
Page 96 The router by factory default acts a DHCP server for your Configuration network so it automatically dispatch related IP settings to any local user configured as a DHCP client. It is highly recommended that you leave the router enabled as a DHCP Vigor2830 Series User’s Guide...
Page 97 Edit – Click it to edit the selected MAC address. Cancel – Click it to cancel the job of adding, deleting and editing. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 98: Static Route
The number (1 to 10) under Index allows you to open next Index page to set up static route. Displays the destination address of the static route. Destination Address Displays the status of the static route. Status Vigor2830 Series User’s Guide...
Page 99 Displays the destination address of the static route. Destination Address Displays the status of the static route. Status Click any underline of index number to get the following page. Available settings are explained as follows: Item Description Vigor2830 Series User’s Guide...
Page 100 Main Router 192.168.1.1 as the default gateway for the Router A 192.168.1.2. Before setting Static Route, user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router. Vigor2830 Series User’s Guide...
Page 101 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2830 Series User’s Guide...
Page 102: Vlan (Multi-Subnet)
P1 – P4 – Check the LAN port(s) to be grouped under the selected VLAN. SSID1 – SSID4 – Check the SSID box(es) for the wireless Wireless LAN clients to be grouped under the selected VLAN. Vigor2830 Series User’s Guide...
Page 103 P3 and P4. After checking the box to enable VLAN function, you will check the table according to the needs as shown below. To remove VLAN, uncheck the needed box and click OK to save the results. Vigor2830 Series User’s Guide...
Page 104: Bind Ip To Mac
Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below Click this link to select all the items in the ARP table. Select All Reorder the table based on the IP address. Sort Vigor2830 Series User’s Guide...
Page 105: Lan Port Mirror
Next, it is more convenient and easy to configure in user’s interface. Last, connect a PC with Smart Monitor installed to the mirror port of this router to capture monitored information. Vigor2830 Series User’s Guide...
Page 106: Wired 802.1X
IP address of the router, select the available public port, and then forward it. At the same time, the router shall list an entry in Vigor2830 Series User’s Guide...
Page 107 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor2830 Series User’s Guide...
Page 108: Port Redirection
The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Each item is explained as follows: Vigor2830 Series User’s Guide...
Page 109 WAN IP alias that can be selected and used for port redirection. The default setting is All which means all the incoming data from any port will be redirected to specified range of IP address and port. Vigor2830 Series User’s Guide...
Page 110: Dmz Host
As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (AH), do not travel on a fixed port. Vigor Vigor2830 Series User’s Guide...
Page 111 Click DMZ Host to open the following page: Available settings are explained as follows: Item Description Choose Private IP or Active True IP first. Active True IP selection is available for WAN1 only. Vigor2830 Series User’s Guide...
Page 112 IP address will be shown on the following screen. Click OK to save the setting. DMZ Host for WAN2 and WAN3 is slightly different with WAN1. Active True IP selection is available for WAN1 only. See the following figure. Vigor2830 Series User’s Guide...
Page 113 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 114: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2830 Series User’s Guide...
Page 115: Address Mapping
IP 192.168.1.10 can use 86.123.123.2 as source IP when it sends packet out to Internet. You can use address mapping function to achieve this demand. Simply type 192.168.1.10 as the Private IP; and type 86.123.123.2 as the WAN IP. Vigor2830 Series User’s Guide...
Page 116 Click the index number link to open the configuration page. Available settings are explained as follows: Item Description Check to enable this entry. Enable Specify the transport layer protocol. It could be TCP, UDP, Protocol or ALL for selection. Vigor2830 Series User’s Guide...
Page 117: Port Triggering
LAN device; with Port Triggering function, the ports will be opened only when specific application triggers the specific ports, and then the needed ports will be opened automatically. Available settings are explained as follows: Item Description Display the text which memorizes the application of this Comment rule. Vigor2830 Series User’s Guide...
Page 118 Enable Choose the predefined service to apply for such trigger Service profile. Type the text to memorize the application of this rule. Comment Select the protocol (TCP, UDP or TCP/UDP) for such Triggering Protocol triggering profile. Vigor2830 Series User’s Guide...
Page 119 (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. Type the port or port range for the incoming packets. Incoming Port After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 120: Firewall
It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2830 Series User’s Guide...
Page 121 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor2830 Series User’s Guide...
Page 122: General Setup
If security concern is in higher priority, you cannot enable “Accept large incoming fragmented UDP or ICMP Packets”. Check the box to enable such function. Enable Strict Security Firewall All the packets, while transmitting through Vigor router, Vigor2830 Series User’s Guide...
Page 123 The default setting is 60000. Choose one of the QoS rules to be applied as firewall rule. Quality of Service For detailed information of setting QoS, please refer to the related section later. Vigor2830 Series User’s Guide...
Page 124 Syslog/Mail Alert for more detailed information. Select one of the Web Content Filter profile settings Web Content Filter (created in CSM>> Web Content Filter) for applying with this router. Please set at least one profile for anti-virus in Vigor2830 Series User’s Guide...
Page 125 However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 126: Filter Setup
Use Up or Down link to move the order of the filter rules. Move Up/Down Set the link to the next filter set to be executed after the Next Filter Set current filter run. Do not make a loop with many filter sets. Vigor2830 Series User’s Guide...
Page 127 ON Set the direction of packet flow. It is for Data Filter only. Direction For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Vigor2830 Series User’s Guide...
Page 128 From the IP Group drop down list, choose the one that you want to apply. Or use the IP Object drop down list to choose the object that you want. Click Edit to access into the following dialog to choose a Service Type suitable service type. Vigor2830 Series User’s Guide...
Page 129 Too Short - Apply the rule only to packets that are too short to contain a complete header. Specifies the action to be taken when packets match the rule. Filter Block Immediately - Packets matching the rule will be dropped immediately. Vigor2830 Series User’s Guide...
Page 130 If there is no profile for you to selelct, please choose [Create New] from the drop down list in this page to create a new profile. All the hosts in LAN must follow the standard configured in the APP Enforcement Vigor2830 Series User’s Guide...
Page 131 URL will be processed. Please use the drop-down list to choose a codepage. If you do not have any idea of choosing suitable codepage, please open Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on Vigor2830 Series User’s Guide...
Page 132 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
Page 133 After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2830 Series User’s Guide...
Page 134: Dos Defense
Internet has exceeded the defined value, the Vigor router will start to randomly discard the subsequent UDP packets for a period defined in Timeout. The default setting for threshold and timeout are 150 packets per second and 10 seconds, respectively. Vigor2830 Series User’s Guide...
Page 135 Any TCP packet with anomaly flag setting is dropped. Those scanning activities include no flag scan, FIN without ACK scan, SYN FINscan, Xmas scan and full Xmas scan. Check the box to activate the Block Tear Drop function. Block Tear Drop Vigor2830 Series User’s Guide...
Page 136 Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 137: User Management
Note: If Transparency Mode is selected in Firewall>>General Setup, User Management cannot be used any more. Please uncheck Transparency Mode first if you want to utilize user management to handle users in LAN, WAN or WLAN. Vigor2830 Series User’s Guide...
Page 138: General Setup
User-Based - If you choose such mode, the router will apply the filter rules configured in User Management>>User Profile to the users. Rule-Based –If you choose such mode, the router will apply the filter rules configured in Firewall>>General Setup and Filter Rule to the users. Vigor2830 Series User’s Guide...
Page 139: User Profile
To set the user profile, please click any index number link to open the following page. Notice that profile 1 (admin) and profile 2 (System Reservation) are factory default settings. Profile 2 is reserved for future use. Vigor2830 Series User’s Guide...
Page 140 If the user is idle over the limitation of the timer, the Idle Timeout network connection will be stopped for such user. By default, the Idle Timeout is set to 10 minutes. Such profile can be used by many users. You can set the Max User Login Vigor2830 Series User’s Guide...
Page 141 If such function is enabled, a pop up window will be Pop Browser Tracking displayed on the screen with time remaining for connection Window if Idle Timeout is set. However, the system will update the Vigor2830 Series User’s Guide...
Page 142 Next, the user can access Internet through any browser on Windows. Note that Alert Tool can be downloaded from DrayTek web site. Telnet – If it is selected, the user can use Telnet command to perform the authentication job.
Page 143: User Group
This page allows you to bind several user profiles into one group. These groups will be used in Firewall>>General Setup as part of filter rules. Please click any index number link to open the following page. Vigor2830 Series User’s Guide...
Page 144 User defined profiles will be numbered with 3, 4, 5 and so Selected Keyword Objects Click button to add the selected user objects in this box. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 145: User Online Status
Display the idle timeout setting for such profile. Idle Time Block - can prevent specified user accessing into Internet. Action Unblock – the user will be blocked. Logout – the user will be logged out forcefully. Vigor2830 Series User’s Guide...
Page 146: Objects Settings
You can set up to 192 sets of IP Objects with different conditions. Available settings are explained as follows: Item Description Clear all profiles. Set to Factory Default Display the profile number that you can configure. Index Display the name of the object profile. Name Vigor2830 Series User’s Guide...
Page 147 If you choose LAN as the Interface here, and choose LAN as the direction setting in Edit Filter Rule, then all the IP addresses specified with LAN interface will be opened for you to choose in Edit Filter Rule page. Vigor2830 Series User’s Guide...
Page 148 If it is checked, all the IP addresses except the ones listed Invert Selection above will be applied later while it is chosen. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 149: Ip Group
Display the profile number that you can configure. Index Display the name of the group profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. Vigor2830 Series User’s Guide...
Page 150 Click >> button to add the selected IP objects in this box. Selected IP Objects 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 151: Ipv6 Object
Display the name of the object profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2830 Series User’s Guide...
Page 152 If it is checked, all the IPv6 addresses except the ones listed Invert Selection above will be applied later while it is chosen. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 153: Ipv6 Group
Display the name of the group profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2830 Series User’s Guide...
Page 154 Objects Selected IPv6 Objects Click >> button to add the selected IPv6 objects in this box. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 155: Service Type Object
Display the name of the object profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: Vigor2830 Series User’s Guide...
Page 156 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 157: Service Type Group
Display the name of the group profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Group column for configuration in details. 2. The configuration page will be shown as follows: Vigor2830 Series User’s Guide...
Page 158 Objects Setting>>Service Type Object will be shown in Type Objects this box. Click >> button to add the selected IP objects in this box. Selected Service Type Objects 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 159: Keyword Object
Display the profile number that you can configure. Index Display the name of the object profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. Vigor2830 Series User’s Guide...
Page 160 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 161: Keyword Group
Display the profile number that you can configure. Index Display the name of the group profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. Vigor2830 Series User’s Guide...
Page 162 Selected Keyword Click button to add the selected Keyword objects in Objects this box. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 163: File Extension Object
Display the profile number that you can configure. Index Display the name of the object profile. Name To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Profile column for configuration in details. Vigor2830 Series User’s Guide...
Page 164 3. Type a name for such profile and check all the items of file extension that will be processed in the router. 4. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 165: Sms/Mail Service Object
Display the service provider which offers SMS service. SMS Provider To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. Vigor2830 Series User’s Guide...
Page 166 Note that one credit equals to one SMS text message on the standard route. To avoid quota being exhausted soon, type time interval for Sending Interval sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 167 Profile Name Type the website of the service provider. Service Provider Type the URL string in the box under the filed of Service Provider. You have to contact your SMS provider to obtain the exact URL string. Vigor2830 Series User’s Guide...
Page 168 Each item is explained as follows: Item Description Clear all of the settings and return to factory default Set to Factory Default settings. Display the profile number that you can configure. Index Display the name for such mail server profile. Profile Vigor2830 Series User’s Guide...
Page 169 Check the box to enable the function. Username – Type a name for authentication. Password – Type a password for authentication. Define the interval for the system to send the SMS out. Sending Interval Vigor2830 Series User’s Guide...
Page 170: Notification Object
You can set an object with different monitoring situation. To set a new profile, please do the steps listed below: 1. Open Object Setting>>Notification Object, and click the number (e.g., #1) under Index column for configuration in details. Vigor2830 Series User’s Guide...
Page 171 Display the types that will be monitored. Category Display the status for the category. You can check the box Status you want to be monitored. 3. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 172: Csm Profile
Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor2830 Series User’s Guide...
Page 173: App Enforcement Profile
Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Misc displayed on this page. Each tab will bring out different items that you can choose to disallow people using. Vigor2830 Series User’s Guide...
Page 174 Uncheck all the selected boxes. Clear All The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Below shows the items which are categorized under IM. Vigor2830 Series User’s Guide...
Page 175 The items categorized under P2P ----- The items categorized under Misc ----- Vigor2830 Series User’s Guide...
Page 176: Url Content Filter Profile
Each item is explained as follows: Item Description Clear all profiles. Set to Factory Default Display the number of the profile which allows you to click Profile to set different policy. Display the name of the URL Content Filter Profile. Name Vigor2830 Series User’s Guide...
Page 177 URL first, then Web feature second. Either: Web Feature First –When all the packages matching with the conditions specified in URL Access Control and Web Feature below, such function can Vigor2830 Series User’s Guide...
Page 178 The keyword could be a noun, a partial noun, or a complete URL string. Multiple keywords within a frame are separated by space, comma, or Vigor2830 Series User’s Guide...
Page 179 Upload – Check the box to block the file upload by way of web page. File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Objects previously for passing or blocking the file downloading. Vigor2830 Series User’s Guide...
Page 180: Web Content Filter Profile
Note: If you have used Service Activation Wizard to activate WCF service, you can skip this section. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
Page 181 It is recommended for you to use the default setting, Setup Test Server auto-selected. Click it to open http://myvigor.draytek.com for searching Find more another qualified and suitable server. Click this link to retrieve the factory settings. Set to Factory Default...
Page 182 Block - restrict accessing into the corresponding webpage with the characters listed on Group/Object Selections. If the web pages do not match with the specified feature set here, they will be processed with the categories listed on the box below. Vigor2830 Series User’s Guide...
Page 183 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 184: Bandwidth Management
Hosts. In the Bandwidth Management menu, click Sessions Limit to open the web page. To activate the function of limit session, simply click Enable and set the default session limit. Vigor2830 Series User’s Guide...
Page 185 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 186: Bandwidth Limit
LAN>>General Setup. Disable - Click this button to close the function of limit bandwidth. Default TX limit - Define the default speed of the upstream for each computer in LAN. Vigor2830 Series User’s Guide...
Page 187 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 188: Quality Of Service
The core routers in the backbone will do the same checking before executing treatments in order to ensure service-level consistency throughout the whole QoS-enabled network. Vigor2830 Series User’s Guide...
Page 189 Index – Display the class number that you can edit. Class Rule Name – Display the name of the class. Rule – Allow to configure detailed settings for the selected Class. Service Type – Allow to configure detailed settings for the service type. Vigor2830 Series User’s Guide...
Page 190 There are four queues allowed for QoS control. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Vigor2830 Series User’s Guide...
Page 191 ISP to maximize the QoS performance. It is reserved for the group index in the form of ratio of Reserved Bandwidth reserved bandwidth to upstream speed and reserved Ratio bandwidth to downstream speed. Vigor2830 Series User’s Guide...
Page 192 Edit link of that one. 2. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2830 Series User’s Guide...
Page 193 Click the Edit button to set the local IP address (on LAN) Local Address for the rule. Click the Edit button to set the remote IP address (on Remote Address LAN/WAN) for the rule. Vigor2830 Series User’s Guide...
Page 194 Edit to open the rule edit page for modification. 1. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. Vigor2830 Series User’s Guide...
Page 195 Range, you have to type in the starting port number and the end porting number on the boxes below. Port Number – Type in the starting port number and the end porting number here if you choose Range as the type. Vigor2830 Series User’s Guide...
Page 196 For example, in the following illustration, the VoIP packets in LAN go into Vigor router without any header. However, when they go forward to the Server on ISP through Vigor router, all of the packets are tagged with AF (configured in Bandwidth >>QoS>>Class) automatically. Vigor2830 Series User’s Guide...
Page 197: Applications
In the DDNS setup menu, check Enable Dynamic DNS Setup. Available settings are explained as follows: Item Description Check this box to enable DDNS function. Enable Dynamic DNS Setup Vigor2830 Series User’s Guide...
Page 198 Check this box to enable the current account. If you did Enable Dynamic check the box, you will see a check mark appeared on the DNS Account Active column of the previous web page in step 2). Vigor2830 Series User’s Guide...
Page 199 Click OK button to activate the settings. You will see your setting has been saved. Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup, and push Clear All button to disable the function and clear all accounts from the router. Vigor2830 Series User’s Guide...
Page 200: Schedule
Display if this schedule setting is active or inactive. Status You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. Vigor2830 Series User’s Guide...
Page 201 Check to enable the schedule. Enable Schedule Setup Specify the starting date of the schedule. Start Date (yyyy-mm-dd) Specify the starting time of the schedule. Start Time (hh:mm) Specify the duration (or period) for the schedule. Duration Time (hh:mm) Vigor2830 Series User’s Guide...
Page 202 Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Vigor2830 Series User’s Guide...
Page 203: Radius
Both sides must be configured to use the same shared secret. Re-type the Shared Secret for confirmation. Confirm Shared Secret After finished the above settings, click OK button to save the settings. Vigor2830 Series User’s Guide...
Page 204: Upnp
The NAT Traversal of UPnP enables the multimedia features of your applications to operate. This has to manually set up port mappings or use other similar methods. The screenshots below show examples of this facility. Vigor2830 Series User’s Guide...
Page 205 Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2830 Series User’s Guide...
Page 206: Igmp
Group ID available range for IGMP starts from 224.0.0.0 to 239.255.255.254. It indicates the LAN port used for the multicast group. P1 to P4 After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 207: Wake On Lan
Type any one of the MAC address of the bound PCs. MAC Address Click this button to wake up the selected IP. See the Wake Up following figure. The result will be shown on the box. Vigor2830 Series User’s Guide...
Page 208: Sms/Mail Alert Service
Available settings are explained as follows: Item Description Check the box to enable such profile. Index Use the drop down list to choose SMS service provider. SMS Provider You can click SMS Provider link to define the SMS server. Vigor2830 Series User’s Guide...
Page 209 Use the drop down list to choose a message profile. The Notify recipient will get the content stated in the message profile. You can click the Notify Profile link to define the content of the mail message. Vigor2830 Series User’s Guide...
Page 210: Vpn And Remote Access
Internet. In short, by VPN technology, you can send data between two computers across a shared or public network in a manner that emulates the properties of a point-to-point private link. Below shows the menu items for VPN and Remote Access. Vigor2830 Series User’s Guide...
Page 211: Vpn Client Wizard
Route Mode/NAT Mode – If the remote network only Mode Selection allows you to dial in with single IP, please choose this mode, otherwise please choose Route Mode. There are 32 VPN profiles for users to set. Please choose a LAN-to-LAN Profile Vigor2830 Series User’s Guide...
Page 212 In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. Vigor2830 Series User’s Guide...
Page 213 When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: When you choose IPSec, you will see the following graphic: Vigor2830 Series User’s Guide...
Page 214 When you choose L2TP over IPSec (Nice to Have) or L2TP over IPSec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Type a name for such profile. The length of the file is Profile Name limited to 10 characters. Vigor2830 Series User’s Guide...
Page 215 Data Encryption Standard (DES), Triple DES (3DES), and AES. This field is used to authenticate for connection when you User Name select PPTP or L2TP with or without IPSec policy above. Vigor2830 Series User’s Guide...
Page 216 Click this radio button to set another profile of VPN Server Do another VPN through VPN Server Wizard. Server Wizard Setup Click this radio button to access VPN and Remote View more detailed Access>>LAN to LAN for viewing detailed configuration. configuration Vigor2830 Series User’s Guide...
Page 217: Vpn Server Wizard
Site to Site VPN – To set a LAN-to-LAN profile Selection automatically, please choose Site to Site VPN. Remote Dial-in User –You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via VPN connection. Vigor2830 Series User’s Guide...
Page 218 2. After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. Here we take the examples of choosing Remote-Dial-in User as the VPN Server Mode. Vigor2830 Series User’s Guide...
Page 219 When you check PPTP, you will see the following graphic: When you check PPTP/IPSec/L2TP (three types) or PPTP/IPSec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2830 Series User’s Guide...
Page 220 Please type one LAN IP address (according to the real Remote Network IP location of the remote host) for building VPN connection. Please type the network mask (according to the real location Remote Network of the remote host) for building VPN connection. Mask Vigor2830 Series User’s Guide...
Page 221: Remote Access Control
Enable the necessary VPN service as you need. If you intend to run a VPN server inside your LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. Vigor2830 Series User’s Guide...
Page 222: Ppp General Setup
40-bit encryption scheme will be applied to encrypt the data. Maximum MPPE - This option indicates that the router will use the MPPE encryption scheme with maximum bits (128-bit) to encrypt the data. Vigor2830 Series User’s Guide...
Page 223: Ipsec General Setup
AH it receives. Encapsulating Security Payload (ESP) is a security protocol that provides data confidentiality and protection with optional authentication and replay detection service. Vigor2830 Series User’s Guide...
Page 224 By default, this option is active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. Vigor2830 Series User’s Guide...
Page 225: Ipsec Peer Identity
Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2830 Series User’s Guide...
Page 226 Click to check the specific fields of digital signature to Accept Subject Name accept the peer with matching value. The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). Vigor2830 Series User’s Guide...
Page 227: Remote Dial-In User
Check the box to enable the selected profile. Active Display the access state of the specific dial-in user. The Status symbol V and X represent the specific dial-in user to be active and inactive, respectively. Vigor2830 Series User’s Guide...
Page 228 VPN connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. Vigor2830 Series User’s Guide...
Page 229 The only exception is Digital Signature (X.509) can be set when you select IPSec tunnel either with or without specify the IP address of the remote node. Pre-Shared Key - Check the box of Pre-Shared Key to invoke Vigor2830 Series User’s Guide...
Page 230 Local ID (optional)- Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 231: Lan To Lan
Available settings are explained as follows: Item Description All – Click it to display the LAN to LAN profiles. View Trunk – Click it to display the Trunk profiles. Click to clear all indexes. Set to Factory Default Vigor2830 Series User’s Guide...
Page 232 For the web page is too long, we divide the page into several sections for explanation. Available settings are explained as follows: Item Description Profile Name – Specify a name for the profile of the Common Settings LAN-to-LAN connection. Vigor2830 Series User’s Guide...
Page 233 For details, please refer to the note below. Check to enable the transmission of PING packets to a specified IP address. Enable PING to keep alive is used to handle abnormal IPSec VPN connection disruption. It will help to provide Vigor2830 Series User’s Guide...
Page 234 IKE Authentication Method - This group of fields is applicable for IPSec Tunnels and L2TP with IPSec Policy. Pre-Shared Key - Input 1-63 characters as pre-shared key. Digital Signature (X.509) - Click Digital Signature to invoke this function and select one predefined Profiles Vigor2830 Series User’s Guide...
Page 235 Aggressive mode. The ultimate outcome is to exchange security proposals to create a protected secure channel. Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the Vigor2830 Series User’s Guide...
Page 236 2. The default value is inactive this function. Local ID-In Aggressive mode, Local ID is on behalf of the IP address while identity authenticating with remote VPN server. The length of the ID is limited to 47 characters. Vigor2830 Series User’s Guide...
Page 237 Must - Specify the IPSec policy to be definitely applied on the L2TP connection. Specify Remote VPN Gateway - You can specify the IP address of the remote dial-in user or peer ID (should be the Vigor2830 Series User’s Guide...
Page 238 Settings GRE over IPSec packet after configuring IPSec Dial-Out setting. Both ends must match for each other by setting same virtual IP address for communication. Vigor2830 Series User’s Guide...
Page 239 More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. Vigor2830 Series User’s Guide...
Page 240 VPN tunnel. Note that this setting is available only for one WAN interface is enabled. It is not available when both WAN interfaces are enabled. After finishing all the settings here, please click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 241: Vpn Trunk Management
VPN tunnel is off-line. Before setting VPN TRUNK backup profile, please configure at least two sets of LAN-to-LAN profiles (with fully configured dial-out settings) first, otherwise you will not have selections for grouping Member1 and Member2. Vigor2830 Series User’s Guide...
Page 242 IPSec, PPTP, L2TP, L2TP over IPSec (NICE), L2TP over IPSec(MUST) and so on. Member2 - Display the dial-out profile selected from the Member2 drop down list below. Advanced – This button is available only when LAN to LAN profile (or more) is created. Vigor2830 Series User’s Guide...
Page 243 VPN Backup mechanism backup profile is similar to dial-out profile configured in LAN-to-LAN web page. VPN TRUNK – VPN Backup mechanism backup profile will process and handle everything unless it is off-line once it is activated. Vigor2830 Series User’s Guide...
Page 244 If the router will be used as the VPN Server (i.e., with virtual address 192.168.50.200). Please type 192.168.50.200 in the field of My GRE IP. Type IP address (192.168.50.100) of the client in the field of Peer GRE IP. See the following graphic for an example. Vigor2830 Series User’s Guide...
Page 245 TRUNK backup profiles being activated alternatively. Resume – when VPN connection breaks down or disconnects, Member 1 will be the top priority for the system to do VPN connection. This field will display detailed information for Environment Detail Information Recovers Detection. Vigor2830 Series User’s Guide...
Page 246: Connection Management
Dial - Click this button to execute dial out function. Refresh Seconds - Choose the time for refresh the dial information among 5, 10, and 30. Refresh - Click this button to refresh the whole connection status. Vigor2830 Series User’s Guide...
Page 247: Certificate Management
Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Available settings are explained as follows: Item Description Click this button to open Generate Certificate Request Generate window. Vigor2830 Series User’s Guide...
Page 248 Click this button to view the detailed settings for certificate View request. Click this button to delete selected name with certification Delete information. After clicking Generate, the generated information will be displayed on the window below: Vigor2830 Series User’s Guide...
Page 249: Trusted Ca Certificate
For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2830 Series User’s Guide...
Page 250: Certificate Backup
The more bandwidth a codec uses the better the voice quality, however the codec used must be appropriate for your Internet bandwidth. Usually there will be two types of calling scenario, as illustrated below: Vigor2830 Series User’s Guide...
Page 251 QoS Assurance assists to assign high priority to voice traffic via Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor2830 Series User’s Guide...
Page 252: Dialplan
Note: If the incoming or outgoing calls do not match any entry on the phonebook, the router will try to make the call "being protected". But, if the call ends up "unprotected"(e.g. peer side does not support ZRTP+SRTP), the router will not play out a warning message. Vigor2830 Series User’s Guide...
Page 253 Available settings are explained as follows: Item Description Click this to enable this entry. Enable The speed-dial number of this index. This can be any Phone Number number you choose, using digits 0-9 and * . Vigor2830 Series User’s Guide...
Page 254 Note: If the incoming or outgoing calls do not match any entry on the phonebook, the router will try to make the call "being protected". But, if the call ends up "unprotected"(e.g. peer side does not support ZRTP+SRTP), the router will not play out a warning message. Vigor2830 Series User’s Guide...
Page 255 VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” will be changed to “88631111111” and sent to SIP server. Vigor2830 Series User’s Guide...
Page 256 Click the link to move the selected entry up or down. Move UP /Move Down Call barring is used to block phone calls coming from the one that is not welcomed. Click any index number to display the dial plan setup page. Vigor2830 Series User’s Guide...
Page 257 Unknown Domain or Block IP Address. Simply click the relational links to open the web page. For Block Anonymous – this function can block the incoming calls without caller ID on the interface (Phone port) specified in the following window. Such control also can be done based on preconfigured schedules. Vigor2830 Series User’s Guide...
Page 258 SIP accounts. Such control also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Such control also can be done based on preconfigured schedules. Vigor2830 Series User’s Guide...
Page 259 Dial the number typed in this field to forward all the Call Forward [No incoming calls to the specified place while there is no Ans][Act] answer of the connected phone. Vigor2830 Series User’s Guide...
Page 260 PSTN number for dialing without passing through Internet. Please type the number in the field of phone number for PSTN relay. Then, check the Enable box to make the PSTN number available for dial whenever you need. Vigor2830 Series User’s Guide...
Page 261: Sip Accounts
Display the domain name or IP address of the SIP registrar Domain/Realm server. Display the domain name or IP address of the SIP proxy Proxy server. Display the account name of SIP address before @. Account Name Vigor2830 Series User’s Guide...
Page 262 The default value is 150 (sec). It is useful for a Nortel SIP PING interval server NAT Traversal Support. Click any index link to access into the following page for configuring SIP account. Available settings are explained as follows: Vigor2830 Series User’s Guide...
Page 263 Before the time expires, the router will send another register request to SIP Registrar again. If the router (e.g., broadband router) you use connects to NAT Traversal Support internet by other device, you have to set this function for Vigor2830 Series User’s Guide...
Page 264 If your upstream speed is only 64Kbps, do not use G.711 codec. It is better for you to have at least 256Kbps upstream if you would like to use G.711. Vigor2830 Series User’s Guide...
Page 265: Phone Settings
This page allows user to set phone settings for Phone 1 and Phone 2 respectively. However, it changes slightly according to different model you have. Available settings are explained as follows: Vigor2830 Series User’s Guide...
Page 266 Dynamic RTP Port End - Specifies the end port for RTP stream. The default value is 15000. RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Vigor2830 Series User’s Guide...
Page 267 Index (1-60) in Phone Book - Enter the index of phone book profiles. Refer to section DialPlan – Phone Book for detailed configuration. Check this box to hide the caller ID on the display panel of CLIR (hide caller ID) the phone set. Vigor2830 Series User’s Guide...
Page 268 Select the proper region which you are located. The Region common settings of Caller ID Type, Dial tone, Ringing tone, Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable Vigor2830 Series User’s Guide...
Page 269 The smaller the number is, the louder the tone is. It is recommended for you to use the default setting. DTMF Mode – There are four DTMF modes for you to DTMF choose. Vigor2830 Series User’s Guide...
Page 270: Status
From this page, you can find codec, connection and other important call status for each port. Available settings are explained as follows: Item Description Specify the interval of refresh time to obtain the latest VoIP Refresh Seconds calling information. The information will update immediately when the Refresh button is clicked. Vigor2830 Series User’s Guide...
Page 271 Accumulation for the times of in call. In Calls Accumulation for the times of out call. Out Calls Accumulation for the times of missing call. Miss Calls The volume of present call. Speaker Gain Display logs of VoIP calls. Vigor2830 Series User’s Guide...
Page 272: Wireless Lan
SSID as identification, located channel etc. Vigor router supports four SSID settings for wireless connections. Each SSID can be defined with different name and download/upload rate for selecting by stations connected to the router wirelessly. Vigor2830 Series User’s Guide...
Page 273 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor2830 Series User’s Guide...
Page 274: General Setup
Check the box to enable wireless function. Enable Wireless LAN At present, the router can connect to 11n Only, 11g Only, Mode 11b Only, Mixed (11b+11g), Mixed (11a+11n), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mixed (11b+11g+11n) mode. Vigor2830 Series User’s Guide...
Page 275 Means the identification of the wireless LAN. SSID can be SSID any text numbers or various special characters. The default SSID is "DrayTek”. We suggest you to change it. VPN – Check this box to make the wireless clients Isolate (stations) with different VPN not accessing for each other.
Page 276 Packet-OVERDRIVE (refer to the following picture of Vigor N61 wireless utility window, choose Enable for TxBURST on the tab of Option). Note: * means the real transmission rate depends on the environment of the network. Vigor2830 Series User’s Guide...
Page 277: Security
Internet through such router, please input the default PSK value for connection. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Vigor2830 Series User’s Guide...
Page 278 Disable - Turn off the encryption mechanism. WEP-Accepts only WEP clients and the encryption key should be entered in WEP Key. WEP/802.1x Only - Accepts only WEP clients and the encryption key is obtained dynamically from RADIUS server with 802.1X protocol. Vigor2830 Series User’s Guide...
Page 279 Four keys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCII or Hexadecimal. Check the key you wish to use. Vigor2830 Series User’s Guide...
Page 280: Access Control
SSIDs desired to insert this MAC address into their access control list. s: Isolate the station from LAN - select to isolate the Attribute wireless connection of the wireless client of the MAC address from LAN. Add a new MAC address into the list. Vigor2830 Series User’s Guide...
Page 281: Wps
On the side of Vigor 2830 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card. Vigor2830 Series User’s Guide...
Page 282 For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security, you will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again. Vigor2830 Series User’s Guide...
Page 283 Start PIN button. The WPS PinCode LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2830 Series User’s Guide...
Page 284: Wds
AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be forwarded to local wired or wireless hosts. In other words, only Repeater mode can do WDS-to-WDS packet forwarding. Vigor2830 Series User’s Guide...
Page 285 Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Available settings are explained as follows: Item Description Choose the mode for WDS setting. Disable mode will not Mode Vigor2830 Series User’s Guide...
Page 286 Click Enable to make this router serving as an access point; Access Point Function click Disable to cancel this function. It allows user to send “hello” message to peers. Yet, it is Status valid only when the peer also supports this function. Vigor2830 Series User’s Guide...
Page 287: Advanced Setting
Aggregation MSDU can Aggregation MSDU sizes. It is used for improving MAC layer’s performance for some brand’s clients. The default setting is Enable. Vigor2830 Series User’s Guide...
Page 288: Wmm Configuration
1 to 15. Be aware that CWMax value must be greater than CWMin or equals to CWMin value. Both values will influence the time delay for WMM accessing categories. The difference between AC_VI and AC_VO Vigor2830 Series User’s Guide...
Page 289: Ap Discovery
This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP which is in the same channel of this router can be found. Please click Scan to discover all the connected APs. Vigor2830 Series User’s Guide...
Page 290 AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2830 Series User’s Guide...
Page 291: Station List
WLAN station and click Add to Access Control below. Available settings are explained as follows: Item Description Click this button to refresh the status of station list. Refresh Click this button to add current typed MAC address into Access Control. Vigor2830 Series User’s Guide...
Page 292: Web Portal
Type words or sentences here. The message will be Show the message displayed on the screen for several seconds when the wireless users access into the web page through the router. After finished the above settings, click OK to save the configuration. Vigor2830 Series User’s Guide...
Page 293: Usb Application
Simultaneous FTP Connections - This field is used to General Settings specify the quantity of the FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage disk at one time. Default Charset - At present, Vigor router supports four Vigor2830 Series User’s Guide...
Page 294: Usb User Management
USB storage disk must type the same username and password configured in this page. Before adding or modifying settings in this page, please insert a USB storage disk first. Otherwise, an error message will appear to warn you. Vigor2830 Series User’s Guide...
Page 295 USB storage disk. Note: When write protect status for the USB storage disk is ON, you cannot type any new folder name in this field. Only “/” can be used in such case. Vigor2830 Series User’s Guide...
Page 296 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB storage disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor2830 Series User’s Guide...
Page 297: File Explorer
This page is to monitor the status for the users who accessing into FTP or Samba server (USB storage disk) via the Vigor router. If you want to remove the storage disk from USB port in router, please click Disconnect USB Disk first. And then, remove the USB storage disk later. Vigor2830 Series User’s Guide...
Page 298: Syslog Explorer
Check this box to enable the function of Web Syslog. Enable Web Syslog Use the drop down list to specify a type of Syslog to be Syslog Type displayed. There are two modes for you to choose. Display Mode Vigor2830 Series User’s Guide...
Page 299: System Maintenance
For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items for System Maintenance. Vigor2830 Series User’s Guide...
Page 300: System Status
- Display the subnet mask address of the LAN interface. DHCP Server - Display the current status of DHCP server of the LAN interface - Display the assigned IP address of the primary DNS. Wireless LAN MAC Address Vigor2830 Series User’s Guide...
Page 301 - Display the IP address of the WAN interface. Default Gateway - Display the assigned IP address of the default gateway. VoIP Profile - Display the VoIP profile for the phone port. In/Out - Display the number of incoming /outgoing phone call. Vigor2830 Series User’s Guide...
Page 302: 292
Such information is useful for Auto Configuration Server. CPE Client Enable/Disable – Allow/Deny the CPE Client to connect with Auto Configuration Server. Port – Sometimes, port conflict might be occurred. To solve such problem, you might change port number for CPE. Vigor2830 Series User’s Guide...
Page 303: Administrator Password
Type in new password in this field. New Password Type in the new password again. Confirm Password When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Vigor2830 Series User’s Guide...
Page 304: User Password
Below shows an example for accessing into User Operation with User Password. 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. Vigor2830 Series User’s Guide...
Page 305 3. The following screen will appear. Simply click OK. 4. Log out Vigor router Web Configurator. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. Vigor2830 Series User’s Guide...
Page 306 6. The main screen with User Mode will be shown as follows. Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode and can be configured as same as in Admin Mode. Vigor2830 Series User’s Guide...
Page 307: Login Page Title
Description Check this box to enable the login customization function. Enable Type a brief description (e.g., Welcome to DrayTek) which Login Page Title will be shown on the heading of the login dialog. Type words or sentences here. It will be displayed for Welcome Message and bulletin message.
Page 308: Configuration Backup
Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. Vigor2830 Series User’s Guide...
Page 309 Click Browse button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2830 Series User’s Guide...
Page 310: Syslog/Mail Alert
Destination Port - Assign a port for the Syslog protocol. Mail Syslog – Check the box to recode the mail event on Syslog. Enable syslog message - Check the box listed on this web page to send the corresponding message of firewall, VPN, Vigor2830 Series User’s Guide...
Page 311 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2830 Series User’s Guide...
Page 312: Time And Date
Select to inquire time information from Time Server on the Use Internet Time Internet using assigned protocol. Select a time protocol. Time Protocol Type the IP address of the time server. Server IP Address Select the time zone where the router is located. Time Zone Vigor2830 Series User’s Guide...
Page 313: Snmp
Manager Host IP (IPv4) Please type in IPv4 address to specify certain host. Set one host as the manager to execute SNMP function. Manager Host IP (IPv6) Please type in IPv6 address to specify certain host. Vigor2830 Series User’s Guide...
Page 314 Choose one of the encryption methods listed below as the Auth Algorithm authentication algorithm. Type a password for authentication. Auth Password Choose one of the methods listed below as the privacy Privacy Algorithm algorithm. Type a password for privacy. Privacy Password Vigor2830 Series User’s Guide...
Page 315: Management
List IP - Indicate an IP address allowed to login to the router. Subnet Mask - Represent a subnet mask allowed to login to the router. User Defined Ports - Check to specify user-defined port Management Port Setup Vigor2830 Series User’s Guide...
Page 316 You could specify that the system administrator can only Access List login from a specific host or network defined in the list. A maximum of three IPs/subnet masks is allowed. IPv6 Address /Prefix Length- Indicate the IP address(es) allowed to login to the router. Vigor2830 Series User’s Guide...
Page 317: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2830 Series User’s Guide...
Page 318: Firmware Upgrade
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 319: Activation
The Activate link brings you accessing into Activate www.vigorpro.com to finish the activation of the account and the router. As for authentication information of web filter, the process Authentication Message of authenticating will be displayed on this field for your reference. Vigor2830 Series User’s Guide...
Page 320 Below shows the successful activation of Web Content Filter: Vigor2830 Series User’s Guide...
Page 321: Diagnostics
(e.g., PPPoE) is triggered by a package sending from the source IP address. Available settings are explained as follows: Item Description It shows the source IP address (local), destination IP Decoded Format (remote) address, the protocol and length of the package. Click it to reload the page. Refresh Vigor2830 Series User’s Guide...
Page 322: Routing Table
Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Click it to reload the page. Refresh Vigor2830 Series User’s Guide...
Page 323: Arp Cache Table
The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. Available settings are explained as follows: Vigor2830 Series User’s Guide...
Page 324: Dhcp Table
It displays the IP address assigned by this router for IP Address specified PC. It displays the MAC address for the specified PC that MAC Address DHCP assigned IP address for it. It displays the leased time of the specified PC. Leased Time Vigor2830 Series User’s Guide...
Page 325: Nat Sessions Table
It indicates the temporary port of the router used for NAT. #Pseudo Port It indicates the destination IP address and port of remote Peer IP:Port host. It displays the representing number for different interface. Interface Click it to reload the page. Refresh Vigor2830 Series User’s Guide...
Page 326: Ping Diagnosis
Use the drop down list to choose the WAN interface that Ping through you want to ping through or choose Unspecified to be determined by the router automatically. Use the drop down list to choose the destination that you Ping to Vigor2830 Series User’s Guide...
Page 327: Data Flow Monitor
Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Available settings are explained as follows: Vigor2830 Series User’s Guide...
Page 328 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2830 Series User’s Guide...
Page 329: Traffic Graph
WAN1/WAN2/WAN3Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2830 Series User’s Guide...
Page 330: Trace Route
Run. The result of route trace will be shown on the screen. Available settings are explained as follows: Item Description Click one of them to display corresponding information for IPv4 / IPv6 Use the drop down list to choose the interface that you want Trace through Vigor2830 Series User’s Guide...
Page 331: Syslog Explorer
Use the drop down list to specify a type of Syslog to be Syslog Type displayed. Click this link to refresh this page manually. Refresh Click this link to clear information on this page. Clear There are two modes for you to choose. Display Mode Vigor2830 Series User’s Guide...
Page 332 This page displays the syslog recorded on the USB storage disk. Available settings are explained as follows: Item Description Display the time of the event occurred. Time Display the type of the record. Log Type Display the information for each event. Message Vigor2830 Series User’s Guide...
Page 333: Tspc Status
This page allows you to enable or disable the function of detecting external devices. Available settings are explained as follows: Item Description Check this box to detect the external device automatically External Device Auto and display on this page. Discovery Vigor2830 Series User’s Guide...
Page 334 This page is left blank. Vigor2830 Series User’s Guide...
Page 335: Application And Examples
1. Log into the web user interface of Vigor router. 2. Open WAN>>Internet Access. Only PPPoE and MPoA 1483 Bridge can support PVC to PVC Binding feature, you have to choose PPPoE/PPoA as the Access Mode for WAN1. Vigor2830 Series User’s Guide...
Page 336 Click OK to save the settings. Open WAN>>Multi-PVCs. Click the General tab to check the box of Enable for the 5 WAN. Note: Only 5 WAN to 7 WAN can be used for PVC to PVC Binding. Vigor2830 Series User’s Guide...
Page 337 PVC Binding. Check the box of Add Tag and type 405 as the tag number. Click OK to save the settings. The PVC Binding and the Tag setting can also be seen in WAN>>Multi-PVCs>>PVC to PVC Binding/Add Tag page. Note: Channel 1 and Channel 2 are reserved for WAN1 service. Vigor2830 Series User’s Guide...
Page 338 11. Now, all the data from P1 transmitted to the remote PPPoE server via WAN1 and the data from P4 (IPTV) transmitted to the remote DHCP Server via WAN 5 are all processed by Channel 1. Vigor2830 Series User’s Guide...
Page 339: How To Configure Multi-Subnet In Vigor2830
VLAN Configuration. For VLAN0 setting, check P1 and set LAN1 as the Subnet. For VLAN1 setting, check P2 and set LAN2 as the Subnet. For VLAN2 setting, check P3 and P4, and set LAN3 as the Subnet. Vigor2830 Series User’s Guide...
Page 340 The equipment connecting to Vigor2830 LAN Port 3 and Port 4 (LAN3) can get the IP address of 192.168.5.0/24 For the detailed settings of the network segment, open LAN>>General Setup and click Details Page. Adjust the settings for your request. Refer to the following figure. Vigor2830 Series User’s Guide...
Page 341 To make any two of VLAN groups linked with each other, just check the boxes of the ones in the field of Inter-LAN Routing in the page of LAN >> General Setup. Refer to the following figure. LAN2 and LAN3 are linked. Vigor2830 Series User’s Guide...
Page 342 (8) for VID setting. Then check P4 and set LAN2 as the Subnet. To activate the function of VLAN Tag for VLAN2 setting, check the box of Enable and type the value (9) for VID setting. Then check P4 and set LAN3 as the Subnet. Vigor2830 Series User’s Guide...
Page 343 LAN4 and enable the function of DHCP. For the detailed settings of the network segment, open LAN>>General Setup and click Details Page. Adjust the settings for your request. Refer to the following figure. Configuration for VigorSwitch 2240: Open Vlan>>Tag-based Group. Vigor2830 Series User’s Guide...
Page 344 Port 23 is set with Trunk in this example and will transfer the packets with VLAN Tag information. That is, packets with VID 7, 8, 9 and 10 will be transferred to Vigor2830 by Port 23 and VID information will be retained. Vigor2830 Series User’s Guide...
Page 345 To make any two of VLAN groups of Tag Based VLAN linked with each other, just check the boxes of the ones in the field of Inter-LAN Routing in the page of LAN >> General Setup. Refer to the following figure. LAN2 and LAN3 are linked. Vigor2830 Series User’s Guide...
Page 346: How Can I Use Ftp To Get The Files From Usb Storage Device Connecting To Vigor Router
Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable Samba service. Vigor2830 Series User’s Guide...
Page 347 Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. When the following screen appears, it means the FTP service is running properly. Vigor2830 Series User’s Guide...
Page 348 Now, users in LAN of Vigor2830 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. Vigor2830 Series User’s Guide...
Page 349: How To Send A Notification To Specified Phone Number Via Sms Service In Wan Disconnection
3. Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider setting. In the following page, type the username and password and set the quota that the router can send the message out. Vigor2830 Series User’s Guide...
Page 350 6. Choose any index number (e.g., Index 1 in this case) to configure conditions for sending the SMS. In the following page, type the name of the profile and check the Disconnected and Reconnected boxes for WAN to work in concert with the topic of this paper. Vigor2830 Series User’s Guide...
Page 351 9. Click OK to save the settings. Later, if one of the WAN connections fails in your router, the system will send out SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully. Vigor2830 Series User’s Guide...
Page 352 WAN for connection instead and send SMS to notify the user (destination number #123456789). However, if there is no available WAN for connection, the system will send SMS to inform the user after reconnecting WAN2 successfully. Vigor2830 Series User’s Guide...
Page 353: Web Portal Log-In Application For Wireless Client
Internet. The Internet surfers would have a glance at least on the dedicated web site and related contents. Vigor2830 Series User’s Guide...
Page 354 Open Wireless LAN>>Web Portal. Click Redirect to URL and type the URL in the field below. User’s first HTTP request will be redirected to the URL defined here. (Here we take www.draytek.com for an example.) Click OK to save the settings. Note that do not choose Redirect to URL for this page if you have already enabled the user-based mode under User Management.
Page 355 Try to open a new tab in the same browser (for IE 7.0/FireFox and above) or open a new web browser. The first connection session will be redirected to DrayTek Website (specified in step 2) automatically. However, if open another new tab again in the same browser, the browser will open default page based on the default setting.
Page 356: How To Customize Your Login Page
Open User Management>>General Setup. Set User-Based as the Mode and click OK to save teh settings. Open User Management>>User Profile to create a new user profle. Click any link (e.g., #3) to access into the following page. Type a User Name and a Password. Then, click OK. Vigor2830 Series User’s Guide...
Page 357: Login Page Greeting
“Just for Carrie” is displayed as a heading on the login dialog box. After typing the username and password (defined in User Management>>User Profile), click Login. You can access into Internet or access into the Landing Page if configured in User Management>>General Setup. Vigor2830 Series User’s Guide...
Page 358: Create A Lan-To-Lan Connection Between Remote Office And Headquarter
For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2830 Series User’s Guide...
Page 359 Go to LAN-to-LAN. Click on one index number to edit a profile. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. Vigor2830 Series User’s Guide...
Page 360 Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. Vigor2830 Series User’s Guide...
Page 361 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2830 Series User’s Guide...
Page 362 PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2830 Series User’s Guide...
Page 363 Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. Vigor2830 Series User’s Guide...
Page 364 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2830 Series User’s Guide...
Page 365 Username, Password, and VJ Compression for this Dial-In connection. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection. Vigor2830 Series User’s Guide...
Page 366: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter
PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2830 Series User’s Guide...
Page 367 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2830 Series User’s Guide...
Page 368 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.DrayTek.com download center. Install as instructed.
Page 369 VPN router. To use default gateway on remote network means that all the packets of remote host will be directed to VPN server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. Vigor2830 Series User’s Guide...
Page 370: Qos Setting Example
HTTPS or VPN to check email and access internal database. Meanwhile, children may chat on Skype in the restroom. Go to Bandwidth Management>>Quality of Service. Click Setup link of WAN(1/2/3). Make sure the QoS Control on the left corner is checked. And select BOTH in Direction. Vigor2830 Series User’s Guide...
Page 371 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the name “E-mail” for Class 1. Vigor2830 Series User’s Guide...
Page 372 POP3 and SMTP. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. Click Setup link for WAN2. Vigor2830 Series User’s Guide...
Page 373 Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. 10. Click Edit to open a new window. Vigor2830 Series User’s Guide...
Page 374 11. Click Add to open the following window. Check the ACT box, first. 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor2830 Series User’s Guide...
Page 375: Upgrade Firmware For Your Router
3. Access into Support >> Downloads. Please find out Utility menu and click it. 4. Click on the link of Router Tools to download the file. After downloading the files, please decompressed the file onto your host. Vigor2830 Series User’s Guide...
Page 376 You will find out two files with different extension names, xxxx.all (keep the old custom settings) and xxxx.rst (reset all the custom settings to default settings). Choose any one of them that you need. Vigor2830 Series User’s Guide...
Page 377 The web page also can guide you to upgrade firmware. Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 378: Request A Certificate From A Ca Server On Windows Ca Server
Go to Certificate Management and choose Local Certificate. Vigor2830 Series User’s Guide...
Page 379 Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate. Vigor2830 Series User’s Guide...
Page 380 IPSec (Offline request) below. Then you have done the request and the server now issues you a certificate. Select Base 64 encoded certificate and Download CA certificate. Now you should get a certificate (.cer file) and save it. Vigor2830 Series User’s Guide...
Page 381 (.cer file) into Vigor router. When finished, click refresh and you will find the below window showing “------BEGINE CERTIFICATE------..” You may review the detail information of the certificate by clicking View button. Vigor2830 Series User’s Guide...
Page 382: Request A Ca Certificate And Set As Trusted On Windows Ca Server
Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. Vigor2830 Series User’s Guide...
Page 383 You may review the detail information of the certificate by clicking View button. Note: Before setting certificate configuration, please go to System Maintenance >> Time and Date to reset current time of the router first. Vigor2830 Series User’s Guide...
Page 384: Creating An Account For Myvigor
The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
Page 385 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. Vigor2830 Series User’s Guide...
Page 386 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2830 Series User’s Guide...
Page 387 New Account Confirmation Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2830 Series User’s Guide...
Page 388: Creating An Account Via Myvigor Web Site
11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
Page 389 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. Vigor2830 Series User’s Guide...
Page 390 New Account Confirmation Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2830 Series User’s Guide...
Page 391 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2830 Series User’s Guide...
Page 392 Vigor2830 Series User’s Guide...
Page 393: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2830 Series User’s Guide...
Page 394 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2830 Series User’s Guide...
Page 395 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2830 Series User’s Guide...
Page 396: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2830 Series User’s Guide...
Page 397: Checking If The Isp Settings Are Ok Or Not
PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek.
Page 398: Backing To Factory Default Setting If Necessary
Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK. After few seconds, the router will return all the settings to the factory settings. Vigor2830 Series User’s Guide...
Page 399: Contacting Your Dealer
After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor2830 Series User’s Guide...

This manual is also suitable for:

Vigor2830n Vigor2830n-plus Vigor2830vn

Draytek Vigor2830 Series User Manual

Quick Links

Related Manuals for Draytek Vigor2830 Series

Summary of Contents for Draytek Vigor2830 Series