Draytek VIGORBX 2000 SERIES User Manual
  1. Manuals
  2. Brands
  3. Draytek Manuals
  4. Network Router
  5. VigorBX 2000 Series
  6. User manual
Draytek VIGORBX 2000 SERIES User Manual

Draytek VIGORBX 2000 SERIES User Manual

Ippbx firewall router
Hide thumbs Also See for VIGORBX 2000 SERIES:
1
2
3
4
Table Of Contents
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
Table of Contents

Advertisement

Quick Links

Download this manual

Advertisement

Table of Contents
loading

Related Manuals for Draytek VIGORBX 2000 SERIES

Summary of Contents for Draytek VIGORBX 2000 SERIES

  • Page 2 VigorBX 2000 Series IPPBX Firewall Router User’s Guide Version: 1.0 Firmware Version: V3.8.1.1 (For future update, please visit DrayTek web site) Date: December 24, 2015 VigorBX 2000 Series User’s Guide...
  • Page 3 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com. Firmware & Tools Updates  Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents. http://www.DrayTek.com...
  • Page 4 Product: VigorBX 2000 Series Router DrayTek Corp. declares that VigorBX 2000 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.

  • Page 5: Table Of Contents

    II-1-2-13 Details Page for IPv6 – AICCU in WAN1/WAN2/WAN3/WAN4....90 II-1-2-14 Details Page for IPv6 – DHCPv6 Client in WAN1/WAN2 ......92 II-1-2-15 Details Page for IPv6 – Static IPv6 in WAN1/WAN2 .......93 II-1-2-16 Details Page for IPv6 – 6in4 Static Tunnel in WAN1/WAN2 ......95 VigorBX 2000 Series User’s Guide...
  • Page 6 II-4-9 SMS / Mail Alert Service....................179 II-4-9-1 SMS Provider ................179 II-4-9-2 Mail Server ................180 II-4-10 Bonjour ......................... 181 Application Notes ........................184 A-1 How to Implement the LDAP/AD Authentication for User Management? ..184 VigorBX 2000 Series User’s Guide...
  • Page 7 VI-1-5-2 PBX Service Number ..............266 VI-1-5-3 Hunt Group................267 VI-1-5-4 Voice Mail/Virtual FAX Configuration ..........270 VI-1-5-5 Incoming Fax Rules..............273 VI-1-5-6 Office Hours ................274 VI-1-5-7 Auto Attendant Wizard .............. 276 VI-1-5-8 Auto Attendant Setting .............. 278 VigorBX 2000 Series User’s Guide...
  • Page 8 A-6 How to use the function of Labeling on Caller ID in Hunt Group....310 A-7 How to Configure Hunt Group in VigorBX 2000 Series........ 312 A-8 How to Configure and Use the Queuing Function in Hunt Group ....314 Part V VPN ........................319...

  • Page 9: Content Filter

    VII-1-11 Reboot System......................469 VII-1-12 Firmware Upgrade ..................... 470 VII-1-13 Modem Code Upgrade....................471 VII-1-14 Activation........................471 VII-2 Bandwidth Management......................473 Web User Interface ........................475 VII-2-1 Sessions Limit ......................475 VII-2-2 Bandwidth Limit......................477 VigorBX 2000 Series User’s Guide...
  • Page 10 VIII-2-5 Temperature Sensor ....................556 VIII-2-6 Modem Support List ....................558 VIII-2-7 SMB Client Support List....................558 Application Notes ........................559 A-1 How can I get the files from USB storage device connecting to Vigor router? ... 559 VigorBX 2000 Series User’s Guide...
  • Page 11 IX-7 Backing to Factory Default Setting If Necessary ..............588 IX-8 Contacting DrayTek ........................ 589 Appendix I: VLAN Applications on Vigor Router ................590 Part X Telnet Commands....................599 Accessing Telnet of VigorBX 2000 ....................600 VigorBX 2000 Series User’s Guide...

  • Page 13: Part I Installation

    This is a generic International version of the user guide. Specification, compatibility and features vary by region. For specific user guides suitable for your region or product, please contact local distributor.

  • Page 14: Introduction

    Analog phone line any time you need. Object-based firewall is flexible and allows your network be safe. In addition, through VoIP function, the communication fee for you and remote people can be reduced. VigorBX 2000 Series User’s Guide...

  • Page 15: I-1-1 Indicators And Connectors

    LED will be off about six seconds later. There is no PSTN phone call. Phone The phone connected to this port is off-hook. The phone connected to this port is on-hook. Blinking A phone call comes. VigorBX 2000 Series User’s Guide...
  • Page 16 Connecter for accessing the Internet through VDSL/ADSL. WAN2 Connecter for remote networked devices. LAN1~LAN6 Connecters for local networked devices. Phone Connecter for PSTN phone. Line1/2 Connector for PSTN life line. Connecter for a power adapter. Power Switch. ON/OFF VigorBX 2000 Series User’s Guide...

  • Page 17: Hardware Installation

    (For the detailed information of LED status, please refer to section I-1-1 Indicators and Connectors.) Caution Each of the Phone ports can be connected to an analog phone only. Do not connect the phone ports to the telephone wall jack. Such connection might damage your router. VigorBX 2000 Series User’s Guide...

  • Page 18: I-2-2 Installing Usb Printer To Vigor Router

    You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
  • Page 19 A dialog will appear. Click Add a local printer and click Next. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next. VigorBX 2000 Series User’s Guide...
  • Page 20 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next. Click Standard and choose Generic Network Card. VigorBX 2000 Series User’s Guide...
  • Page 21 Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next. Type a name for the chosen printer. Click Next. VigorBX 2000 Series User’s Guide...
  • Page 22 10. Choose Do not share this printer and click Next. 11. Then, in the following dialog, click Finish. 12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties. VigorBX 2000 Series User’s Guide...
  • Page 23 13. Edit the property of the new printer you have added by clicking Configure Port. 14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. VigorBX 2000 Series User’s Guide...
  • Page 24 If please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click Then, click the What types of printers are compatible with Vigor router? link.

  • Page 25: Accessing Web Page

    Please type “admin/admin” as the Username/Password and click Login. Info If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem. VigorBX 2000 Series User’s Guide...
  • Page 26 The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. VigorBX 2000 Series User’s Guide...

  • Page 27: Changing Password

    New Password and Confirm Password. Then click OK to continue. Info The maximum length of the password you can set is 23 characters. Now, the password has been changed. Next time, use the new password to access the Web user interface for this router. VigorBX 2000 Series User’s Guide...
  • Page 28 Info Even the password is changed, the Username for logging onto the web user interface is still “admin”. VigorBX 2000 Series User’s Guide...

  • Page 29: Dashboard

    It will be refreshed every five seconds. When you move and click the mouse cursor on LEDs (except ACT), USB ports, VDSL/ADSL, WAN2, or LAN1 – LAN6, related web setting page will be open for you to configure if required. VigorBX 2000 Series User’s Guide...

  • Page 30: I-5-2 Name With A Link

    For detailed information about the LED display, refer to I-1-1 Indicators and Connectors. A name with a link (e.g., Router Name, Current Time, SIP, PSTN and etc.) below means you can click it to open the configuration page for modification. VigorBX 2000 Series User’s Guide...

  • Page 31: I-5-3 Quick Access For Common Used Menu

    In addition, quick access for VPN security settings such as Remote Dial-in User and LAN to LAN are located on the bottom of this page. Scroll down the page to find them and use them if required. VigorBX 2000 Series User’s Guide...

  • Page 32: I-5-4 Gui Map

    All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions. VigorBX 2000 Series User’s Guide...

  • Page 33: I-5-5 Web Console

    The functions/settings modified under Web Console also can be reviewed on the web user interface. Click the Web Console icon on the top of the main screen to open the following screen. VigorBX 2000 Series User’s Guide...

  • Page 34: I-5-6 Config Backup

    System Maintenance>>Configuration Backup. Simply click the icon on the top of the main screen and a pop up dialog will appear. Click Save to store the setting. Click this icon to exit the web user interface. VigorBX 2000 Series User’s Guide...

  • Page 35: I-5-8 Online Status

    Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on. Physical Connection for IPv4 Protocol VigorBX 2000 Series User’s Guide...
  • Page 36 GW IP - Displays the IP address of the default gateway. TX Packets - Displays the total transmitted packets at the WAN interface. TX Rate - Displays the speed of transmitted octets at the WAN interface. VigorBX 2000 Series User’s Guide...

  • Page 37: I-5-8-2 Virtual Wan

    Internet. Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list i-9the purpose of such WAN connection. VigorBX 2000 Series User’s Guide...

  • Page 38: Quick Start Wizard

    3G USB modem is used, please choose WAN3 or WAN4. Then click Next for next step. WAN1, WAN2, WAN3 and WAN4 will bring up different configuration page. Refer to the following sections for detailed information. VigorBX 2000 Series User’s Guide...
  • Page 39 ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. In addition, the field of For ADSL Only will be available only when ADSL is detected. Then click Next for next step. VigorBX 2000 Series User’s Guide...
  • Page 40 Type the IP address as the default gateway. Primary DNS Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. VigorBX 2000 Series User’s Guide...
  • Page 41 Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. VigorBX 2000 Series User’s Guide...
  • Page 42 After finished the above settings, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. VigorBX 2000 Series User’s Guide...
  • Page 43 Type the IP address if Fixed IP is enabled. Subnet Mask Type the subnet mask. Default Gateway Type the IP address as the default gateway. Primary DNS Type in the primary IP address for the router. VigorBX 2000 Series User’s Guide...
  • Page 44 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. VigorBX 2000 Series User’s Guide...
  • Page 45 On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. VigorBX 2000 Series User’s Guide...
  • Page 46 Note: The maximum length of the user name you can set is 63 characters. Password Assign a valid password provided by the ISP. Note: The maximum length of the password you can set is 62 characters. Confirm Password Retype the password. VigorBX 2000 Series User’s Guide...
  • Page 47 Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. VigorBX 2000 Series User’s Guide...
  • Page 48 Note: The maximum length of the user name you can set is 63 characters. Password Assign a valid password provided by the ISP. Note: The maximum length of the password you can set is 62 characters. VigorBX 2000 Series User’s Guide...
  • Page 49 Then click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. VigorBX 2000 Series User’s Guide...
  • Page 50 Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it to get into the next setting page. VigorBX 2000 Series User’s Guide...
  • Page 51 Please type in the IP address information originally provided by your ISP. Then click Next for next step. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. VigorBX 2000 Series User’s Guide...
  • Page 52 Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to enter the MAC address. Back Click it to return to previous setting page. Next Click it to get into the next setting page. VigorBX 2000 Series User’s Guide...
  • Page 53 After finished the settings above, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. VigorBX 2000 Series User’s Guide...
  • Page 54 15 characters. Modem Initial String – Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of VigorBX 2000 Series User’s Guide...
  • Page 55 Then, click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. VigorBX 2000 Series User’s Guide...

  • Page 56: Service Activation Wizard

    Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
  • Page 57 Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from retailing outlets. In addition, Commtouch is merged by Cyren, and GlobalView services...
  • Page 58 The valid time for the free trial of these services is one month. When all the trial editions for various web content filters had been enabled, the configuration page of Service Activation Wizard will be invalid as shown below. VigorBX 2000 Series User’s Guide...

  • Page 59: Registering Vigor Router

    Please login the web configuration interface of Vigor router by typing “admin/admin” as User Name / Password. Click Support Area>>Production Registration from the home page. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login. VigorBX 2000 Series User’s Guide...
  • Page 60 Account for MyVigor to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account. The following page will be displayed after you logging in MyVigor. From this page, please click Add or Product Registration. VigorBX 2000 Series User’s Guide...
  • Page 61 Registration Date). After adding the basic information for the router, please click Submit. When the following page appears, your router information has been added to the database. After clicking OK, you will see the following page. Your router has been registered to myvigor website successfully. VigorBX 2000 Series User’s Guide...
  • Page 62 This page is left blank. VigorBX 2000 Series User’s Guide...

  • Page 63: Part Ii Connectivity

    PC in the local area network. DNS, LAN DNS, IGMP, LDAP, UpnP, IGMP, WOL, RADIUS, SMS, Bonjour Static Route, Load-Balance/Route Policy VigorBX 2000 Series User’s Guide...

  • Page 64: Wan

    Users can use LAN ports on the router to access Internet. Also, they can access Internet via 802.11(a/b/g/n/ac) wireless standard, and enjoy the powerful firewall, bandwidth management, and VPN features of VigorBX 2000n series. VigorBX 2000 Series User’s Guide...
  • Page 65 Besides, 3G/4G USB Modem in WAN3/WAN4 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G/4G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information.

  • Page 66: Web User Interface

    V means such WAN interface is enabled and ready to be used. Physical Mode / Type Display the physical mode and physical type of such WAN interface. Line Speed(Kbps) Display the downstream and upstream rate of such WAN interface. DownLink/UpLink VigorBX 2000 Series User’s Guide...

  • Page 67: Ii-1-1-1 Wan1( Adsl/Vdsl)

    Display the physical mode of such interface. If VDSL2 is detected, this field will display “VDSL2”; if ADSL is detected, it will display “ADSL”. DSL Mode Specify the physical mode (VDSL or ADSL) for such router manually. VigorBX 2000 Series User’s Guide...
  • Page 68 Load Balance: Check this box to enable auto load balance function for such WAN interface. When the data traffic is large, the WAN interface with the function enabled will balance the data transmission automatically among all of the WAN interfaces in connection status. VigorBX 2000 Series User’s Guide...

  • Page 69: Ii-1-1-2 Wan2 (Ethernet)

    Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. VigorBX 2000 Series User’s Guide...
  • Page 70 WAN interface disconnects. All of the selected WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...

  • Page 71: Ii-1-1-3 Wan3/Wan4 (Usb)

    Load Balance: Check this box to enable auto load balance function for such WAN interface. When the data traffic is large, the WAN interface with the function enabled will balance the data transmission automatically among all of the WAN interfaces in connection status. VigorBX 2000 Series User’s Guide...
  • Page 72 WAN interface disconnects. All of the selected WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...

  • Page 73: Ii-1-2 Internet Access

    Description Index Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3/WAN4 that entered in general setup. Physical Mode It shows the physical connection for WAN1(ADSL/VDSL2) /WAN2 (Ethernet) /WAN3/WAN4 (3G/4G USB Modem) VigorBX 2000 Series User’s Guide...
  • Page 74 Option Number – Type a number for such function. DataType – Choose the type (ASCII or Hex) for the data to be stored. Data – Type the content of the data to be processed by the function of DHCP option. VigorBX 2000 Series User’s Guide...

  • Page 75: Ii-1-2-1 Details Page For Pppoe In Wan1 (Physical Mode: Vdsl2)

    PPPoE session (different with the Host PC) to access into Internet. For Wireless LAN – It is available for n model. If you check this box, PCs on the same wireless network can use another VigorBX 2000 Series User’s Guide...
  • Page 76 ADSL connection by checking this box. If it is checked, the system will ask you to type another group of account and password additionally. PPP Authentication – Select PAP only or PAP or CHAP for PPP. VigorBX 2000 Series User’s Guide...
  • Page 77 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page. VigorBX 2000 Series User’s Guide...
  • Page 78 TTL. It means Max Transmit Unit for packet. Path MTU Discovery – It is used to detect the maximum MTU size of a packet not to be segmented in specific transmit VigorBX 2000 Series User’s Guide...
  • Page 79 Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. Obtain an IP address automatically – Click this button to VigorBX 2000 Series User’s Guide...
  • Page 80 DNS Server IP Address Type in the primary IP address for the router. If necessary, type in secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. VigorBX 2000 Series User’s Guide...

  • Page 81: Ii-1-2-2 Details Page For Mpoa/Static Or Dynamic Ip In Wan1 (Physical Mode: Vdsl2) 66 Ii-1-2-3 Details Page For Pppoe/Pppoa In Wan1 (Physical Mode: Adsl)

    If you have already used Quick Start Wizard to set the protocol, then it is not necessary for you to change any settings in this group. Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. VigorBX 2000 Series User’s Guide...
  • Page 82 MTU reduce size – It determines the decreasing size of MTU value. For example, the number specified in this field is “8”. The maximum MTU size is “1500”. After clicking the “detect” button, the system will calculate and get the VigorBX 2000 Series User’s Guide...
  • Page 83 WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address. VigorBX 2000 Series User’s Guide...
  • Page 84 All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings here, please click OK to activate them. VigorBX 2000 Series User’s Guide...
  • Page 85 ISP. VPI - Type in the value provided by ISP. VCI - Type in the value provided by ISP. Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. VigorBX 2000 Series User’s Guide...
  • Page 86 WAN IP Alias. You can set up to 32 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Type the additional WAN IP address and check the Enable box. Then click OK to exit the dialog. VigorBX 2000 Series User’s Guide...
  • Page 87 DNS Server IP Address Type in the primary IP address for the router. If necessary, type in secondary IP address for necessity in the future. After finishing all the settings here, please click OK to activate them. VigorBX 2000 Series User’s Guide...

  • Page 88: Ii-1-2-4 Details Page For Mpoa/Static Or Dynamic Ip In Wan1 (Physical Mode: Adsl) .73 Ii-1-2-5 Details Page For Pppoe In Wan2

    WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL VigorBX 2000 Series User’s Guide...
  • Page 89 MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. VigorBX 2000 Series User’s Guide...

  • Page 90: Ii-1-2-6 Details Page For Static Or Dynamic Ip In Wan2

    Such function allows you to verify whether network Detection connection is alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect, Ping Detect or Always On for the system to execute for WAN detection. VigorBX 2000 Series User’s Guide...
  • Page 91 Enable: Check the box to specify username and password as the DHCP client identifier for some ISP.  Username: Type a name as username. The maximum length of the user name you can set is 63 characters. VigorBX 2000 Series User’s Guide...

  • Page 92: Ii-1-2-7 Details Page For Pptp/L2Tp In Wan2

    Disable – Click this radio button to close the connection through PPTP or L2TP. Server Address - Specify the IP address of the PPTP/L2TP server if you enable PPTP/L2TP client mode. Specify Gateway IP Address – Specify the gateway IP address VigorBX 2000 Series User’s Guide...
  • Page 93 Click Yes to use this function and type in a fixed IP address in the box. Fixed IP Address -Type a fixed IP address. WAN IP Network Settings Obtain an IP address automatically – Click this button to VigorBX 2000 Series User’s Guide...
  • Page 94 Specify an IP address – Click this radio button to specify some data.  IP Address – Type the IP address.  Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. VigorBX 2000 Series User’s Guide...

  • Page 95: Ii-1-2-8 Details Page For 3G/4G Usb Modem (Ppp Mode) In Wan3/Wan4

    Modem Initial String Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of the string you can set is 47 VigorBX 2000 Series User’s Guide...
  • Page 96 IP address in this field for pinging. TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type a value for TTL. After finishing all the settings here, please click OK to activate them. VigorBX 2000 Series User’s Guide...

  • Page 97: Ii-1-2-9 Details Page For 3G/4G Usb Modem (Dhcp Mode) In Wan3/Wan4

    APN Name APN means Access Point Name which is provided and required by some ISPs. Type the name and click Apply. The maximum length of the name you can set is 47 characters. VigorBX 2000 Series User’s Guide...

  • Page 98: Ii-1-2-10 Details Page For Ipv6 - Offline In Wan1/Wan2/Wan3/Wan4

    TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finishing all the settings here, please click OK to activate them. – – When Offline is selected, the IPv6 connection will be disabled. VigorBX 2000 Series User’s Guide...

  • Page 99: Ii-1-2-11 Details Page For Ipv6 - Ppp In Wan1/Wan2

    IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. Below shows an example for successful IPv6 connection based on PPP mode. VigorBX 2000 Series User’s Guide...

  • Page 100: Ii-1-2-12 Details Page For Ipv6 - Tspc In Wan1/Wan2/Wan3/Wan4

    After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet. Available settings are explained as follows: VigorBX 2000 Series User’s Guide...
  • Page 101 IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...

  • Page 102: Ii-1-2-13 Details Page For Ipv6 - Aiccu In Wan1/Wan2/Wan3/Wan4

    ID (e.g., T115394). Type the ID offered by Tunnel Broker. Subnet Prefix Type the subnet prefix address obtained from service provider. The maximum length of the prefix you can set is 128 characters. VigorBX 2000 Series User’s Guide...
  • Page 103 IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...

  • Page 104: Ii-1-2-14 Details Page For Ipv6 - Dhcpv6 Client In Wan1/Wan2

    Enable Bridge Mode – Check the box to enable Bridge mode. Bridge Subnet – Choose LAN interface to build a bridge connection between such WAN interface and the selected LAN. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...

  • Page 105: Ii-1-2-15 Details Page For Ipv6 - Static Ipv6 In Wan1/Wan2

    The network connection will be on always.  Ping IP/Hostname – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as VigorBX 2000 Series User’s Guide...
  • Page 106 Enable Bridge Mode – Check the box to enable Bridge mode. Bridge Subnet –Choose LAN interface to build a bridge connection between such WAN interface and the selected LAN. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...

  • Page 107: Ii-1-2-16 Details Page For Ipv6 - 6In4 Static Tunnel In Wan1/Wan2

    IP address in this field for pinging.  TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 108 Type the IPv4 addresses of the 6rd Border Relay for a given 6rd domain. IPv4 Mask Length Type a number of high-order bits that are identical across all CE IPv4 addresses within a given 6rd domain. It may be any value between 0 and 32. VigorBX 2000 Series User’s Guide...
  • Page 109 TTL (Time to Live) –If you choose Ping Detect as detection mode, you have to type TTL value. After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode. VigorBX 2000 Series User’s Guide...
  • Page 110 WAN type may not configure the same VLAN tag value. Enable - Check this box to enable the port-based bridge function on this channel. P1 ~ P6 – Check the box(es) to build bridge connection on LAN. VigorBX 2000 Series User’s Guide...
  • Page 111 VLAN Tags. Channels using the same WAN type may not configure the same VLAN tag value. Priority – Choose the number to determine the packet priority for such VLAN. The range is from 0 to 7. VigorBX 2000 Series User’s Guide...
  • Page 112 WAN links for Channel 5, 6 and 7 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 5, 6 or 7 to configure your router. VigorBX 2000 Series User’s Guide...
  • Page 113 It is available only when VDSL or Ethernet (WAN2) is selected as WAN Type. Choose PPPoE/PPPoA Client or Static or Dynamic IP as the WAN mode for such channel.  If PPPoE/PPPoA Client is selected as WAN Setup, you VigorBX 2000 Series User’s Guide...
  • Page 114 IP address for pinging. With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.  TTL (Time to Live) – Displays value for your reference. VigorBX 2000 Series User’s Guide...
  • Page 115 It allows the enabled PVC channel to use the same ADSL connection settings of another PVC channel. Please choose the PVC channel via the drop down list. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 116 WAN interface will be terminated. Send Mail Alert to Administrator – The system will send out a warning message to the administrator when the quota is running out. However, the connection charges will be calculated continuously. VigorBX 2000 Series User’s Guide...
  • Page 117 Today is day – Specify the day in the cycle as the starting point which Vigor router will reset the traffic record. For example, “3” means the third day of the cycle duration. After finished the above settings, click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 118 Send Mail Alert to Administrator is selected. Or, the system will send out SMS message to the administrator if Send SMS messages to Administrator is selected. VigorBX 2000 Series User’s Guide...
  • Page 119 PPP, TSPC, AICCU, DHCPv6 Client and Static IPv6. Access into the web user interface of ViogrBX 2000. Open WAN>> Internet Access. Choose one of the WAN interfaces as the one supporting IPv6 service. Then, click the IPv6 button of the selected WAN. VigorBX 2000 Series User’s Guide...
  • Page 120 Different connection types will bring out different configuration page. Refer to the following:  PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same time Choose PPP and type the information for PPPoE of IPv4. VigorBX 2000 Series User’s Guide...
  • Page 121 Access into the setting page for IPv6 service, it is not necessary for you to configure anything. Click OK and open Online Status. If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time. VigorBX 2000 Series User’s Guide...
  • Page 122 VigorBX 2000 Series User’s Guide...
  • Page 123 (In the following figure, the TSPC information is obtained from http://gogo6.com/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shown as follows: VigorBX 2000 Series User’s Guide...
  • Page 124 (In the following figure, the AICCU information is obtained from https://www.sixxs.net/main/ after applied for the service.) Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: VigorBX 2000 Series User’s Guide...
  • Page 125 DHCPv6 Client Choose DHCPv6 Client. Click one of the identity associations and type the IAID number. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: VigorBX 2000 Series User’s Guide...
  • Page 126  Static IPv6 Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: VigorBX 2000 Series User’s Guide...
  • Page 127 Choose 6in4 Static Tunnel. Type remote endpoint IPv4 address, 6in4 IPv6 Address, LAN Routed Prefix and Tunnel TTL. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: VigorBX 2000 Series User’s Guide...
  • Page 128  Choose 6rd. Type IPv4 Border Relay, IPv4 Mask Length, 6rd Prefix and 6rd Prefix Length. Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows: VigorBX 2000 Series User’s Guide...
  • Page 129 In the field of DHCPv6 Server Configuration, when DHCPv6 service is enabled, you can assign available IPv6 address for the client manually. Info When both mechanisms are enabled, the client can determine which mechanism to be used (e.g., the default mechanism for Windows7 is RADVD). VigorBX 2000 Series User’s Guide...
  • Page 130 IPv4 IP and IPv6 IP services. Its IPv6 address is seen with a format of 2001:200:dff:fff1:216:3eff:feb1:44d7. After getting the above message, it means the IPv6 service has been activated successfully. VigorBX 2000 Series User’s Guide...
  • Page 131 If not, only a steady turtle will be seen. If you can see a turtle dancing on the screen, that means IPv6 service is ready for you to access and utilize. VigorBX 2000 Series User’s Guide...
  • Page 132 IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. VigorBX 2000 Series User’s Guide...
  • Page 133 You can group local hosts by physical ports and create up to 8 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. VigorBX 2000 Series User’s Guide...
  • Page 134 DHCP- LAN1 is configured with DHCP in default. If required, please check the DHCP box for each LAN. IP Address - Display the IP address for each LAN item. Such information is set in default and you can not modify it. VigorBX 2000 Series User’s Guide...
  • Page 135 Internet Access server (PPPoE, PPTP, L2TP or DHCP server). Inter-LAN Routing Check the box to link two or more different subnets (LAN and LAN). When you finish the configuration, please click OK to save and exit this page. VigorBX 2000 Series User’s Guide...
  • Page 136 DHCP request  DHCP Server IP Address – It is available when Enable Relay Agent is checked. Set the IP address of the DHCP server you are going to use so the Relay Agent can help VigorBX 2000 Series User’s Guide...
  • Page 137 If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name immediately. Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. VigorBX 2000 Series User’s Guide...
  • Page 138 Use the drop down list to specify a WAN interface for IPv6. Static IPv6 Address IPv6 Address –Type static IPv6 address for LAN. configuration Prefix Length – Type the fixed value for prefix length. Add – Click it to add a new entry. VigorBX 2000 Series User’s Guide...
  • Page 139 Disable Server –Click it to disable DHCPv6 server. Start IPv6 Address / End IPv6 Address –Type the start and end address for IPv6 server. Advance setting More options are offered under the Advance setting. Click Edit to open the pop-up window. VigorBX 2000 Series User’s Guide...
  • Page 140 WAN, but also the prefix for IPv6 LAN IP address can be assigned by extension WAN specified here. When you finish the configuration, please click OK to save and exit this page. VigorBX 2000 Series User’s Guide...
  • Page 141 Start IP Address - Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 1st IP address of your router is 192.168.1.1, the starting IP address must be 192.168.1.2 or greater, but smaller than VigorBX 2000 Series User’s Guide...
  • Page 142 Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. When you finish the configuration, please click OK to save and exit this page. VigorBX 2000 Series User’s Guide...
  • Page 143 1st IP address of your router is 192.168.1.1, the starting IP address must be 192.168.1.2 or greater, but smaller than 192.168.1.254. IP Pool Counts - Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. The default is VigorBX 2000 Series User’s Guide...
  • Page 144 The multi-subnet can let a small businesses have much better isolation for multi-occupancy applications. Go to LAN page and select VLAN. The following page will appear. Click Enable to invoke VLAN function. Below is an example page in VigorBX 2000n: VigorBX 2000 Series User’s Guide...
  • Page 145 VigorBX 2000 Series User’s Guide...
  • Page 146 Choose one of them to make the selected VLAN mapping to the specified subnet only. For example, LAN1 is specified for VLAN0. It means that PCs grouped under VLAN0 can get the IP address(es) that specified by the subnet. VigorBX 2000 Series User’s Guide...
  • Page 147 Leave one VLAN untagged at least to prevent from not connecting to Vigor router due to unexpected error. VigorBX 2000 series features a hugely flexible VLAN system. In its simplest form, each of the Gigabit LAN ports can be isolated from each other, for example to feed different companies or departments but keeping their local traffic completely separated.
  • Page 148 (isolated) or common (able to communicate with each other). This is ideal for departmental or multi-occupancy applications. Info As for the VLAN applications, refer to “Appendix I: VLAN Application on Vigor Router” for more detailed information. VigorBX 2000 Series User’s Guide...
  • Page 149 Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below. Select All Click this link to select all the items in the ARP table. Sort Reorder the table based on the IP address. VigorBX 2000 Series User’s Guide...
  • Page 150 PC. If not, no one of the PCs can access into Internet. And the web user interface of the router might not be accessed. When you finish the configuration, click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 151 Select which ports are necessary to be mirrored for transmitting the packets. Mirrored Rx Port Select which ports are necessary to be mirrored for receiving the packets. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 152 Check the box to enable LAN 802.1x function. 802.1x ports After enabling the function, simply specify the LAN port(s) to apply such function. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 153 Display the applied interface of the profile. Preview Open a preview window according to the configured settings. There are four profiles which allow you to configure mode, priority, and applied interface in response to different conditions or requirements. VigorBX 2000 Series User’s Guide...
  • Page 154 Button – Define the word (default word is “Continue”) shown on the button.  User must click button to proceed – Check the box to force the user click the button (with the word defined on Button box) to proceed the operation. VigorBX 2000 Series User’s Guide...
  • Page 155 The advantage is that each SSID (1/2/3/4) for wireless network can be applied with different web portal separately. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 156 DHCP value, and the option can be configured on a specific LAN interface. 1. To configure DHCP options, go to LAN >> General Setup >> Advanced. 2. Add a new DHCP option: Check Enable. VigorBX 2000 Series User’s Guide...
  • Page 157 IP address of the router. – – This option allows DHCP server to identify a TFTP server for the DHCP clients. The data should be the name or IP address of the server in ASCII characters. VigorBX 2000 Series User’s Guide...
  • Page 158 This option allows DHCP server to pass the IP address of the TFTP server from where the DCHP clients could download their configuration. The data should be the IP address of the TFTP server. Info For any questions, please feel free to send e-mail to support@DrayTek.com VigorBX 2000 Series User’s Guide...
  • Page 159 Usually we use the 192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. VigorBX 2000 Series User’s Guide...
  • Page 160 The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 40 port-mapping entries for the internal hosts. VigorBX 2000 Series User’s Guide...
  • Page 161 WAN IP alias that can be selected and used for port redirection. The default setting is All which means all the incoming data from any port will be redirected to specified range of IP address and port. VigorBX 2000 Series User’s Guide...
  • Page 162 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. VigorBX 2000 Series User’s Guide...
  • Page 163 VigorBX 2000 Series User’s Guide...
  • Page 164 Click DMZ Host to open the following page. You can set different DMZ host for each WAN interface. Click the WAN tab to switch into the configuration page for that WAN. VigorBX 2000 Series User’s Guide...
  • Page 165 IP address will be shown on the following screen. Click OK to save the setting. DMZ Host for WAN2, WAN3 or WAN4 is slightly different with WAN1. Active True IP selection is available for WAN1 only. See the following figure. VigorBX 2000 Series User’s Guide...
  • Page 166 When you have selected one private IP from the above dialog, the IP address will be shown on the screen. Click OK to save the setting. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 167 Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. VigorBX 2000 Series User’s Guide...
  • Page 168 Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 169 Display the protocol for the incoming data of such triggering profile. Incoming Port Display the port for the incoming data of such triggering profile. Status Display if the rule is active or de-active. Click the index number link to open the configuration page. VigorBX 2000 Series User’s Guide...
  • Page 170 Type the port or port range for such triggering profile. Incoming Protocol When the triggering packets received, it is expected the incoming packets will use the selected protocol. Select the protocol (TCP, UDP or TCP/UDP) for the incoming data of such triggering profile. VigorBX 2000 Series User’s Guide...
  • Page 171 Incoming Port Type the port or port range for the incoming packets. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 172 FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on VigorBX 2000 series will respond the specified private IP address.
  • Page 173 Wake on LAN (WOL) of this router. In addition, such PC must have installed a network card supporting WOL function. By the way, WOL function must be set as “Enable” on the BIOS setting. VigorBX 2000 Series User’s Guide...
  • Page 174 DDNS setup to set account(s). WAN Interface Display the WAN interface used. Domain Name Display the domain name that you set on the setting page of DDNS setup. Active Display if this account is active or inactive. VigorBX 2000 Series User’s Guide...
  • Page 175 Dynamic DNS providers. You could get more detailed information from their websites. Mail Extender If the mail server is defined with another name, please type the name in this area. Such mail server will be used as backup mail exchange. VigorBX 2000 Series User’s Guide...
  • Page 176 In the DDNS setup menu, uncheck Enable Dynamic DNS Setup, and push Clear All button to disable the function and clear all accounts from the router. In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. VigorBX 2000 Series User’s Guide...
  • Page 177 FTP, Mail or Web server inside LAN, you can specify specific private IP address (es) to correspondent servers. Thus, even the remote PC is adopting public DNS as the DNS server, the LAN DNS resolution on VigorBX 2000 series will respond the specified private IP address.
  • Page 178 In general, one domain name maps with one IP address. If required, you can configure two IP addresses mapping with the same domain name. Add – Click it to open a dialog to type the host’s IP address. VigorBX 2000 Series User’s Guide...
  • Page 179 Type the domain name for such profile. DNS Server IP Address Type the IP address of the DNS server you want to use for DNS forwarding. Click OK button to save the settings. A new LAN DNS profile has been created. VigorBX 2000 Series User’s Guide...
  • Page 180 VigorBX 2000 Series User’s Guide...
  • Page 181 You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule: Click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. VigorBX 2000 Series User’s Guide...
  • Page 182 Example Suppose you want to control the PPPoE Internet access connection to be always on (Force On) from 9:00 to 18:00 for whole week. Other time the Internet access connection should be disconnected (Force Down). VigorBX 2000 Series User’s Guide...
  • Page 183 The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. The maximum length of the shared secret you can set is 36 characters. VigorBX 2000 Series User’s Guide...
  • Page 184 Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. After finished the above settings, click OK button to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 185 LDAP to search or list the directory object, inquire or manage the active directory. This page allows you to enable the function and specify general settings for LDAP server. VigorBX 2000 Series User’s Guide...
  • Page 186 After finished the above settings, click OK button to save the settings. You can configure eight AD/LDAP profiles. These profiles would be used with User Management for different purposes in management. Click any index number link to open the following page. VigorBX 2000 Series User’s Guide...
  • Page 187 AD/LDAP Server to assist you finish the setup. After finished the above settings, click OK to save and exit this page. A new profile has been created. VigorBX 2000 Series User’s Guide...
  • Page 188 Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. VigorBX 2000 Series User’s Guide...
  • Page 189 IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P6 It indicates the LAN port used for the multicast group. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 190 MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. VigorBX 2000 Series User’s Guide...
  • Page 191 Schedule Type the schedule number that the SMS will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 192 Schedule Type the schedule number that the notification will be sent out. You can click the Schedule(1-15) link to define the schedule. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 193 Below shows an example for applying the bonjour feature that Vigor router can be used as the FTP server. 1. Here, we use Firefox and DNSSD to discover the service in such case. Therefore, just ensure the Bonjour client program and DNSSD for Firefox have been installed on the computer. VigorBX 2000 Series User’s Guide...
  • Page 194 2. Open the web browse, Firefox. If Bonjour and DNSSD have been installed, you can open the web page (DNSSD) and see the following results. 3. Open System Maintenance>>Management. Type a name (e.g., DrayTek) as the Router Name and click OK.
  • Page 195 Vigor router (based on Bonjour protocol) is ready to be used as a printer server, FTP server, SSH Server, Telnet Server, and HTTP Server. 6. Now, any page or document can be printed out through Vigor router (installed with a printer). VigorBX 2000 Series User’s Guide...
  • Page 196 There is no need to pre-configure user profile for each user on Vigor router anymore. We only need to configure the Groups DN, then the Vigor router (e.g., VigorBX 2000 series) can pass the authentication to LDAP server with the pre-defined Group path.
  • Page 197 Click OK to save the settings above. Open User Management>>General Setup. Select User-Based as the Mode Selection option. VigorBX 2000 Series User’s Guide...
  • Page 198 Then open VPN and Remote Access>>PPP General Setup to check the profile(s) that will be authenticated with LDAP server. After above configurations, users belong to either “rd1” or “shrd” group can access Internet after inputting their credentials on LDAP server. VigorBX 2000 Series User’s Guide...
  • Page 199 Other routing Specify routing policy to determine the direction of the data transmission. Info For more detailed information about using policy route, refer to Support >>FAQ/Application Notes on www.draytek.com. VigorBX 2000 Series User’s Guide...
  • Page 200 Displays the destination address of the static route. Status Displays the status of the static route. Set to Factory Default Clear all of the settings and return to factory default settings. Viewing Routing Table Displays the routing table for your reference. VigorBX 2000 Series User’s Guide...
  • Page 201 1st subnet (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and continuously exchange of IP routing information with different subnets. VigorBX 2000 Series User’s Guide...
  • Page 202 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Click OK. VigorBX 2000 Series User’s Guide...
  • Page 203 Set to Factory Default Clear all of the settings and return to factory default settings. Viewing IPv6 Routing Displays the routing table for your reference. Table Click any underline of index number to get the following page. VigorBX 2000 Series User’s Guide...
  • Page 204 Type the gateway address for this entry. Network Interface Use the drop down list to specify an interface for this static route. When you finish the configuration, please click OK to save and exit this page. VigorBX 2000 Series User’s Guide...
  • Page 205 Allow to configure frequently used settings of route policy via three setting pages Advance Mode Allow to configure detailed settings of route policy. To use Wizard Mode, simple do the following steps: 1. Click the Wizard Mode radio button. VigorBX 2000 Series User’s Guide...
  • Page 206 Available settings are explained as follows: Item Description Interface Use the drop down list to choose a WAN or LAN interface or VPN profile. Packets match with the above criteria will be transferred to the interface chosen here. VigorBX 2000 Series User’s Guide...
  • Page 207 It determines which mechanism that the router will use to Routing forward the packet to WAN. 5. After choosing the mechanism, click Next to get the summary page for reference. 6. If there is no error, click Finish to complete wizard setting. VigorBX 2000 Series User’s Guide...
  • Page 208 2. Click Index 1 to access into the following page. Available settings are explained as follows: Item Description Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. VigorBX 2000 Series User’s Guide...
  • Page 209 Gateway IP – Specific gateway is used only when you want to forward the packets to the desired gateway. Usually, Default Gateway is selected in default. When you finish the configuration, please click OK to save and exit this page. VigorBX 2000 Series User’s Guide...
  • Page 210 Vigor router analyze how a single packet will be sent by a route policy. Analyze how multiple packets… - Choose such mode to make Vigor router analyze how multiple packets in a specified file will be sent by a route policy. VigorBX 2000 Series User’s Guide...
  • Page 211 Note that the analysis was based on the current "load-balance/route policy" settings, we do not guarantee it will be 100% the same as the real case. VigorBX 2000 Series User’s Guide...
  • Page 212 The web user interface will be revised later. Example 1: In the following figure, a LAN to LAN VPN tunnel is built between DrayTek VPN router (e.g., VigorBX 2000 series) and the remote router. Firewall Router can receive all of the traffic coming from remote PC which wants to access into Internet;...
  • Page 213 Table are fixed as “150”. You can adjust the value for such route policy with lower value, e.g., 100 to ensure it will be applied to packets transmission with the highest priority. After finished the above settings, click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 214 To route the packets coming from the Firewall Router back to the remote router, access into the web user interface of the Firewall Router. Then, set “192.168.1.1/24” as the gateway IP address and set “172.16.3.0/24” as the destination IP address. VigorBX 2000 Series User’s Guide...
  • Page 215 In the following web page, check Enable; type “192.168.1.10” as Src IP Range; type “213.57.89.100” as the Destination IP for the remote VPN server; and choose VPN as the Interface setting. Click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 216 We will take an example to introduce how to make use of this feature. Log into the web user interface of VigorBX 2000. Open WAN>>Internet Access. For WAN1, choose MPoA/Static or Dynamic IP as the Access Mode. VigorBX 2000 Series User’s Guide...
  • Page 217 WAN IP address as 202.211.100.10. Click the WAN IP Alias button to configure the other IP address which is 202.211.100.11. Make sure Join IP NAT Pool is not checked. Click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 218 After finished configuration for WAN1, open Load-Balance/Route Policy>>General Setup. Click Index number 1 and 2 to configure the details. After finished the settings, click OK to save the settings respectively. VigorBX 2000 Series User’s Guide...
  • Page 219 Upon completing the above configuration, you have specified the outgoing IP address(es) for some specific computers. Now, you bind some specific computers to some WAN IP alias for outgoing traffic. VigorBX 2000 Series User’s Guide...
  • Page 220 Internet. The PC in LAN1 can send the data to the remote PC through the specified WAN1. Access into web user interface of VigorBX 2000 series. Open Load-Balance/Route Policy>>General Setup. From the following web page, simply click index number #1.
  • Page 221 203.65.1.35; choose WAN1 as the Interface; click default gateway; do not check Failover To. After finished the above settings, click OK to save the configuration. Now, the packets sent to the remote PC (IP address: 203.65.1.35) will be forced to pass through WAN1. VigorBX 2000 Series User’s Guide...
  • Page 222 This page is left blank. VigorBX 2000 Series User’s Guide...
  • Page 223 Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access. VigorBX 2000 Series User’s Guide...
  • Page 224 SSID as identification, located channel etc. Vigor router supports four SSID settings for wireless connections. Each SSID can be defined with different name and download/upload rate for selecting by stations connected to the router wirelessly. VigorBX 2000 Series User’s Guide...
  • Page 225 Internet without hassle of the confidential information leakage. For a more flexible deployment, you may add filters of MAC addresses to isolate users’ access from wired LAN. It will display all the stations in your wireless network and the status of their connection. VigorBX 2000 Series User’s Guide...
  • Page 226 In some countries, there are restrictions on DFS channels as well. We will implement country code to restrict uncertified channels. WPS (Wi-Fi Protected Setup) provides easy procedure to make network connection between wireless station and wireless access point (vigor router) with the encryption of WPA and WPA2. VigorBX 2000 Series User’s Guide...
  • Page 227 Description Wireless 2.4GHz Settings Name Type the SSID name of this router for wireless 2.4GHz. The default name is defined with DrayTek. Change the name if required. Mode At present, the router can connect to 11n Only, 11g Only, Mixed (11b+11g), Mixed (11a+11n), Mixed (11g+11n), and...
  • Page 228 Exit the wireless wizard without saving any changes. 3. After typing the required information, click Next. The settings in the page limit the wireless station (guest) accessing into Internet but not being allowed to share the LAN network and VPN connection. VigorBX 2000 Series User’s Guide...
  • Page 229 The wireless mode offered by this wizard is WPA2/PSK. The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via VigorBX 2000 Series User’s Guide...
  • Page 230 Exit the wireless wizard without saving any changes. 4. After typing the required information, click Next. 5. The following page will display the configuration summary for wireless setting. 6. Click Finish to complete the wireless settings configuration. VigorBX 2000 Series User’s Guide...
  • Page 231 Check the box to enable wireless function. Mode For 2.4GHz: At present, the router can connect to 11g Only, 11n Only(2.4 GHz), Mixed (11b+11g), Mixed (11g+11n), and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mixed (11b+11g+11n) mode. VigorBX 2000 Series User’s Guide...
  • Page 232 It controls the data transmission rate through wireless connection. Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbps. VigorBX 2000 Series User’s Guide...
  • Page 233 For the wireless client who wants to access into Internet through such router, please input the default PSK value for connection. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Available settings are explained as follows: VigorBX 2000 Series User’s Guide...
  • Page 234 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, such as 0x4142434445.) 128-Bit - For 128 bits WEP key, either 13 ASCII characters, such as ABCDEFGHIJKLM (or 26 hexadecimal digits leading by VigorBX 2000 Series User’s Guide...
  • Page 235 LAN. For example, they can be grouped under SSID 1 and SSID 2 at the same time if you check SSID 1 and SSID 2. MAC Address Filter Display all MAC addresses that are edited before. VigorBX 2000 Series User’s Guide...
  • Page 236 He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. There are two methods to do network connection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code. VigorBX 2000 Series User’s Guide...
  • Page 237 On the side of VigorBX 2000 series which served as an AP, press WPS button once on the  front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card.
  • Page 238 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) VigorBX 2000 Series User’s Guide...
  • Page 239 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. VigorBX 2000 Series User’s Guide...
  • Page 240 Item Description Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. VigorBX 2000 Series User’s Guide...
  • Page 241 Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 242 Such channel can increase the performance for data transit. Guard Interval It is to assure the safety of propagation delays and reflections for the sensitive digital data. If you choose auto VigorBX 2000 Series User’s Guide...
  • Page 243 The greater the value is, the higher intensity of the signal will be. WMM Capable WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access categories derived from 802.1d VigorBX 2000 Series User’s Guide...
  • Page 244 It allows devices to take more time in sleeping state and consume less power to improve the performance by minimizing transmission latency. The default setting is Disable. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 245 AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. VigorBX 2000 Series User’s Guide...
  • Page 246 WLAN station and click Add to Access Control below. Available settings are explained as follows: Item Description Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. VigorBX 2000 Series User’s Guide...
  • Page 247 SSID will be listed on Station Control List. WEB Portal Setup Click it to access in to LAN>>Web Portal Setup page for modifying the settings if required. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 248 This page is left blank. VigorBX 2000 Series User’s Guide...
  • Page 249 IP PBX （IP -Private Branch eXchange） is a private telephone network used within an enterprise. Users of the PBX can share a certain number of outside lines for making telephone calls (VoIP) external to the PBX. VigorBX 2000 Series User’s Guide...
  • Page 250 G.729 A & B. Each codec uses a different bandwidth and hence provides different levels of voice quality. The more bandwidth a codec uses the better the voice quality, however the codec used must be appropriate for your Internet bandwidth. VigorBX 2000 Series User’s Guide...
  • Page 251 Our Vigor V models firstly apply efficient codecs designed to make the best use of available bandwidth, but Vigor V models also equip with automatic QoS assurance. QoS Assurance VigorBX 2000 Series User’s Guide...
  • Page 252 Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. VigorBX 2000 Series User’s Guide...
  • Page 253 2. The screen of IPPBX Wizard will be shown as follows. Available settings are explained as follows: Item Description Extension Group Type a name as a display for this extension group. Name Extension Group Type the number of extension for such group. Number VigorBX 2000 Series User’s Guide...
  • Page 254 4. The new added group will be displayed on the screen. You can set groups for using in different conditions. Then click Next to access into next web page. 5. This page allows you to set profiles for SIP outside lines at one time. VigorBX 2000 Series User’s Guide...
  • Page 255 When dial tone appears, please dial the real outside line number. Second, dial a short number and then the real outside line number without waiting for dial tone. The short number is defined here as Trunk Number. VigorBX 2000 Series User’s Guide...
  • Page 256 Available settings are explained as follows: Item Description When do you start Use the drop down menu to choose the time as the starting working in the point in the morning. VigorBX 2000 Series User’s Guide...
  • Page 257 If such schedule will be available in the weekend, simply available at the click Yes, otherwise, click No. weekend 9. When you finish the settings, click Finish to save the settings and exit the wizard. VigorBX 2000 Series User’s Guide...
  • Page 258 Edit – Press it to modify the phone settings for local phone port. Index 50 is defined as “901” in default. There are 50 extension profiles that you can configure. Please click any number under Index to set detailed configuration. VigorBX 2000 Series User’s Guide...
  • Page 259 In addition, refer to section 3.14 How to enhance the security for extensions' registration for detailed information. Type Determine the type for such extension profile. SIP – Choose this type to make such extension profile VigorBX 2000 Series User’s Guide...
  • Page 260 No answer after ….. – When the incoming phone call is not picked up, it will be processed by keeping ringing, leaving voice mail, forwarding to certain extension or group, or forwarding a PSTN or mobile via SIP Trunk. Please specify VigorBX 2000 Series User’s Guide...
  • Page 261 Later, the internal phone calls will be transferred to such specified external number if they match the conditions of such profile. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 262 That is, people can dial main SIP accounts or sub-accounts via VigorBX 2000. This page allows you to set profiles for 6 SIP outside lines (main account) at one time with 50 alias names (sub account). Each item is explained as follows: VigorBX 2000 Series User’s Guide...
  • Page 263 Click Enable to enable such trunk profile. Profile Name Assign a name for this profile for identifying. You can type similar name with the domain. For example, if the domain name is draytel.org, then you might set draytel-1 in this VigorBX 2000 Series User’s Guide...
  • Page 264 The short number is defined here as Trunk Number. Out-going call CLI Determine which phone number will be shown to the remote end. Main number – Choose this item to display the SIP trunk VigorBX 2000 Series User’s Guide...
  • Page 265 After finishing all the settings here, please click OK to save the configuration. Info Enable Waiting Music only affects on call involving this trunk; the Music on Hold is system wide, it also works for extension / extension call. VigorBX 2000 Series User’s Guide...
  • Page 266 Display the SIP Trunk for such sub account attached. You can set 50 profiles as alias for SIP Trunk list. Click the number under Index to set detailed configuration. Available settings are explained as follows: VigorBX 2000 Series User’s Guide...
  • Page 267 After choosing the answer mode, you have to specify the right extension, group, or Virtual Fax from the drop down list next to the answer mode selection. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 268 Attendant (AA), or forward it to any Extension or Group directly. Holiday - Set the answering mode for such outside line in holiday. You can specify it with Auto Attendant (AA), or forward it to any Extension or Group directly. VigorBX 2000 Series User’s Guide...
  • Page 269 After finishing all the settings here, please click OK to save the configuration. Info Enable Waiting Music only affects on call involving this trunk; the Music on Hold is system wide, it also works for extension / extension call. VigorBX 2000 Series User’s Guide...
  • Page 270 Attendant (AA), or forward it to any Extension or Group directly. Holiday - Set the answering mode for such outside line in holiday. You can specify it with Auto Attendant (AA), or forward it to any Extension or Group directly. VigorBX 2000 Series User’s Guide...
  • Page 271 For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user have a quick and easy way to dial out through VoIP interface. Available settings are explained as follows: Item Description VigorBX 2000 Series User’s Guide...
  • Page 272 SIP accounts. Please set up one SIP account first to make this route available. This item will be changed according to the port settings configured in IP PBX>>PBX System>>Phone Settings, and IP PBX>>Trunks>>SIP Trunk. VigorBX 2000 Series User’s Guide...
  • Page 273 Phone Number Type the complete phone number (maximum 19) for the client that you want to dial out. Trunk Choose the trunk number (from SIP1 to SIP12) for the phone VigorBX 2000 Series User’s Guide...
  • Page 274 OUT-outgoing call, IN & OUT – both incoming and outgoing calls. Apply To Call barring is available when OUT is selected as the Call Direction. It can be applied to specific extension number (set VigorBX 2000 Series User’s Guide...
  • Page 275 For Block Unknown Domain – this function can block incoming calls (through Phone port) from unrecognized domain that is not specified in SIP accounts. Such control also can be done based on preconfigured schedules. VigorBX 2000 Series User’s Guide...
  • Page 276 SIP Local Port Set a port number as SIP local port. The default setting is 5060. SIP Proxy Realm Type SIP service domain name. In full SIP URI, such is the part after @ symbol. VigorBX 2000 Series User’s Guide...
  • Page 277 3. That means the user has three times to type the correct password. After that, the system will block the trying of Internet access by such user. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 278 Auto Attendant number When you setup a customer trunk device, it can use its (for Custom trunk usage) hot-line function to call the number specified here to access VigorBX 2000 Series User’s Guide...
  • Page 279 After finishing all the settings here, please click OK to save the configuration. This page allows you to make several extension numbers under certain group. Thus, when a phone call incomes, all the extension numbers under such group will ring VigorBX 2000 Series User’s Guide...
  • Page 280 Voice Mail Password Type the password used to access voice mail for this group. Hunt Rule Use the drop down menu to choose rule for such group. Simultaneously – Choose such rule can make all the phones VigorBX 2000 Series User’s Guide...
  • Page 281 Play user prompt if all group members are busy /off-line – If you choose Terminate or Keep Ringing, please check the box to specify the prompt. Add>> Click this button to move the selected item in Available area VigorBX 2000 Series User’s Guide...
  • Page 282 FAX can be forwarded to specified e-mail address byVigorBX 2000. Thus, even if the user is outside the office, he/she also can view and read the FAX via notebook or mobile phone easily. VigorBX 2000 Series User’s Guide...
  • Page 283 Save voice message to USB disk – Check the box to save the voice message to the USB disk connecting to Vigor router. Save voice message wav file to USB disk –Check the box to save the voice message as wav file to the USB disk connecting VigorBX 2000 Series User’s Guide...
  • Page 284 Max attachment size (M) – Each e-mail is allowed to have file(s) attached. The default size of the attached file is 2(M). After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 285 It means Caller ID Prefix. For example, if the rule is set with“123”, then caller IDs of123456 and 123789 will match this rule. Forward to Select the extension number which contains the email address you forward to. want the fax VigorBX 2000 Series User’s Guide...
  • Page 286 After finishing all the settings here, please click OK to save the configuration. You can set ten groups of office hours including starting point, ending point on duty day(s). Available settings are explained as follows: Item Description Office Hours Enable – Check it to enable the profile. VigorBX 2000 Series User’s Guide...
  • Page 287 Date for Month 1. It means January 2,4,6 & 7 will apply the office hour settings configured in this page. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 288      Available settings are explained as follows: Item Description Auto Attendant Wizard Use the drop down list to choose one of the menus to configure the auto attendant profile. VigorBX 2000 Series User’s Guide...
  • Page 289 Play Prompt - Audio file will be played automatically.  Go to menu – Go the next specified menu (of prompt).  After finished the step 2, the system will process the Step incoming call based on the selection specified on Overflow Rule. VigorBX 2000 Series User’s Guide...
  • Page 290 MAX input error retry The system allows the caller to type wrong key for several time determined in this field. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 291 This page displays the system prompt status and allows you to download or upload other prompts toVigorBX 2000 router. VigorBX 2000 Series User’s Guide...
  • Page 292 Click the Browse button to browse and choose other audio files. Click the Restore button to save the file to the router. Next time, the audio file will be played in IP PBX system. VigorBX 2000 Series User’s Guide...
  • Page 293 Back Up. Upload System Prompt file is provided by router firmware. To use such audio file, you have to upload it to flash memory of the VigorBX 2000 Series User’s Guide...
  • Page 294 After the user inputs the correct digit (in valid range), the system will play this prompt then hang up the call. All the above prompts used are coming from user prompts. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 295 If your upstream speed is only 64Kbps, do not use G.711 codec. It is better for you to have at least 256Kbps upstream if you would like to use G.711. VigorBX 2000 Series User’s Guide...
  • Page 296 Caller ID Type, Dial tone, Ringing tone, Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial VigorBX 2000 Series User’s Guide...
  • Page 297 OutBand - Choose this one then the Vigor will capture the keypad number you pressed and transform it to digital form then send to the other side; the receiver will generate the tone according to the digital form it VigorBX 2000 Series User’s Guide...
  • Page 298 “00”. Then the above phone number will become 008865972727. When the callee receives such number, he can use re-dial function to dial back to the caller. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 299 Single Codec – If the box is checked, only the selected Codec will be applied. Packet Size The amount of data contained in a single packet. The default value is 20 ms, which means the data packet will contain 20 ms voice information. VigorBX 2000 Series User’s Guide...
  • Page 300 In addition, you can press the Advanced button to configure tone settings, volume gain and DTMF mode. For the usage and explanation, see VI-1-5-11-1 Detailed Settings for Phone Port, Advanced web page for Phone port. VigorBX 2000 Series User’s Guide...
  • Page 301 Click Browse button in the field of Restoration to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. VigorBX 2000 Series User’s Guide...
  • Page 302 This page displays call records of IP PBX such as failed call, successful call, no-answer call, date of the call and the duration of each call, and so on. Such records can be exported as a file (with file format .csv) and stored in the host. Simply click Export. VigorBX 2000 Series User’s Guide...
  • Page 303 Such records can be exported as a file (with file format .csv) and stored in the host. Simply click Export. This page displays owner’s name, IP address, status and peer number for each extension. Click Refresh to reload the page whenever you want. VigorBX 2000 Series User’s Guide...
  • Page 304  page as Parking Server Number. When an incoming call is parked, a certain extension will be assigned to it temporarily and the number will be announced to you. In this example, the announcement “Your VigorBX 2000 Series User’s Guide...
  • Page 305 Another useful scenario: During a conversation, you may need to go to another office for some reason (for example, to check an important file). You can park the call and continue the conversation from another phone at the other office. VigorBX 2000 Series User’s Guide...
  • Page 306 VigorBX 2000 supports IVR and Auto Attendant. When someone calls in, VigorBX 2000 automatically plays the recorded message like "Thanks for calling Draytek Corporation. For sales, press 1; for support, press 2, etc." After pressing a number, the caller will be transferred to the extension he would like to or an operator.
  • Page 307 After hearing the prompt, dial 1155# to start recording the Prompt 5 for the office hours greeting. “Thank you for calling Draytek Company. If you know the extension of the person you’d like to reach, you may dial it now. Otherwise, please choose from the following options.
  • Page 308 Sequentially, the extension 201 ring first, then 202, 205, 203 and finally 204 rings one by one when someone calls 200. If the hunt rule is set with Simultaneously, extensions 201, 202, 203, 204 and 205 ring at the same time when someone calls 200. VigorBX 2000 Series User’s Guide...
  • Page 309 Choose Auto Attendant for Office hours and Non-office hours for the SIP trunk. In this example, when you call 866669@iptel.org during the office hours, you will hear office hours greeting (Prompt 5): during the non-office hours, you will hear the non-office hours greeting (Prompt 6). VigorBX 2000 Series User’s Guide...
  • Page 310 Key 2 for sales department - Press 2 for sales.  Key 3 for advertisement - Press 3 to listen to new products’ introduction.  Key 0 for receptionist - Press 0 to speak with an operator.  VigorBX 2000 Series User’s Guide...
  • Page 311 Press Next to configure settings for Non-office hours. Key 0 is designated for Ring Extension and here it is set for receptionist. For other keys, we let the users to listen to new product introduction. Then click OK to finish the auto attendant wizard. VigorBX 2000 Series User’s Guide...
  • Page 312 Info If a caller dials the wrong extension number, VigorBX 2000 will play the greeting once more to let he/she dials the right extension again. VigorBX 2000 Series User’s Guide...
  • Page 313 Create the email server profile. Open Object Settings>>SMS/Mail Service Object and click an index number (e.g., #1). In the following page, type “DrayTek” as the Profile Name. Specify an SMTP Server (e.g., 172.16.3.8); specify the Sender Address (e.g., FAX.4F@draytek.com). Click OK to save the settings.
  • Page 314 Email to (e.g., the telephone exchange). Check the box of Forward Fax file by Email. Choose the SMTP Server (e.g, 1-DrayTek in this case) as the Email Server. Check the box of Prefer WAN interface and choose WAN2.
  • Page 315 FAX due to the work requirement. Click an index number (e.g., #1). In the web page, type the extension number (e.g., 6988), display name (e.g., MKT_Carrie) and the email address (e.g., carrie@draytek.com). Click OK to save the settings. The new phone extension profile has been created as below.
  • Page 316 If Send backup is configured with Enable, open System Maintenance>>Syslog/Mail Alert Setup to configure Mail Alert Setup. The FAX, except received by the receiver, also will be sent and kept in another e-mail address specified by the fax administrator. VigorBX 2000 Series User’s Guide...
  • Page 317 The following figure shows all of the incoming fax stored in USB disk. VigorBX 2000 Series User’s Guide...
  • Page 318 Next, open IP PBX>>Extension and click any index (e.g., #1). Type a number (e.g., 501) in the field of Extension Number; and type the MAC address of VigorPhone 350 in the field of MAC address for Auto Provosion. Click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 319 After finished the settings, connect the IP Phone to any LAN port of VigorBX 2000. Such IP Phone, now, has registered to the specified extension (501) on VigorBX 2000 successfully. VigorBX 2000 Series User’s Guide...
  • Page 320 100 minutes everyday (for the Time Budget is set with 100). When the conversation time is accumulated up to 100 minutes, VigorBX 2000 will cut off the conversation immediately even if both sides on still on call. VigorBX 2000 Series User’s Guide...
  • Page 321 50 minutes everyday (for the Time Budget is set with 50). When the conversation time is accumulated up to 50 minutes, VigorBX 2000 will cut off the conversation immediately even if both sides on still on call. VigorBX 2000 Series User’s Guide...
  • Page 322 Group Name or Group Number for the incoming call when the caller dials the hunt group extension number remotely. Above shows a simple example. Based on the figure, we can configure the web page as the following: Open IP PBX>>PBX System and click the link of Hunt Group. VigorBX 2000 Series User’s Guide...
  • Page 323 100. After choosing the one you want, click OK to save the settings and exit the web page. Now, the system will apply such function according to your selection to the incoming calls. VigorBX 2000 Series User’s Guide...
  • Page 324 VigorBX 2000. When someone dials 200, these three extensions will ring at the same time. Here, we will introduce how to configure the Hunt Group in VigorBX 2000 series. Open the web user interface of VigorBX 2000. Access into IPPBX >> PBX System>> Hunt Group.
  • Page 325 Queueing: If no one answers, the phone call will be forced to wait for a period of time until picked up. Pick up by AA: If no one answers, the phone call will be picked up by the auto  attendant service. VigorBX 2000 Series User’s Guide...
  • Page 326 You can find the function of “Queueing” from the Overflow Rule option. Refer to the following figure: Queuing can specify the priority for the Hunt Group. There are five levels. See below: For example, the advanced setting for Queue Setting is shown as the following: VigorBX 2000 Series User’s Guide...
  • Page 327 Top Priority, it is still be queued by VigorBX 2000. Below shows the environment for actual practical application: We can configure the Hunt Group separately for the Departments of Sales and R&D as the following figures: VigorBX 2000 Series User’s Guide...
  • Page 328 When Joy and Joseph dial to Sales and R&D Departments at the same time (all of the extensions for both departments are busy or no one can answer), these phone calls will be queued by VigorBX 2000. Then, within 40 seconds, the incoming phone call signals from the VigorBX 2000 Series User’s Guide...
  • Page 329 Therefore, the extensions of these two departments will ring again within 40 seconds. (If there are phone calls coming from other Hunt Group, they will be queued by VigorBX 2000 automatically.) VigorBX 2000 Series User’s Guide...
  • Page 330 This page is left blank. VigorBX 2000 Series User’s Guide...
  • Page 331 Here Vigor router support digital certificates conforming to standard X.509. VigorBX 2000 Series User’s Guide...
  • Page 332 Your mobile phone as your key Authentication devices are now commonly used for online banking to provide a second layer of security; instead of just a password held in the user's head, they also require some other VigorBX 2000 Series User’s Guide...
  • Page 333 Most commonly that is a small keypad or display unit to be carried around. With DrayTek Mobile One-Time Passwords (MOTP), instead of carrying around an extra device, you install a program on your mobile phone and that becomes your authentication device.
  • Page 334 Route Mode/NAT Mode – If the remote network only allows you to dial in with single IP, please choose NAT mode, otherwise please choose Route Mode. Please choose a There are 32 VPN profiles for users to set. LAN-to-LAN Profile VigorBX 2000 Series User’s Guide...
  • Page 335 Info The following descriptions for VPN Type are based on the Route Mode specified in LAN-to-LAN Client Mode Selection. When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: VigorBX 2000 Series User’s Guide...
  • Page 336 When you choose IPsec, you will see the following graphic: When you choose L2TP, you will see the following graphic: When you choose L2TP over IPsec (Nice to Have) or L2TP over IPsec (Must), you will see the following graphic: VigorBX 2000 Series User’s Guide...
  • Page 337 WAN1 Only /WAN2 Only/WAN3 Only/WAN4 Only - While connecting, the router will use WAN1/WAN2/WAN3 as the only channel for VPN connection. WAN1 Only: Only establish VPN if WAN2 down - If WAN2 failed, the router will use WAN1 for VPN connection. VigorBX 2000 Series User’s Guide...
  • Page 338 After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. VigorBX 2000 Series User’s Guide...
  • Page 339 Click this radio button to set another profile of VPN Server Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. VigorBX 2000 Series User’s Guide...
  • Page 340 This item is available after you choose any one of dial-in user account profiles. Next, you have to select suitable dial-in type for the VPN server profile. There are several types provided here (similar to VPN Client Wizard). VigorBX 2000 Series User’s Guide...
  • Page 341 When you check PPTP, you will see the following graphic: When you check PPTP & IPsec & L2TP (three types) or PPTP & IPsec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: VigorBX 2000 Series User’s Guide...
  • Page 342 This field is used to authenticate for connection when you select PPTP or L2TP with or without IPsec policy above. The length of the name is limited to 11 characters. Password This field is used to authenticate for connection when you VigorBX 2000 Series User’s Guide...
  • Page 343 Finish to execute the next action. Available settings are explained as follows: Item Description Go to the VPN Click this radio button to access VPN and Remote Connection Access>>Connection Management for viewing VPN VigorBX 2000 Series User’s Guide...
  • Page 344 LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 345 40-bit encryption scheme will be applied to encrypt the data.  Maximum MPPE - This option indicates that the router will use the MPPE encryption scheme with maximum bits (128-bit) to encrypt the data. VigorBX 2000 Series User’s Guide...
  • Page 346 While using Radius or If PPP connection will be authenticated via RADIUS server or LDAP Authentication LDAP profiles, it is necessary to specify the LAN profile for the dial-in user to get IP from. VigorBX 2000 Series User’s Guide...
  • Page 347 IPsec-related VPN connections such as L2TP over IPsec and IPsec tunnel. There are two methods offered by Vigor router for you to authenticate the incoming data coming from remote dial-in user, Certificate (X.509) and Pre-Shared VigorBX 2000 Series User’s Guide...
  • Page 348 32 entries of digital certificates for peer dial-in users. Available settings are explained as follows: Item Description Set to Factory Default Click it to clear all indexes. Index Click the number below Index to access into the setting page VigorBX 2000 Series User’s Guide...
  • Page 349 The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 350 Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. VigorBX 2000 Series User’s Guide...
  • Page 351 Must -Specify the IPsec policy to be definitely applied on the L2TP connection. SSL Tunnel – Allow the remote dial-in user to make an SSL VPN connection through Internet. Specify Remote Node -You can specify the IP address of the VigorBX 2000 Series User’s Guide...
  • Page 352 High-Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. Local ID (Optional)- Specify a local ID to be used for Dial-in VigorBX 2000 Series User’s Guide...
  • Page 353 The router supports up to 32 VPN tunnels simultaneously. The following figure shows the summary table. The following figure shows the summary table according to the item (All/Trunk) selected for View. The following shows profiles joined into VPN Load Balance and VPN Backup mechanism. VigorBX 2000 Series User’s Guide...
  • Page 354 Click each index to edit each profile and you will get the following page. Each LAN-to-LAN profile includes 4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. VigorBX 2000 Series User’s Guide...
  • Page 355 If WAN1/WAN2/WAN3/WAN4 fails, the router will use another WAN interface instead.  WAN1 Only /WAN2 Only/WAN 3 Only/WAN 4 Only- While connecting, the router will use WAN1/WAN2/WAN3/WAN4 as the only channel for VPN connection. VigorBX 2000 Series User’s Guide...
  • Page 356 Internet. You should set the identity like User Name and Password below for the authentication of remote server. IPsec Tunnel - Build an IPsec VPN connection to the server VigorBX 2000 Series User’s Guide...
  • Page 357  algorithm and not apply any authentication scheme.  DES with Authentication-Use DES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. 3DES without Authentication-Use triple DES  encryption algorithm and not apply any authentication VigorBX 2000 Series User’s Guide...
  • Page 358 Index(1-15) - Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this field is blank and the function will always work. VigorBX 2000 Series User’s Guide...
  • Page 359 IPsec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPsec policy first, if it is  applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP VigorBX 2000 Series User’s Guide...
  • Page 360 Enable IPsec Dial-Out function GRE over IPsec: Check this Settings box to verify data and transmit data in encryption with GRE over IPsec packet after configuring IPsec Dial-Out setting. Both ends must match for each other by setting same virtual VigorBX 2000 Series User’s Guide...
  • Page 361 More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Masks through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. VigorBX 2000 Series User’s Guide...
  • Page 362 Advanced – Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN connection. This is usually used when you find there are several subnets behind the remote VPN router. VigorBX 2000 Series User’s Guide...
  • Page 363 Virtual IP Mapping – A pop up dialog will appear for you to specify the local IP address and the mapping virtual IP address. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 364 VPN Tunnels disconnected. Users do not need to reconnect with setting TCP/UDP Service Port again. The VPN Load Balance function can keep the transmission for internal data on tunnel stably VigorBX 2000 Series User’s Guide...
  • Page 365 IPsec, PPTP, L2TP, L2TP over IPsec (NICE), L2TP over IPsec(MUST) and so on. Member2 - Display the dial-out profile selected from the Member2 drop down list below. Advanced – This button is available only when LAN to LAN profile (or more) is created. VigorBX 2000 Series User’s Guide...
  • Page 366 Member2 drop down list below. Advanced – This button is only available when there is one or more profiles created in this page. Detailed information for this dialog, see later section - Advanced Load Balance and Backup. VigorBX 2000 Series User’s Guide...
  • Page 367 For there is one Tunnel created and connected successfully, to keep the load balance effect between two tunnels, auto-dial will be executed within two seconds. To close two tunnels of load balance after connecting, please click Disable for Status in General Setup field. VigorBX 2000 Series User’s Guide...
  • Page 368 If the router will be used as the VPN Server (i.e., with virtual address 192.168.50.200). Please type 192.168.50.200 in the field of My GRE IP. Type IP address (192.168.50.100) of the client in the field of Peer GRE IP. See the following graphic for an example. VigorBX 2000 Series User’s Guide...
  • Page 369 After setting profiles for load balance, you can choose any one of them and click Advance for more detailed configuration. The windows for advanced load balance and backup are different. Refer to the following explanation: VigorBX 2000 Series User’s Guide...
  • Page 370 Below shows the algorithm for Load Balance. Edit – Click this radio button for assign a blank table for configuring Binding Tunnel. Insert after – Click this radio button to adding a new binding tunnel table. VigorBX 2000 Series User’s Guide...
  • Page 371 TCP Service Port/UDP Service Port/ICMP/IGMP, such binding tunnel table can be established. Detail Information This field will display detailed information for Binding Tunnel Policy. Below shows a successful binding tunnel policy for load balance: VigorBX 2000 Series User’s Guide...
  • Page 372 Binding Protocol. Available settings are explained as follows: Item Description Profile Name List the backup profile name. ERD Mode ERD means “Environment Recovers Detection”. Normal – choose this mode to make all dial-out VPN TRUNK VigorBX 2000 Series User’s Guide...
  • Page 373 VPN backup function. Backup Mode - This filed displays the profile name saved in VPN TRUNK Management (with Index number and VPN Server IP address). The VPN connection built by Backup Mode supports VPN backup function. VigorBX 2000 Series User’s Guide...
  • Page 374 Dial - Click this button to execute dial out function. Refresh Seconds - Choose the time for refresh the dial information among 5, 10, and 30. Refresh - Click this button to refresh the whole connection status. VigorBX 2000 Series User’s Guide...
  • Page 375 (in this case, type VPN Server), and check the box of Enable This Profile. For Vigor router will be set as a server, the call direction shall be set as Dial-in and set 0 as Idle Timeout. VigorBX 2000 Series User’s Guide...
  • Page 376 Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for remote side. Click OK to save the settings. Open VPN and Remote Access>>Connection Management to check the dial-in connection status (from branch office). VigorBX 2000 Series User’s Guide...
  • Page 377 (in this case, type VPN Client), and check the box of Enable This Profile. For such Vigor router will be set as a client, the call direction shall be set as Dial-out. Check the box of Always on for a permanent VPN connection. VigorBX 2000 Series User’s Guide...
  • Page 378 IKE Pre-Shared Key button to set the PSK; and select Medium (AH) or High (ESP) as the security method. Continue to navigate to the TCP/IP Network Settings for setting the LAN IP for the remote side. Click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 379 Open VPN and Remote Access>>Connection Management to check the dial-in connection status (from head office). VigorBX 2000 Series User’s Guide...
  • Page 380 There are two benefits that SSL VPN provides:  It is not necessary for users to preinstall VPN client software for executing SSL VPN connection.  There are less restrictions for the data encrypted through SSL VPN in comparing with traditional VPN. VigorBX 2000 Series User’s Guide...
  • Page 381 Self-signed to use the router’s built-in default certificate. The default certificate can be used in SSL VPN server and HTTPS Web Proxy. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 382 Type the address (function variation or IP address) or path of the proxy server. Host IP Address If you type function variation as URL, you have to type corresponding IP address in this filed. Such field must match with URL setting. VigorBX 2000 Series User’s Guide...
  • Page 383 In addition, users must execute “Connect” manually in SSL Client Portal page. SSL – if you choose such selection, web proxy over SSL will be applied for VPN. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 384 Display current status (active or inactive) of the selected profile. To create a new SSL application profile: 1. Click number link under Index filed to set detailed configuration. 2. The following page will appear. Available settings are explained as follows: Item Description VigorBX 2000 Series User’s Guide...
  • Page 385 If you choose SMB, you have to specify the path of the SMB SMB Path service. 3. Enter the required information. 4. After finished the above settings, click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 386 The SSL VPN can be operated in either full tunnel mode or proxy mode. Now, VigorBX 2000 series allows up to 16 simultaneous incoming users. For SSL VPN, identity authentication and power management are implemented through deploying user accounts.
  • Page 387 Name and Password of remote dial-in user below. IPSec Tunnel - Allow the remote dial-in user to make an IPSec VPN connection through Internet. L2TP with IPSec Policy - Allow the remote dial-in user to VigorBX 2000 Series User’s Guide...
  • Page 388 This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node. Check the Medium, DES, 3DES or AES box as the security method. Medium-Authentication Header (AH) means data will be VigorBX 2000 Series User’s Guide...
  • Page 389 Local ID - Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. This item is optional and can be used only in IKE aggressive mode. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 390 Click to clear all indexes. Index Display the number of the client which connecting to FTP server. Name Display the name of the group profile. Click any index number link to open the following page for detailed configuration. VigorBX 2000 Series User’s Guide...
  • Page 391 If the above three options are enabled, the system will do the authentication based on them in sequence. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 392 If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into DrayTek SSL VPN portal interface. Next, users can open SSL VPN>> Online Status to view logging status of SSL VPN.
  • Page 393 Here you can manage generate and manage the local digital certificates, and set trusted CA certificates. Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. VigorBX 2000 Series User’s Guide...
  • Page 394 Click this button to open Generate Certificate Signing Request window. Type in all the information that the window request such as certifcate name (used for identifying different certificate), subject alternative name type and relational settings for subject name. Then click GENERATE again. VigorBX 2000 Series User’s Guide...
  • Page 395 The supported types are PKCS12 Certificate and Certificate with a private key. Click this button to import a saved file as the certification information. There are three types of local certificate supported by Vigor router. VigorBX 2000 Series User’s Guide...
  • Page 396 Netscape and Microsoft Internet Explorer with their import and export options. Upload Certificate and It is useful when users have separated certificates and private Private Key keys. And the password is needed if the private key is encrypted. VigorBX 2000 Series User’s Guide...
  • Page 397 Next, access your CA server and enter the page of certificate request, copy the information into it and submit a request. A new certificate will be issued to you by the CA server. You can save it. Click this button to remove the selected certificate. VigorBX 2000 Series User’s Guide...
  • Page 398 Therefore, Vigor router offers a mechanism which allows you to generate root CA to save time and provide convenience for general user. Later, such root CA generated by DrayTek server can perform the issuing of local certificate. Info Root CA can be deleted but not edited.
  • Page 399 For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. VigorBX 2000 Series User’s Guide...
  • Page 400 Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Confirm password. Also, you can use Restore to retrieve these two settings to the router whenever you want. VigorBX 2000 Series User’s Guide...
  • Page 401 Internet. CSM is an abbreviation of Central Security Management which is used to control IM/P2P usage, filter the web content and URL content to reach a goal of security management. VigorBX 2000 Series User’s Guide...
  • Page 402 It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. VigorBX 2000 Series User’s Guide...
  • Page 403 11. TCP flag scan 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unassigned Numbers 8. Trace route VigorBX 2000 Series User’s Guide...
  • Page 404 Click Firewall and click General Setup to open the general setup page. Such page allows you to enable / disable Call Filter and Data Filter, determine general rule for filtering the incoming and outgoing data. Available settings are explained as follows: Item Description VigorBX 2000 Series User’s Guide...
  • Page 405 IPv4 - To prevent remote client accessing into the PCs on LAN, check the box to make the incoming packets via IPv4 being blocked by such router. It is effective only for the packets routed but not for packets translated by NAT. VigorBX 2000 Series User’s Guide...
  • Page 406 Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. User Management Such item is available only when Rule-Based is selected in VigorBX 2000 Series User’s Guide...
  • Page 407 Or click the DNS Filter link in this page to create a new profile. Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here. VigorBX 2000 Series User’s Guide...
  • Page 408 However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 409 Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. VigorBX 2000 Series User’s Guide...
  • Page 410 Set the direction of packet flow. It is for Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other LAN. VigorBX 2000 Series User’s Guide...
  • Page 411 Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. VigorBX 2000 Series User’s Guide...
  • Page 412 No-Strict - no limitation. Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the VigorBX 2000 Series User’s Guide...
  • Page 413 CSM>>DNS Filter) for applying with this router. Please set at least one profile in CSM>> Web Content Filter web page first. Or click the DNS Filter link from the drop down list in this page to create a new profile. VigorBX 2000 Series User’s Guide...
  • Page 414 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
  • Page 415 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. VigorBX 2000 Series User’s Guide...
  • Page 416 Internet has exceeded the defined value, the Vigor router will start to randomly discard the subsequent UDP packets for a period defined in Timeout. The default setting for threshold and timeout are 2000 packets per second and 10 seconds, respectively. That VigorBX 2000 Series User’s Guide...
  • Page 417 Internet are blocked. Therefore, the RIP packets from the Internet might be dropped. Block TCP flag scan Check the box to activate the Block TCP flag scan function. Any TCP packet with anomaly flag setting is dropped. Those VigorBX 2000 Series User’s Guide...
  • Page 418 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. VigorBX 2000 Series User’s Guide...
  • Page 419 VigorBX 2000 Series User’s Guide...
  • Page 420 Firewall>>Filter Setup is used as the default setting, we have to create a new rule starting from Filter Rule 2 of Set 2. Access into the web user interface of Vigor router. Open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 2 button. VigorBX 2000 Series User’s Guide...
  • Page 421 Next, set another rule. Just open Firewall>>Filter Setup. Click the Set 2 link and choose the Filter Rule 3 button. Check the box of Check to enable the Filter Rule. Type the comments (e.g., open_ip). Click the Edit button for Source IP. VigorBX 2000 Series User’s Guide...
  • Page 422 End IP. Then, click OK to save the settings. The computers within the range can access into the Internet. Now, check the content of Source IP is correct or not. The action for Filter shall be set with Pass Immediately. Then, click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 423 Both filter rules have been created. Click OK. Now, all the settings are configured well. Only the computers with the IP addresses within 192.168.1.10 ~ 192.168.1.20 can access to Internet. VigorBX 2000 Series User’s Guide...
  • Page 424 Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Info The priority of URL Content Filter is higher than Web Content Filter. VigorBX 2000 Series User’s Guide...
  • Page 425 Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Others displayed on this page. Each tab will bring out different items with supported versions that you can choose to disallow people using. VigorBX 2000 Series User’s Guide...
  • Page 426 A button under Enable check box allows you to open a pop up window to specify activity for that APP. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. VigorBX 2000 Series User’s Guide...
  • Page 427 Below shows the items which are categorized under Protocol. The items categorized under P2P ----- VigorBX 2000 Series User’s Guide...
  • Page 428 The items categorized under OTHERS----- VigorBX 2000 Series User’s Guide...
  • Page 429 The APPE Enforcement Profile adopted by Vigor router will be treated as the APPE signature. DrayTek will periodically upgrade versions for all of the APPs supported by Vigor router. However, it might be inconvenient for users to upgrade the APP version one by one. This feature is specially designed to offer a quick method to execute APP version upgrade.
  • Page 430 Or you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”. Also the Vigor router will discard any request that tries to retrieve the malicious code. Click CSM and click URL Content Filter Profile to open the profile setting page. VigorBX 2000 Series User’s Guide...
  • Page 431 Administration Message. You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Available settings are explained as follows: VigorBX 2000 Series User’s Guide...
  • Page 432 The reason for this is to prevent someone dodges the URL Access Control. You must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before. VigorBX 2000 Series User’s Guide...
  • Page 433 If the web pages do not match with the specified feature set here, it will be processed with reverse action. Cookie - Check the box to filter out the cookie transmission from inside to outside world to protect the local user's VigorBX 2000 Series User’s Guide...
  • Page 434 Please refer to section of creating MyVigor account. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
  • Page 435 Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Test a site to verify Click this link to do the verification.
  • Page 436 All of the configuration made for web content filter will be deleted automatically. Therefore, please backup your data before you change the web content filter license. Available settings are explained as follows: Item Description VigorBX 2000 Series User’s Guide...
  • Page 437 Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 438 It displays a list of different DNS filter profiles (with specified WCF and UCF). Click the profile link to open the following page. Then, type the name of the profile and specify WCF/UCF based on your requirement. VigorBX 2000 Series User’s Guide...
  • Page 439 Administration Message Type the words or sentences which will be displayed when a web page is blocked by Vigor router. After finishing all the settings, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 440 The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
  • Page 441 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. VigorBX 2000 Series User’s Guide...
  • Page 442 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. VigorBX 2000 Series User’s Guide...
  • Page 443 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. VigorBX 2000 Series User’s Guide...
  • Page 444 11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
  • Page 445 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. 5. Now you have created an account successfully. Click START. VigorBX 2000 Series User’s Guide...
  • Page 446 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. VigorBX 2000 Series User’s Guide...
  • Page 447 Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. VigorBX 2000 Series User’s Guide...
  • Page 448 Benefits: Easily and quickly implement the category/website that you want to block. Note: License is required. URL Content Filter, Benefits: Free, flexible for customize webpage. Note: Manual setting (e.g., one keyword for one website.) Make sure the Web Content Filter (powered by Commtouch) license is valid. VigorBX 2000 Series User’s Guide...
  • Page 449 Open CSM >> Web Content Filter Profile to create a WCF profile. Check Social Networking with Action, Block. Enable this profile in Firewall>>General Setup>>Default Rule. VigorBX 2000 Series User’s Guide...
  • Page 450 In the field of Contents, please type facebook. Configure the settings as the following figure. Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. VigorBX 2000 Series User’s Guide...
  • Page 451 When you finished the above steps, click OK. Then, open Firewall>>General Setup. Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. VigorBX 2000 Series User’s Guide...
  • Page 452 In the field of Contents, please type apps.facebook. Configure the settings as the following figure. Open CSM>>URL Content Filter Profile. Click an index number to open the setting page. Configure the settings as the following figure. When you finished the above steps, please open Firewall>>General Setup. VigorBX 2000 Series User’s Guide...
  • Page 453 Click the Default Rule tab. Choose the profile just configured from the drop down list in the field of URL Content Filter. Now, users cannot open any web page with the word “facebook” inside. VigorBX 2000 Series User’s Guide...
  • Page 454 This page is left blank. VigorBX 2000 Series User’s Guide...
  • Page 455 Sessions Limit, Bandwidth Limit, and Quality of Servie (QoS). It is a security feature which disallows any IP traffic (except DHCP-related packets) from a particular host until that host has correctly supplied a valid username and password. VigorBX 2000 Series User’s Guide...
  • Page 456 For the system setup, there are several items that you have to know the way of configuration: System Status, TR-069, Administrator Password, User Password, Login Page Greeting, Configuration Backup, Syslog /Mail Alert, Time and Date, Management, Reboot System, Firmware Upgrade and Activation. Below shows the menu items for System Maintenance. VigorBX 2000 Series User’s Guide...
  • Page 457 IP Address - Display the IP address of the LAN interface. Subnet Mask - Display the subnet mask address of the LAN interface. DHCP Server - Display the current status of DHCP server of the LAN VigorBX 2000 Series User’s Guide...
  • Page 458 Scope - Display the scope of IPv6 address. For example, IPv6 Link Local could only be used for direct IPv6 link. It can't be used for IPv6 internet. Internet Access Mode – Display the connection mode chosen for accessing into Internet. VigorBX 2000 Series User’s Guide...
  • Page 459 Last Inform Response Time – Display the time that VigorACS server made a response while receiving Inform message from CPE last time. CPE Client Such information is useful for Auto Configuration Server. Enable/Disable – Allow/Deny the CPE Client to connect with VigorBX 2000 Series User’s Guide...
  • Page 460 Gateway. Please type a number as the maximum period. A value of “-1” indicates that no maximum period is specified. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 461 Local User – Check the box to enable the local user configuration. Local User List – It displays the username of the local user. User Name – Give a user name for the local user. VigorBX 2000 Series User’s Guide...
  • Page 462 LDAP Profile Setup – It allows you to create a new LDAP profile. When you click OK, the login window will appear. Please use the new password to access into the web user interface again. VigorBX 2000 Series User’s Guide...
  • Page 463 1. Open System Maintenance>>User Password. 2. Check the box of Enable User Mode for simple web configuration to enable user mode operation. Type a new password in the field of New Password and click OK. VigorBX 2000 Series User’s Guide...
  • Page 464 4. Log out Vigor router web user interface by clicking the Logout button. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login. VigorBX 2000 Series User’s Guide...
  • Page 465 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Info Setting in User Mode can be configured as same as in Admin Mode. VigorBX 2000 Series User’s Guide...
  • Page 466 Enable Check this box to enable the login customization function. Login Page Title Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Welcome Message and Type words or sentences here. It will be displayed for Bulletin bulletin message.
  • Page 467 VigorBX 2000 Series User’s Guide...
  • Page 468 If this box is checked, the configuration file backup here can be restored to this router only. Encryption the configuration file…- For the sake of security, the configuration file for the router can be encrypted. VigorBX 2000 Series User’s Guide...
  • Page 469  confirmation. Support Model List Web configuration file from other Vigor router can be applied to VigorBX 2000 series. At present, the configuration file of Vigor2820/Vigor2830/Vigor2850 is accepted for VigorBX 2000. This field displays model name(s) and firmware which web configuration file saved can be used by such router.
  • Page 470 Click Choose File button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. VigorBX 2000 Series User’s Guide...
  • Page 471 VPN, User Access, Call, WAN, Router/DSL information to Syslog. AlertLog Setup Check Enable to activate function of alert log. AlertLog Port - Type the port number for alert log. The VigorBX 2000 Series User’s Guide...
  • Page 472 For viewing the Syslog, please do the following: Just set your monitor PC’s IP address in the field of Server IP Address Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. VigorBX 2000 Series User’s Guide...
  • Page 473 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. VigorBX 2000 Series User’s Guide...
  • Page 474 Advanced – Click it to open a pop up dialog. Use the default time setting or set user defined time for your requirement. Automatically Update Select a time interval for updating from the NTP server. Interval Click OK to save these settings. VigorBX 2000 Series User’s Guide...
  • Page 475 The maximum length of the text is limited to 23 characters. Set Community Set community by typing a proper name. The default setting is private. The maximum length of the text is limited to 23 characters. VigorBX 2000 Series User’s Guide...
  • Page 476 Choose one of the methods listed below as the privacy algorithm. Privacy Password Type a password for privacy. The maximum length of the text is limited to 23 characters. Click OK to save these settings. VigorBX 2000 Series User’s Guide...
  • Page 477 Type in the router name provided by ISP. Default: Disable If it is enabled, the function of auto-logout for web user Auto-Logout interface will be disabled. The web user interface will be open until you click the Logout icon manually. VigorBX 2000 Series User’s Guide...
  • Page 478 (master device) sends request packet to VigorBX 2000, VigorBX 2000 would send back information to respond the request coming from the external device which is able to manage VigorBX 2000. After finished the above settings, click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 479 IPs/subnet masks is allowed. List index in IPv6 Object- Type the index number of the IP object profile. Related IP with Prefix will appear automatically. After finished the above settings, click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 480 Vigor router. Index in IP Object- Type the index number of the IP object profile. Related IP address will appear automatically. After finished the above settings, click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 481 When the system pops up Reboot System web page after you configure web settings, please click Reboot Now to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. VigorBX 2000 Series User’s Guide...
  • Page 482 Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com. Click System Maintenance>> Firmware Upgrade to launch the Firmware Upgrade Utility. Choose the right firmware by clicking Select. Then, click Upgrade. The system will upgrade the firmware of the router automatically.
  • Page 483 The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference. VigorBX 2000 Series User’s Guide...
  • Page 484 Below shows the successful activation of Web Content Filter: VigorBX 2000 Series User’s Guide...
  • Page 485 How this will affect application performance? There are two components within Primary configuration of QoS deployment: Classification: Identifying low-latency or crucial applications and marking them for  high-priority service level enforcement throughout the network. VigorBX 2000 Series User’s Guide...
  • Page 486 SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s effort. VigorBX 2000 Series User’s Guide...
  • Page 487 Session Limit Enable - Click this button to activate the function of limit session. Disable - Click this button to close the function of limit session. Default session limit - Defines the default session number VigorBX 2000 Series User’s Guide...
  • Page 488 All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 489 LAN. Allow auto adjustment…- Check this box to make the best utilization of available bandwidth. Limitation List Display a list of specific limitations that you set on this web page. VigorBX 2000 Series User’s Guide...
  • Page 490 Index (1-15) in Schedule Setup - You can type in four sets of time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page. VigorBX 2000 Series User’s Guide...
  • Page 491 Class. Service Type – Allow to configure detailed settings for the service type. Enable the First Priority When this feature is enabled, the VoIP SIP/UDP packets will be for VoIP SIP/RTP sent with highest priority. VigorBX 2000 Series User’s Guide...
  • Page 492 Service Type for the Class Rule for your request. Display an online statistics for quality of service for your reference. This feature is available only when the Quality of Service for WAN interface is enabled. VigorBX 2000 Series User’s Guide...
  • Page 493 Check this and set the limited bandwidth ratio on the right Control field. This is a protection of TCP application traffic since UDP application traffic such as streaming video will exhaust lots of bandwidth. Outbound TCP ACK The difference in bandwidth between download and upload VigorBX 2000 Series User’s Guide...
  • Page 494 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. VigorBX 2000 Series User’s Guide...
  • Page 495 Service Type drop down list. Those types are predefined in factory. Simply choose the one that you want for using by current QoS. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 496 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. VigorBX 2000 Series User’s Guide...
  • Page 497 For example, in the following illustration, the VoIP packets in LAN go into Vigor router without any header. However, when they go forward to the Server on ISP through Vigor router, all of the packets are tagged with AF (configured in Bandwidth >>QoS>>Class) automatically. VigorBX 2000 Series User’s Guide...
  • Page 498 Internet connection line? The advanced bandwidth management technology-QoS (Quality of Service) helps you to well allocate the bandwidth upon your demand of Voice, Video, or Data transferring. Let's see how to get the optimum bandwidth per your request by using DrayTek Vigor router as below.
  • Page 499 In the pop-up window, choose Range Address as the Address Type and type the start IP address and end IP address in relational fields. Click OK to save the settings and exit the window. Click OK again to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 500 The class rule for VoIP has been set. Click OK to return to previous page. Do the same steps to add class rules for IPTV and Data/Email with IP addresses as shown below. VigorBX 2000 Series User’s Guide...
  • Page 501 10. In the Setup page, check the box of Enable the QoS Control. Type 30, 50 and 15 in the boxes for VoIP, IPTV and Data/Email respectively. Check the box of Enable UDP Bandwidth Control. 11. Click OK to save the settings. The class rules for WAN1 are defined as shown below. VigorBX 2000 Series User’s Guide...
  • Page 502 Skype in the restroom. Go to Bandwidth Management>>Quality of Service. Click Setup link of WAN(1/2/3). Make sure the QoS Control on the left corner is checked. And select BOTH in Direction. Set Inbound/Outbound bandwidth. VigorBX 2000 Series User’s Guide...
  • Page 503 E-mail using protocol POP3 and SMTP. Click OK to save the settings. Return to previous page. Enter the Name of Index Class #2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. VigorBX 2000 Series User’s Guide...
  • Page 504 Click OK. If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the VigorBX 2000 Series User’s Guide...
  • Page 505 10. Click Edit for Class 3 to open a new window. In this index, the user will set reserved bandwidth for VPN. 11. Click Add to open the following window. Check the ACT box, first. VigorBX 2000 Series User’s Guide...
  • Page 506 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. VigorBX 2000 Series User’s Guide...
  • Page 507 Filter rules configured under Firewall usually are applied to the host (the one that the router installed) only. With user management, the rules can be applied to every user connected to the router with customized profiles. VigorBX 2000 Series User’s Guide...
  • Page 508 User-Based - If you choose such mode, the router will apply the filter rules configured in User Management>>User Profile to the users. Rule-Based –If you choose such mode, the router will apply the filter rules configured in Firewall>>General Setup and VigorBX 2000 Series User’s Guide...
  • Page 509 Landing Page Type the information to be displayed on the first web page when the LAN user accessing into Internet via such router. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 510 To set the user profile, please click any index number link to open the following page. Notice that profile 1 (admin) and profile 2 (Dial-In User) are factory default settings. Profile 2 is reserved for future use. VigorBX 2000 Series User’s Guide...
  • Page 511 Authentication Any user (from LAN side or WLAN side) tries to connect to Internet via Vigor router must be authenticated by the router first. There are three ways offered by the router for the user VigorBX 2000 Series User’s Guide...
  • Page 512 Note: A dialog will be popped up to notify how many time remained when a user accesses into Internet through Vigor router successfully. When the time is up, all the connection jobs including network, IM, social media, facebook, and etc. will be terminated. VigorBX 2000 Series User’s Guide...
  • Page 513 Default Time Quota – Type the value for the time manually. Default Data Quota – Type the value for the data manually. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 514 All the available user objects that you have created will be shown in this box. Notice that user object, Admin and Dial-In User are factory settings. User defined profiles will be numbered with 3, 4, 5 and so on. VigorBX 2000 Series User’s Guide...
  • Page 515 Display the authority of the account. Last Login Time Display the login time that such user connects to the router last time. Expired Time Display the expired time of the network connection for the user. VigorBX 2000 Series User’s Guide...
  • Page 516 Display the idle timeout setting for such profile. Action Block - can avoid specified user accessing into Internet. Unblock – allow the user to access into Internet. Logout – the user will be logged out forcefully. VigorBX 2000 Series User’s Guide...
  • Page 517 With User Management authentication function, before a valid username and password have been correctly supplied, a particular client will not be allowed to access Internet through the router. There are three ways for authentication: Web, Telnet and Alert Tool. VigorBX 2000 Series User’s Guide...
  • Page 518 If a LAN client who hasn’t passed the authentication opens an external web site in his browser, he will be redirected to the router’s Web authentication interface first. Then, the client is trying to access http://www.draytek.com and but brought to the Vigor router. Since this is an SSL connection, some web browsers will display warning messages.
  • Page 519 With Chrome browser, you may get the following warning. Click Proceed  anyway. After that, the web authentication window will appear. Input the user name and the password for your account (defined in User Management) and click Login. VigorBX 2000 Series User’s Guide...
  • Page 520 If the authentication is successful, the client will be redirected to the original web site that he tried to access. In this example, it is http://www.draytek.com . Furthermore, you will get a popped up window as the following. Then you can access the Internet.
  • Page 521 With the default setup <body stats=1><script language='javascript'> window.location='http://www.draytek.com'</script></body>, you will be redirected to http://www.draytek.com . You may change it if you want. For example, you will get the following welcome message if you enter Login Successful in the Welcome Message table.
  • Page 522 Management account and a remote dial-in VPN profile can use the same Username, even with different passwords. However, we recommend you to use different usernames for different user profiles in User Management and VPN profiles. VigorBX 2000 Series User’s Guide...
  • Page 523 Here expired time is “Unlimited” means the Time Quota function is not enabled for this account. After login, this account will not be expired until it is logout. In the Web interface of router, the configuration page of Time Quota is shown as below. VigorBX 2000 Series User’s Guide...
  • Page 524 You will get the following message. The expired time is shown after you login. After you run out the available time, you can’t use this account any more until the administrator manually adds additional time for you. VigorBX 2000 Series User’s Guide...
  • Page 525 Any modification to the Firewall policy will break down the connections of all current users. They all have to authenticate again for Internet access. Info 2 The administrator may check the current users from User Online Status page. VigorBX 2000 Series User’s Guide...
  • Page 526 Landing Page is a special feature configured under User Management. It can specify the message, content to be seen or specify which website to be accessed into when users try to access into the Internet by passing the authentication. Here, we take VigorBX 2000 series router as an example.
  • Page 527 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. Click Login. If the logging is successful, you will see the message of Login Success from the browser you use. VigorBX 2000 Series User’s Guide...
  • Page 528 Next, enable the Landing Page function. Open User Management -> User Profile and click one of the index number (e.g., index number 3) links. In the following page, check the box of Landing page and click OK to save the settings. VigorBX 2000 Series User’s Guide...
  • Page 529 Open any browser (e.g., FireFox, Internet Explorer). The logging page will appear and asks for username and password. Please type the correct username and password. VigorBX 2000 Series User’s Guide...
  • Page 530 Click Login. If the logging is successful, you will be directed into the website of www.draytek.com. VigorBX 2000 Series User’s Guide...
  • Page 531 When you finished the configuration, click OK to save it. Info Only DrayTek products can be detected by this function. VigorBX 2000 Series User’s Guide...
  • Page 532 This page is left blank. VigorBX 2000 Series User’s Guide...
  • Page 533 USB device connected on Vigor router can be regarded as a server or WAN interface. By way of Vigor router, clients on LAN can access, write and read data stored in USB storage disk with different applications. VigorBX 2000 Series User’s Guide...
  • Page 534 Later, we can select that object/group that can apply it. For example, all the IPs in the same department can be defined with an IP object (a range of IP address). VigorBX 2000 Series User’s Guide...
  • Page 535 Display the name of the object profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: VigorBX 2000 Series User’s Guide...
  • Page 536 Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is VigorBX 2000 Series User’s Guide...
  • Page 537 If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. After finishing all the settings here, please click OK to save the configuration. Below is an example of IP objects settings. VigorBX 2000 Series User’s Guide...
  • Page 538 Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: VigorBX 2000 Series User’s Guide...
  • Page 539 You can set up to 64 sets of IPv6 Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. VigorBX 2000 Series User’s Guide...
  • Page 540 Invert Selection If it is checked, all the IPv6 addresses except the ones listed above will be applied later while it is chosen. After finishing all the settings, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 541 Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: VigorBX 2000 Series User’s Guide...
  • Page 542 You can set up to 96 sets of Service Type Objects with different conditions. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. VigorBX 2000 Series User’s Guide...
  • Page 543 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. VigorBX 2000 Series User’s Guide...
  • Page 544 This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the group profile. VigorBX 2000 Series User’s Guide...
  • Page 545 Objects Setting>>Service Type Object will be shown in this box. Selected Service Type Click >> button to add the selected IP objects in this box. Objects After finishing all the settings, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 546 Content Filter Profile. Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. VigorBX 2000 Series User’s Guide...
  • Page 547 Contents. When you browse the webpage, the page with gambling information will be watched out and be passed/blocked based on the configuration on Firewall settings. After finishing all the settings, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 548 Display the name of the group profile. To set a new profile, please do the steps listed below: 1. Click the number (e.g., #1) under Index column for configuration in details. 2. The configuration page will be shown as follows: VigorBX 2000 Series User’s Guide...
  • Page 549 Available settings are explained as follows: Item Description Set to Factory Default Clear all profiles. Index Display the profile number that you can configure. Name Display the name of the object profile. VigorBX 2000 Series User’s Guide...
  • Page 550 7 characters. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. VigorBX 2000 Series User’s Guide...
  • Page 551 Display the service provider which offers SMS service. To set a new profile, please do the steps listed below: 1. Click the SMS Provider tab, and click the number (e.g., #1) under Index column for configuration in details. VigorBX 2000 Series User’s Guide...
  • Page 552 Note that one credit equals to one SMS text message on the standard route. Sending Interval To avoid quota being exhausted soon, type time interval for sending the SMS. 3. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 553 Service Provider Type the website of the service provider. Type the URL string in the box under the filed of Service Provider. You have to contact your SMS provider to obtain the exact URL string. VigorBX 2000 Series User’s Guide...
  • Page 554 Item Description Set to Factory Default Clear all of the settings and return to factory default settings. Index Display the profile number that you can configure. Profile Display the name for such mail server profile. VigorBX 2000 Series User’s Guide...
  • Page 555 Username – Type a name for authentication. The maximum length of the name you can set is 31 characters. Password – Type a password for authentication. The maximum length of the password you can set is 31 characters. VigorBX 2000 Series User’s Guide...
  • Page 556 You can set an object with different monitoring situation. To set a new profile, please do the steps listed below: 1. Open Object Setting>>Notification Object, and click the number (e.g., #1) under Index column for configuration in details. VigorBX 2000 Series User’s Guide...
  • Page 557 Display the types that will be monitored. Status Display the status for the category. You can check the box you want to be monitored. 3. After finishing all the settings here, please click OK to save the configuration. VigorBX 2000 Series User’s Guide...
  • Page 558 Choose any index number (e.g., Index 1 in this case) to configure the SMS Provider setting. In the following page, type the username and password and set the quota that the router can send the message out. VigorBX 2000 Series User’s Guide...
  • Page 559 Choose any index number (e.g., Index 1 in this case) to configure conditions for sending the SMS. In the following page, type the name of the profile and check the Disconnected and Reconnected boxes for WAN to work in concert with the topic of this paper. VigorBX 2000 Series User’s Guide...
  • Page 560 SMS to the phone number specified. If the router has only one WAN interface, the system will send out SMS to the phone number while reconnecting the WAN interface successfully. VigorBX 2000 Series User’s Guide...
  • Page 561 URL string of the SMS provider and type the username and password. After clicking OK, the new added SMS provider will be added and will be available for you to specify for sending SMS out. VigorBX 2000 Series User’s Guide...
  • Page 562 USB ports on Vigor router are allowed to connect to USB modem. Models of the modems supported by Vigor router can be seen from USB Application>>Modem Support List. For network connection via USB modem, refer to WAN>>Internet Access and WAN>>General Setup for detailed information. VigorBX 2000 Series User’s Guide...
  • Page 563 FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage disk at one time. Default Charset - At present, Vigor router supports four types of character sets. Default Charset is for English based file name. VigorBX 2000 Series User’s Guide...
  • Page 564 USB storage disk must type the same username and password configured in this page. Before adding or modifying settings in this page, please insert a USB storage disk first. Otherwise, an error message will appear to warn you. Click index number to access into configuration page. VigorBX 2000 Series User’s Guide...
  • Page 565 ON, you cannot type any new folder name in this field. Only “/” can be used in such case. You can click to open the following dialog to add any new folder which can be specified as the Home Folder. VigorBX 2000 Series User’s Guide...
  • Page 566 Available settings are explained as follows: Item Description Click this icon to refresh files list. Refresh Click this icon to return to the upper directory. Back Click this icon to add a new folder. Create Current Path Display current folder. VigorBX 2000 Series User’s Guide...
  • Page 567 It displays the username that user uses to login to the FTP server. When you insert USB storage disk into the Vigor router, the system will start to find out such device within several seconds. VigorBX 2000 Series User’s Guide...
  • Page 568 A USB Thermometer is now available. It complements your installed DrayTek router installations which will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating. During summer in particular, it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures.
  • Page 569 Below shows an example of temperature graph: VigorBX 2000 Series User’s Guide...
  • Page 570 Such page provides the information about the brand name and model name of the USB modems which are supported by Vigor router. SMB Client Support List provides the test status information for applications with file sharing operated under different platforms. VigorBX 2000 Series User’s Guide...
  • Page 571 Plug the USB device to the USB port on the router. Make sure Disk Connected appears on the Connection Status as the figure shown below: Then, please open USB Application >> USB General Settings to enable SMB file sharing service. VigorBX 2000 Series User’s Guide...
  • Page 572 "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. Make sure the FTP service is running properly. Please open a browser and type ftp://192.168.1.1. Use the account "user1" to login. VigorBX 2000 Series User’s Guide...
  • Page 573 Now, users in LAN of VigorBX 2000 can access into the USB storage device by typing ftp://192.168.1.1 on any browser. They can add or remove files / directories, depending on the Access Rule for FTP account settings in USB Application >>USB User Management. VigorBX 2000 Series User’s Guide...
  • Page 574 This page is left blank. VigorBX 2000 Series User’s Guide...
  • Page 575 This part will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. VigorBX 2000 Series User’s Guide...
  • Page 576 Backing to factory default setting if necessary. If all above stages are done and the router still cannot run normally, it is the time for you to contact your dealer or DrayTek technical support for advanced help. VigorBX 2000 Series User’s Guide...
  • Page 577 Available settings are explained as follows: Item Description Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. VigorBX 2000 Series User’s Guide...
  • Page 578 Click Diagnostics and click Routing Table to open the web page. Available settings are explained as follows: Item Description Refresh Click it to reload the page. VigorBX 2000 Series User’s Guide...
  • Page 579 The table shows a mapping between an Ethernet hardware address (MAC Address) and an IPv6 address. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click IPv6 Neighbour Table to open the web page. VigorBX 2000 Series User’s Guide...
  • Page 580 Click Diagnostics and click DHCP Table to open the web page. Available settings are explained as follows: Item Description Index It displays the connection item number. IP Address It displays the IP address assigned by this router for specified VigorBX 2000 Series User’s Guide...
  • Page 581 It indicates the temporary port of the router used for NAT. Peer IP:Port It indicates the destination IP address and port of remote host. Interface It displays the representing number for different interface. Refresh Click it to reload the page. VigorBX 2000 Series User’s Guide...
  • Page 582 Click OK to enable such function. It means when the TTL value of each DNS query reaches the threshold of the value specified here, the corresponding record will be deleted from router’s Cache automatically. VigorBX 2000 Series User’s Guide...
  • Page 583 Ping to Use the drop down list to choose the destination that you want to ping. IP Address Type the IP address of the Host/IP that you want to ping. VigorBX 2000 Series User’s Guide...
  • Page 584 Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. VigorBX 2000 Series User’s Guide...
  • Page 585 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. VigorBX 2000 Series User’s Guide...
  • Page 586 WAN1/WAN2/WAN3/WAN4 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. VigorBX 2000 Series User’s Guide...
  • Page 587 Available settings are explained as follows: Item Description IPv4 / IPv6 Click one of them to display corresponding information for it. Trace through Use the drop down list to choose the interface that you want to ping through. VigorBX 2000 Series User’s Guide...
  • Page 588 Click this link to refresh this page manually. Clear Click this link to clear information on this page. Display Mode There are two modes for you to choose. Stop record when fulls – when the capacity of syslog is full, VigorBX 2000 Series User’s Guide...
  • Page 589 If TSPC has configured properly, the router will display the following page when the user connects to tunnel broker successfully. Available settings are explained as follows: Item Description Refresh Click this link to refresh this page manually. VigorBX 2000 Series User’s Guide...
  • Page 590 Moreover, IP address detected and suspected to attack the network system can be blocked shortly by clicking the Block button shown on pages of SYN Flood, UDP Flood and ICMP Flood. VigorBX 2000 Series User’s Guide...
  • Page 591 Info The icon - - means there is something wrong (e.g., attacking the system) with that IP address. VigorBX 2000 Series User’s Guide...
  • Page 592 Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “I-2 Hardware Installation” to execute the hardware installation again. And then, try again. VigorBX 2000 Series User’s Guide...
  • Page 593 Open All Programs>>Getting Started>>Control Panel. Click Network and Sharing Center. In the following window, click Change adapter settings. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. VigorBX 2000 Series User’s Guide...
  • Page 594 Select Internet Protocol Version 4 (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK. VigorBX 2000 Series User’s Guide...
  • Page 595 Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. VigorBX 2000 Series User’s Guide...
  • Page 596 Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. VigorBX 2000 Series User’s Guide...
  • Page 597 VigorBX 2000 Series User’s Guide...
  • Page 598  If the problem of LEDs cannot be solved by the above measures, please contact with the nearest reseller, or send an e-mail to DrayTek FAE for technical support.  Check if the settings offered by ISP are configured well or not.
  • Page 599 PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek.
  • Page 600 5 seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the router will restart with the default configuration. After restore the factory default setting, you can configure the settings for the router again to fit your personal request. VigorBX 2000 Series User’s Guide...
  • Page 601 If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. VigorBX 2000 Series User’s Guide...
  • Page 602 VLAN helps you to solve these situations, and DrayTek’s products support bellow two popular types:...
  • Page 603 P1 and P2 are doing NAT flow to access to the internet, but P3 and P4 will forward the packets between WAN and LAN ports directly. So far, there are two kinds of open system on Vigor router. One is DrayOS, which is DrayTek owned, and another is Linux-like which customized by DrayTek from OpenWRT. Here DrayOS system is going to be introduced to you because it is the most stable and superfast booting system in DrayTek products.
  • Page 604 VigorBX 2000 Series User’s Guide...
  • Page 605  Multi Subnet (VLAN of LAN) VigorBX 2000 Series User’s Guide...
  • Page 606 Port-based is able to extend the wired ports by installing a cheaper dumb switch as many as you need, but Tag-based offers you a flexible and well-managed network. The networks are isolated, secured and reduce the broadcasting storm effectively in each of networks with VLAN.  Guest Network VigorBX 2000 Series User’s Guide...
  • Page 607 Tag enabled.  Triple Play (Multi-WAN) NAT mode with VLAN Following settings, the set-top box (STB) is able to attach with any LAN port. Video streaming which your ISP provided will be played on your monitor. VigorBX 2000 Series User’s Guide...
  • Page 608 VigorBX 2000 Series User’s Guide...
  • Page 609 Set-top box (STB) or the other kinds of media devices are able to attach with Port4 or Port5 of LAN. Those devices that attached with Port4 or Port5 are able to access the services network directly which your ISP provided. VigorBX 2000 Series User’s Guide...
  • Page 610 This page is left blank. VigorBX 2000 Series User’s Guide...
  • Page 611 VigorBX 2000 Series User’s Guide...
  • Page 612 If you have changed the default, enter the current IP address of the router. Next, type admin/admin for Account/Password. Then, type ?. You will see a list of valid/common commands depending on the router that your use. VigorBX 2000 Series User’s Guide...
  • Page 613 For users using previous Windows system (e.g., 2000/XP), simply click Start >> Run and type Telnet 192.168.1.1 in the Open box as below. Next, type admin/admin for Account/Password. And, type ? to get a list of valid/common commands. VigorBX 2000 Series User’s Guide...
  • Page 614 : 05-04-08-00-00-06 --------------------------- ATU-C Info --------------------------------- Far Current Attenuation : 0 dB Far SNR Margin 0 dB CO ITU Version[0] : 00000000 CO ITU Version[1] : 00000000 DSLAM CHIPSET VENDOR : < ADI > > VigorBX 2000 Series User’s Guide...
  • Page 615 This parameter is used only for PPPoE/PPPoA Password This parameter is used only for PPPoE/PPPoA You have to reboot the system when you set it on Route mode. > adsl ppp o 35 8 1 1 4 1 -1 draytek draytek VigorBX 2000 Series User’s Guide...
  • Page 616 0: for Normal (all the applications will be processed with the same PVC). 1: for the IGMP with different PVC which is used for special ISP. px… It means the number of LAN port (x=2~4). Port 1 is locked for NAT. VigorBX 2000 Series User’s Guide...
  • Page 617 4. Now, it is on continuous sending mode, and adsl2/2+ led is always ON. 5. Use 'adsl reboot' to restart dsl to normal mode. This command can wake up the idle router. > adsl reboot % Adsl is Rebooting... VigorBX 2000 Series User’s Guide...
  • Page 618 Some ISP might set the vci value under 32. In such case, we can cancel such limit manually by using this command. Do not set the number greater than 254. adsl vcilimit [n] The number shall be between 1 ~ 254. > adsl vcilimit 33 change VCI limitation from 32 to 33. VigorBX 2000 Series User’s Guide...
  • Page 619 Vigor> adsl automode default Automode supported : T1.413, G.DMT, ADSL2, ADSL2+, At present ,this command allows you to enable and disable dual-latency only. adsl optn FUNC [value/on/off] Parameter Description FUNC Available setting is “dual” only. It means dual-latency. VigorBX 2000 Series User’s Guide...
  • Page 620 > adsl vendorid on set vid0 vid1 % User define CPE Vendor ID is ON This command can set QoS parameter for ATM. adsl atm pcr [pvc_no][PCR][max][status] adsl atm scr [pvc_no][SCR] adsl atm mbs [pvc_no][MBS] VigorBX 2000 Series User’s Guide...
  • Page 621 % MBS is 300 for pvc 2. This command can configure PVC to PVC binding. Such command is available only for PPPoE and MPoA 1483 Bridge mode. adsl pvcbinding [pvc_x pvc_y | status | -1 ] Parameter Description VigorBX 2000 Series User’s Guide...
  • Page 622 ADSL SNR update successfully ! Restarting ADSL modem ... This command allows to configure a network setting specified for Australia’s ISP. bpa m [-<command> <parameter> | ... ] Parameter Description Available settings are 1 and 2. VigorBX 2000 Series User’s Guide...
  • Page 623 INDEX It means to specify the index number of CSM profile, from 1 to 32. It means to view the configuration of the CSM profile. It means to set a name for the CSM profile. VigorBX 2000 Series User’s Guide...
  • Page 624 : GoogleChat AliWW : AliWW Skype : Skype Kubao : Kubao Gizmo : Gizmo : SIP/RTP TelTel : TelTel TeamSpk: TeamSpeak : WebIMs RaidCall : RaidCall ACTION Specify the action of the application, 0 or 1. VigorBX 2000 Series User’s Guide...
  • Page 625 0: Block. All of the applications meet the CSM rule will be blocked. 1: Pass. All of the applications meet the CSM rule will be passed. > csm appe p2p -i 1 -e BitTorrent -a BitTorrent 0 Profile 1 - : BitTorrent is enabled. VigorBX 2000 Series User’s Guide...
  • Page 626 TVAnts: TVAnts PPStream: PPStream PPlive: PPlive FeiDian: FeiDian UUSee: UUSee NSPlayer: NSPlayer PCAST: PCAST TVKoo: TVKoo SopCast: SopCast UDLiveX: UDLiveX TVUPlayer: TVUPlayer MySee: MySee Joost: Joost FlashVideo: FlashVideo SilverLight: MS SilverLight Slingbox: Slingbox QVOD: QVOD VigorBX 2000 Series User’s Guide...
  • Page 627 It means to set the priority for the profile. VALUE Available numbers you can define are listed below: 0: It means Bundle: Pass. 1: It means Bundle: Block. 2: It means Either: URL Access Control First. VigorBX 2000 Series User’s Guide...
  • Page 628 INDEX uac -e csm ucf obj INDEX uac -d csm ucf obj INDEX uac -a P|B csm ucf obj INDEX uac -i E|D csm ucf obj INDEX uac -o KEY_WORD_Object_Index csm ucf obj INDEX uac -g KEY_WORD_Group_Index VigorBX 2000 Series User’s Guide...
  • Page 629 [v]Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- > csm ucf obj 1 uac -a B Profile Index: 1 Profile Name:[game] VigorBX 2000 Series User’s Guide...
  • Page 630 Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] [v]Prevent web access from IP address. No Obj NO. Object Name --- -------- --------------------------------- No Grp NO. Group Name --- -------- --------------------------------- VigorBX 2000 Series User’s Guide...
  • Page 631 Type the index number (1 to 8) for the file extension object. > csm ucf obj 1 wf -s c Profile Index: 1 Profile Name:[game] Log:[none] Priority Select : [Bundle : Pass] [ ]Enable URL Access Control Action:[block] VigorBX 2000 Series User’s Guide...
  • Page 632 It means to set the cache level for the profile. Server WCF_SERVER It means to set web content filter server. Msg MSG It means de set the administration message. MSG means the content (less than 255 characters) of the message itself. VigorBX 2000 Series User’s Guide...
  • Page 633 Imges, Entertainment, Games, Sports, Travel, Leisure & Recreation, Fashin & Beauty, Business, Job Search, Web-based Emai, Chat, Instant Messaging, Anonymizers, Forums & Newsgroups, Computers & Technology, Download Sites, Streaming Media & Downloads, Phishing & Fraud, Search Engines & Portals, Social Networking, VigorBX 2000 Series User’s Guide...
  • Page 634 Transportation, Compromised, Dating & Personals, , Education, Finance, Government,Health & Medcine, News, Non-profits & NGOs, Personal Sites,Politics, Real Estate, Rligion, Restaurants & Dining,Shopping, Translators, General, Cults,Greetig cards, Image Sharing, Network Errors, Parked Domains, Private IP Addresses) VigorBX 2000 Series User’s Guide...
  • Page 635 [v]School Cheating [v]Sex Education [v]Tasteless [v]Child Abuse Images -------------------------------------------------------------------------- ----- leisure Group: [ ]Entertainment [ ]Games [ ]Sports [ ]Travel [ ]Leisure & Recreation [ ]Fashion & Beauty > Displays the DDNS log. >ddns log > VigorBX 2000 Series User’s Guide...
  • Page 636 Set a value larger than 20. TIMEOUT It means the time (seconds) that a flooding attack will be blocked. Set a value larger than 5. It means to enable the defense function for all attacks listed in ATTACK_0. VigorBX 2000 Series User’s Guide...
  • Page 637 It means to disable the defense function for a specific attack(s). >dos –A The Dos Defense system is Activated >dos –s synflood 50 10 Synflood is enabled! Threshold=50 <pke/sec> timeout=10 <pke/sec> VigorBX 2000 Series User’s Guide...
  • Page 638 -w <ip address> It means to assign WAN IP address for such connection. Please type an IP address here for WAN port. -n <netmask> It means to assign netmask for WAN connection. You have to type VigorBX 2000 Series User’s Guide...
  • Page 639 Enable the function. Disable Disable the function. > ip 2ndsubnet enable 2nd subnet enabled! This command allows users to set the second IP address for your router. ip 2ndaddr ? ip 2ndaddr <2nd subnet IP address> VigorBX 2000 Series User’s Guide...
  • Page 640 % Now: 255.255.255.0 > ip 2ndmask 255.255.0.0 % Set 2nd subnet mask done !!! This command is used for configuring WAN IP Alias. ip aux add [IP] [Join to NAT Pool] ip aux remove [index] VigorBX 2000 Series User’s Guide...
  • Page 641 Index no. Status IP address IP pool ---------------------------------------------- Enable 172.16.3.229 Yes Enable 172.16.3.56 Enable 172.16.3.113 No This command allows users to set/add a specified LAN IP your router. ip addr [IP address] Parameter Description VigorBX 2000 Series User’s Guide...
  • Page 642 ARP cache at 0 second. Sixty seconds later without any ARP messages received, the system will think such ARP cache is expired. The system will issue a few ARP request to see if this cache is still valid. VigorBX 2000 Series User’s Guide...
  • Page 643 -e [1 or 0] -w [wan unmber] -c [option number] -v [option value] ip dhcpc option -e [1 or 0] -w [wan unmber] -c [option number] -x "[option value]" ip dhcpc option -u [idx unmber] ip dhcpc release ip dhcpc renew ip dhcpc status VigorBX 2000 Series User’s Guide...
  • Page 644 : 129594 Leased Elapsed T2 : 226794 This command allows users to ping IP address of WAN1/WAN2/PVC3/PVC4/PVC5 for verifying if the WAN connection is OK or not. ip ping [IP address] [WAN1 /PVC3/PVC4/PVC5] Parameter Description VigorBX 2000 Series User’s Guide...
  • Page 645 211.22.38.134 50ms 220.128.2.62 50ms Trace complete This command allows users to access specified device by telnet. ip telnet [IP address][Port] Parameter Description IP address Type the WAN or LAN IP address of the remote device. VigorBX 2000 Series User’s Guide...
  • Page 646 It means to disable or enable RIP setting for specified WAN interface. 1: Enable the function of setting RIP of WAN IP. 0: Disable the function. > ip wanrip ? Valid ex:ip wanrip <ifno> -e <0/1> <ifno> 1: WAN1,2: WAN2 VigorBX 2000 Series User’s Guide...
  • Page 647 It means to add an IP address as static route. It means to delete specified IP address. status It means current status of static route. It means the IP address of the destination. netmask It means the netmask of the specified IP address. VigorBX 2000 Series User’s Guide...
  • Page 648 > ip route add 172.16.2.0 255.255.255.0 172.16.2.4 3 static > ip route status Codes: C - connected, S - static, R - RIP, * - default, ~ - private 192.168.1.0/ 255.255.255.0 is directly connected, LAN1 172.16.2.0/ 255.255.255.0 via 172.16.2.4, WAN1 VigorBX 2000 Series User’s Guide...
  • Page 649 %IGMP Proxy Interface: WAN5(PVC) %WAN5 for Router-borne Application/ IPTV on/off: ON > ip igmp_proxy query 130000 This command is for setting IGMP General Query Interval The default value is 125000 ms Current Setting is:130000 ms > VigorBX 2000 Series User’s Guide...
  • Page 650 It means the MAC address of the device that you want to specify >ip dmz ? % ip dmz <mac>, now : 00-00-00-00-00-00 > ip dmz 11-22-33-44-55-66 > ip dmz ? % ip dmz <mac>, now : 11-22-33-44-55-66 VigorBX 2000 Series User’s Guide...
  • Page 651 IP1-IP2 It means the range of IP address specified for this command. It means the number of the session limits, e.g., 100. p2pnum It means the number of the session limits, e.g., 50 for P2P. VigorBX 2000 Series User’s Guide...
  • Page 652 It means the range of IP address specified for this command. It means to set transmission rate for bandwidth limit. It means to set receiving rate for bandwidth limit. shared It means that the bandwidth will be shared for the IP range. VigorBX 2000 Series User’s Guide...
  • Page 653 It means to add one ip bindmac. It means to delete one ip bindmac. It means to type the IP address for binding with specified MAC address. It means to type the MAC address for binding with the IP address specified. VigorBX 2000 Series User’s Guide...
  • Page 654 It means to show current address(es) status. It means to show only unicast addresses. prefix It means to type the prefix number of IPv6 address. prefix-length It means to type a fixed value as the length of the prefix. VigorBX 2000 Series User’s Guide...
  • Page 655 It means to ask NIS. It means to ask NIS name. It means to ask NISP. It means to ask NISP name. It means to ask BCMCS. It means to ask BCMCS name. It means to ask refresh time. VigorBX 2000 Series User’s Guide...
  • Page 656 > ip6 dhcp client WAN2 –a Interface WAN2 has following DHCPv6 client settings: DHCPv6 client enabled request IA_PD whose IAID equals to 2008 > ip6 dhcp client WAN2 –n 1023456 > ip6 dhcp client WAN2 –a VigorBX 2000 Series User’s Guide...
  • Page 657 > ip6 dhcp server -x ff02::3 > ip6 dhcp server -a % Interface LAN has following DHCPv6 server settings: DHCPv6 server disabled maximum address of the pool: FF02::3 minimum address of the pool: FF02::1 1st DNS IPv6 Addr: FF02::1 VigorBX 2000 Series User’s Guide...
  • Page 658 <password> = type a password (maximum 63 characters). -s <server> It means to set Tunnel Server IP. <server>= IPv4 address or URL (maximum 63 characters). -d <server> It means to set the primary DNS Server IP. VigorBX 2000 Series User’s Guide...
  • Page 659 It means to show neighbour status. inet6_addr Type an IPv6 address eth_addr Type submask address. LAN|WAN1|WAN2 Specify an interface for the neighbor. > ip6 neigh -s 2001:2222:3333::1111 00:50:7F:11:ac:22:WAN2 Neighbour 2001:2222:3333::1111 successfully added! > ip6 neigh -a I/F ADDR STATE VigorBX 2000 Series User’s Guide...
  • Page 660 It means to delete a proxy neighbour. It means to show proxy neighbour status. inet6_addr Type an IPv6 address LAN|WAN1|WAN2 Specify an interface for the proxy neighbor. > ip6 neigh -s FE80::250:7FFF:FE12:300 LAN Neighbour FE80::250:7FFF:FE12:300 successfully added! VigorBX 2000 Series User’s Guide...
  • Page 661 > ip6 route -s FE80::250:7FFF:FE12:500 16 FE80::250:7FFF:FE12:100 LAN Route FE80::250:7FFF:FE12:500/16 successfully added! > ip6 route -a LAN PREFIX/PREFIX-LEN _EXPIRES_ _NEXT-HOP_ I/F METRIC STATE FLAGS ------------------------------------------------------------------------- ------ FE80::/128 UNICAST FE80::250:7FFF:FE00:0/128 UNICAST FE80::/64 UNICAST FE80::/16 1024 UNICAST FE80::250:7FFF:FE12:100 FF02::1/128 UNICAST FF02::1 VigorBX 2000 Series User’s Guide...
  • Page 662 Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Receive reply from 2001:4860:4860::8888, time=330ms Packets: Sent = 5, Received = 5, Lost = 0 <% loss> > VigorBX 2000 Series User’s Guide...
  • Page 663 It means the connection interface. Ifno=1 (means WAN1) Info=2 (means WAN2) > ip6 tspc 2 Local Endpoint v4 Address : 111.243.177.223 Local Endpoint v6 Address : 2001:05c0:1400:000b:0000:0000:0000:10b9 Router DNS name : 8886666.broker.freenet6.net Remote Endpoint v4 Address :81.171.72.11 VigorBX 2000 Series User’s Guide...
  • Page 664 It means RA default test. -r [num] It means RA test for item [num]. > ip6 radvd -s 1 1800 > ip6 radvd -V % IPv6 Radvd Config: Radvd : Enable, Default Lifetime : 1800 seconds VigorBX 2000 Series User’s Guide...
  • Page 665 > ip6 mngt list add 2 FE80::250:7FFF:FE12:1020 128 > ip6 mngt list add 3 FE80::250:7FFF:FE12:2080 128 > ip6 mngt list % IPv6 Access List : Index IPv6 Prefix Prefix Length ======================================== FE80::250:7FFF:FE12:1010 FE80::250:7FFF:FE12:1020 FE80::250:7FFF:FE12:2080 > ip6 mngt status VigorBX 2000 Series User’s Guide...
  • Page 666 % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % IPv6 DNS Server: :: Static % Tx packets = 0, Tx bytes = 0, Rx packets = 0, Rx bytes = 0 VigorBX 2000 Series User’s Guide...
  • Page 667 It means to display the AICCU status. > ip6 aiccu subnet add 2 2001:1111:0000::1111 64 > ip6 aiccu 2 Status: Connecting >ip6 aiccu subnet show 2 IPv6 WAN2 AICCU Subnet Prefix Config: 2001:1111::1111/64 > VigorBX 2000 Series User’s Guide...
  • Page 668 It means to display all the information at one time. It means to clear a filter rule’s statistics. It means to clear IP filter’s gross statistics. > ipf view -V -c -d ipf: IP Filter: v3.3.1 (1824) VigorBX 2000 Series User’s Guide...
  • Page 669 -U [URL_NO] It means to configure URL content filter for the packets not matching with any rule, e.g., -U 1 Type “0” to let all the packets pass; Type “1” to block all the packets. VigorBX 2000 Series User’s Guide...
  • Page 670 Accept large incoming fragmented UDP or ICMP packets: Enable ---------------------------------------------------------------- Strict Security Checking [ ]APP Enforcement > This command is used to set filter rule for firewall. ipf rule s r [-<command> <parameter> | ... ipf rule s r -v Parameter Description VigorBX 2000 Series User’s Guide...
  • Page 671 Address Type - Type the number (representing different address type). 0 - Subnet Address 1 - Single Address 2 - Any Address 3 - Range Address Example: Set Subnet Address => -d u 0 192.168.1.10 255.255.255.0 VigorBX 2000 Series User’s Guide...
  • Page 672 1 – Block Immediately, 2 – Pass if no further match, 3 – Block if no further match. It means the classification for QoS. 1– Class 1, 2 – Class 2, 3 – Class 3, VigorBX 2000 Series User’s Guide...
  • Page 673 > ipf rule 2 1 -e 1 -s "o 1" -d "o 2" -S "o 1" -F 2 > ipf rule 2 1 -v Filter Set 2 Rule 1: Status : Enable Comments: xNetBios -> DNS VigorBX 2000 Series User’s Guide...
  • Page 674 IP address, then all the session state of flowtrack will be displayed. It means to show all of IP sessions state. - i [IP address] It means to specify IP address (e.g,, -i 192.168.2.55). VigorBX 2000 Series User’s Guide...
  • Page 675 It means to show the latest call log. It means to show the IP filter log. It means to show the flush log buffer. a: flush all logs c: flush the call log f: flush the IP filter log VigorBX 2000 Series User’s Guide...
  • Page 676 This command allows users to set FTP port for management. mngt ftpport [FTP port] Parameter Description FTP port It means to type the number for FTP port. The default setting is > mngt ftpport 21 % Set FTP server port to 21 done. VigorBX 2000 Series User’s Guide...
  • Page 677 It means to type the number for telnet port. The default setting is > mngt telnetport 23 % Set Telnet server port to 23 done. This command allows users to set SSH port for management. mngt sshport [ssh port] VigorBX 2000 Series User’s Guide...
  • Page 678 All PING packets will be blocked from LAN PC to Internet. viewlog It means to display a log of ping action, including source MAC and source IP. clearlog It means to clear the log of ping action. VigorBX 2000 Series User’s Guide...
  • Page 679 Block TCP port list: 135, 137, 138, 139, 445 This command can allow the system administrators to login from the Internet. By default, it is not allowed. mngt rmtcfg [status] mngt rmtcfg [enable] mngt rmtcfg [disable] mngt rmtcfg [http/https/ftp/telnet/ssh/tr069] [on/off] VigorBX 2000 Series User’s Guide...
  • Page 680 It means to specify service offered. Available values include: FTP, HTTP, HTTPS, TELNET, SSH, None, All -i[value] It means the interface which is allowed to access. Available values include: LAN2~LAN6, DMZ, IP Routed Subnet, None, All VigorBX 2000 Series User’s Guide...
  • Page 681 [enable] mngt echoicmp [disable] Parameter Description enable It means to accept the echo ICMP packet. disable It means to drop the echo ICMP packet. > mngt echoicmp enable %% Echo ICMP packet enabled. VigorBX 2000 Series User’s Guide...
  • Page 682 2: Disable the SNMP function. -g<Community name> It means to set the name for getting community by typing a proper character. (max. 23 characters) -s <Community name> It means to set community by typing a proper name. (max. 23 VigorBX 2000 Series User’s Guide...
  • Page 683 -T <seconds> It means to set the trap timeout <0~999>. It means to list SNMP setting. > mngt snmp -e 1 -g draytek -s DK -m 192.168.1.1 -t trapcom -n 10.20.3.40 -T SNMP Agent Turn on!!! Get Community set to draytek Set Community set to DK Manager Host IP set to 192.168.1.1...
  • Page 684 Type the subnet mask address for the specified LAN interface. > msubnet nmask 2 255.255.0.0 % Set LAN2 subnet mask done !!! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. VigorBX 2000 Series User’s Guide...
  • Page 685 On means enabling the DHCP server for the specified LAN interface. Off means disabling the DHCP server. > msubnet dhcps 3 off % LAN3 Subnet DHCP Server disabled! This setting will take effect after rebooting. Please use "sys reboot" command to reboot the router. VigorBX 2000 Series User’s Guide...
  • Page 686 This command is used to configure an IP address as the gateway used for subnet. msubnet gateway [2/3/4] [Gateway IP] Parameter Description 2/3/4/5/6 It means LAN interface. 2=LAN2 3=LAN3 4=LAN4 5=LAN5 6=LAN6 Gateway IP Specify an IP address as the gateway IP. > msubnet gateway 2 192.168.1.13 VigorBX 2000 Series User’s Guide...
  • Page 687 This command is used to establish a route between two LAN interfaces. msubnet talk [1/2/3/4/5/6] [1/2/3/4/5/6] [On/Off] Parameter Description 1/2/3/4/5/6 It means LAN interface. 1=LAN1 2=LAN2 3=LAN3 4=LAN4 5=LAN5 6=LAN6 On/Off On – It means Off - It means VigorBX 2000 Series User’s Guide...
  • Page 688 % msubnet startip <2/3/4/5/6> <Gateway IP> % Now: LAN2 192.168.2.90; LAN3 192.168.3.10; LAN4 192.168.4.10; LAN5 192.168.5.1 0; LAN6 192.168.6.10 This command is used to configure a starting IP address for PPP connection. msubnet pppip [2/3/4/5/6] [Start IP] VigorBX 2000 Series User’s Guide...
  • Page 689 > msubnet nodetype ? % msubnet nodetype <2/3/4/5/6> <count> % Now: LAN2 0; LAN3 0; LAN4 0; LAN5 0; LAN6 0 % count: 1. B-node 2. P-node 4. M-node 8. H-node > msubnet nodetype 2 1 VigorBX 2000 Series User’s Guide...
  • Page 690 This command is used to configure secondary WINS server. msubnet secWINS [2/3/4/5/6] [WINS IP] Parameter Description It means LAN interface. 2/3/4/5/6 2=LAN2 3=LAN3 4=LAN4 5=LAN5 6=LAN6 WINS IP Type the IP address as the WINS IP. VigorBX 2000 Series User’s Guide...
  • Page 691 > > msubnet secWINS 2 192.168.3.89 % Set LAN2 Dhcp Secondary WINS IP done !!! > msubnet secWINS ? % msubnet secWINS <2/3/4/5/6> <WINS IP> % Now: LAN2 192.168.3.89; LAN3 0.0.0.0; LAN4 0.0.0.0; LAN5 0.0.0.0; LAN6 0.0.0.0 VigorBX 2000 Series User’s Guide...
  • Page 692 This command allows you to configure MTU value for LAN/DMZ/IP Routed Subnet. msubnet mtu [interface][value] Parameter Description interface Available settings include LAN1~LAN6, IP_Routed_Subnet, and DMZ. value 1000 ~ 1508 (Bytes), default: 1500 (Bytes) > msubnet mtu LAN1 1492 > msubnet mtu ? Usage: VigorBX 2000 Series User’s Guide...
  • Page 693 It means to define an interface for the IP object. INTERFACE=0, means any INTERFACE=1, means LAN INTERFACE=3, means WAN Example: object ip obj 8 -i 0 -s INVERT It means to set invert seletion for the object profile. VigorBX 2000 Series User’s Guide...
  • Page 694 It means the index number of the specified group profile. It means to view the information of the specified group profile. Example: object ip grp 1 -v -n NAME It means to define a name for the IP group. VigorBX 2000 Series User’s Guide...
  • Page 695 [7:][0] > object ip grp 2 -i 1 > object ip grp 2 -a 1 2 IP Group Profile 2 Name :[First] Interface:[Lan] Included ip object index: [0:][1] [1:][2] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] VigorBX 2000 Series User’s Guide...
  • Page 696 When the TYPE is set with 2, you have to type an IP address as a starting point and another IP address as end point. Type an IP address. [END/MASK_IP] Type an IP address (different with START_IP) as the end IP address. VigorBX 2000 Series User’s Guide...
  • Page 697 Example: :object ip grp 3 -a 1 2 3 4 5 The IP object profiles with index number 1,2,3,4 and 5 will be group under such profile. > object ip grp 2 -n First IP Group Profile 2 VigorBX 2000 Series User’s Guide...
  • Page 698 Example: object service obj 1 -v -n NAME It means to define a name for the IP object. NAME: Type a name with less than 15 characters. Example: object service obj 9 -n bruce VigorBX 2000 Series User’s Guide...
  • Page 699 > object service obj 1 -s 1 120 240 > object service obj 1 -d 1 200 220 > object service obj 1 -v Service Object Profile 1 Name :[limit] Protocol:[255] Source port check action:[!=] Source port range:[120~240] VigorBX 2000 Series User’s Guide...
  • Page 700 Name :[Grope_1] Included service object index: [0:][0] [1:][0] [2:][0] [3:][0] [4:][0] [5:][0] [6:][0] [7:][0] > object service grp 1 -a 1 2 Service Group Profile 1 Name :[Grope_1] Included service object index: [0:][1] [1:][2] [2:][0] VigorBX 2000 Series User’s Guide...
  • Page 701 :[children] Content:[] > object kw obj 1 -a gambling Profile 1 Name :[children] Content:[gambling] > object kw obj 1 -v Profile 1 Name :[children] Content:[gambling] This command is used to create File Extension Object profile. VigorBX 2000 Series User’s Guide...
  • Page 702 ".tlb", ".viv", ".vrm", ".ace", ".arj", ".bzip2", ".bz2", ".cab", ".gz", ".gzip", ".rar", ".sit", ".zip", ".bas", ".bat", ".com", ".exe", ".inf", ".pif", ".reg", ".scr" Example: object fe obj 1 -e .bmp > object fe obj 1 -n music > object fe obj 1 -e Audio VigorBX 2000 Series User’s Guide...
  • Page 703 [ ].bzip2 [ ].bz2 [ ].cab [ ].gz [ ].gzip [ ].rar [ ].sit [ ].zip ------------------------------------------------------------------------- ------ Executation category: [ ].bas [ ].bat [ ].com [ ].exe [ ].inf [ ].pif [ ].reg [ ].scr VigorBX 2000 Series User’s Guide...
  • Page 704 %Set Port 1 Force speed 100 Full duplex OK !!! This command allows you to set a time of keeping the session connection for specified protocol. portmaptime [-<command> <parameter> | ... ] Parameter Description [<command> The available commands with parameters are listed below. VigorBX 2000 Series User’s Guide...
  • Page 705 This command allows you to view current status (interface and driver) of USB printer. prn status prn debug > prn status Interface: USB bus 2.0 Printer: NotReady > prn debug conn[0] : none conn[1] : none conn[2] : none conn[3] : none LPD_data_total=0 VigorBX 2000 Series User’s Guide...
  • Page 706 Set all to factory default (for all WANs). […] It means that you can type in several commands in one line. > qos setup -m 3 -i 9500 -o 8500 -r 3:20 -u 1 -p 50 -t 1 VigorBX 2000 Series User’s Guide...
  • Page 707 WAN1 class 3 ratio set to 20 WAN1 udp bandwidth control set to enable WAN1 udp bandwidth limit ratio set to 50 WAN1 Outbound TCP ACK Prioritizel set to enable QoS WAN1 set complete; restart QoS > VigorBX 2000 Series User’s Guide...
  • Page 708 – It means Range address. Please specify the IP addresses, for example, “-l 172.16.3.9: 172.16.3.50.” addr1:subnet – It means the subnet address with start IP address. Please type the subnet and the IP address, for example, “-l VigorBX 2000 Series User’s Guide...
  • Page 709 Show the rule in the specified class. […] It means that you can type in several commands in one line. > qos class -c 2 -n draytek -a -m 1 -l 192.168.1.50:192.168.1.80 Following setting will set in the class2 class 2 name set to draytek...
  • Page 710 It means service port. The typing format must be [start:end] (ex., 510:330). List user defined types. “no” means the index number. Available numbers are 1~40. > qos type -a draytek -t 6 -p 510:1330 service name set to draytek service type set to 6:TCP Port type set to Range Service Port set to 510 ~ 1330 >...
  • Page 711 No data entry. This command displays current status of NAT. > show nat Port Redirection Running Table: Index Protocol Public Port Private IP Private Port 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 VigorBX 2000 Series User’s Guide...
  • Page 712 This command displays current status of current session. > show session % Maximum Session Number: 10000 % Maximum Session Usage: 49 % Current Session Usage: 0 % Current Session Used(include waiting for free): 0 % WAN1 Current Session Usage: 0 VigorBX 2000 Series User’s Guide...
  • Page 713 ADSL Firmware Version : 05-04-04-04-00-01 -------------------------------- ATU-C Info --------------------------------- Far Current Attenuation : 0 dB Far SNR Margin 0 dB CO ITU Version[0] : 00000000 CO ITU Version[1] : 00000000 DSLAM CHIPSET VENDOR : < ADI > VigorBX 2000 Series User’s Guide...
  • Page 714 Parameter Description start It means the starting point of the IP address pool for the DHCP server. IP address It means to specify an IP address as the starting point in the IP address pool. VigorBX 2000 Series User’s Guide...
  • Page 715 (IP Routed Subnet dns same as NAT Subnet dns) This command allows users to set Secondary IP Address for DNS Server in LAN. srv dhcp dns2 [?] srv dhcp dns2 [DNS IP address] Parameter Description VigorBX 2000 Series User’s Guide...
  • Page 716 It means to display current gateway that you can use. Gateway IP It means to specify a gateway address used for DHCP server. > srv dhcp gateway 192.168.2.1 This setting will take effect after rebooting. VigorBX 2000 Series User’s Guide...
  • Page 717 1 or 2 specified here. > srv dhcp relay servip 192.168.1.46 > srv dhcp relay subnet 2 > srv dhcp relay servip ? % srv dhcp relay servip <server ip> % Now: 192.168.1.46 srv dhcp startip [?] VigorBX 2000 Series User’s Guide...
  • Page 718 It means to display current leasetime used for the DHCP server. Lease Time (sec) It means the lease time that DHCP server can use. The unit is second. > srv dhcp leasetime ? % srv dhcp leasetime <Lease Time (sec.)> % Now: 86400 > VigorBX 2000 Series User’s Guide...
  • Page 719 It means to remove the IP address settings of primary WINS server. > srv dhcp primWINS 192.168.1.88 > srv dhcp primWINS ? %% srv dhcp primWINS <WINS IP address> %% srv dhcp primWINS clear % Now: 192.168.1.88 VigorBX 2000 Series User’s Guide...
  • Page 720 <TFTP server name> Parameter Description TFTP server name It means to type the name of TFTP server. > srv dhcp tftp TF123 > srv dhcp tftp ? %% srv dhcp tftp <TFTP server name> % Now: TF123 VigorBX 2000 Series User’s Guide...
  • Page 721 It means the index number of the option value. > srv dhcp option -e 1 -c 18 -v /path > srv dhcp option -l % state idx interface opt type data % enable 1 ALL LAN 18 ASCII /path VigorBX 2000 Series User’s Guide...
  • Page 722 Disable 0.0.0.0 192.168.1.96 This command allows users to enable or disable IPSec ESP tunnel passthrough and IKE source port (500) preservation. Srv nat ipsecpass [options] Parameter Description [options] The available commands with parameters are listed below. VigorBX 2000 Series User’s Guide...
  • Page 723 It means to specify the starting port number of the service offered by the local host. The range is from 0 to 65535. -e<end port> It means to specify the ending port number of the service offered by VigorBX 2000 Series User’s Guide...
  • Page 724 Parameter Description Add[idx] It means to add a new port redirection table with an index number. Available index number is from 1 to 10. serv name It means to type one name as service name. VigorBX 2000 Series User’s Guide...
  • Page 725 > srv nat portmap add 1 game tcp 80 192.168.1.11 100 wan1 > srv nat portmap table NAT Port Redirection Configuration Table: Index Service Name Protocol Public Port Private IP Private Port ifno game 192.168.1.11 Protocol: 0 = Disable, 6 = TCP, 17 = UDP VigorBX 2000 Series User’s Guide...
  • Page 726 This command allows users to view a summary of NAT port redirection setting, open port and DMZ settings. > srv nat showall ? Index Proto WAN IP:Port Private IP:Port ************************************************************************* **** 0.0.0.0:80 192.168.1.11:100 0.0.0.0:23~83 192.168.1.100:23~83 0.0.0.0 192.168.1.96 R:Port Redirection, O:Open Ports, D:DMZ VigorBX 2000 Series User’s Guide...
  • Page 727 This command is used to turn off the auto discovery for external devices. > switch off Disable External Device auto discovery! This command is used to display the connection status of the switch. > switch list? status Dur Time Model_Name ------------------------------------------------------------------------- [1] 00-50-7f-cd-07-48 192.168.1.3 On-Line 00:01:01 Vigor2920 VigorBX 2000 Series User’s Guide...
  • Page 728 Vigor router. sys adminuser [option] sys adminuser edit [index] username password Parameter Description Available options includes: option Local [0-1] LDAP [0-1] edit [INDEX] delete [INDEX] view [INDEX] Local [0-1] 0 – Disable the local user. VigorBX 2000 Series User’s Guide...
  • Page 729 It is used to disable/enable SSH service (0: disable, 1: enable). -p <enable> It is used to disable/enable printer service (0: disable, 1: enable). -6 <enable> It is used to disable/enable IPv6 (0: disable, 1: enable). > sys bonjour -s 1 > VigorBX 2000 Series User’s Guide...
  • Page 730 Parameter Description It means to turn on the FTP server of the system. It means to turn off the FTP server of the system. > sys ftpd on % sys ftpd turn on !!! VigorBX 2000 Series User’s Guide...
  • Page 731 MAC: 00-50-7F-00-00-02 Interface 5 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-03 Interface 6 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 MAC: 00-50-7F-00-00-04 Interface 7 Ethernet: Status: DOWN IP Address: 0.0.0.0 Netmask: 0x00000000 VigorBX 2000 Series User’s Guide...
  • Page 732 This command allows users to set password for the administrator. sys passwd [ASCII string] Parameter Description ASCII string It means the password for administrator. The maximum character that you can set is 23. > sys passwd admin123 > VigorBX 2000 Series User’s Guide...
  • Page 733 > sys commit > This command can turn on TFTP server for upgrading the firmware. > sys tftpd % TFTP server enabled !!! This command can display current country code and wireless region of this device. VigorBX 2000 Series User’s Guide...
  • Page 734 # of flowstate = 12000 # of lost by siganture = 0 # of lost by list = 0 This command can turn on or turn off polling buffer for the router. sys pollbuf [on] sys pollbuf [off] VigorBX 2000 Series User’s Guide...
  • Page 735 [on/off] sys tr069 save sys tr069 inform [event code] sys tr069 port [port num] sys tr069 cert_auth [on/off] Parameter Description get [parm] [option] It means to get parameters for tr-069. VigorBX 2000 Series User’s Guide...
  • Page 736 > sys tr069 get Int. nextlevel Total number of parameter is 24 Total content length of parameter is 915 InternetGatewayDevice.LANDeviceNumberOfEntries InternetGatewayDevice.WANDeviceNumberOfEntries InternetGatewayDevice.DeviceInfo. InternetGatewayDevice.ManagementServer. InternetGatewayDevice.Time. InternetGatewayDevice.Layer3Forwarding. InternetGatewayDevice.LANDevice. InternetGatewayDevice.WANDevice. InternetGatewayDevice.Services. InternetGatewayDevice.X_00507F_InternetAcc. InternetGatewayDevice.X_00507F_LAN. InternetGatewayDevice.X_00507F_NAT. InternetGatewayDevice.X_00507F_Firewall. VigorBX 2000 Series User’s Guide...
  • Page 737 [set/reg/qry] sys license dev_chg sys license dev_key Parameter Description licmsg It means to display license message. licauth It means the license authentication time setting. VigorBX 2000 Series User’s Guide...
  • Page 738 It is used to specify the function of the log. Supported features include SYS and DSL (Case-Insensitive). Default setting is “on” for “DSL”. voip_feature It means VoIP feature. Type on to enable the feature or type off to VigorBX 2000 Series User’s Guide...
  • Page 739 [DSL] Status was switched: Init(5) to Train(6) This command is used to display current settings for sending test mail. > testmail Send out test mail Mail Alert:[Disable] SMTP_Server:[0.0.0.0] Mail to:[] Return-Path:[] This command can close UPnP function. VigorBX 2000 Series User’s Guide...
  • Page 740 ['q': Quit, 'Enter': New Lines, 'Space Bar': Next Page] --- This command can display the information of the UPnP service. UPnP service must be enabled first. > upnp on UPNP start. > upnp service >>>>> SERVICE TABLE1 <<<<< serviceType urn:schemas-microsoft-com:service:OSInfo:1 serviceId urn:microsoft-com:serviceId:OSInfo1 VigorBX 2000 Series User’s Guide...
  • Page 741 >>>> (1) serviceType urn:schemas-microsoft-com:service:OSInfo:1 ----- Subscribtion1 ------- sid = 7a2bbdd0-0047-4fc8-b870-4597b34da7fb eventKey =1, ToSendEventKey = 1 expireTime =6926 active =1 DeliveryURLs =<http://192.168.1.113:2869/upnp/eventing/twtnpnsiun> >>>> (2) serviceType urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1 ----- Subscribtion1 ------- sid = d9cd47a5-d9c9-4d3d-8043-d03a82f27983 eventKey =1, ToSendEventKey = 1 VigorBX 2000 Series User’s Guide...
  • Page 742 This command is use to display the information about the brand name and model name of the USB modems which are supported by Vigor router. > usb list ? Brand Module Standard ------------------------ -------- Aiko Aiko 83D 3.5G BandRich Bandluxe C170 3.5G VigorBX 2000 Series User’s Guide...
  • Page 743 This command can disable vigor bridge function. > vigbrg off %Disable Vigor Bridge Function! This command can show whether the Vigor Bridge Function is enabled or disabled. > vigbrg status %Vigor Bridge Function is enable! %Wan1 management is disable! VigorBX 2000 Series User’s Guide...
  • Page 744 [list index]pfs [on/off] vpn l2lset [list index] phase1[lifetime] vpn l2lset [list index] phase2[lifetime] Parameter Description list index It means the index number of L2L (LAN to LAN) profile. peerid It means the peer identity for aggressive mode. VigorBX 2000 Series User’s Guide...
  • Page 745 It means the index number of the profile. <on/off> It means to enable or disable the profile. on – Enable. off – Disable. motp <on/off> It means to enable or disable the authentication with mOTP function. on – Enable. off – Disable. VigorBX 2000 Series User’s Guide...
  • Page 746 This command allows users to specify a subnet selection for the specified remote dial-in VPN profile. vpn subnet [index] [1/2/3/4/5/6] Parameter Description <index> It means the index number of the VPN profile. <1/2/3/4/5/6> 1 – it means LAN1 VigorBX 2000 Series User’s Guide...
  • Page 747 1 name1 pptp_out 1.2.3.4 vigor 1234 192.168.1.0 255.255.255.0 For IPsec Dial-Out <index> It means the index number of the profile. <name> It means the name of the profile. <ip> It means the IP address to dial to. VigorBX 2000 Series User’s Guide...
  • Page 748 % Username : vigor % Password : 1234 % Pre-share Key : abc % Call Direction : Dial-In % Type of Server : PPTP IPSec L2TP % Dial from : 1.2.3.4 % Remote NEtwork IP : 192.168.1.0 VigorBX 2000 Series User’s Guide...
  • Page 749 Available values include: -1 – it means always on for dial-out. 0 – it means always on for dial-in. Other numbers (e.g., idle=200, idle=300, idle=500) mean the router will be idle after the interval (seconds) configured here. VigorBX 2000 Series User’s Guide...
  • Page 750 “ctype= l” means L2TP(IPSec Policy None). “ctype= l1” means L2TP(IPSec Policy Nice to Have). “ctype= l2” means L2TP(IPSec Policy Must). dialto It means Server IP/Host Name for VPN. (such as draytek.com or 123.45.67.89). ltype It means Link Type. “ltype=0” means “Disable”.
  • Page 751 Type “off” means any remote IP is allowed to dial in. peerid It means the peer ID for Remote VPN Gateway. Type “draytek” means the word is used as local ID. iname It means Dial-in Username. “iname=admin” means to set username as “admin”.
  • Page 752 <index> add <network ip>/<mask> vpn mroute <index> del <network ip>/<mask> Parameter Description list It means to display all of the route settings. It means to add a new route. It means to delete specified route. VigorBX 2000 Series User’s Guide...
  • Page 753 % Profile Status : Disable % Netbios Naming Packet : Pass % Call Direction : Both % Idle Timeout : 300 % PING to keep alive : off % Dial-out Settings % Type of Server : PPTP VigorBX 2000 Series User’s Guide...
  • Page 754 – disable VPN remote setting. > vpn remote PPTP on Set PPTP VPN Service : On Please restart the router!! This command allows users to enable second subnet IP as VPN server IP. vpn 2ndsubnet on vpn 2ndsubnet off VigorBX 2000 Series User’s Guide...
  • Page 755 <connection type> <TCP maximum segment size range> Parameter Description show It means to display current setting status. default TCP maximum segment size for all the VPN connection will be set as 1360 bytes. VigorBX 2000 Series User’s Guide...
  • Page 756 # of free M-Buffer=529, minimum=529 leak=3 # of free S-Buffer=1199, minimum=1198, leak=1 # of free Msgid-Buffer=1024, minimum=1024 This command allows users to pass or block the multi-cast packet via VPN. vpn Multicast set <H2l/L2l> <index> <Block/Pass> VigorBX 2000 Series User’s Guide...
  • Page 757 [off] Parameter Description on/off on – the packets can pass through NAT. off – the packets cannot pass through NAT. > vpn pass2nat on % Packets would go through by NAT when VPN disconnect!! VigorBX 2000 Series User’s Guide...
  • Page 758 For PPPoE, the maximum number will be 1492. For PPTP/L2TP, the maximum number will be 1460. > wan mtu 1100 > wan mtu ? Static IP/DHCP (Max MSS: 1500) PPPoE(Max MSS: 1492) PPTP/L2TP(Max MSS: 1460) VigorBX 2000 Series User’s Guide...
  • Page 759 WANs. wan forward [on] wan forward [off] Parameter Description on/off It means to enable or disable WAN forward. > wan forward ? %WAN forwarding is Disable! > wan forward on VigorBX 2000 Series User’s Guide...
  • Page 760 It means to display current status of Fallback Mode used. fbk_mode Available modes to be set as fallback mode include, Auto Vdsl_only Adsl_only > wan vdsl show basic ADSL Link Status: TRAINING Firmware Version: 05-04-04-04-00-01 ADSL Profile: Basic Status Upstream Downstream Unit VigorBX 2000 Series User’s Guide...
  • Page 761 WAN2: off WAN3: off WAN4: off WAN5: off > wan detect wan1 target 192.168.1.78 Set OK > wan detect wan1 on Set OK > wan detect status WAN1: on, Target=192.168.1.78, TTL=255 WAN2: off WAN3: off VigorBX 2000 Series User’s Guide...
  • Page 762 It means to enable/disable the Multi-VLAN function. on/off It means to turn on/off bridge mode for the specific channel. clear It means to turn off/clear the port. tag tag_no It means to tag a number for the VLAN. VigorBX 2000 Series User’s Guide...
  • Page 763 WAN interface # Type a number to indicate the WAN interface. 1=WAN1 status It means to display current bridge status. > wan multifno 5 1 % Configured channel 5 uplink to WAN1 > wan multifno status VigorBX 2000 Series User’s Guide...
  • Page 764 It means to show access control status. wl acl showmode It means to show the mode for each SSID. wl acl clean It means to clean all access control setting. > > wl acl showmode VigorBX 2000 Series User’s Guide...
  • Page 765 Channel 1 …. number=13, means Channel 13. preamble [enable] It means to define the length of the sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync VigorBX 2000 Series User’s Guide...
  • Page 766 Choose 1, 2, 3 or 4 to specify SSID1, SSID2, SSID3 or SSID4. enable: It means to enable the function of the rate control for the specified SSID. 0: disable and 1:enable. upload: It means to configure the rate control for data upload. The VigorBX 2000 Series User’s Guide...
  • Page 767 [enable] It means to enhance the performance in data transmission about 40%* more (by enabling Tx Burst). It is active only when both sides of Access Point and Station (in wireless client) invoke this function VigorBX 2000 Series User’s Guide...
  • Page 768 – It means to set white list for passing. MAC address must be added in the end. e.g., wl scan set wlist 001122aabbcc blist – It means to set black list for blocking. MAC address must be added in the end. VigorBX 2000 Series User’s Guide...
  • Page 769 Available channel for 2.4G: 0/1/2/3 Available channel for 5G: 4/5/6/7. show It means to display status or configuration of the selected channel. It means connection time. The unit is minute. It means reconnection time. The unit is minute. VigorBX 2000 Series User’s Guide...
  • Page 770 This command allows you to configure WPA wireless settings. wl wpa 1/2/3 Parameter Description wl wpa Type 1/2/3 to represent different WPA modes. 1 – means WPA+WPA2 2 – means WPA2 Only 3 – means WPA Only > wl wpa 1 > VigorBX 2000 Series User’s Guide...
  • Page 771 QueIdx=0: APAifsn=3,APCwmin=4,APCwmax=6, APTxop=0,APACM=0 > wl wmm enable 1 0 1 0 WMM_SSID0 =1, WMM_SSID1 =0,WMM_SSID2 =1,WMM_SSID3 =0 > wl wmm show Enable WMM: SSID0 =1, SSID1 =0,SSID2 =1,SSID3 =0 APSD=0 QueIdx=0: APAifsn=3,APCwmin=4,APCwmax=6, APTxop=0,APACM=0 QueIdx=1: APAifsn=7,APCwmin=4,APCwmax=10, APTxop=0,APACM=0 VigorBX 2000 Series User’s Guide...
  • Page 772 The value you can type ranges from 0-3. 0: 2T3R 1: 2T2R 2: 1T2R 3: 1T1R wl ht greenfield value The value you can type is 0 (for mixed mode) and 1 (for green field). > wl ht bw value 1 BW=0 VigorBX 2000 Series User’s Guide...
  • Page 773 This command allows you to tag packets on WAN VLAN with specified number. wan vlan wan [#] tag [value] wan vlan wan [#] [enable|disable] wan vlan stat Parameter Description It means the number of WAN interface. 1: means WAN1 2: means WAN2. VigorBX 2000 Series User’s Guide...
  • Page 774 Internet through the use of the WoL packet. ip address - It means the WAN IP address. mask - It means the mask of the IP address. VigorBX 2000 Series User’s Guide...
  • Page 775 – type the name of the user profile. all – all of the user profile settings will be removed. It means to trigger the alert tool to do authentication. It means to set login service. VigorBX 2000 Series User’s Guide...
  • Page 776 It means to enable /disable time quota limitation for user account. 0:Disable 1:Enable It means to enable /disable data quota limitation for user account. 0:Disable 1:Enable It means to set account time quota. e.g., -q 200 VigorBX 2000 Series User’s Guide...
  • Page 777 33554432 11869493 21684939 cfg-bak 4194304 7920 4186384 bin_web-bak 33554432 11869493 21684939 > nand bad Show NAND Flash Bad Blocks: Block Address Partition 1020 0x07f80000 unused 1021 0x07fa0000 unused 1022 0x07fc0000 unused 1023 0x07fe0000 unused VigorBX 2000 Series User’s Guide...

This manual is also suitable for:

Vigorbx 2000 series

Table of Contents