Draytek Vigor2862ac User Manual

Draytek Vigor2862ac User Manual

Vdsl2 security firewall
Table of Contents

Advertisement

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Vigor2862ac and is the answer not in the manual?

Questions and answers

Summarization of Contents

Part I Installation
I-1 Introduction
Introduces the Vigor2862 series router, highlighting its VDSL2, IP layer QoS, NAT management, hardware-based VPN, SPI firewall, and USB features.
I-1-1 Indicators and Connectors
Explains the LED indicators and connectors on Vigor2862, Vigor2862B, and Vigor2862L models for quick identification of router status.
I-1-1-2 Vigor2862n/Vigor2862ac/Vigor2862Bn/ Vigor2862Ln / Vigor2862Lac
Details the LED indicators for various models including Vigor2862n, Vigor2862ac, Vigor2862Bn, Vigor2862Ln, and Vigor2862Lac.
I-1-2 Notes for Antenna Installation (for “L” model)
Provides instructions for installing magnetic antennas on the extension base and mounting holes for Vigor routers.
I-2 Hardware Installation
Guides on correctly connecting devices to the Vigor router, including DSL, Ethernet, and power connections.
I-2-1 Installing Vigor Router
Provides step-by-step instructions for connecting the Vigor router to the DSL line and computer using Ethernet cables.
I-2-2 Wall-Mounted Installation
Details how to mount the Vigor router on a wall using keyhole mounting slots and provided templates.
I-2-3 Installing USB Printer to Vigor Router
Explains how to install a printer on the router for shared printing, with examples based on Windows 7.
I-3 Accessing Web Page
Guides users on how to access the router's web interface by typing the default IP address and logging in.
I-4 Changing Password
Provides instructions on how to change the router's original password for enhanced security.
I-5 Dashboard
Explains the Dashboard's function, showing connection status including System Information, Internet Access, and physical connections.
I-5-1 Virtual Panel
Describes the virtual panel on the Dashboard that simulates the router's physical interface, displaying LED status.
I-5-3 Quick Access for Common Used Menu
Highlights common menu items accessible from the left side of the main page for convenience, grouped under Quick Access.
I-5-4 GUI Map
Lists all supported functions in a table, allowing users to access setting pages by clicking function links or the icon on the main screen.
I-5-5 Web Console
Explains how to use the Web Console icon to open a screen for managing router functions and settings via a web interface.
I-5-6 Config Backup
Describes how to store current settings quickly by clicking the Config Backup icon to create a backup file.
I-5-7 Logout
Explains how to exit the web user interface by clicking the Logout icon.
I-5-8 Online Status
Describes the Online Status page, which displays physical connection status like LAN, WAN, and ADSL information.
I-5-8-1 Physical Connection
Details the physical connection status page, showing LAN, WAN, and ADSL information.
I-5-8-2 Virtual WAN
Explains the Virtual WAN page, which displays virtual WAN connection information used by TR-069 management and VoIP services.
I-6 Quick Start Wizard
Guides users through easily and quickly deploying and using the router via a step-by-step wizard.
I-6-1 For WAN1 (ADSL/VDSL2)
Details the configuration for WAN1, specified for ADSL or VDSL2 connections, including VLAN tag insertion.
I-6-2 For WAN2 (Ethernet)/(Wireless 2.4G)
Explains configuring WAN2 for Ethernet or Wireless 2.4G, including physical type and VLAN tag insertion.
I-6-3 For WAN3/WAN4 (USB)
Details how to configure WAN3/LTE or WAN4 interface for 3G/4G network connection using a USB modem.
I-7 Service Activation Wizard
Guides users to activate services like WCF, APPE enforcement, and DDNS through a quick and easy wizard.
I-8 Registering Vigor Router
Provides steps to register the Vigor router on the MyVigor website to access more services and information.
Part II Connectivity
II-1 WAN
Explains the Wide Area Network (WAN) concept and its role in allowing users to access the Internet.
II-1-1 General Setup
Covers general Internet settings and connection modes for WAN1, WAN2, and WAN3/WAN4, supporting multiple-WAN functions.
II-1-1-1 WAN1(ADSL/VDSL2)
Details the configuration for WAN1, automatically detecting ADSL or VDSL2 physical lines for Internet access.
II-1-1-2 WAN2 (Ethernet)/(Wireless 2.4G/5G)
Explains the configuration for WAN2, supporting Ethernet or Wireless 2.4/5G modes for Internet access.
II-1-1-3 WAN3/LTE/WAN4 (USB)
Details configuring WAN3/LTE or WAN4 interface for 3G/4G USB modem connection, supporting PPP and DHCP modes.
II-1-2 Internet Access
Explains setting different WAN settings for Internet Access across WAN1, WAN2, WAN3, LTE, and WAN4 interfaces.
II-1-2-1 Details Page for PPPoE in WAN1 (Physical Mode: VDSL2)
Guides on selecting PPPoE as the Internet accessing protocol for WAN1, detailing settings like username, password, and connection detection.
II-1-2-2 Details Page for MPoA/Static or Dynamic IP in WAN1 (Physical Mode: VDSL2)
Explains configuring MPoA/Static or Dynamic IP for WAN1, covering IP network settings and obtaining IP addresses automatically or manually.
II-1-2-3 Details Page for PPPoE/PPPoA in WAN1 (Physical Mode: ADSL)
Details PPPoE/PPPoA configuration for WAN1 on ADSL, including modem settings, ISP access setup, and WAN connection detection.
II-1-2-4 Details Page for MPoA/Static or Dynamic IP in WAN1 (Physical Mode: ADSL)
Explains configuring MPoA/Static or Dynamic IP for WAN1 on ADSL, covering modem settings and IP network configuration.
II-1-2-5 Details Page for PPPoE in WAN2 (Physical Mode: Ethernet)
Guides on selecting PPPoE for WAN2 (Ethernet) and configuring settings like ISP access, WAN connection detection, and MTU.
II-1-2-6 Details Page for Static or Dynamic IP in WAN2 (Physical Mode: Ethernet)
Explains configuring Static or Dynamic IP for WAN2 (Ethernet), covering IP network settings, WAN connection detection, and MAC address.
II-1-2-7 Details Page for PPTP/L2TP in WAN2 (Physical Mode: Ethernet)
Details PPTP/L2TP configuration for WAN2 (Ethernet), including ISP access setup, WAN connection detection, and MTU settings.
II-1-2-8 Details Page for Static or Dynamic IP in WAN2 (Physical Mode: Wireless 2.4G)
Explains configuring Static or Dynamic IP for WAN2 using Wireless 2.4G, covering AP discovery and security settings.
II-1-2-9 Details Page for 3G/4G USB Modem (PPP mode) in WAN3/WAN4
Guides on using 3G/4G USB Modem (PPP mode) for WAN3/WAN4, detailing modem support list and connection settings.
II-1-2-10 Details Page for 3G/4G USB Modem (DHCP mode) in WAN3/WAN4
Explains configuring 3G/4G USB Modem (DHCP mode) for WAN3/WAN4, covering modem support list and connection settings.
II-1-2-11 Details Page for 3G/4G USB Modem (DHCP mode) in LTE WAN
Details configuring 3G/4G USB Modem (DHCP mode) for LTE WAN, covering modem support list and connection settings.
II-1-2-12 Details Page for IPv6 – Offline in WAN1/WAN2/WAN3/WAN4
Explains the IPv6 Offline mode, where the IPv6 connection is disabled for WAN interfaces.
II-1-2-13 Details Page for IPv6 – PPP in WAN1/WAN2
Guides on configuring IPv6 PPP settings for WAN1/WAN2, including WAN connection detection and RIPng Protocol.
II-1-2-14 Details Page for IPv6 – TSPC in WAN1/WAN2/WAN3/WAN4
Explains configuring IPv6 TSPC for WAN interfaces, allowing connection to IPv6 network through a tunnel broker.
II-1-2-15 Details Page for IPv6 – AICCU in WAN1/WAN2/WAN3/WAN4
Details configuring IPv6 AICCU for WAN interfaces, enabling automatic network connection to AICCU servers.
II-1-2-16 Details Page for IPv6 – DHCPv6 Client in WAN1/WAN2
Guides on configuring IPv6 DHCPv6 Client settings for WAN1/WAN2, obtaining IPv6 address from the server.
II-1-2-17 Details Page for IPv6 – Static IPv6 in WAN1/WAN2
Explains setting up static IPv6 addresses for WAN interfaces, including address configuration and WAN connection detection.
II-1-2-18 Details Page for IPv6 – 6in4 Static Tunnel in WAN1/WAN2
Details configuring 6in4 Static Tunnel for WAN interfaces, enabling IPv6 network access through IPv4.
II-1-2-19 Details Page for IPv6 – 6rd in WAN1/WAN2
Guides on setting up 6rd for WAN interfaces, retrieving 6rd prefix automatically from the 6rd service provider.
II-1-3 Multi-PVC/VLAN
Explains configuring multiple permanent virtual circuits (PVCs) and ATM QoS for channels using ADSL.
II-1-4 WAN Budget
Describes the WAN Budget function used to determine data traffic volume for each WAN interface to prevent overcharges.
II-1-4-1 General Setup
Covers general setup for WAN interfaces, explaining connection modes and settings for WAN1, WAN2, and WAN3/WAN4.
II-1-4-2 Status
Explains the status page for WAN budget, displaying duration and usage, and actions when the budget is exhausted.
Part III Wireless LAN
III-1 Wireless LAN (2.4GHz/5GHz)
Explains wireless LAN functions for "n" models, supporting 2.4 GHz 802.11n and 5 GHz 802.11ac applications.
III-1-1 Wireless Wizard
Guides users through configuring settings for a host AP or guest AP, simplifying the setup of wireless networks.
III-1-2 General Setup
Allows configuration of SSID and wireless channel for both 2.4GHz and 5GHz wireless LAN interfaces.
III-1-3 Security
Details security settings for SSID 1, 2, 3, and 4, allowing configuration of WPA and WEP modes.
III-1-4 Access Control
Explains how to restrict wireless access by locking MAC addresses into black or white lists for each SSID.
III-1-5 WPS
Provides an easy procedure for network connection between wireless clients and access points using WPA and WPA2 encryption.
III-1-6 WDS
Explains the Wireless Distribution System (WDS) protocol for connecting two access points wirelessly, supporting Bridge and Repeater modes.
III-1-7 Advanced Setting
Allows users to set advanced wireless settings such as operation mode, channel bandwidth, guard interval, and aggregation MSDU.
III-1-8 Station Control
Specifies the duration for wireless clients to connect and reconnect to the Vigor router, useful for free Wi-Fi services.
III-1-9 Bandwidth Management
Explains how to manage bandwidth usage for downstream/upstream traffic from FTP, HTTP, or P2P applications.
III-1-10 AP Discovery
Allows scanning regulatory channels to find working APs, facilitating finding an AP for WDS links and indicating clean channels.
III-1-11 Airtime Fairness
Explains Airtime Fairness essential for wireless networks supporting critical enterprise applications, ensuring equal access to network airtime.
III-1-12 Band Steering
Describes Band Steering, which detects wireless clients capable of 5GHz operation and steers them to that frequency.
III-1-13 Roaming
Explains enabling the Roaming feature for multiple access points to seamlessly expand wireless network coverage.
III-1-14 Station List
Provides knowledge of connecting wireless clients and their status codes, displaying IP address, MAC address, and connection status.
Part IV VoIP
IV-1 VoIP
Explains Voice over IP (VoIP) functionality, enabling toll-quality voice calls over the Internet using broadband connection.
IV-1-1 VoIP Wizard
Offers a quick method to configure settings for VoIP application, guiding users through the setup process.
IV-1-2 General Settings
Covers general VoIP settings, including secure phone, IP call, NAT Traversal, and RTP configuration.
IV-1-3 SIP Accounts
Guides users on setting up SIP accounts, including registration messages, SIP proxies, and codec types.
IV-1-4 DialPlan
Allows setting up phone book, digit map, call barring, regional settings, and PSTN setup for the VoIP function.
IV-1-4-1 Phone Book
Explains how to set VoIP contacts in the phonebook for quick and easy calls using speed-dial.
IV-1-4-3 Call Barring
Details call barring features to block unwanted incoming calls, including anonymous, unknown domain, and IP address blocking.
IV-1-4-4 Regional
Allows processing incoming or outgoing phone calls by region, with default values for common areas.
IV-1-4-5 PSTN Setup
Explains setting up PSTN numbers for dialing without Internet, enabling PSTN number availability for dialing whenever needed.
IV-1-5 Phone Settings
Covers setting phone settings for Phone 1 and Phone 2, including port, call feature, tone, gain, and DTMF relay.
IV-1-7 Diagnostics
Provides VoIP diagnostics for troubleshooting VoIP phone failures caused by different tones or caller IDs.
IV-1-7-1 Caller ID
Explains how to send Caller ID information to the phone set, allowing the user to identify callers.
IV-1-7-2 Tone
Details tone settings for VoIP phones, including dial tone, ringing tone, busy tone, and congestion tone.
Part V VPN
V-1 VPN and Remote Access
Explains Virtual Private Network (VPN) and remote access, detailing its suitability for various communication needs.
V-1-1 VPN Client Wizard
Guides users to configure VPN settings for a VPN client, assisting with LAN-to-LAN profile setup for VPN dial-out connection.
V-1-2 VPN Server Wizard
Guides users to configure VPN settings for a VPN server, assisting with LAN-to-LAN profile setup for VPN dial-in connection.
V-1-3 Remote Access Control
Explains enabling necessary VPN services and disabling the Vigor Router's VPN service to allow VPN tunnel pass-through.
V-1-4 PPP General Setup
Details PPP-related VPN connections, including PPTP, L2TP, and L2TP over IPsec, covering authentication and encryption.
V-1-5 IPsec General Setup
Covers IPsec General Setup, explaining Phase 1 and Phase 2 configurations for negotiation, encryption, and authentication.
V-1-6 IPsec Peer Identity
Explains using digital certificates for peer authentication in LAN-to-LAN or Remote User Dial-In connections.
V-1-7 OpenVPN
Introduces OpenVPN for building VPN connections between local and remote ends, offering robust, reliable, and secure private connections.
V-1-7-1 General Setup
Details general settings for OpenVPN service, including UDP/TCP ports, cipher algorithm, and HMAC algorithm.
V-1-7-2 Client Config
Explains how to download settings as a file for remote CPE (VPN client), enabling successful OpenVPN tunnel connection.
V-1-8 Remote Dial-in User
Guides on managing remote access by maintaining a table of remote user profiles for VPN authentication.
V-1-9 LAN to LAN
Explains managing LAN-to-LAN connections by maintaining connection profiles, including parameters like direction and connection type.
V-2 SSL VPN
Introduces SSL VPN, a form of VPN that encrypts traffic using SSL, offering fewer restrictions compared to traditional VPNs.
V-2-1 General Setup
Covers general settings for SSL VPN Server and SSL Tunnel, including binding to WAN interfaces and port configuration.
V-2-2 User Account
Explains how SSL VPN allows convenient remote access for teleworkers without manual VPN software installation.
V-2-4 SSL Portal Online User
Shows how users can find corresponding settings after configuring SSL Web Proxy, viewing logging status of SSL VPN.
V-3 Certificate Management
Explains digital certificates as electronic IDs, covering generation, management of local certificates, and trusted CA certificates.
V-3-1 Local Certificate
Details how to generate a certificate request and submit it to the CA server, or import a pre-saved certificate.
V-3-3 Certificate Backup
Describes saving local and trusted CA certificates in one file, with options for encryption and retrieval.
Part VI Security
VI-1 Firewall
Explains how the firewall protects the local network against unauthorized outsiders and restricts Internet access.
VI-1-1 General Setup
Allows adjustment of IP Filter and common options, enabling or disabling Call Filter or Data Filter.
VI-1-2 Filter Setup
Guides on editing or adding filters, defining rules for packet direction, source/destination IP, and service type.
VI-1-3 Defense Setup
Details DoS Defense setup, offering 15 types of detect/defense functions to mitigate DoS attacks.
VI-1-3-1 DoS Defense
Explains activating DoS Defense functionality to detect and mitigate various types of attacks like SYN flood and port scan.
VI-1-3-2 Spoofing Defense
Details Spoofing Defense, including ARP Spoofing Defense and IP Spoofing Defense options to prevent unauthorized network access.
VI-1-4 Diagnose
Explains the Diagnose function to test incoming packets against firewall rules, showing results for firewall rule profile and IP address translation.
VI-2 Central Security Management (CSM)
Introduces Central Security Management (CSM) for controlling IM/P2P usage, filtering web content, and URL content.
VI-2-1 APP Enforcement Profile
Allows defining policy profiles for IM, VoIP, P2P, and Protocol applications, applied in Firewall's Default Rule for filtering.
VI-2-2 APPE Signature Upgrade
Explains APPE Signature Upgrade feature for executing APP version upgrades automatically or manually.
VI-2-3 URL Content Filter Profile
Details URL Content Filter for limiting illegal traffic and prohibiting web features where malicious code may conceal.
VI-2-4 Web Content Filter Profile
Explains activating Web Content Filter (WCF) using Service Activation Wizard, CSM, or System Maintenance.
VI-2-5 DNS Filter Profile
Describes DNS Filter for monitoring DNS queries and passing information to WCF for HTTPS URL categorization.
Part VII Management
VII-1 System Maintenance
Covers system setup items including System Status, TR-069, Administrator Password, and Firmware Upgrade.
VII-1-1 System Status
Provides basic network settings of Vigor router, including LAN and WAN interface information and firmware version.
VII-1-2 TR-069
Explains TR-069 standard support for managing TR-069 devices through an Auto Configuration Server (ACS).
VII-1-3 Administrator Password
Guides on setting a new password for the administrator to access the web user interface and modify settings.
VII-1-4 User Password
Allows setting a new password for user operation, enabling simple web configuration access with the typed password.
VII-1-5 Login Page Greeting
Enables login page customization by specifying login URL and heading on the Login window.
VII-1-6 Configuration Backup
Explains how to apply router settings configured on other Vigor models to the current router and backup configuration.
VII-1-7 Syslog/Mail Alert
Provides Syslog function for monitoring router and Mail Alert for sending messages to user's mobile or email.
VII-1-8 Time and Date
Allows specifying where the router's time should be inquired from, using browser time or Internet Time Server.
VII-1-9 SNMP
Covers configuring settings for SNMP and SNMPv3 services, offering secure management through encryption and authentication.
VII-1-10 Management
Manages settings for Internet/LAN Access Control, Access List from Internet, Management Port Setup, and TLS/SSL Encryption.
VII-1-11 Panel Control
Allows customization of behavior for LEDs, buttons, USB ports, and LAN ports on the Vigor router's front panel.
VII-1-12 Self-Signed Certificate
Explains self-signed certificates for unique device identification, used for SSL VPN, HTTPS, and created for free.
VII-1-13 Reboot System
Provides instructions on how to restart the router via the web interface or hardware reset button.
VII-1-14 Firmware Upgrade
Guides on upgrading router firmware using the web interface or TFTP server for the latest features and security.
VII-1-15 Firmware Backup
Explains how to save router settings as a backup firmware, which can be applied to restore the router if it crashes.
VII-1-16 Modem Code Upgrade
Details upgrading modem code if the built-in modem code is not suitable for the Vigor router.
VII-1-17 Activation
Describes three ways to activate WCF: Service Activation Wizard, CSM, or System Maintenance.
VII-1-18 Internal Service User List
Displays user profiles defined and enabled in User Management, allowing turn on/off of RADIUS or Local 802.1X authentication.
VII-1-19 Dashboard Control
Allows customizing displayed information on the Dashboard for administrator/user reference, with options to hide settings.
VII-2 Bandwidth Management
Explains controlling bandwidth of data transmission through Sessions Limit, Bandwidth Limit, and Quality of Service (QoS).
VII-2-1 Sessions Limit
Guides on setting default session limits and specific limitations for IP addresses or ranges to manage concurrent connections.
VII-2-2 Bandwidth Limit
Details activating bandwidth limit functions and setting default upstream and downstream limits for each computer in LAN.
VII-2-3 Quality of Service
Explains configuring general QoS setup for WAN/LTE interfaces, including Class Rules and Service Types for traffic prioritization.
VII-2-4 APP QoS
Describes using QoS function for bandwidth management on services with specific IP or port numbers, leveraging APP Enforcement.
VII-3 User Management
Provides security features to manage hosts via user accounts, applying different firewall policies or rules for different users.
VII-3-1 General Setup
Determines the standard (rule-based or user-based) for users controlled by User Management, influencing filter rules.
VII-3-2 User Profile
Allows setting customized profiles applied to users controlled under User Management, enabling authentication and access control.
VII-3-3 User Group
Enables binding several user profiles into one group for use in Firewall>>General Setup as part of filter rules.
VII-3-4 User Online Status
Displays user status connected to the router, refreshing connection status at intervals, and showing online/offline status.
VII-4 Hotspot Web Portal
Allows setting up profiles to redirect LAN users to specific URLs or show messages upon Internet connection.
VII-4-1 Profile Setup
Guides on creating or modifying Portal profiles to meet requirements based on LAN subnets, WLAN SSIDs, and IP addresses.
VII-4-1-1 Login Modes
Explains five login modes: Skip Login, Click Through, Social Login, PIN Login, and Social or PIN Login for network client authentication.
VII-4-1-2 Steps for Configuring a Web Portal Profile
Provides step-by-step configuration for Web Portal profiles, including Login Method, Background, and Login Page Setup.
VII-4-2 Users Information
Displays log information for users accessing the Internet through the web portal, with detailed information available per user.
VII-4-2-1 User Info
Allows displaying user information based on filtering conditions like profile or login method.
VII-4-2-2 Database Setup
Covers configuring database settings for the USB disk, including recording user information and actions when storage is exceeded.
VII-5 Central Management (VPN)
Enables building virtual private networks (VPN) and managing TR-069 CPEs for firmware upgrade and configuration backup.
VII-5-1 General Setup
Covers general settings for clients registering to the Vigor router, including CVM port or CVM SSL Port enabling.
VII-5-1-1 General Settings
Explains enabling CVM port or CVM SSL Port for the CVM feature, and configuring VPN settings for the Vigor router.
VII-5-1-2 IPsec VPN Settings
Details Central VPN management operated through IPsec VPN connection, covering IPsec Mode, Security Method, and Encryption Type.
VII-5-2 CPE Management
Allows managing CPEs connected to Vigor2862 series via icons, enabling Central AP Management and Google Map views.
VII-5-2-1 Managed Device List
Displays device icons for CPEs managed by Vigor2862 series, allowing modification of name and location, or deletion of management.
VII-5-2-2 CPE Maintenance
Shows profiles for managed devices, assisting with maintenance jobs like firmware upgrade and configuration backup.
VII-5-3 VPN Management
Offers an easy method to configure VPN settings for building VPN connections automatically between Vigor2862 series and other Vigor routers.
VII-5-4 Log & Alert
Provides brief information to identify CPE connected to Vigor2862 series, displaying log and alert information.
VII-6 Central Management (AP)
Allows Vigor2862 to manage access points supporting AP management via Central AP Management.
VII-6-1 Dashboard
Displays VigorAP information including Status, Event Log, Total Traffic, or Station Number by icons, text, and histograms.
VII-6-2 Status
Shows current status (online, offline, SSID hidden, IP address, etc.) of access points managed by Vigor router.
VII-6-3 WLAN Profile
Applies WLAN profiles to selected access points, enabling convenient configuration without opening the AP's web interface.
VII-6-4 AP Maintenance
Explains how Vigor router can perform configuration backup, restoration, firmware upgrade, and remote reboot for managed APs.
VII-6-5 AP Map
Helps determine the best location for VigorAP in a room by uploading a floor plan and dragging AP icons.
VII-7 Central Management (Switch)
Manages VigorSwitch devices, allowing firmware/configuration backup, restore, reboot, or factory default settings.
VII-7-1 Status
Displays information about connected VigorSwitches, including Group, Switch name, IP address, and firmware version.
VII-7-1-1 Switch Status
Shows current status of VigorSwitches connected to Vigor2862, listing managed and unmanaged devices.
VII-7-1-2 Switch Hierarchy
Displays the hierarchy of VigorSwitches managed under Vigor2862, with options for port control and shutdown.
VII-7-2 Profile
Shows general information for VigorSwitches, allowing configuration of profile settings by clicking index number links.
VII-7-4 Maintenance
Allows executing configuration backup, restore, firmware upgrade, and remote reboot for selected VigorSwitch devices.
VII-7-5 Alert and Log
Provides information to understand abnormal situations in VigorSwitch, recording error information or sending alerts via email/SMS.
VII-7-5-1 Alert Setup
Defines alert names, levels, and determines whether to record data in the database or send notifications.
VII-7-5-2 Switch and Port Setup
Defines enabling switch alert and/or port alert for each switch, specifying severity levels for different alert events.
VII-7-5-3 Alert Logs
Allows filtering collective information based on specified conditions to view alert logs.
VII-7-6 Database Setup
Determines if user information needs to be recorded in the switch database, for alert logs and traffic history.
VII-7-7 Support List
Lists all models of VigorSwitch that can be managed by Vigor2862 via Central Management >> Switch.
VII-8 Central Management (External Devices)
Connects with various external devices for control and management, enabling detailed configuration.
Part VIII Others
VIII-1 Objects Settings
Defines objects like IP address, service type, keyword, and file extension, which can be applied in CSM.
VIII-1-1 IP Object
Allows applying IPs in a range and service ports in a limited range for router settings, binding them with groups.
VIII-1-2 IP Group
Enables binding several IP objects into one IP group for use in policies.
VIII-1-3 IPv6 Object
Allows setting up IPv6 objects with different conditions, including address type, match type, and MAC address.
VIII-1-4 IPv6 Group
Binds several IPv6 objects into one IPv6 group, used in firewall rules for different requirements.
VIII-1-5 Service Type Object
Allows setting up to 96 sets of Service Type Objects with different conditions, defining protocols and port numbers.
VIII-1-6 Service Type Group
Enables binding several service types into one group, chosen as black/white list in CSM >> URL / Web Content Filter Profile.
VIII-1-7 Keyword Object
Allows setting 200 keyword object profiles for black/white list in CSM >> URL Web Content Filter Profile.
VIII-1-8 Keyword Group
Enables binding several keyword objects into one group, chosen as black/white list in CSM >> URL / Web Content Filter Profile.
VIII-1-9 File Extension Object
Allows setting eight profiles applied in CSM >> URL Content Filter, processing files based on chosen action.
VIII-1-10 SMS/Mail Service Object
Allows setting ten profiles for Application >> SMS/Mail Alert Service, specifying SMS provider and mail server.
VIII-1-11 Notification Object
Allows setting ten profiles for Application >> SMS/Mail Alert Service, defining event conditions for notification.
VIII-2 USB Application
Explains USB device connection to Vigor router, enabling access, write, and read of USB storage disk via applications.
VIII-2-1 USB General Settings
Determines concurrent FTP connections, default charset, and enables SMB service for USB storage disk.
VIII-2-2 USB User Management
Allows setting profiles for FTP/SMB users, requiring username and password for USB storage disk access.
VIII-2-3 File Explorer
Provides an easy way to view and manage the content of USB storage disk connected to the Vigor router.
VIII-2-4 USB Device Status
Monitors the status of USB devices like modems, printers, or sensors connected to the Vigor router.
VIII-2-5 Temperature Sensor
Introduces USB thermometer for monitoring server or data communications room environment and notifying overheating.
VIII-2-6 Modem Support List
Lists brand names and model names of USB modems supported by the Vigor router for compatibility information.
VIII-2-7 SMB Client Support List
Provides test status information for applications with file sharing operated under different platforms.
Part XI Troubleshooting
XI-1 Diagnostics
Guides users to solve abnormal situations when Internet access fails after router installation and configuration.
XI-1-1 Dial-out Triggering
Explains how Internet connection (e.g., PPPoE) is triggered by a package sent from the source IP address.
XI-1-2 Routing Table
Allows viewing the routing table for reference, displaying IPv4 and IPv6 routes configured on the router.
XI-1-3 ARP Cache Table
Displays the ARP cache content held in the router, showing the mapping between Ethernet hardware address (MAC) and IP address.
XI-1-4 IPv6 Neighbour Table
Shows the mapping between Ethernet hardware address (MAC) and IPv6 address, helpful for diagnosing network problems.
XI-1-5 DHCP Table
Provides information on IP address assignments, helpful for diagnosing network problems like IP address conflicts.
XI-1-6 NAT Sessions Table
Displays the NAT active sessions table, showing private IP:port, pseudo IP:port, peer IP:port, and interface information.
XI-1-7 DNS Cache Table
Records domain name and mapping IP address for DNS queries from LAN, stored temporarily on Vigor router's cache.
XI-1-8 Ping Diagnosis
Allows pinging IP address of WAN interfaces to verify WAN connection status, choosing interface and protocol.
XI-1-9 Data Flow Monitor
Displays running procedure for monitored IP addresses, refreshing data at intervals, and enabling IP bandwidth and session limits.
XI-1-10 Traffic Graph
Shows VigorAP information about traffic, displaying data receiving and transmitting charts for WAN interfaces.
XI-1-11 VPN Graph
Allows viewing VPN connection status and details through graphs, showing LAN-to-LAN and VPN log details.
XI-1-12 Trace Route
Enables tracing routes from the router to the host by typing the IP address and clicking Run.
XI-1-13 Syslog Explorer
Provides real-time syslog and displays information on the screen, allowing checking of Web Syslog and USB Syslog.
XI-1-14 IPv6 TSPC Status
Helps diagnose connection status of TSPC, displaying information when the user connects to the tunnel broker successfully.
XI-1-15 DSL Status
Provides DSL status information, useful for RD debug or web technician checks.
XI-1-16 High Availability Status
Displays status of routers under the same DARP group, showing partial information of router status.
XI-1-17 Authentication Information
Shows authentication user list and log, detailing jobs made by Internal RADIUS or Local 802.1X.
XI-1-18 DoS Flood Table
Displays IP connection content detected by DoS Flooding Defense mechanism, useful for inspecting network environment.
XI-1-19 Route Policy Diagnosis
Analyzes possible paths of packets sent out of the router, tracing static route, routing table, or policy route.
XI-2 Checking If the Hardware Status Is OK or Not
Provides steps to verify hardware status by checking power line, cable connections, and LED indicators.
XI-3 Checking If the Network Connection Settings on Your Computer Is OK or Not
Guides on checking network connection settings on your computer (Windows, Mac OS) to ensure proper configuration.
XI-4 Pinging the Router from Your Computer
Explains how to use the 'ping' command to check the router's link status by verifying computer's IP address.
XI-5 Checking If the ISP Settings are OK or Not
Guides on checking WAN connection status and ISP settings, ensuring LEDs are correct and WAN connection is up.
XI-6 Problems for 3G/4G Network Connection
Troubleshoots issues with 3G/4G network transmission, checking USB LED status and ensuring proper modem connection.
XI-7 Backing to Factory Default Setting If Necessary
Explains how to reset the router to factory default settings via software or hardware to resolve connection issues.
XI-8 Contacting DrayTek
Provides contact information for dealer support or DrayTek technical support if the router cannot work correctly.
Appendix I: VLAN Applications on Vigor Router
Port-based VLAN
Explains Port-based VLAN that uses physical ports to separate clients into different VLAN groups.
Tag-based VLAN
Describes Tag-based VLAN that identifies virtual LAN with a specific ID (VLAN ID) for traffic isolation and management.
Part X Telnet Commands
Accessing Telnet of Vigor2862
Provides a general description for accessing Telnet and firmware versions, guiding users on connecting via Telnet terminal.
Telnet Command: adsl txpct / adsl rxpct
Allows adjusting the percentage of data transmission (receiving/transmitting) for QoS application.
Telnet Command: adsl status
Displays current status of ADSL setting, including running mode, rates, attenuation, and firmware version.
Telnet Command: adsl automode
Used to add or remove ADSL modes such as ANNEXL, ANNEXM, and ANNEXJ supported by Multimode.
Telnet Command: adsl showbins
Displays the allocation for each Bin (Tone) SNR, Gain, and Bits for ADSL settings.
Telnet Command: adsl optn
Allows configuring DSL line features, including bitswap, sra, aelem, and g.vector settings.
Telnet Command: adsl savecfg
Saves the current configuration into FLASH with a file format of cfg.
Telnet Command: adsl vendorid
Allows configuring user-defined CPE vendor ID for the router.
Telnet Command: adsl atm
Sets QoS parameters for ATM, including PCR, SCR, and MBS values.
Telnet Command: adsl pvcbinding
Configures PVC to PVC binding, available for PPPoE and MPoA 1483 Bridge mode.
Telnet Command: adsl inventory
Displays information about CO or CPE.
Telnet Command: vdsl status
Displays current status of VDSL setting and configures fallback mode for WAN connection.
Telnet Command: vdsl idle
Makes the router access the idle status; requires 'reboot' command to invoke again.
Telnet Command: vdsl drivermode
Measures largest power of data transmission by setting VDSL drivermode.
Telnet Command: vdsl reboot
Reboots the DSL router.
Telnet Command: vdsl annex
Displays the annex interface of the router.
Telnet Command: vdsl showbins
Displays the allocation for each Bin (Tone) SNR, Gain, and Bits.
Telnet Command: wan lte
Allows configuration of LTE WAN settings for "L" models, including authentication, band, and SMS quota.
Telnet Command: wan detect
Configures WAN connection detection, enabling Ping Detection to detect WAN connection status.
Telnet Command: wan lb
Enables or disables each WAN to join the auto load balance member.
Telnet Command: wan mvlan
Configures multi-VLAN for WAN and LAN, supporting pure bridge mode between Ethernet WAN and LAN ports.
Telnet Command: wan multifno
Specifies a channel in Multi-PVC/VLAN to make bridge connection to a specified WAN interface.
Telnet Command: wan vlan
Configures the VLAN tag of WAN1 or WAN2.
Telnet Command: wan budget
Determines data traffic volume for each WAN interface to prevent overcharges by the ISP.
Telnet Command: wan detect_mtu
Runs WAN MTU Discovery to specify an IPv4 target to ping and find the suitable MTU size of the WAN interface.
Telnet Command: wan detect_mtu6
Runs WAN MTU Discovery for IPv6 target to ping and find the suitable MTU size of the WAN interface.
Telnet Command: hsportal
Configures Hotspot Web Portal profile with specified URL for accessing into or displaying messages to clients.
Telnet Command: wl acl
Configures wireless access control settings for SSID1, SSID2, SSID3, and SSID4.
Telnet Command: wl config
Configures general settings and security settings for wireless connection, including mode, channel, and SSID.
Telnet Command: wl restart
Restarts wireless settings.
Telnet Command: wl wds
Configures WDS settings for wireless connection, including mode, security, AP function, and hello message.
Telnet Command: wl_dual acl
Configures wireless access control settings for 5GHz wireless connection.
Telnet Command: wl_dual apscan
Scans Access Points installed near the location of Vigor router to display AP list.
Telnet Command: wl_dual cardmac
Displays the MAC address of the wireless 2.4GHz AP client.
Telnet Command: wl_dual config
Configures general settings and security settings for wireless connection (5GHz).
Telnet Command: wl_dual restart
Restarts wireless setting (5GHz).
Telnet Command: wl_dual security
Configures security settings for wireless connection (5GHz), including mode, key, and index.
Telnet Command: wl_dual stalist
Displays the wireless station which accessing Internet via Vigor router.
Telnet Command: wl_dual wds
Configures WDS settings for wireless connection (5GHz), including mode, security, and AP function.
Part VII Management
VII-1 System Maintenance
Covers system setup items including System Status, TR-069, Administrator Password, and Firmware Upgrade.
VII-1-1 System Status
Provides basic network settings of Vigor router, including LAN and WAN interface information and firmware version.
VII-1-2 TR-069
Explains TR-069 standard support for managing TR-069 devices through an Auto Configuration Server (ACS).
VII-1-3 Administrator Password
Guides on setting a new password for the administrator to access the web user interface and modify settings.
VII-1-4 User Password
Allows setting a new password for user operation, enabling simple web configuration access with the typed password.
VII-1-5 Login Page Greeting
Enables login page customization by specifying login URL and heading on the Login window.
VII-1-6 Configuration Backup
Explains how to apply router settings configured on other Vigor models to the current router and backup configuration.
VII-1-7 Syslog/Mail Alert
Provides Syslog function for monitoring router and Mail Alert for sending messages to user's mobile or email.
VII-1-8 Time and Date
Allows specifying where the router's time should be inquired from, using browser time or Internet Time Server.
VII-1-9 SNMP
Covers configuring settings for SNMP and SNMPv3 services, offering secure management through encryption and authentication.
VII-1-10 Management
Manages settings for Internet/LAN Access Control, Access List from Internet, Management Port Setup, and TLS/SSL Encryption.
VII-1-11 Panel Control
Allows customization of behavior for LEDs, buttons, USB ports, and LAN ports on the Vigor router's front panel.
VII-1-12 Self-Signed Certificate
Explains self-signed certificates for unique device identification, used for SSL VPN, HTTPS, and created for free.
VII-1-13 Reboot System
Provides instructions on how to restart the router via the web interface or hardware reset button.
VII-1-14 Firmware Upgrade
Guides on upgrading router firmware using the web interface or TFTP server for the latest features and security.
VII-1-15 Firmware Backup
Explains how to save router settings as a backup firmware, which can be applied to restore the router if it crashes.
VII-1-16 Modem Code Upgrade
Details upgrading modem code if the built-in modem code is not suitable for the Vigor router.
VII-1-17 Activation
Describes three ways to activate WCF: Service Activation Wizard, CSM, or System Maintenance.
VII-1-18 Internal Service User List
Displays user profiles defined and enabled in User Management, allowing turn on/off of RADIUS or Local 802.1X authentication.
VII-1-19 Dashboard Control
Allows customizing displayed information on the Dashboard for administrator/user reference, with options to hide settings.
VII-2 Bandwidth Management
Explains controlling bandwidth of data transmission through Sessions Limit, Bandwidth Limit, and Quality of Service (QoS).
VII-2-1 Sessions Limit
Guides on setting default session limits and specific limitations for IP addresses or ranges to manage concurrent connections.
VII-2-2 Bandwidth Limit
Details activating bandwidth limit functions and setting default upstream and downstream limits for each computer in LAN.
VII-2-3 Quality of Service
Explains configuring general QoS setup for WAN/LTE interfaces, including Class Rules and Service Types for traffic prioritization.
VII-2-4 APP QoS
Describes using QoS function for bandwidth management on services with specific IP or port numbers, leveraging APP Enforcement.
VII-3 User Management
Provides security features to manage hosts via user accounts, applying different firewall policies or rules for different users.
VII-3-1 General Setup
Determines the standard (rule-based or user-based) for users controlled by User Management, influencing filter rules.
VII-3-2 User Profile
Allows setting customized profiles applied to users controlled under User Management, enabling authentication and access control.
VII-3-3 User Group
Enables binding several user profiles into one group for use in Firewall>>General Setup as part of filter rules.
VII-3-4 User Online Status
Displays user status connected to the router, refreshing connection status at intervals, and showing online/offline status.
VII-4 Hotspot Web Portal
Allows setting up profiles to redirect LAN users to specific URLs or show messages upon Internet connection.
VII-4-1 Profile Setup
Guides on creating or modifying Portal profiles to meet requirements based on LAN subnets, WLAN SSIDs, and IP addresses.
VII-4-1-1 Login Modes
Explains five login modes: Skip Login, Click Through, Social Login, PIN Login, and Social or PIN Login for network client authentication.
VII-4-1-2 Steps for Configuring a Web Portal Profile
Provides step-by-step configuration for Web Portal profiles, including Login Method, Background, and Login Page Setup.
VII-4-2 Users Information
Displays log information for users accessing the Internet through the web portal, with detailed information available per user.
VII-4-2-1 User Info
Allows displaying user information based on filtering conditions like profile or login method.
VII-4-2-2 Database Setup
Covers configuring database settings for the USB disk, including recording user information and actions when storage is exceeded.
VII-5 Central Management (VPN)
Enables building virtual private networks (VPN) and managing TR-069 CPEs for firmware upgrade and configuration backup.
VII-5-1 General Setup
Covers general settings for clients registering to the Vigor router, including CVM port or CVM SSL Port enabling.
VII-5-1-1 General Settings
Explains enabling CVM port or CVM SSL Port for the CVM feature, and configuring VPN settings for the Vigor router.
VII-5-1-2 IPsec VPN Settings
Details Central VPN management operated through IPsec VPN connection, covering IPsec Mode, Security Method, and Encryption Type.
VII-5-2 CPE Management
Allows managing CPEs connected to Vigor2862 series via icons, enabling Central AP Management and Google Map views.
VII-5-2-1 Managed Device List
Displays device icons for CPEs managed by Vigor2862 series, allowing modification of name and location, or deletion of management.
VII-5-2-2 CPE Maintenance
Shows profiles for managed devices, assisting with maintenance jobs like firmware upgrade and configuration backup.
VII-5-3 VPN Management
Offers an easy method to configure VPN settings for building VPN connections automatically between Vigor2862 series and other Vigor routers.
VII-5-4 Log & Alert
Provides brief information to identify CPE connected to Vigor2862 series, displaying log and alert information.
VII-6 Central Management (AP)
Allows Vigor2862 to manage access points supporting AP management via Central AP Management.
VII-6-1 Dashboard
Displays VigorAP information including Status, Event Log, Total Traffic, or Station Number by icons, text, and histograms.
VII-6-2 Status
Shows current status (online, offline, SSID hidden, IP address, etc.) of access points managed by Vigor router.
VII-6-3 WLAN Profile
Applies WLAN profiles to selected access points, enabling convenient configuration without opening the AP's web interface.
VII-6-4 AP Maintenance
Explains how Vigor router can perform configuration backup, restoration, firmware upgrade, and remote reboot for managed APs.
VII-6-5 AP Map
Helps determine the best location for VigorAP in a room by uploading a floor plan and dragging AP icons.
VII-6-11 Station Number
Shows the total number of wireless clients connected, regardless of connection mode (2.4G WLAN or 5G WLAN).
VII-6-12 Load Balance
Configures Load Balance parameters to distribute traffic for access points, preventing bandwidth occupation by specific APs.
VII-6-13 Function Support List
Lists AP management functions supported by Access Points under different firmware versions.
VII-7 Central Management (Switch)
Manages VigorSwitch devices, allowing firmware/configuration backup, restore, reboot, or factory default settings.
VII-7-1 Status
Displays information about connected VigorSwitches, including Group, Switch name, IP address, and firmware version.
VII-7-1-1 Switch Status
Shows current status of VigorSwitches connected to Vigor2862, listing managed and unmanaged devices.
VII-7-1-2 Switch Hierarchy
Displays the hierarchy of VigorSwitches managed under Vigor2862, with options for port control and shutdown.
VII-7-2 Profile
Shows general information for VigorSwitches, allowing configuration of profile settings by clicking index number links.
VII-7-4 Maintenance
Allows executing configuration backup, restore, firmware upgrade, and remote reboot for selected VigorSwitch devices.
VII-7-5 Alert and Log
Provides information to understand abnormal situations in VigorSwitch, recording error information or sending alerts via email/SMS.
VII-7-5-1 Alert Setup
Defines alert names, levels, and determines whether to record data in the database or send notifications.
VII-7-5-2 Switch and Port Setup
Defines enabling switch alert and/or port alert for each switch, specifying severity levels for different alert events.
VII-7-5-3 Alert Logs
Allows filtering collective information based on specified conditions to view alert logs.
VII-7-6 Database Setup
Determines if user information needs to be recorded in the switch database, for alert logs and traffic history.
VII-7-7 Support List
Lists all models of VigorSwitch that can be managed by Vigor2862 via Central Management >> Switch.
Part VIII Others
VIII-1 Objects Settings
Defines objects such as IP address, service type, keyword, and file extension, which can be applied in CSM.
VIII-1-1 IP Object
Allows applying IPs in a range and service ports in a limited range for router settings, binding them with groups.
VIII-1-2 IP Group
Enables binding several IP objects into one IP group for use in policies.
VIII-1-3 IPv6 Object
Allows setting up IPv6 objects with different conditions, including address type, match type, and MAC address.
VIII-1-4 IPv6 Group
Binds several IPv6 objects into one IPv6 group, used in firewall rules for different requirements.
VIII-1-5 Service Type Object
Allows setting up to 96 sets of Service Type Objects with different conditions, defining protocols and port numbers.
VIII-1-6 Service Type Group
Enables binding several service types into one group, chosen as black/white list in CSM >> URL / Web Content Filter Profile.
VIII-1-7 Keyword Object
Allows setting 200 keyword object profiles for black/white list in CSM >> URL Web Content Filter Profile.
VIII-1-8 Keyword Group
Enables binding several keyword objects into one group, chosen as black/white list in CSM >> URL / Web Content Filter Profile.
VIII-1-9 File Extension Object
Allows setting eight profiles applied in CSM >> URL Content Filter, processing files based on chosen action.
VIII-1-10 SMS/Mail Service Object
Allows setting ten profiles for Application >> SMS/Mail Alert Service, specifying SMS provider and mail server.
VIII-1-11 Notification Object
Allows setting ten profiles for Application >> SMS/Mail Alert Service, defining event conditions for notification.
VIII-2 USB Application
Explains USB device connection to Vigor router, enabling access, write, and read of USB storage disk via applications.
VIII-2-1 USB General Settings
Determines concurrent FTP connections, default charset, and enables SMB service for USB storage disk.
VIII-2-2 USB User Management
Allows setting profiles for FTP/SMB users, requiring username and password for USB storage disk access.
VIII-2-3 File Explorer
Provides an easy way to view and manage the content of USB storage disk connected to the Vigor router.
VIII-2-4 USB Device Status
Monitors the status of USB devices like modems, printers, or sensors connected to the Vigor router.
VIII-2-5 Temperature Sensor
Introduces USB thermometer for monitoring server or data communications room environment and notifying overheating.
VIII-2-6 Modem Support List
Lists brand names and model names of USB modems supported by the Vigor router for compatibility information.
VIII-2-7 SMB Client Support List
Provides test status information for applications with file sharing operated under different platforms.

Table of Contents

Save PDF