Page 2 Vigor2910 Series User’s Guide...
Page 3 Windows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are trademarks of Microsoft Corp. Apple and Mac OS are registered trademarks of Apple Inc. Other products may be trademarks or registered trademarks of their respective manufacturers. Vigor2910 Series User’s Guide...
Page 4: Copyright Information
Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Please consult the DrayTek web site for more information on newest firmware, Updates tools and documents. For more detailed information, please refer to http://www.draytek.com...
Page 5: European Community Declarations
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the requirements set forth in EN60950-1. The Vigor2910 Series are designed for the WLAN 2.4GHz network throughput EC region, Switzerland, and the restrictions of France.
Page 6 Vigor2910 Series User’s Guide...
Page 7: Table Of Contents
3.2.2 General Setup......................... 44 3.2.3 Static Route ........................46 3.2.4 Bind IP to MAC ....................... 49 3.2.5 Web Authentication......................50 How to use Web Authentication ....................51 3.3 NAT ............................52 3.3.1 Port Redirection ......................52 Vigor2910 Series User’s Guide...
Page 8 3.10.1 Local Certificate ......................138 3.10.2 Trusted CA Certificate ....................140 3.10.3 Certificate Backup....................... 141 3.11 VoIP ........................... 142 3.11.1 DialPlan ........................143 3.11.2 SIP Accounts ......................147 3.11.3 Phone Settings ......................151 3.11.4 Status.......................... 161 Vigor2910 Series User’s Guide viii...
Page 9 3.17.7 Web Authentication Table ..................211 3.17.8 Data Flow Monitor....................... 211 3.17.9 Traffic Graph....................... 213 3.17.10 Ping Diagnosis......................215 3.17.11 Trace Route ......................215 Application and Examples ................217 4.1 Create a LAN to LAN Connection Between Remote Office and Headquarter....217 Vigor2910 Series User’s Guide...
Page 10 5.4 Checking If the ISP Settings are OK or Not ................ 256 5.5 Problems for 3G Network Connection ................257 5.6 Backing to Factory Default Setting If Necessary ..............258 5.7 Contacting Your Dealer ....................... 259 Vigor2910 Series User’s Guide...
Page 11: Preface
The Vigor2910 series router provides Dual-WAN interface (which is a configuration second WAN) for Internet access to make the Internet connection more reliable. The wireless LAN supports more secure features and the transmission speed is up to 108Mbps (SuperG Object-oriented firewall is flexible and allows your network be safe. In addition, through VoIP function, the communication fee for you and remote people can be reduced.
Page 12: For Vigor2910
Then the router will restart with the factory default configuration. Note: For the USB port can be used to connect 3G USB modem or USB printer, therefore the original name (printer) is changed into USB in the future. Vigor2910 Series User’s Guide...
Page 13: For Vigor2910G
Then the router will restart with the factory default configuration. Note: For the USB port can be used to connect 3G USB modem or USB printer, therefore the original name (printer) is changed into USB in the future. Vigor2910 Series User’s Guide...
Page 14: For Vigor2910I
Then the router will restart with the factory default configuration. Note: For the USB port can be used to connect 3G USB modem or USB printer, therefore the original name (printer) is changed into USB in the future. Vigor2910 Series User’s Guide...
Page 15: For Vigor2910V
Then the router will restart with the factory default configuration. Note: For the USB port can be used to connect 3G USB modem or USB printer, therefore the original name (printer) is changed into USB in the future. Vigor2910 Series User’s Guide...
Page 16: For Vigor2910Vg
Then the router will restart with the factory default configuration. Note: For the USB port can be used to connect 3G USB modem or USB printer, therefore the original name (printer) is changed into USB in the future. Vigor2910 Series User’s Guide...
Page 17: For Vigor2910Vgi
Then the router will restart with the factory default configuration. Note: For the USB port can be used to connect 3G USB modem or USB printer, therefore the original name (printer) is changed into USB in the future. Vigor2910 Series User’s Guide...
Page 18: Hardware Installation
(For the detailed information of LED status, please refer to section 1.1.) Caution: Each of the FXS ports can be connected to an analog phone only. Do not connect the FXS ports to the telephone wall jack. This connection might damage your router. Vigor2910 Series User’s Guide...
Page 19: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE, please visit www.draytek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 20 Open File->Add a New Computer. A welcome dialog will appear. Please click Next. Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. Vigor2910 Series User’s Guide...
Page 21 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Vigor2910 Series User’s Guide...
Page 22 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and UPR name. The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Vigor2910 Series User’s Guide...
Page 23 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ; find out the link of Printer Server and click it; then click the What types of printers are compatible with Vigor router? link.
Page 24 This page is left blank. Vigor2910 Series User’s Guide...
Page 25: Configuring Basic Settings
Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. P Please type “admin” as the username and leave blank for the password on the window. Next click OK for next screen. Vigor2910 Series User’s Guide...
Page 26 New Password and retype it on the field of Retype New Password. Then click OK to continue. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. Vigor2910 Series User’s Guide...
Page 27: Quick Start Wizard
Wizard is entering login password. After typing the password, please click Next. On the next page as shown below, please select the WAN interface that you use. Choose Auto negotiation as the physical type for your router. Then click Next for next step. Vigor2910 Series User’s Guide...
Page 28: Pppoe
Internet. Your service provider will provide you information about user name, password, and authentication mode. If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown: Vigor2910 Series User’s Guide...
Page 29 Confirm Password Retype the password for confirmation. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2910 Series User’s Guide...
Page 30: Pptp
Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2910 Series User’s Guide...
Page 31: Static Ip
After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2910 Series User’s Guide...
Page 32: L2Tp
After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2910 Series User’s Guide...
Page 33: Dhcp
After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2910 Series User’s Guide...
Page 34: Online Status
If you select PPPoE as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE in the Online Status web page. Online status for PPPoE Online status for PPTP (for WAN2) Online status for Static IP(for WAN1) Vigor2910 Series User’s Guide...
Page 35 Note: The words in green mean that the WAN connection of that interface (WAN1/WAN2) is ready for accessing Internet; the words in red mean that the WAN connection of that interface (WAN1/WAN2) is not ready for accessing Internet. Vigor2910 Series User’s Guide...
Page 36: Saving Configuration
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2910 Series User’s Guide...
Page 37: Advanced Web Configuration
Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP. Vigor2910 Series User’s Guide...
Page 38: Network Connection By 3G Usb Modem
Besides, 3G USB Modem in WAN2 also can be used as backup device. Therefore, when WAN1 is not available, the router will use 3.5G for supporting automatically. The supported 3G USB Modem will be listed on Draytek web site. Please visit www.draytek.com for more detailed information.
Page 39 WAN2. You can choose PPP as the access mode and click Details Page for further configuration. Physical Type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. Vigor2910 Series User’s Guide...
Page 40 15 seconds. WAN1 Download speed exceed XX kbps– It means the connection for WAN2 will be activated when WAN1 Download speed exceed certain value that you set in this box for 15 seconds. Vigor2910 Series User’s Guide...
Page 41: Internet Access
There are three access modes provided for PPPoE, Static or Dynamic IP and PPTP/L2TP. Details Page This button will open different web page according to the access mode that you choose in WAN1 or WAN2. Vigor2910 Series User’s Guide...
Page 42 This setting is available for i model only. Due to the absence of the ISDN interface in some models, the ISDN dial backup feature and its associated setup options are not available to them. Please refer to the previous part for further information. Vigor2910 Series User’s Guide...
Page 43 IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Fixed IP – Click Yes to use this function and type in a fixed IP Vigor2910 Series User’s Guide...
Page 44 This setting is available for the routers supporting ISDN function Setup only. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click Internet Access Setup > Dialing to a Single ISP to enter the backup profile. Vigor2910 Series User’s Guide...
Page 45 WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Notice that this setting is available for WAN1 only. Vigor2910 Series User’s Guide...
Page 46 MAC Address field. DNS Server IP Type in the primary IP address for the router if you want to use Address Static IP mode. If necessary, type in secondary IP address for necessity in the future. Vigor2910 Series User’s Guide...
Page 47 Setup > Dialing to a Single ISP to enter the backup profile. Due to the absence of the ISDN interface in some models, the ISDN dial backup feature and its associated setup options are not available to them. Please refer to the previous part for further Vigor2910 Series User’s Guide...
Page 48 Specify a MAC Address - Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. Vigor2910 Series User’s Guide...
Page 49 Set the PCs on LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this filed is blank and the function will always work. Vigor2910 Series User’s Guide...
Page 50: Load-Balance Policy
Displays the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Click Index 1 to access into the following page for configuring load-balance policy. Vigor2910 Series User’s Guide...
Page 51 Type the destination port start for the destination IP. Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the destination ports will be passed through the WAN interface. Vigor2910 Series User’s Guide...
Page 52: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2910 Series User’s Guide...
Page 53 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2910 Series User’s Guide...
Page 54: General Setup
Type in secondary IP address for connecting to a subnet. (Default: 192.168.2.1/ 24) Subnet Mask An address code that determines the size of the network. (Default: 255.255.255.0/ 24) DHCP Server You can configure the router to serve as a DHCP server for the 2nd subnet. Vigor2910 Series User’s Guide...
Page 55 DHCP server to assign IP addresses to. The default is 50 and the maximum is 253. Gateway IP Address - Enter a value of the gateway IP address for the DHCP server. The value is usually as same as the 1st IP address Vigor2910 Series User’s Guide...
Page 56: Static Route
There are two common scenarios of LAN settings that stated in Chapter 4. For the configuration examples, please refer to that chapter to get more information for your necessity. Go to LAN to open setting page and choose Static Route. Vigor2910 Series User’s Guide...
Page 57 Before setting Static Route, user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router. Go to LAN page and click General Setup, select 1st Subnet as the RIP Protocol Control. Then click the OK button. Vigor2910 Series User’s Guide...
Page 58 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2910 Series User’s Guide...
Page 59: Bind Ip To Mac
It is used to refresh the ARP table. When there is one new PC added to the LAN, you can click this link to obtain the newly ARP table information. IP Bind List It displays a list for the IP bind to MAC information. Vigor2910 Series User’s Guide...
Page 60: Web Authentication
Common account – please specify a name with a password as the identification for accessing into router’s web page for the users in LAN side. The default settings for ID/password are “draytek/draytek”. All the users should use such account to pass the web authentication. Vigor2910 Series User’s Guide...
Page 61: How To Use Web Authentication
Click the HERE link to access into the authentication page. Type the ID and password configured in Common Account. The default setting is “draytek” for both ID and password. After entering the ID and Password, click OK. If you pass the authentication, you will see the following page.
Page 62: Nat
IP address/port, the goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping private IP address/port of the server. Vigor2910 Series User’s Guide...
Page 63 To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection. Vigor2910 Series User’s Guide...
Page 64 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor2910 Series User’s Guide...
Page 65: Dmz Host
LAN. Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption. DMZ Host allows a defined internal user to be totally exposed to the Internet, which usually helps some special applications such as Netmeeting or Internet Games etc. Vigor2910 Series User’s Guide...
Page 66 If you previously have set up WAN IP Alias on WAN1 interface while configuring PPPoE, Static or Dynamic IP or PPTP (by accessing into WAN>>Internet Access), you will find them in Aux. WAN IP list for your selection. Enable Check to enable the DMZ Host function. Vigor2910 Series User’s Guide...
Page 67 DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2910 Series User’s Guide...
Page 68: Open Ports
Display the WAN interface for the entry. Local IP Address Display the private IP address of the local host offering the service. Status Display the state for the corresponding entry. X or V is to represent the Inactive or Active state. Vigor2910 Series User’s Guide...
Page 69: Address Mapping
For example, you have IP addresses ranging from 86.123.123.1 ~ 86.123.123.8. However, your router uses 86.123.123.1, and the rest of the IPs are recorded in WAN IP alias. You want that private IP 192.168.1.10 can use 86.123.123.2 as source IP when it sends packet out Vigor2910 Series User’s Guide...
Page 70 ALL for selection. WAN Interface Select WAN interface for such profile. WAN IP Select an IP address (the selections provided here are set in IP Alias List of Network >>WAN interface). Local host can use this Vigor2910 Series User’s Guide...
Page 71: Objects And Groups
Besides, you can define object profiles for different policy of IM (Instant Messenger)/P2P (Peer to Peer)/Misc application. You can set up to 192 sets of IP Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2910 Series User’s Guide...
Page 72 Type the subnet mask if the Subnet Address type is selected. Invert Select If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. Below is an example of IP objects settings. Vigor2910 Series User’s Guide...
Page 73: Ip Group
Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Click >> button to add the selected IP objects in this box. Vigor2910 Series User’s Guide...
Page 74: Service Type Object
The filter rule will filter out any port number. (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this profile. Vigor2910 Series User’s Guide...
Page 75: Service Type Group
Below is an example of service type objects settings. This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2910 Series User’s Guide...
Page 76: Im Object
You can define policy profiles for IM (Instant Messenger) application. The object profile(s) configured here will be seen and adopted in CSM>>IM/P2P Filter Profile page. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2910 Series User’s Guide...
Page 77: P2P Object
You can define policy profiles for P2P (Point-to-Point) application. The object profile(s) configured here will be seen and adopted in CSM>>IM/P2P Filter Profile page. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2910 Series User’s Guide...
Page 78: Misc Object
You can define policy profiles for Misc application. The object profile(s) configured here will be seen and adopted in CSM>>IM/P2P Filter Profile page. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2910 Series User’s Guide...
Page 79: Csm
It’s very common that malicious codes conceal in the executable objects, such as ActiveX, Java Applet, compressed files, and other executable files. Once downloading these types of files from websites, you may risk bringing threat to your system. Vigor2910 Series User’s Guide...
Page 80: Im/P2P Filter Profile
You can define policy profiles for different policy of IM (Instant Messenger)/P2P (Peer to Peer) application. CSM profile can be used in Filter Setup page. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2910 Series User’s Guide...
Page 81: Url Content Filter Profile
Or you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”. Also the Vigor router will discard any request that tries to retrieve the malicious code. Click CSM and click URL Content Filter Profile to open the setup page. Vigor2910 Series User’s Guide...
Page 82 Vigor router perform. Prevent web access Check the box to deny any web surfing activity using IP address, from IP address such as http://202.6.3.2. The reason for this is to prevent someone dodges the URL Access Control. Vigor2910 Series User’s Guide...
Page 83 URL Access Control. To enable an entry, click on the empty checkbox, named as ACT, in front of the appropriate entry. Time Schedule Specify what time should perform the URL content filtering facility. Vigor2910 Series User’s Guide...
Page 84: Web Content Filter Profile
Click CSM and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide. Vigor2910 Series User’s Guide...
Page 85: Firewall
The users on the LAN are provided with secured protection by the following firewall facilities: User-configurable IP filter (Call Filter/ Data Filter). Stateful Packet Inspection (SPI): tracks packets and denies unsolicited incoming data Selectable Denial of Service (DoS) /Distributed DoS (DDoS) attacks protection Vigor2910 Series User’s Guide...
Page 86 The stateful firewall of Vigor router not just examine the header information also monitor the state of the connection. Vigor2910 Series User’s Guide...
Page 87: General Setup
So here you assign the Start Filter Set only. Also you can configure the Log Flag settings, Apply IP filter to VPN incoming packets, and Accept incoming fragmented UDP packets. Click Firewall and click General Setup to open the general setup page. Vigor2910 Series User’s Guide...
Page 88 “Accept large incoming fragmented UDP or ICMP Packets”. By checking this box, you can play these kinds of on-line games. If security concern is in higher priority, you cannot enable “Accept large incoming fragmented UDP or ICMP Packets”. Vigor2910 Series User’s Guide...
Page 89: Filter Setup
Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Vigor2910 Series User’s Guide...
Page 90 Call Filter is only applied to outgoing traffic. Source/Destination IP Click Edit to access into the following dialog to choose the source/destination IP or IP ranges. To set the IP address manually, please choose Any Address/Single Vigor2910 Series User’s Guide...
Page 91 (>) – the port number greater than this value is available. (<) – the port number less than this value is available for this profile. Vigor2910 Series User’s Guide...
Page 92 Please choose one of the CSM profiles applied by this filter rule. For troubleshooting needs, you can specify to record CSM information by checking the Syslog box. It will be sent to Syslog server. Please refer to section 3.14.4 Syslog/Mail Alert for more detailed information. Vigor2910 Series User’s Guide...
Page 93 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2910 Series User’s Guide...
Page 94: Dos Defense
Port Scan attacks the Vigor router by sending lots of packets to detection many ports in an attempt to find ignorant services would respond. Check the box to activate the Port Scan detection. Whenever detecting this malicious exploration behavior by monitoring the Vigor2910 Series User’s Guide...
Page 95 ICMP packets with more fragment bit set are dropped. Check the box to enforce the Vigor router to defense the Land Block Land attacks. The Land attack combines the SYN attack technology with IP spoofing. A Land attack occurs when an attacker sends spoofed Vigor2910 Series User’s Guide...
Page 96 All the warning messages related to DoS defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2910 Series User’s Guide...
Page 97: Bandwidth Management
LAN. Limitation List Displays a list of specific limitations that you set on this web page. Start IP Defines the start IP address for limit session. End IP Defines the end IP address for limit session. Vigor2910 Series User’s Guide...
Page 98: Bandwidth Limit
Click this button to activate the function of limit bandwidth. Subnet – if bandwidth limit function is enabled, Apply to 2 please check this box to apply to second subnet. Disable Click this button to close the function of limit bandwidth. Vigor2910 Series User’s Guide...
Page 99: Quality Of Service
How this will affect application performance? There are two components within Primary configuration of QoS deployment: Classification: Identifying low-latency or crucial applications and marking them for high-priority service level enforcement throughout the network. Vigor2910 Series User’s Guide...
Page 100 SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s effort. In the Bandwidth Management menu, click Quality of Service to open the web page. Vigor2910 Series User’s Guide...
Page 101 Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the real bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor2910 Series User’s Guide...
Page 102 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2910 Series User’s Guide...
Page 103 All the packets of data will be divided with different levels and will be processed according to the level type by the system. Please assign one of the level of the data for processing with QoS control. Vigor2910 Series User’s Guide...
Page 104 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. Vigor2910 Series User’s Guide...
Page 105 Range as the type. By the way, you can set up to 40 service types. If you want to edit/delete an existed service type, please select the radio button of that one and click Edit/Edit for modification. Vigor2910 Series User’s Guide...
Page 106: Applications
Set to Factory Default Clear all profiles and recover to factory settings. Enable Dynamic DNS Setup Check this box to enable DDNS function. Auto-Update interval Set the time for the router to perform auto update for DDNS service. Vigor2910 Series User’s Guide...
Page 107 Click OK button to activate the settings. You will see your setting has been saved. The Wildcard and Backup MX features are not supported for all Dynamic DNS providers. You could get more detailed information from their websites. Vigor2910 Series User’s Guide...
Page 108: Schedule
You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN to LAN settings. To add a schedule, please click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. Vigor2910 Series User’s Guide...
Page 109 (Force Down). Office Hour: (Force On) Mon - Sun 9:00 am 6:00 pm Make sure the PPPoE connection and Time Setup is working properly. Configure the PPPoE always on from 9:00 to 18:00 for whole week. Vigor2910 Series User’s Guide...
Page 110: Radius
The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. Vigor2910 Series User’s Guide...
Page 111: Upnp
NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor2910 Series User’s Guide...
Page 112 Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2910 Series User’s Guide...
Page 113: Igmp
IP to MAC will be shown in this drop down list. Choose the IP address from the drop down list that you want to wake up. MAC Address Type any one of the MAC address of the binded PCs. Vigor2910 Series User’s Guide...
Page 114 Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2910 Series User’s Guide...
Page 115: Vpn And Remote Access
LAN-to-LAN profile for VPN dial out connection (from server to client) step by step. LAN-to-LAN Client Mode Choose the client mode. Selection Route Mode/NAT Mode – If the remote network only allows you to dial in with single IP, please choose this mode, otherwise please choose Route Mode. Vigor2910 Series User’s Guide...
Page 116 When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making Vigor2910 Series User’s Guide...
Page 117 When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: When you choose IPSec, you will see the following graphic: When you choose L2TP, you will see the following graphic: Vigor2910 Series User’s Guide...
Page 118 When you choose L2TP over IPSec (Nice to Have), you will see the following graphic: When you choose L2TP over IPSec (Must), you will see the following graphic: Vigor2910 Series User’s Guide...
Page 119 Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key-Confirm the pre-shared key. Digital Signature (X.509) Check the box of Digital Signature to invoke this function and select one predefined in the X.509 Peer ID Vigor2910 Series User’s Guide...
Page 120 Click this radio button to set another profile of VPN Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2910 Series User’s Guide...
Page 121: Vpn Server Wizard
VPN connection. Please choose a This item is available when you choose Site to Site VPN LAN-to-LAN Profile (LAN-to-LAN) as VPN server mode. There are 32 VPN tunnels for users to set. Vigor2910 Series User’s Guide...
Page 122 After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. When you check PPTP/IPSec/L2TP (three types) or PPTP/IPSec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2910 Series User’s Guide...
Page 123 Please type the network mask (according to the real location of the remote host) for building VPN connection. When you check PPTP/L2TP (two types) or PPTP or L2TP with Policy (None), you will see the following graphic: Vigor2910 Series User’s Guide...
Page 124 After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Vigor2910 Series User’s Guide...
Page 125: Remote Access Control
ISDN dial-in function, please check “Enable ISDN Dial-In” in this page. Enable PPTP VPN Service Check this box to activate the VPN service through PPTP protocol. Enable IPSec VPN Service Check this box to activate the VPN service through IPSec protocol. Vigor2910 Series User’s Guide...
Page 126: Ppp General Setup
The Mutual Authentication function is mainly used to (PAP) communicate with other routers or clients who need bi-directional authentication in order to provide stronger security, for example, Cisco routers. So you should enable this function when your peer router requires mutual Vigor2910 Series User’s Guide...
Page 127: Ipsec General Setup
On the receiving side, the peer will perform the same one-way hash on the packet and compare the value with the one in the AH it receives. Encapsulating Security Payload (ESP) is a security protocol that provides data confidentiality and protection with optional authentication and replay detection service. Vigor2910 Series User’s Guide...
Page 128: Ipsec Peer Identity
Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2910 Series User’s Guide...
Page 129 Click to check the specific fields of digital signature to accept the peer with matching value. The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). Vigor2910 Series User’s Guide...
Page 130: Remote Dial-In User
Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. Vigor2910 Series User’s Guide...
Page 131 Must -Specify the IPSec policy to be definitely applied on the L2TP connection. Specify Remote Node Check the checkbox-You can specify the IP address of the remote dial-in user, ISDN number or peer ID (used in IKE Vigor2910 Series User’s Guide...
Page 132 The callback function provides a callback service only for the ISDN dial-in user (for i model only). The remote user will be charged the connection fee by the telecom. Check to enable Callback function-Enables the callback function. Vigor2910 Series User’s Guide...
Page 133: Lan To Lan
LAN to LAN profiles are suitable for dial-out usage. If the profile name displayed in red, it means that the profile has been grouped into VPN TRUNK. If the profile name displayed in black, it means that profile is not grouped into VPN TRUNK and can be invoked individually. Vigor2910 Series User’s Guide...
Page 134 Call Direction and others) might be locked and dimmed. Please refer to VPN and Remote Access>>VPN Backup Management for more details. For the web page is too long, we divide the page into several sections for explanation. Vigor2910 Series User’s Guide...
Page 135 Enter the IP address of the remote host that located at the other-end of the VPN tunnel. Enable PING to Keep Alive is used to handle abnormal IPSec VPN connection disruption. It will help to provide Vigor2910 Series User’s Guide...
Page 136 Pre-Shared Key-Input 1-63 characters as pre-shared key. Digital Signature (X.509) – Click this radio button to invoke this function and select one predefined in the X.509 Peer ID Profiles (set from VPN and Remote Access>>IPSec Peer Identity). Vigor2910 Series User’s Guide...
Page 137 Two combinations are available for Aggressive mode and thirty for Main mode. We suggest you select the combination that covers the most schemes. Below shows the available proposals: Vigor2910 Series User’s Guide...
Page 138 Vigor router to callback, the local ISDN number will be provided to the remote peer. Check here to allow the Vigor router to send the ISDN number to the remote router. This feature is useful for i model only. Vigor2910 Series User’s Guide...
Page 139 Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: None- Do not apply the IPSec policy. Accordingly, the VPN Vigor2910 Series User’s Guide...
Page 140 The remote user will be charged the connection fee by the telecom. Enable Callback function-Enables the callback function. Use the Following Number to Callback –Check this box to use the number typed below for callback. Vigor2910 Series User’s Guide...
Page 141 For IPSec, this is the destination clients IDs of phase 2 quick mode. Local Network IP/ Add a static route to direct all traffic destined to Local Local Network Mask Network IP Address/Local Network Mask through the VPN connection. Vigor2910 Series User’s Guide...
Page 142 Check this box to change the default route with this VPN this VPN tunnel (Only tunnel. Be aware that this setting is available only for one single WAN supports this ) WAN interface is enabled. It is not available when both WAN interfaces are enabled. Vigor2910 Series User’s Guide...
Page 143: Vpn Backup Management
Member1 and Member2. Set to Factory Default Click to clear all VPN Backup profile. The order of VPN Backup profile. Status “v” means such profile is enabled. ”x” means such profile is disabled. Vigor2910 Series User’s Guide...
Page 144 Click this button to delete the selected VPN TRUNK profile. The corresponding members (LAN to LAN profiles) grouped in the deleted VPN TRUNK profile will be released and that profiles in LAN to LAN will be displayed in black. Vigor2910 Series User’s Guide...
Page 145 Index No.1 is the first VPN backup profile. LAN to LAN profile of Index 3 is chosen as Member1; LAN to LAN profile of index 4 is chosen as Member2. At the same time, LAN to LAN profiles of 3 and 4 will be expressed in red to indicate that they are fixed. Vigor2910 Series User’s Guide...
Page 146: Connection Management
This filed displays the profile name saved in VPN TRUNK Management (with Index number and VPN Server IP address). The VPN connection built by Backup Mode supports VPN backup function. Dial Click this button to execute dial out function. Vigor2910 Series User’s Guide...
Page 147 Choose the time for refresh the dial information among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Note: The status of LAN to LAN for ISDN is shown on the page of Online Status. Vigor2910 Series User’s Guide...
Page 148: Certificate Management
Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Generate Click this button to open Generate Certificate Request window. Vigor2910 Series User’s Guide...
Page 149 Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After clicking Generate, the generated information will be displayed on the window below: Vigor2910 Series User’s Guide...
Page 150: Trusted Ca Certificate
For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2910 Series User’s Guide...
Page 151: Certificate Backup
Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please type characters in both fields of Encrypt password and Retype password. Vigor2910 Series User’s Guide...
Page 152: Voip
If you both register to the same SIP Registrar, then it will be illustrated as below: The major benefit of this mode is that you don’t have to memorize your friend’s IP address, which might change very frequently if it’s dynamic. Instead of that, you will Vigor2910 Series User’s Guide...
Page 153: Dialplan
SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor 2910VGi for setting the phone book. Vigor2910 Series User’s Guide...
Page 154 Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of SIP URL Address. SIP URL Enter your friend’s SIP Address Vigor2910 Series User’s Guide...
Page 155 Note that, during the phone switch, the blare of phone will appear for a short time. And when the VoIP phone is switched into the PSTN phone, the telecom co. might charge you for the connection fee. Please Vigor2910 Series User’s Guide...
Page 156 VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” will be changed to “88631111111” and sent to Vigor2910 Series User’s Guide...
Page 157: Sip Accounts
As Vigor VoIP Router is turned on, it will first register with Registrar using AuthorizationUser@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity. Index Click this link to access into next page for setting SIP account. Vigor2910 Series User’s Guide...
Page 158 It is a collection for presetting the ITSP SIP server information. It can reduce the setting effort for a user. Simply choose one of the profiles, then you'll found some items would be filled with necessary values already. Vigor2910 Series User’s Guide...
Page 159 Check this box to make the proxy acting as outbound proxy. Display Name The caller-ID that you want to be displayed on your friend’s screen. Account Number/Name Enter your account name of SIP Address, e.g. every text before @. Vigor2910 Series User’s Guide...
Page 160 SIP account. If you choose either VoIP1 or VoIP2, the ISDN selection will be dimmed, vice versa. Ring Pattern Choose a ring tone type for the VoIP phone call. Below shows successful SIP accounts for your reference. Vigor2910 Series User’s Guide...
Page 161: Phone Settings
Phone Index. Default SIP Account – “draytel_1” is the default SIP account. You can click the number below the Index field to change SIP account for each phone port. Vigor2910 Series User’s Guide...
Page 162 Dynamic RTP port end - Specifies the end port for RTP stream. The default value is 15000. RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Vigor2910 Series User’s Guide...
Page 163 DND (Do Not Disturb) Set a period of peace time without disturbing by VoIP phone mode call. During the period, the one who dial in will listen busy tone, yet the local user will not listen any ring tone. Vigor2910 Series User’s Guide...
Page 164 You can set SIP accounts (up to six groups) on SIP Account page. Use the drop down list to choose one of the profile names for the accounts as the default one for this phone setting. Vigor2910 Series User’s Guide...
Page 165 Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Vigor2910 Series User’s Guide...
Page 166 OutBand - Choose this one then the Vigor will capture the keypad number you pressed and transform it to digital form then send to the other side; the receiver will generate the tone according to the digital form it receive. This function is very Vigor2910 Series User’s Guide...
Page 167 There are four options for you to choose. Disable is to close call forwarding function. Always means all the incoming calls will be forwarded into SIP URL without any reason. Busy means the incoming calls will be forwarded into SIP URL Vigor2910 Series User’s Guide...
Page 168 The default value is 20 ms, which means the data packet will contain 20 ms voice information. Voice Active Detector - This function can detect if the voice on both sides is active or not. If not, the router will do Vigor2910 Series User’s Guide...
Page 169 TOff2 mean the cadence of the tone pattern. TOn1 and TOn2 represent sound-on; TOff1 and TOff2 represent the sound-off. Region Select the proper region which you are located. The common settings of Caller ID Type, Dial tone, Ringing tone, Busy tone and Congestion tone will be shown automatically on the Vigor2910 Series User’s Guide...
Page 170 DTMF tone. SIP INFO: Choose this one then the Vigor will capture the DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message. Vigor2910 Series User’s Guide...
Page 171: Status
It shows current connection status for the port of VoIP1, VoIP2, ISDN1 and ISDN2. The ISDN1/2 appears only when the router is equipped with ISDN interface. ISDN1 means B1 channel for the physical ISDN port; ISDN2 means B2 channel Vigor2910 Series User’s Guide...
Page 172: Isdn
ISDN means integrated services digital network that is an international communications standard for sending voice, video, and data over digital telephone lines or normal telephone wires. Below shows the menu items of ISDN for i models. Vigor2910 Series User’s Guide...
Page 173: General Setup
MSN number(s). If you do not specify any port in this field, the ISDN loop through ring port will be determined by the configuration in ISDN port in VoIP>>Phone Settings. Vigor2910 Series User’s Guide...
Page 174: Dialing To A Single Isp
Fixed IP In most environments, you should not change these settings as most ISPs provide a dynamic IP address for the router when it connects to the ISP. If your ISP provides a fixed IP address, check Vigor2910 Series User’s Guide...
Page 175: Dialing To Dual Isps
The Virtual TA client only supports the CAPI 2.0 protocol and has no built-in FAX engine. One ISDN BRI interface has two B channels. The maximum number of active clients is also two. Before you configure the Virtual TA, you must set the correct country code. Vigor2910 Series User’s Guide...
Page 176 Note that the service must be acquired from your telecom. Specify the MSN numbers for a specific client. If you have no MSN services, leave this field blank. Active - Check it to enable the client to access the server. Vigor2910 Series User’s Guide...
Page 177 On the server - Click Virtual TA (Remote CAPI) Setup link, and fill in the Username and Password fields. Check the Active box to enable the account. On the client - Right-click the mouse on the VT icon. The following pop-up menu will be shown. Vigor2910 Series User’s Guide...
Page 178 Type the specified MSN number in the CAPI-based software. When the Virtual TA server sends an alert signal to the specified Virtual TA client, the CAPI-based software will also receive the action, the software will not accept the incoming call. Vigor2910 Series User’s Guide...
Page 179: Call Control
Because ISDN has two B channels (64Kbps/per channel), you can specify whether you would like to have single B channel, two B channels or BOD (Bandwidth on Demand). Four options are available: Link Disable, Dialup 64Kbps, Dialup 128Kbps, Dialup BOD. Vigor2910 Series User’s Guide...
Page 180 As a result, the total link speed will be 64kbps (one B channel). Note: If you are not sure whether your ISP can support BOD and/or ML-PPP’s features, please seek assistance from your ISP, local dealers or our website: support@draytek.com. Vigor2910 Series User’s Guide...
Page 181: Wireless Lan
Complete Security Standard Selection: To ensure the security and privacy of your wireless communication, we provide several prevailing standards on market. Vigor2910 Series User’s Guide...
Page 182 No matter which security suite you select, they all will enhance the over-the-air data protection and /or privacy on your wireless network. The Vigor wireless router is very flexible and can support multiple secure connections with both WEP and WPA at the same time. Example 1 Example 2 Vigor2910 Series User’s Guide...
Page 183 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor2910 Series User’s Guide...
Page 184: General Settings
It is the identification of the wireless LAN. SSID can be any text numbers or various special characters. Channel The channel of frequency of the wireless LAN. The default channel is 6. You may switch channel if the Vigor2910 Series User’s Guide...
Page 185 56 bit sync filed instead of long preamble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Check it to use Long Preamble if needed to communicate with this kind of devices. Vigor2910 Series User’s Guide...
Page 186: Security
PSK. Remember to select WPA type to define either Mixed or WPA2 only in the field below. WPA/802.1x Only - Accept WPA clients with 802.1x authentication. Remember to select WPA type to define Vigor2910 Series User’s Guide...
Page 187 Four keys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCII or Hexadecimal. Check the key you wish to use. Vigor2910 Series User’s Guide...
Page 188: Access Control
MAC address from LAN. Add a new MAC address into the list. Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. Vigor2910 Series User’s Guide...
Page 189: Wds
AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be forwarded to local wired or wireless hosts. In other words, only Repeater mode can do WDS-to-WDS packet forwarding. Vigor2910 Series User’s Guide...
Page 190 Click WDS from Wireless LAN menu. The following page will be shown. Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Vigor2910 Series User’s Guide...
Page 191 Click Enable to make this router serving as an access point; click Disable to cancel this function. Status It allows user to send “hello” message to peers. Yet, it is valid only when the peer also supports this function. Vigor2910 Series User’s Guide...
Page 192: Ap Discovery
If you want the found AP applying the WDS settings, please type in the AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor2910 Series User’s Guide...
Page 193: Station List
There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Refresh Click this button to refresh the status of station list. Click this button to add current selected MAC address into Access Control. Vigor2910 Series User’s Guide...
Page 194: Station Rate Control
Click this button to close this function. Redirect to URL Any user who wants to access into Internet through this router will be redirected to the URL specified here first. It is a useful method for the purpose of advertisement. For Vigor2910 Series User’s Guide...
Page 195: Vlan
Simply check P1 and P2 boxes on the line of VLAN0; and check P3 and P4 boxes on the line of VLAN1. Enable Check this box to enable this function (for VLAN Configuration). Vigor2910 Series User’s Guide...
Page 196: Wireless Vlan
The VLAN >> Wireless VALN allows you to configure Wireless VLAN settings through wireless connection to achieve the above intention. Simply type Login ID and password with City and 1234 in the boxes of W_VLAN0. And type Login ID and password with Home and Vigor2910 Series User’s Guide...
Page 197 Connect all WDS links with this VALN group – Check this box to activate this connection. Isolate each member in this VLAN group – Check this box to isolate all the members in this VLAN group and not allow the information sharing among them. Vigor2910 Series User’s Guide...
Page 198 After finishing the configuration of wireless VLAN, the wireless clients connecting to this router must do the following steps to access into Internet. 1. Open a browser and type http://www.draytek.vlan/login.htm or http://(vigor router’s IP address)/login.htm on the address line. 2. The following screen will appear.
Page 199: Vlan Cross Setup
This function allows the router to integrate VLAN and W_VLAN for managing different computers (notebooks). See the following picture for an example. With VLAN Cross Setup, notebook A/B and PCs on VLAN0 can share resources without difficulty. Vigor2910 Series User’s Guide...
Page 200 VLAN0 on the line of W_VLAN0. Enable Check this box to invoke VLAN Cross Setup function. VLAN0-3 It represents the groups of virtual LAN connected by Ethernet interface. W_VLAN0-15 It represents the groups of wireless VLAN communicated by wireless interface. Vigor2910 Series User’s Guide...
Page 201: Wireless Rate Control
20,000kbps. Adjust the values according to your necessity. Download Rate It decides the rate of data transmission for input. The default setting is 300. The range must be between 100 kbps to 20,000kbps. Adjust the values according to your necessity. Vigor2910 Series User’s Guide...
Page 202: Usb Application
At present, Vigor router supports three types of character sets: default, GB2312 and BIG5. Default Charset is for English based file name. For Simplified Chinese file/directory names, please choose GB2312; for Traditional Chinese file/directory names, choose BIG5. Vigor2910 Series User’s Guide...
Page 203: Ftp User Management
Vigor router only. Also, it is reserved for FTP firmware upgrade usage. Password Type the password for FTP users for accessing FTP server. Later, you can open FTP client software and type the Vigor2910 Series User’s Guide...
Page 204: Usb Disk Status
Free Capacity It displays the free space of the USB diskette. Click Refresh at any time to get new status for free capacity. Username It displays the username that user uses to login to the FTP server. Vigor2910 Series User’s Guide...
Page 205: System Maintenance
For the system setup, there are several items that you have to know the way of configuration: Status, TR-069, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items for System Maintenance. Vigor2910 Series User’s Guide...
Page 206: System Status
The available channels supported by the wireless products in different countries are various. Firmware Version It indicates information about equipped WLAN miniPCi card. This also helps to provide availability of some features that are bound with some WLAN miniPCi card. Vigor2910 Series User’s Guide...
Page 207: Setting
URL as the following and type username and password for VigorACS server: http://{IP address of VigorACS}:8080/ACSServer/services/ACSServlet If the connected CPE does not need to be authenticated please set URL as the following: http://{IP address of VigorACS}:8080/ACSServer/services/UnAuthACSServ Username/Password - Type username and password for Vigor2910 Series User’s Guide...
Page 208: Administrator Password
STUN binding request must be sent by the CPE to maintain the binding. This page allows you to set new password. Old Password Type in the old password. The factory default setting for password is blank. Vigor2910 Series User’s Guide...
Page 209: Configuration Backup
Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. In Save As dialog, the default filename is config.cfg. You could give it another name by yourself. Vigor2910 Series User’s Guide...
Page 210 Click Browse button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2910 Series User’s Guide...
Page 211: Syslog/Mail Alert
For viewing the Syslog, please do the following: Just set your monitor PC’s IP address in the field of Server IP Address Install the Router Tools in the Utility within provided CD. After installation, click on the Router Tools>>Syslog from program menu. Vigor2910 Series User’s Guide...
Page 212 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2910 Series User’s Guide...
Page 213: Time And Date
Select the time zone where the router is located. Enable Daylight Saving Such function is useful for some area. Automatically Update Interval Select a time interval for updating from the NTP server. Click OK to save these settings. Vigor2910 Series User’s Guide...
Page 214: Management
User Defined Ports Check to specify user-defined port numbers for the Telnet and HTTP servers. Default Ports Check to use standard port numbers for the Telnet and HTTP servers. Enable SNMP Agent Check it to enable this function. Vigor2910 Series User’s Guide...
Page 215: Reboot System
If you want to reboot the router using the current configuration, check Using current configuration and click OK. To reset the router settings to default values, check Using factory default configuration and click OK. The router will take 5 seconds to reboot the system. Vigor2910 Series User’s Guide...
Page 216: Firmware Upgrade
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.
Page 217: Diagnostics
(e.g., ISDN, PPPoE, PPPoA, etc) is triggered by a package sending from the source IP address. Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2910 Series User’s Guide...
Page 218: Routing Table
Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Refresh Click it to reload the page. Clear Click it to clear the whole table. Vigor2910 Series User’s Guide...
Page 219: Dhcp Table
Click Diagnostics and click NAT Sessions Table to open the setup page. Private IP:Port It indicates the source IP address and port of local PC. #Pseudo Port It indicates the temporary port of the router used for NAT. Vigor2910 Series User’s Guide...
Page 220: Wireless Vlan Online Station Table
IP address, MAC address and Login ID information for all the Wireless VLAN stations. IP Address Display the IP address of the wireless station. MAC Address Display the MAC address of the wireless station. Login ID Display the login ID that the wireless station belongs to. Vigor2910 Series User’s Guide...
Page 221: Web Authentication Table
Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Vigor2910 Series User’s Guide...
Page 222 RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Vigor2910 Series User’s Guide...
Page 223: Traffic Graph
Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Refresh to renew the graph at any time. The following two figures display different charts by daily and weekly. Vigor2910 Series User’s Guide...
Page 224 WAN1/WAN2 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2910 Series User’s Guide...
Page 225: Ping Diagnosis
Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run. The result of route trace will be shown on the screen. Vigor2910 Series User’s Guide...
Page 226 Unspecified to be determined by the router automatically. Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Clear Click this link to remove the result on the window. Vigor2910 Series User’s Guide...
Page 227: Application And Examples
VPN service and click OK. Then, For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to Vigor2910 Series User’s Guide...
Page 228 Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. Vigor2910 Series User’s Guide...
Page 229 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2910 Series User’s Guide...
Page 230 At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: Vigor2910 Series User’s Guide...
Page 231 Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. Vigor2910 Series User’s Guide...
Page 232 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2910 Series User’s Guide...
Page 233 Address, Username, Password, and VJ Compression for this Dial-In connection. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection. Vigor2910 Series User’s Guide...
Page 234: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter
PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2910 Series User’s Guide...
Page 235 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2910 Series User’s Guide...
Page 236 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.draytek.com download center. Install as instructed.
Page 237 Username, Password, and encryption method. The User Name and Password should be consistent with the one set up in the VPN router. To use default gateway on remote network means that all the packets of remote host will be directed to VPN Vigor2910 Series User’s Guide...
Page 238: Qos Setting Example
Meanwhile, children may chat on VoIP or Skype in the restroom. Go to Bandwidth Management>>Quality of Service. Click Setup link of WAN 1. Make sure the QoS Control on the left corner is checked. And select BOTH in Direction. Vigor2910 Series User’s Guide...
Page 239 Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the name “E-mail” for Class 1. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP. Vigor2910 Series User’s Guide...
Page 240 VoIP influent other application. Click OK. If the worker has connected to the headquater using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Vigor2910 Series User’s Guide...
Page 241 10. Click edit to open a new window. 11. First, check the ACT box. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s subnet address. Leave other fields and click OK. Vigor2910 Series User’s Guide...
Page 242: Lan - Created By Using Nat
You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. To use another DHCP server in the network rather than the built-in one of Vigor Router, you have to change the settings as show below. Vigor2910 Series User’s Guide...
Page 243 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. Vigor2910 Series User’s Guide...
Page 244: Calling Scenario For Voip Function
Display Name: David Account Name: 4321 Authentication ID: unchecked Password: **** Expiry Time: (use default value) David calls John He picks up the phone and dials 2222# (DialPlan Phone CODEC/RTP/DTMF --- Number for John) (Use default value) Vigor2910 Series User’s Guide...
Page 245 Expiry Time: (use default value) CODEC/RTP/DTMF--- David calls John (Use default value) He picks up the phone and dials 2222# (DialPlan Phone Number for John) Or, He picks up the phone and dials 1234# (John’s Account Name) Vigor2910 Series User’s Guide...
Page 246: Peer-To-Peer Calling
Display Name: Paulin Account Name: 4321 Authentication ID: unchecked Password: (blank) Expiry Time: (use default value) Paulin calls Arnor CODEC/RTP/DTMF--- He picks up the phone and dials 2222# (DialPlan (Use default value) Phone Number for John) Vigor2910 Series User’s Guide...
Page 247: Upgrade Firmware For Your Router
3. Access into Support >> Downloads. Please find out Utility menu and click it. 4. Click on the link of Router Tools to download the file. After downloading the files, please decompressed the file onto your host. Vigor2910 Series User’s Guide...
Page 248 You will find out two files with different extension names, xxxx.all (keep the old custom settings) and xxxx.rst (reset all the custom settings to default settings). Choose any one of them that you need. Vigor2910 Series User’s Guide...
Page 249: Request A Certificate From A Ca Server On Windows Ca Server
10. Click Send. 11. Now the firmware update is finished. Go to Certificate Management and choose Local Certificate. Vigor2910 Series User’s Guide...
Page 250 Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate. Vigor2910 Series User’s Guide...
Page 251 64 encoded certificate and Download CA certificate. Now you should get a certificate (.cer file) and save it. Back to Vigor router, go to Local Certificate. Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh Vigor2910 Series User’s Guide...
Page 252 “------BEGINE CERTIFICATE------..” You may review the detail information of the certificate by clicking View button. Vigor2910 Series User’s Guide...
Page 253: Request A Ca Certificate And Set As Trusted On Windows Ca Server
Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. Vigor2910 Series User’s Guide...
Page 254 You may review the detail information of the certificate by clicking View button. Note: Before setting certificate configuration, please go to System Maintenance >> Time and Date to reset current time of the router first. Vigor2910 Series User’s Guide...
Page 255: Vpn Backup Application
VPN Backup profile or is disabled in VPN Backup profile. Delete VPN Backup profile(s) 1. Click any one of the items from Backup profile list. 2. Click Delete. 3. Click Edit. 4. The selected profile will be deleted. Vigor2910 Series User’s Guide...
Page 256 My WAN IP and Remote Gateway IP will be dimmish and cannot be used. In addition, after configuring VPN Backup profile(s), the Connection Management in VPN and Remote Access will be changed. Before adding a new VPN Backup profile, the webpage will be shown as the following: Vigor2910 Series User’s Guide...
Page 257 Example 1: A VPN Backup profile with member 1 (IPSec type) and Member 2(L2TP over IPSec) has been created for Router A for connecting with Router B. In general, Router A connects to Router B through Member 1 VPN tunnel (with IPSec type). Vigor2910 Series User’s Guide...
Page 258 Asia can send the data (that should be transmit to headerquarter in Europe) to the subsidiary in America, then the subsidiary in America transmit the data to headerquarter in Europe through VPN server by using VPN tunnel backup connection. Vigor2910 Series User’s Guide...
Page 259: Erd Mechanism For Vpn Backup
> vpn Trunk backup ERD VpnBackup Resume (4) AutoDrop Mode Detect VPN connection periodically (by setting value for “second”). If VPN server for Member 1 has completed the network connection, current VPN Tunnel backup connection will be off-line. Vigor2910 Series User’s Guide...
Page 260 For example, if you type “3600” as the value for <second>, AutoDrop will be done with 30 seconds (3531 ~ 3600) for the backup VPN tunnel. If you set “30” as the value for <second>, it will be regarded as “0”. Vigor2910 Series User’s Guide...
Page 261: Trouble Shooting
Sometimes the link failure occurs due to the wrong network connection settings. After trying the above section, if the link is stilled failed, please do the steps listed below to make sure the network connection settings is OK. Vigor2910 Series User’s Guide...
Page 262 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2910 Series User’s Guide...
Page 263 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used MacOs on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2910 Series User’s Guide...
Page 264: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2910 Series User’s Guide...
Page 265 Vigor2910 Series User’s Guide...
Page 266: Checking If The Isp Settings Are Ok Or Not
Check if Username and Password are entered with correct values that you got from your ISP. Check if the Enable option is selected. Check if IP address, Subnet Mask and Gateway are entered with correct values that you got from your ISP. Vigor2910 Series User’s Guide...
Page 267: Problems For 3G Network Connection
PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek. Vigor2910 Series User’s Guide...
Page 268: Backing To Factory Default Setting If Necessary
Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK. After few seconds, the router will return all the settings to the factory settings. Vigor2910 Series User’s Guide...
Page 269: Contacting Your Dealer
After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor2910 Series User’s Guide...

This manual is also suitable for:

Vigor2910g Vigor2910i Vigor2910v Vigor2910vg Vigor2910vgi

Draytek Vigor2910 Series User Manual

Preface

Configuring Basic Settings

Advanced Web Configuration

Application and Examples

Trouble Shooting

Quick Links

Related Manuals for Draytek Vigor2910 Series

Summary of Contents for Draytek Vigor2910 Series

This manual is also suitable for:

Table of Contents