Page 2 Vigor2830 Series User’s Guide...
Page 3 Vigor2830 Series ADSL2+ Security Firewall User’s Guide Version: 1.01 Firmware Version: V3.3.6.1 Date: 23/12/2010 Vigor2830 Series User’s Guide...
Page 4: Copyright Information
Web registration is preferred. You can register your Vigor router via Owner http://www.DrayTek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 5: European Community Declarations
Product: Vigor2830 Series Router DrayTek Corp. declares that Vigor2830 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 6 Vigor2830 Series User’s Guide...
Page 7: Table Of Contents
3.1.4 Load-Balance Policy ....................... 54 3.2 LAN ............................56 3.2.1 Basics of LAN ......................... 56 3.2.2 General Setup......................... 58 3.3 NAT ............................60 3.3.1 Port Redirection ......................61 3.3.2 DMZ Host........................64 3.3.3 Open Ports........................66 3.4 Applications ........................... 68 Vigor2830 Series User’s Guide...
Page 8 4.3.2 DMZ Host........................137 4.3.3 Open Ports........................140 4.4 Firewall ..........................142 4.4.1 Basics for Firewall......................142 4.4.2 General Setup....................... 144 4.4.3 Filter Setup ........................148 4.4.4 DoS Defense ........................ 156 4.5 User Management....................... 159 Vigor2830 Series User’s Guide viii...
Page 9 4.12.2 SIP Accounts ......................246 4.12.3 Phone Settings ......................249 4.12.4 Status.......................... 255 4.13 Wireless LAN ........................256 4.13.1 Basic Concepts......................256 4.13.2 General Setup......................258 4.13.3 Security ........................261 4.13.4 Access Control......................263 4.13.5 WPS..........................264 Vigor2830 Series User’s Guide...
Page 10 5.6 Request a CA Certificate and Set as Trusted on Windows CA Server ....... 329 5.7 Creating an Account for MyVigor ..................331 5.7.1 Creating an Account via Vigor Router ................331 5.7.2 Creating an Account via MyVigor Web Site..............335 Vigor2830 Series User’s Guide...
Page 11 6.4 Checking If the ISP Settings are OK or Not ................ 343 6.5 Problems for 3G Network Connection ................343 6.6 Backing to Factory Default Setting If Necessary ..............344 6.7 Contacting Your Dealer ....................... 345 Vigor2830 Series User’s Guide...
Page 13: Preface
Vigor2830 series is an ADSL2+ router. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP) with up to 32 VPN tunnels.
Page 14: Led Indicators And Connectors
The port is connected. WAN 2 (Giga) (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps when left LED is on. Vigor2830 Series User’s Guide...
Page 15 Connecters for local networked devices. Connecter for accessing the Internet through ADSL2/2+. WAN2(Giga) Connecters for remote networked devices. Connecter for a USB device (for 3G USB Modem or printer). Connecter for a power adapter. Power Switch. ON/OFF Vigor2830 Series User’s Guide...
Page 16: For Vigor2830N
The port is connected. WAN 2 (Giga) (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps when left LED is on. Vigor2830 Series User’s Guide...
Page 17 Connecters for local network devices. Connecter for accessing the Internet through ADSL2/2+. WAN2(Giga) Connecters for remote networked devices. Connecter for a USB device (for 3G USB Modem or printer). Connecter for a power adapter. Power Switch. ON/OFF Vigor2830 Series User’s Guide...
Page 18: For Vigor2830Vn
The port is connected. WAN2 (Giga) (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps when left LED is on. Vigor2830 Series User’s Guide...
Page 19 Connecters for local networked devices. Connecter for accessing the Internet through ADSL2/2+. WAN2(Giga) Connecters for remote networked devices. Connecter for a USB device (for 3G USB Modem or printer). Connecter for a power adapter. Power Switch. ON/OFF Vigor2830 Series User’s Guide...
Page 20: Hardware Installation
Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. (For the hardware connection, we take “Vn” model as an example.) Vigor2830 Series User’s Guide...
Page 21: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 22 Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. Vigor2830 Series User’s Guide...
Page 23 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Vigor2830 Series User’s Guide...
Page 24 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. Vigor2830 Series User’s Guide...
Page 25 If you do not know whether your printer is supported or not, please visit www.DrayTek.com to find out the printer list. Open Support >FAQ; find out the link of Printer Server and click it; then click the What types of printers are compatible with Vigor router? link.
Page 26 This page is left blank. Vigor2830 Series User’s Guide...
Page 27: Configuring Basic Settings
The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor2830 Series User’s Guide...
Page 28: Changing Password
Please type “admin/admin” on Username/Password for admin mode. Otherwise, do not type any word (both username and password are Null for user mode) on the window and click Login on the window. Now, the Main Screen will appear. Main screen for admin mode operation (full configuration) Vigor2830 Series User’s Guide...
Page 29 Enter the login password (the default is blank) on the field of Old Password. Type New Password. Then click OK to continue. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. Vigor2830 Series User’s Guide...
Page 30: Quick Start Wizard
On the next page as shown below, please select the WAN interface that you use. If DSL interface is used, please choose WAN1; if Ethernet interface is used, please choose WAN2; if 3G USB modem is used, please choose WAN3. Then click Next for next step. Vigor2830 Series User’s Guide...
Page 31: For Wan1
Choose WAN1 and click Next to display the following page. Please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Vigor2830 Series User’s Guide...
Page 32 ISP. Then click Next. Assign a specific valid user name provided by the User Name ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Click Next for viewing summary of such connection. Vigor2830 Series User’s Guide...
Page 33 Please type in the IP address information originally provided by your ISP. Then click Next for next step. Now you can see the following screen. It indicates that the setup is complete. Different types of connection modes will have different summary. Vigor2830 Series User’s Guide...
Page 34: For Wan2
On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Vigor2830 Series User’s Guide...
Page 35 ISP. Then click Next. User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Click Next for viewing summary of such connection. Vigor2830 Series User’s Guide...
Page 36 If you click PPTP/L2TP, you will get the following page. Please type in all the information originally provided by your ISP. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2830 Series User’s Guide...
Page 37 ISP. Then click Next for next step. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2830 Series User’s Guide...
Page 38 Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2830 Series User’s Guide...
Page 39: For Wan3
To use 3G USB modem for network connection, please choose WAN3. Then, click Next to continue. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Now, you can enjoy surfing on the Internet. Vigor2830 Series User’s Guide...
Page 40: Service Activation Wizard
Service Activation Wizard is a tool which allows you to use trial version or update the license of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Page 41 Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from retailing outlets. Setting confirmation page will be displayed as follows, please click Next.
Page 42 Later, if you need to extend the license valid time for the same service, you can also use the Service Activation Wizard again to reach your goal by clicking the radio button of Formal edition with license key and clicking Next. Vigor2830 Series User’s Guide...
Page 43: Online Status
Displays the total number of received packets at the LAN interface. WAN Status Line Displays the physical connection (Ethernet) of this interface. Name Displays the name set in WAN1/WAN web page. Mode Displays the type of WAN connection (e.g., PPPoE). Vigor2830 Series User’s Guide...
Page 44: Virtual Wan
Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2830 Series User’s Guide...
Page 45: User Mode Operation
Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor2830 Series User’s Guide...
Page 46 However, the original WAN1 and WAN2 still can be used and Load-Balance can be done in the router. Besides, 3G USB Modem in WAN3 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting Vigor2830 Series User’s Guide...
Page 47: General Setup
The supported 3G USB Modem will be listed on Draytek web site. Please visit www.draytek.com for more detailed information. Below shows the menu items for WAN. This section will introduce some general settings of Internet and explain the connection modes for WAN1, WAN2 and WAN3 in details.
Page 48 The range is from 0 to 7. Active Mode – Determine the WAN interface will be active for Active Mode and Backup WAN/Backup Type always (Always On) or be treated as a backup WAN interface (Backup WAN). Vigor2830 Series User’s Guide...
Page 49 WAN. When any WAN disconnect – Such backup WAN will be activated when any master WAN interface disconnects. When all WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. Vigor2830 Series User’s Guide...
Page 50 0 to 4095. Priority – Type the packet priority number for such VLAN. The range is from 0 to 7. Active Mode and Backup Active Mode – Determine the WAN interface will be active for Vigor2830 Series User’s Guide...
Page 51 WAN interface disconnects. When all WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. To use 3G network connection through 3G USB Modem, please configure WAN3 interface. Vigor2830 Series User’s Guide...
Page 52 If you choose Backup as the Active Mode, Backup WAN will be changed into Backup Type. You have to specify which role the WAN interface should play if you want to backup multiple WANs. However, ignore this setting if you want to backup a single WAN. Vigor2830 Series User’s Guide...
Page 53: Internet Access
Access Mode for these connections also varies. Refer to the following figures. Display the WAN interface. Index Display Name It shows the name of the WAN1/WAN2/WAN3 that entered in general setup. Physical Mode It shows the physical connection for WAN1(ADSL)/WAN2 Vigor2830 Series User’s Guide...
Page 54 Multi-PVC channel - The selections displayed here are determined by the page of Internet Access – Multi PVCs. Select M-PVCs Channel means no selection will be chosen. VPI - Type in the value provided by ISP. Vigor2830 Series User’s Guide...
Page 55 IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. Vigor2830 Series User’s Guide...
Page 56 Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor2830 Series User’s Guide...
Page 57 Such function allows you to verify whether network connection WAN Connection is alive or not through ARP Detect or Ping Detect. Detection Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Vigor2830 Series User’s Guide...
Page 58 Subnet Mask – Type in the subnet mask. Gateway IP Address – Type in gateway IP address. Default MAC Address – Type in MAC address for the router. You can use Default MAC Address or specify another MAC Vigor2830 Series User’s Guide...
Page 59 TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for PPP. If you want to connect to Internet all the time, you can Vigor2830 Series User’s Guide...
Page 60 MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor2830 Series User’s Guide...
Page 61 Such function allows you to verify whether network connection is Detection alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Vigor2830 Series User’s Guide...
Page 62 Specify a MAC Address: Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. Vigor2830 Series User’s Guide...
Page 63 WAN IP Alias - If you have multiple public IP addresses and Method(IPCP) would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other Vigor2830 Series User’s Guide...
Page 64 Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2830 Series User’s Guide...
Page 65 Type the PPP password (optional). WAN Connection Such function allows you to verify whether network connection is Detection alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to Vigor2830 Series User’s Guide...
Page 66: Load-Balance Policy
Displays the IP address for the start of the destination IP. Dest IP End Displays the IP address for the end of the destination IP. Dest Port Start Displays the IP address for the start of the destination port. Vigor2830 Series User’s Guide...
Page 67 Type the destination port start for the destination IP. Type the destination port end for the destination IP. If this field is Dest Port End blank, it means that all the destination ports will be passed Vigor2830 Series User’s Guide...
Page 68: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2830 Series User’s Guide...
Page 69 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2830 Series User’s Guide...
Page 70: General Setup
Click Details Page to open the following page. IP Address Type in private IP address for connecting to a local private network (Default: 192.168.1.1). Subnet Mask Type in an address code that determines the size of the network. (Default: 255.255.255.0/ 24) Vigor2830 Series User’s Guide...
Page 71 The DNS server converts the user-friendly name into its equivalent IP address. Force DNS manual setting - Force Vigor router to use DNS servers in this page instead of DNS servers given by the Internet Vigor2830 Series User’s Guide...
Page 72: Nat
192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Vigor2830 Series User’s Guide...
Page 73: Port Redirection
The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor2830 Series User’s Guide...
Page 74 IP address and port. Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host. If you choose Range as the port Vigor2830 Series User’s Guide...
Page 75 Note that the router has its own built-in services (servers) such as Telnet, HTTP and FTP etc. Since the common port numbers of these services (servers) are all the same, you may need to reset the router in order to avoid confliction. Vigor2830 Series User’s Guide...
Page 76: Dmz Host
Note: The security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: DMZ Host for WAN2 and WAN3 is slightly different with WAN1. See the following figure. Vigor2830 Series User’s Guide...
Page 77 DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2830 Series User’s Guide...
Page 78: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 20 port ranges for diverse services. Vigor2830 Series User’s Guide...
Page 79 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2830 Series User’s Guide...
Page 80: Applications
Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface Display the WAN interface used. Domain Name Display the domain name that you set on the setting page of DDNS setup. Vigor2830 Series User’s Guide...
Page 81 Domain Name field. Type in one domain name that you applied previously. Domain Name Use the drop down list to choose the desired domain. Login Name Type in the login name that you set for applying domain. Vigor2830 Series User’s Guide...
Page 82: Upnp
The NAT Traversal of UPnP enables the multimedia features of your applications to operate. This has to manually set up port mappings or use other similar methods. The screenshots below show examples of this facility. Vigor2830 Series User’s Guide...
Page 83 Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches. Non-privileged users can control some router functions, including removing and adding port mappings. Vigor2830 Series User’s Guide...
Page 84: Wireless Lan
Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router. The General Settings will set up the information of this wireless network, including its SSID as identification, located channel etc. Vigor2830 Series User’s Guide...
Page 85 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor2830 Series User’s Guide...
Page 86: General Setup
Means the identification of the wireless LAN. SSID can be any SSID text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. Channel Means the channel of frequency of the wireless LAN. The default channel is 6.
Page 87 SSID for different usage. In default, the first set of SSID will be enabled. You can hide it for your necessity. Long Preamble This option is to define the length of the sync field in an 802.11 Vigor2830 Series User’s Guide...
Page 88: Security
There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP-Accepts only WEP clients and the encryption key should be entered in WEP Key. WPA/PSK-Accepts only WPA clients and the encryption key should be entered in PSK. Vigor2830 Series User’s Guide...
Page 89 Four keys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCII or Hexadecimal. Check the key you wish to use. Vigor2830 Series User’s Guide...
Page 90: Access Control
MAC address from LAN. Add a new MAC address into the list. Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Vigor2830 Series User’s Guide...
Page 91: Station List
There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2830 Series User’s Guide...
Page 92: Usb Application
FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage diskette at one time. Default Charset - At present, Vigor router supports three types of character sets: default, GB2312 and BIG5. Vigor2830 Series User’s Guide...
Page 93: Usb User Management
USB diskette first. Otherwise, an error message will appear to warn you. Click index number to access into configuration page. FTP/Samba User Enable – Click this button to activate this profile (account) for Vigor2830 Series User’s Guide...
Page 94 USB storage disk, must follow the rule specified here. File – Check the items (Read, Write and Delete) for such profile. Directory –Check the items (List, Create and Remove) for such Vigor2830 Series User’s Guide...
Page 95: File Explorer
This page is to monitor the status for the users who accessing into FTP or Samba server (USB storage disk) via the Vigor router. If you want to remove the diskette from USB port in router, please click Disconnect USB Disk first. And then, remove the USB storage disk later. Vigor2830 Series User’s Guide...
Page 96: Syslog Explorer
There are two modes for you to choose. Stop record when fulls – when the capacity of syslog is full, the system will stop recording. Always record the new event – only the newest events will be Vigor2830 Series User’s Guide...
Page 97: System Maintenance
Below shows the menu items for System Maintenance. The System Status provides basic network settings of Vigor router. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Vigor2830 Series User’s Guide...
Page 98 This also helps to provide availability of some features that are bound with some WLAN miniPCi. SSID Display the SSID of the router. WAN------- Link Status Display current connection status. MAC Address Display the MAC address of the WAN Interface. Vigor2830 Series User’s Guide...
Page 99: User Password
Use Browser Time Select this option to use the browser time from the remote administrator PC host as router’s system time. Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol. Vigor2830 Series User’s Guide...
Page 100: Reboot System
OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. Vigor2830 Series User’s Guide...
Page 101: Dhcp Table
It displays the MAC address for the specified PC that DHCP assigned IP address for it. Leased Time It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. Vigor2830 Series User’s Guide...
Page 102: Ping Diagnosis
Type in the IP address of the Host/IP that you want to ping. Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. Vigor2830 Series User’s Guide...
Page 103: Traffic Graph
Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run. The result of route trace will be shown on the screen. Vigor2830 Series User’s Guide...
Page 104 Choose the protocol for using by such job Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Click this link to remove the result on the window. Clear Vigor2830 Series User’s Guide...
Page 105: Admin Mode Operation
Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor2830 Series User’s Guide...
Page 106 However, the original WAN1 and WAN2 still can be used and Load-Balance can be done in the router. Besides, 3G USB Modem in WAN3 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting Vigor2830 Series User’s Guide...
Page 107: General Setup
The supported 3G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information. Below shows the menu items for WAN. This section will introduce some general settings of Internet and explain the connection modes for WAN1, WAN2 and WAN3 in details.
Page 108 0 to 4095. Priority – Type the packet priority number for such VLAN. The range is from 0 to 7. Choose Always On to make the WAN1 connection being Active Mode activated always; Vigor2830 Series User’s Guide...
Page 109 Type the description for such WAN interface. Display the physical mode of such WAN interface. Physical Mode Physical type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system. Vigor2830 Series User’s Guide...
Page 110 WAN. When any WAN disconnect – Such backup WAN will be activated when any master WAN interface disconnects. When all WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. Vigor2830 Series User’s Guide...
Page 111 WAN. When any WAN disconnect – Such backup WAN will be activated when any master WAN interface disconnects. When all WAN disconnect – Such backup WAN will be activated only when all master WAN interfaces disconnect. Vigor2830 Series User’s Guide...
Page 112: Internet Access
If not, click Details Page for accessing the page to configure the settings. Details Page This button will open different web page according to the access mode that you choose in WAN interface Vigor2830 Series User’s Guide...
Page 113 Protocol - Drop down the list to choose the one (PPPoE or PPPoA) provided by ISP. If you have already used Quick Start Wizard to set the protocol, then it is not necessary for you to change any settings in this group. Vigor2830 Series User’s Guide...
Page 114 Idle Timeout – Set the timeout for breaking down the Internet after passing through the time without any action. IP Address Assignment Usually ISP dynamically assigns IP address to you each time Method (IPCP) you connect to it and request. In some case, your ISP provides Vigor2830 Series User’s Guide...
Page 115 All the schedules can be set previously in Applications >> Schedule web page and you can use the number that you have set in that web page. After finishing all the settings here, please click OK to activate them. Vigor2830 Series User’s Guide...
Page 116 ISP. VPI - Type in the value provided by ISP. VCI - Type in the value provided by ISP. Modulation –Default setting is Multimode. Choose the one that fits the requirement of your router. Vigor2830 Series User’s Guide...
Page 117 Enable box. Then click OK to exit the dialog. Obtain an IP address automatically – Click this button to obtain the IP address automatically. Router Name – Type in the router name provided by ISP. Vigor2830 Series User’s Guide...
Page 118 ISP Access Setup Enter your allocated username, password and authentication parameters according to the information provided by your ISP. Username – Type in the username provided by ISP in this field. Vigor2830 Series User’s Guide...
Page 119 Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address. Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Vigor2830 Series User’s Guide...
Page 120 IP address for the system to PING it for keeping alive. PING Interval - Enter the interval for the system to execute the PING operation. Such function allows you to verify whether network connection is WAN Connection Vigor2830 Series User’s Guide...
Page 121 Specify a MAC Address: Some Cable service providers specify a specific MAC address for access authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. Vigor2830 Series User’s Guide...
Page 122 PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for PPP. Idle Timeout - Set the timeout for breaking down the Internet Vigor2830 Series User’s Guide...
Page 123 Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. After finishing all the settings here, please click OK to activate them. Vigor2830 Series User’s Guide...
Page 124 If you have any question, please contact to your ISP. PPP Username Type the PPP username (optional). PPP Password Type the PPP password (optional). Always On If you want to connect to Internet all the time, you can check Always On. Vigor2830 Series User’s Guide...
Page 125: Multi-Pvcs
Internet Access. Type in the value provided by your ISP. Type in the value provided by your ISP. Vigor2830 Series User’s Guide...
Page 126 WAN link for Channel 5, 6 and 7 are provided for router-borne application such as TR-069. The settings must be applied and obtained from your ISP. For your special request, please contact with your ISP and then click WAN link of Channel 5, 6 or 7 to configure your router. Vigor2830 Series User’s Guide...
Page 127 VoIP - It can be specified for VoIP only. If you choose VoIP, the configuration for this PVC will be effective for VoIP data transmitting and receiving. For other settings, refer to Details Page for PPPoE/PPPoA in WAN1. Vigor2830 Series User’s Guide...
Page 128 It represents Peak Cell Rate. The default setting is “0”. It represents Sustainable Cell Rate. The value of SCR must be smaller than PCR. It represents Maximum Burst Size. The range of the value is 10 to 50. Vigor2830 Series User’s Guide...
Page 129 Click Clear to remove all the configurations in this page if you do not satisfy it. When you finish the configuration, please click OK to save and exit this page. Or click Cancel to abort the configuration and exit this page. Vigor2830 Series User’s Guide...
Page 130 Normal – It means that the PVC can accept all packets except IGMP. IGMP – It means that the PVC can accept packets of IGMP only. Enable switch add Tag Check this box to enable the function. Vigor2830 Series User’s Guide...
Page 131: Load-Balance Policy
Displays the IP address for the end of the destination port. Move UP/Move Down Use Up or Down link to move the order of the policy. Click Index 1 to access into the following page for configuring load-balance policy. Vigor2830 Series User’s Guide...
Page 132 Type the destination port start for the destination IP. Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the destination ports will be passed through the WAN interface. Vigor2830 Series User’s Guide...
Page 133: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2830 Series User’s Guide...
Page 134 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2830 Series User’s Guide...
Page 135: General Setup
Click it to access into the setting page. Each LAN will have different LAN configuration page. Each LAN must be configured in different subnet. Inter-LAN Routing Check the box to link two or more different subnets (LAN and LAN). Vigor2830 Series User’s Guide...
Page 136 192.168.1.1, the starting IP address must be 192.168.1.2 or greater, but smaller than 192.168.1.254. IP Pool Counts - Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. The default is 50 Vigor2830 Series User’s Guide...
Page 137 If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name immediately. Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. Vigor2830 Series User’s Guide...
Page 138 Gateway IP Address - Enter a value of the gateway IP address for the DHCP server. The value is usually as same as the 1st IP address of the router, which means the router is the default gateway. Vigor2830 Series User’s Guide...
Page 139 192.168.1.2 or greater, but smaller than 192.168.1.254. IP Pool Counts - Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. The default is 50 and the maximum is 253. Vigor2830 Series User’s Guide...
Page 140: Static Route
The number (1 to 10) under Index allows you to open next page to set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Table Displays the routing table for your reference. Vigor2830 Series User’s Guide...
Page 141 Click the LAN - Static Route and click on the Index Number 1. Check the Enable box. Please add a static route as shown below, which regulates all packets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click OK. Vigor2830 Series User’s Guide...
Page 142 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2830 Series User’s Guide...
Page 143: Vlan
Choose one of them to make the selected VLAN mapping to the specified subnet only. For example, LAN1 is specified for VLAN0. It means that PCs grouped under VLAN0 can get the IP address(es) that specified by the subnet. Vigor2830 Series User’s Guide...
Page 144 P3 and P4. After checking the box to enable VLAN function, you will check the table according to the needs as shown below. To remove VLAN, uncheck the needed box and click OK to save the results. Vigor2830 Series User’s Guide...
Page 145: Bind Ip To Mac
IP Address – Type the IP address that will be used for the Add and Edit specified MAC address. Mac Address – Type the MAC address that is used to bind with the assigned IP address. Vigor2830 Series User’s Guide...
Page 146: Nat
192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor2830 Series User’s Guide...
Page 147: Port Redirection
To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Press any number under Index to access into next page for configuring port redirection. Vigor2830 Series User’s Guide...
Page 148 Therefore, you need to change the router’s http port to any one other than the default port 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then Vigor2830 Series User’s Guide...
Page 149: Dmz Host
LAN. Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption. DMZ Host allows a defined internal user to be totally exposed to the Internet, which usually helps some special applications such as Netmeeting or Internet Games etc. Vigor2830 Series User’s Guide...
Page 150 Click DMZ Host to open the following page: DMZ Host for WAN2 and WAN3 is slightly different with WAN1. Active True IP selection is available for WAN1 only. See the following figure. Vigor2830 Series User’s Guide...
Page 151 DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2830 Series User’s Guide...
Page 152: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2830 Series User’s Guide...
Page 153 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2830 Series User’s Guide...
Page 154: Firewall
It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor2830 Series User’s Guide...
Page 155 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor2830 Series User’s Guide...
Page 156: General Setup
Vigor router if such feature is enabled. If the firewall system does not have any response (pass or block) for these packets, such as no response coming from web content filter, then the router’s Vigor2830 Series User’s Guide...
Page 157 Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Load-Balance Policy Choose the WAN interface for applying Load-Balance Policy. Vigor2830 Series User’s Guide...
Page 158 Log box. It will be sent to Syslog server. Please refer to section Syslog/Mail Alert for more detailed information. Advance Setting Click Edit to open the following window. However, it is strongly recommended to use the default settings here. Vigor2830 Series User’s Guide...
Page 159 (0~65535). The more the value is, the better the performance will be. However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. Vigor2830 Series User’s Guide...
Page 160: Filter Setup
Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Vigor2830 Series User’s Guide...
Page 161 Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other LAN. Click Edit to access into the following dialog to choose the Source/Destination IP source/destination IP or IP ranges. Vigor2830 Series User’s Guide...
Page 162 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Vigor2830 Series User’s Guide...
Page 163 The number typed here is the total sessions of the packets that do not match the filter rule configured in this page. The default setting is 60000. Strict –Make the MAC address and IP address settings MAC Bind IP Vigor2830 Series User’s Guide...
Page 164 Web Content Filter Select one of the Web Content Filter profile settings (created in CSM>> Web Content Filter) for applying with this router. Please set at least one profile for anti-virus in CSM>> Web Vigor2830 Series User’s Guide...
Page 165 Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the performance Vigor2830 Series User’s Guide...
Page 166 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
Page 167 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2830 Series User’s Guide...
Page 168: Dos Defense
Check the box to activate the ICMP flood defense function. Similar to the UDP flood defense function, once if the defense Threshold of ICMP packets from Internet has exceeded the defined value, the router will discard the ICMP echo requests Vigor2830 Series User’s Guide...
Page 169 ICMP packets with a length greater than 1024 octets. Block Ping of Death Check the box to activate the Block Ping of Death function. This attack involves the perpetrator sending overlapping packets to the target hosts so that those target hosts will hang Vigor2830 Series User’s Guide...
Page 170 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor2830 Series User’s Guide...
Page 171: User Management
Note: If Transparency Mode is selected in Firewall>>General Setup, User Management cannot be used any more. Please uncheck Transparency Mode first if you want to utilize user management to handle users in LAN, WAN or WLAN. Vigor2830 Series User’s Guide...
Page 172: General Setup
User-Based - If you choose such mode, the router will apply the filter rules configured in User Management>>User Profile to the users. Rule-Based –If you choose such mode, the router will apply the filter rules configured in Firewall>>General Setup and Filter Rule to the users. Vigor2830 Series User’s Guide...
Page 173: User Profile
1 (admin) and profile 2 (System Reservation) are factory default settings. Profile 2 is reserved for future use. Enable this account Check this box to enable such user profile. User Name Type a name for such user profile (e.g., LAN_User_Group_1, WLAN_User_Group_A, WLAN_User_Group_B, etc). When a Vigor2830 Series User’s Guide...
Page 174 For the detailed configuration, simply refer to Firewall>>Filter Rule. The firewall filter rules that are not selected in Firewall>>General>>Default rule can be available for use in User Management>>User Profile. External Service The router will authenticate the dial-in user by itself or by Vigor2830 Series User’s Guide...
Page 175 Refresh – Click this button to recalculate the time quota. Add – Click this box to set the time quota for such profile. You can type in four sets of time schedule for your request. Index (1-15) in Schedule Vigor2830 Series User’s Guide...
Page 176: User Group
Notice that user object, Admin and Dial-In User are factory settings. User defined profiles will be numbered with 3, 4, 5 and so on. Selected Keyword Click button to add the selected user objects in this Vigor2830 Series User’s Guide...
Page 177: User Online Status
Idle Time Display the idle timeout setting for such profile. Action Block - can prevent specified user accessing into Internet. Unblock – the user will be blocked. Logout – the user will be logged out forcefully. Vigor2830 Series User’s Guide...
Page 178: Objects Settings
IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions. Clear all profiles. Set to Factory Default Vigor2830 Series User’s Guide...
Page 179 Select Any Address if this object contains any IP address. Select Mac Address if this object contains Mac address. MAC Address Type the MAC address of the network card which will be controlled. Start IP Address Type the start IP address for Single Address type. Vigor2830 Series User’s Guide...
Page 180: Ip Group
Below is an example of IP objects settings. This page allows you to bind several IP objects into one IP group. Clear all profiles. Set to Factory Default Vigor2830 Series User’s Guide...
Page 181 Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Click >> button to add the selected IP objects in this box. Vigor2830 Series User’s Guide...
Page 182: Service Type Object
Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. Vigor2830 Series User’s Guide...
Page 183: Service Type Group
(<) – the port number less than this value is available for this profile. Below is an example of service type objects settings. This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Vigor2830 Series User’s Guide...
Page 184: Keyword Object
Click >> button to add the selected IP objects in this box. Objects You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles. Vigor2830 Series User’s Guide...
Page 185: Keyword Group
This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile. Set to Factory Default Clear all profiles. Vigor2830 Series User’s Guide...
Page 186: File Extension Object
This page allows you to set eight profiles which will be applied in CSM>>URL Content Filter. All the files with the extension names specified in these profiles will be processed according to the chosen action. Clear all profiles. Set to Factory Default Vigor2830 Series User’s Guide...
Page 187 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor2830 Series User’s Guide...
Page 188: Csm Profile
Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor2830 Series User’s Guide...
Page 189: App Enforcement Profile
Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Misc displayed on this page. Each tab will bring out different items that you can choose to disallow people using. Vigor2830 Series User’s Guide...
Page 190 Uncheck all the selected boxes. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Below shows the items which are categorized under IM. Vigor2830 Series User’s Guide...
Page 191 The items categorized under P2P ----- The items categorized under Misc ----- Vigor2830 Series User’s Guide...
Page 192: Url Content Filter Profile
Click CSM and click URL Content Filter Profile to open the profile setting page. You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Vigor2830 Series User’s Guide...
Page 193 For this one, the router will process the packages with the conditions set below for web feature first, then URL second. None – There is no log file will be recorded for this profile. Vigor2830 Series User’s Guide...
Page 194 After specifying keywords, the Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noticed that the more simplified the blocking keyword list is, the more efficiently the Vigor router performs. Vigor2830 Series User’s Guide...
Page 195 File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Objects previously for passing or blocking the file downloading. Vigor2830 Series User’s Guide...
Page 196: Web Content Filter Profile
Note: If you have used Service Activation Wizard to activate WCF service, you can skip this section. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
Page 197 Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Test a site to verify Click this link to do the verification. whether it is categorized Click this link to retrieve the factory settings. Set to Factory Default Cache None –...
Page 198 Block - restrict accessing into the corresponding webpage with the categories listed on the box below. If the web pages do not match with the specified feature set here, it will be processed with reverse action. Vigor2830 Series User’s Guide...
Page 199: Bandwidth Management
To solve the problem, you can use limit session to limit the session procession for specified Hosts. In the Bandwidth Management menu, click Sessions Limit to open the web page. Vigor2830 Series User’s Guide...
Page 200 Adds the specific session limitation onto the list above. Edit Allows you to edit the settings for the selected limitation. Remove Remove the selected settings existing on the limitation list. Administration Message Type the words which will be displayed when reaches the Vigor2830 Series User’s Guide...
Page 201: Bandwidth Limit
Define the default speed of the upstream for each computer in LAN. Default RX limit Define the default speed of the downstream for each computer in LAN. Limitation List Display a list of specific limitations that you set on this web page. Vigor2830 Series User’s Guide...
Page 202: Quality Of Service
IP header. For instance, to ensure the connection with the headquarter, a teleworker may enforce an index of QoS Control to reserve bandwidth for HTTPS connection while using lots of application at the same time. Vigor2830 Series User’s Guide...
Page 203 This page displays the QoS settings result of the WAN interface. Click the Setup link to access into next page for the general setup of WAN interface. As to class rule, simply click the Edit link to access into next for configuration. Vigor2830 Series User’s Guide...
Page 204 Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Enable the QoS Control The factory default for this setting is checked. Please also define which traffic the QoS Control settings will Vigor2830 Series User’s Guide...
Page 205 TCP ACK, you can check this box to push ACK of upload faster to speed the network traffic. Limited_bandwidth Ratio The ratio typed here is reserved for limited bandwidth of UDP application. Vigor2830 Series User’s Guide...
Page 206 For adding a new rule, click Add to open the following page. Check this box to invoke these settings. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Vigor2830 Series User’s Guide...
Page 207 By the way, you can set up to 20 rules for one Class. If you want to edit an existed rule, please select the radio button of that one and click Edit to open the rule edit page for modification. Vigor2830 Series User’s Guide...
Page 208 Click Single or Range as the Type. If you select Range, you have to type in the starting port number and the end porting number on the boxes below. Port Number – Type in the starting port number and the end Vigor2830 Series User’s Guide...
Page 209: Applications
In the DDNS setup menu, check Enable Dynamic DNS Setup. Enable Dynamic DNS Check this box to enable DDNS function. Setup Set to Factory Default Clear all profiles and recover to factory settings. Vigor2830 Series User’s Guide...
Page 210 WAN1/WAN2/WAN3 as the first channel for such account. If WAN1/WAN2/WAN3 fails, the router will use another WAN interface instead. WAN1/WAN2/WAN3 Only - While connecting, the router will use WAN1/WAN2/WAN3 as the only channel for such account. Vigor2830 Series User’s Guide...
Page 211: Schedule
You can inquiry an NTP server (a time server) on the Internet to synchronize the router’s clock. This method can only be applied when the WAN connection has been built up. Set to Factory Default Clear all profiles and recover to factory settings. Vigor2830 Series User’s Guide...
Page 212 Specify the duration (or period) for the schedule. How often -Specify how often the schedule will be applied Once -The schedule will be applied just once Weekdays -Specify which days in one week should perform the schedule. Vigor2830 Series User’s Guide...
Page 213: Radius
The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. Vigor2830 Series User’s Guide...
Page 214: Upnp
NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor2830 Series User’s Guide...
Page 215 Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor2830 Series User’s Guide...
Page 216: Igmp
This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. P1 to P4 It indicates the LAN port used for the multicast group. Click this link to renew the working multicast group status. Refresh Vigor2830 Series User’s Guide...
Page 217: Wake On Lan
MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2830 Series User’s Guide...
Page 218: Vpn And Remote Access
Route Mode/NAT Mode – If the remote network only allows Selection you to dial in with single IP, please choose this mode, otherwise please choose Route Mode. There are 32 VPN profiles for users to set. Please choose a LAN-to-LAN Profile Vigor2830 Series User’s Guide...
Page 219 In this page, you have to select suitable VPN type for the VPN client profile. There are six types provided here. Different type will lead to different configuration page. After making the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. Vigor2830 Series User’s Guide...
Page 220 When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: When you choose IPSec, you will see the following graphic: Vigor2830 Series User’s Guide...
Page 221 Type a name for such profile. The length of the file is limited to 10 characters. VPN Dial-Out Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. Vigor2830 Series User’s Guide...
Page 222 This field is used to authenticate for connection when User Name you select PPTP or L2TP with or without IPSec policy above. Password This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above. Vigor2830 Series User’s Guide...
Page 223 Click this radio button to set another profile of VPN Server Wizard Setup through VPN Server Wizard. View more detailed Click this radio button to access VPN and Remote configuration Access>>LAN to LAN for viewing detailed configuration. Vigor2830 Series User’s Guide...
Page 224: Vpn Server Wizard
VPN connection. Please choose a This item is available when you choose Site to Site VPN LAN-to-LAN Profile (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Vigor2830 Series User’s Guide...
Page 225 After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. Here we take the examples of choosing Remote-Dial-in User as the VPN Server Mode. Vigor2830 Series User’s Guide...
Page 226 When you check PPTP, you will see the following graphic: When you check PPTP/IPSec/L2TP (three types) or PPTP/IPSec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor2830 Series User’s Guide...
Page 227 Please type one LAN IP address (according to the real location of the remote host) for building VPN connection. Remote Network Mask Please type the network mask (according to the real location of the remote host) for building VPN connection. Vigor2830 Series User’s Guide...
Page 228: Remote Access Control
Enable the necessary VPN service as you need. If you intend to run a VPN server inside your LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. Vigor2830 Series User’s Guide...
Page 229: Ppp General Setup
Cisco routers. So you should enable this function when your peer router requires mutual authentication. You should further specify the User Name and Password of the mutual authentication peer. Vigor2830 Series User’s Guide...
Page 230: Ipsec General Setup
IKE Authentication This usually applies to those are remote dial-in user or node Method (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and Vigor2830 Series User’s Guide...
Page 231: Ipsec Peer Identity
Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2830 Series User’s Guide...
Page 232 Click to check the specific fields of digital signature to accept Accept Subject Name the peer with matching value. The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). Vigor2830 Series User’s Guide...
Page 233: Remote Dial-In User
Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. Vigor2830 Series User’s Guide...
Page 234 Check the checkbox-You can specify the IP address of the Specify Remote Node remote dial-in user, ISDN number or peer ID (used in IKE aggressive mode). Uncheck the checkbox-This means the connection type you select above will apply the authentication methods and Vigor2830 Series User’s Guide...
Page 235 By default, this option is invoked. You can uncheck it to disable it. High-Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Vigor2830 Series User’s Guide...
Page 236: Lan To Lan
4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. For the web page is too long, we divide the page into several sections for explanation. Vigor2830 Series User’s Guide...
Page 237 WAN1 /WAN2 /WAN3 Only - While connecting, the router will use WAN1 /WAN2 /WAN3 as the only channel for VPN connection. Netbios Naming Packet Pass – click it to have an inquiry for data transmission between Vigor2830 Series User’s Guide...
Page 238 IPSec Tunnel - Build an IPSec VPN connection to the server through Internet. L2TP with IPSec Policy - Build a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: Vigor2830 Series User’s Guide...
Page 239 AES without Authentication-Use AES encryption algorithm and not apply any authentication scheme. AES with Authentication-Use AES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. Advanced Specify mode, proposal and key life of each IKE phase, Gateway, etc. Vigor2830 Series User’s Guide...
Page 240 Local ID-In Aggressive mode, Local ID is on behalf of the IP address while identity authenticating with remote VPN server. The length of the ID is limited to 47 characters. Vigor2830 Series User’s Guide...
Page 241 You can specify the IP address of the remote dial-in user or peer Gateway ID (should be the same with the ID setting in dial-in type) by checking the box. Also, you should further specify the corresponding security methods on the right side. Vigor2830 Series User’s Guide...
Page 242 Network IP Address/Remote Network Mask through the VPN Remote Network Mask connection. For IPSec, this is the destination clients IDs of phase 2 quick mode. Local Network IP / Local Display the local network IP and mask for TCP / IP Vigor2830 Series User’s Guide...
Page 243 If the remote network only allows you to dial in with single IP, please choose NAT, otherwise choose Route. remote network, you have to do Change default route to Check this box to change the default route with this VPN tunnel. this VPN tunnel Vigor2830 Series User’s Guide...
Page 244: Connection Management
Tool and clicking Dial button. Dial Click this button to execute dial out function. Refresh Seconds Choose the time for refresh the dial information among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Vigor2830 Series User’s Guide...
Page 245: Certificate Management
Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Generate Click this button to open Generate Certificate Request window. Vigor2830 Series User’s Guide...
Page 246 Refresh Click this button to refresh the information listed below. Click this button to view the detailed settings for certificate View request. After clicking Generate, the generated information will be displayed on the window below: Vigor2830 Series User’s Guide...
Page 247: Trusted Ca Certificate
For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2830 Series User’s Guide...
Page 248: Certificate Backup
The more bandwidth a codec uses the better the voice quality, however the codec used must be appropriate for your Internet bandwidth. Usually there will be two types of calling scenario, as illustrated below: Vigor2830 Series User’s Guide...
Page 249 QoS Assurance assists to assign high priority to voice traffic via Internet. You will always have the required inbound and outbound bandwidth that is prioritized exclusively for Voice traffic over Internet but you just get your data a little slower and it is tolerable for data traffic. Vigor2830 Series User’s Guide...
Page 250: Dialplan
SIP addresses. Loop through and Backup Phone Number will be displayed if you are using Vigor2830Vn for setting the phone book. Click any index number to display the dial plan setup page. Vigor2830 Series User’s Guide...
Page 251 (PSTN number/ISDN number) for this VoIP phone setting. Secure Phone ZRTP+SRTP - It allows users to have encrypted RTP stream with the peer side using the same protocol (ZRTP+SRTP). Check this box to have secure call. Vigor2830 Series User’s Guide...
Page 252 VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” Vigor2830 Series User’s Guide...
Page 253 VoIP>> Phone Settings. Call barring is used to block phone calls coming from the one that is not welcomed. Click any index number to display the dial plan setup page. Vigor2830 Series User’s Guide...
Page 254 Unknown Domain or Block IP Address. Simply click the relational links to open the web page. For Block Anonymous – this function can block the incoming calls without caller ID on the interface (Phone port) specified in the following window. Such control also can be done based on preconfigured schedules. Vigor2830 Series User’s Guide...
Page 255 SIP accounts. Such control also can be done based on preconfigured schedules. For Block IP Address – this function can block incoming calls (through Phone port) coming from IP address. Such control also can be done based on preconfigured schedules. Vigor2830 Series User’s Guide...
Page 256 Call Forward [No Ans][Act] Dial the number typed in this field to forward all the incoming calls to the specified place while there is no answer of the connected phone. Vigor2830 Series User’s Guide...
Page 257 PSTN number for dialing without passing through Internet. Please type the number in the field of phone number for PSTN relay. Then, check the Enable box to make the PSTN number available for dial whenever you need. Vigor2830 Series User’s Guide...
Page 258: Sip Accounts
Specify which port will ring when receiving a phone call. Set Phone, ISDN1-S0 or ISDN-TE as the default ring port for the SIP account. If you choose Phone or ISDN1-S0, the ISDN2-TE selection will be dimmed, vice versa. There are ten internal Vigor2830 Series User’s Guide...
Page 259 None and check the box to achieve the goal. Some SIP server allows user to use VoIP function without registering. For such server, please check the box of Call without Registration. Choosing Auto is recommended. Vigor2830 Series User’s Guide...
Page 260 IP address as the NAT transversal support. Nortel – If the soft-switch that you use supports Nortel solution, you can choose this option. Ring Port Set Phone 1 and/or Phone 2 as the default ring port(s) for this SIP account. Vigor2830 Series User’s Guide...
Page 261: Phone Settings
Click On to invoke this function; click off to close the function. This page allows user to set phone settings for Phone 1 and Phone 2 respectively. However, it changes slightly according to different model you have. Vigor2830 Series User’s Guide...
Page 262 Dynamic RTP Port End - Specifies the end port for RTP stream. The default value is 15000. RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Vigor2830 Series User’s Guide...
Page 263 Time Out – Set the time out for the call forwarding. The default setting is 30 sec. DND (Do Not Disturb) Set a period of peace time without disturbing by VoIP phone call. During the period, the one who dial in will listen busy Vigor2830 Series User’s Guide...
Page 264 Voice Active Detector - This function can detect if the voice on both sides is active or not. If not, the router will do something to save the bandwidth for other using. Click On to invoke this function; click off to close the function. Vigor2830 Series User’s Guide...
Page 265 Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Vigor2830 Series User’s Guide...
Page 266 DTMF tone. SIP INFO- Choose this one then the Vigor will capture the DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message. Vigor2830 Series User’s Guide...
Page 267: Status
CONNECTING - Indicates that the user is calling out. WAIT_ANS - Indicates that a connection is launched and waiting for remote user’s answer. ALERTING - Indicates that a call is coming. ACTIVE-Indicates that the VoIP connection is launched. Vigor2830 Series User’s Guide...
Page 268: Wireless Lan
Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router. The General Settings will set up the information of this wireless network, including its SSID as identification, located channel etc. Vigor2830 Series User’s Guide...
Page 269 LAN for visitors only so they can connect to Internet without hassle of the confidential information leakage. For a more flexible deployment, you may add filters of MAC addresses to isolate users’ access from wired LAN. Vigor2830 Series User’s Guide...
Page 270: General Setup
SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wireless function. Mode At present, the router can connect to 11n Only, 11g Only, Mixed Vigor2830 Series User’s Guide...
Page 271 SSID Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek”. We suggest you to change it. Isolate LAN – Check this box to make the wireless clients (stations) with the same SSID cannot access wired PCs on LAN.
Page 272 It controls the data transmission rate through wireless connection. Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbps. Vigor2830 Series User’s Guide...
Page 273: Security
Internet through such router, please input the default PSK value for connection. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WPA and WEP. Mode There are several modes provided for you to choose. Vigor2830 Series User’s Guide...
Page 274 Pre-Shared Key (PSK) - Either 8~63 ASCII characters, such as 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, such as Vigor2830 Series User’s Guide...
Page 275: Access Control
LAN. For example, they can be grouped under SSID 1 and SSID 2 at the same time if you check SSID 1 and SSID 2. MAC Address Filter Display all MAC addresses that are edited before. Vigor2830 Series User’s Guide...
Page 276: Wps
He/she only needs to press a button on wireless client, and WPS will connect for client and router automatically. There are two methods to do network connection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code. Vigor2830 Series User’s Guide...
Page 277 For WPS is supported in WPA-PSK or WPA2-PSK mode, if you do not choose such mode in Wireless LAN>>Security, you will see the following message box. Please click OK and go back Wireless LAN>>Security to choose WPA-PSK or WPA2-PSK mode and access WPS again. Vigor2830 Series User’s Guide...
Page 278 Start PIN button. The WPS LED on the router will blink fast when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes) Vigor2830 Series User’s Guide...
Page 279: Wds
AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be forwarded to local wired or wireless hosts. In other words, only Repeater mode can do WDS-to-WDS packet forwarding. Vigor2830 Series User’s Guide...
Page 280 Click WDS from Wireless LAN menu. The following page will be shown. Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeater mode is for the second one. Vigor2830 Series User’s Guide...
Page 281: Advanced Setting
This page allows users to set advanced settings such as operation mode, channel bandwidth, guard interval, and aggregation MSDU for wireless data transmission. Operation Mode Mixed Mode – the router can transmit data with the ways supported in both 802.11a/b/g and 802.11n standards. However, Vigor2830 Series User’s Guide...
Page 282: Wmm Configuration
APSD (automatic power-save delivery) is an enhancement over the power-save mechanisms supported by Wi-Fi networks. It allows devices to take more time in sleeping state and consume less power to improve the performance by minimizing transmission latency. Vigor2830 Series User’s Guide...
Page 283 It is an abbreviation of Admission control Mandatory. It can restrict stations from using specific category class if it is checked. Note: Vigor2830 provides standard WMM configuration in the web page. If you want to modify the parameters, please refer to Vigor2830 Series User’s Guide...
Page 284: Ap Discovery
Please click Scan to discover all the connected APs. Scan It is used to discover all the connected AP. The results will be shown on the box above this button. It displays the statistics for the channels used by APs. Statistics Vigor2830 Series User’s Guide...
Page 285: Station List
There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Refresh Click this button to refresh the status of station list. Click this button to add current typed MAC address into Access Control. Vigor2830 Series User’s Guide...
Page 286: Usb Application
FTP sessions. The router allows up to 6 FTP sessions connecting to USB storage disk at one time. Default Charset - At present, Vigor router supports three types of character sets: default, GB2312 and BIG5. Vigor2830 Series User’s Guide...
Page 287: Usb User Management
USB storage disk must type the same username and password configured in this page. Before adding or modifying settings in this page, please insert a USB storage disk first. Otherwise, an error message will appear to warn you. Click index number to access into configuration page. Vigor2830 Series User’s Guide...
Page 288 ON, you cannot type any new folder name in this field. Only “/” can be used in such case. You can click to open the following dialog to add any new folder which can be specified as the Home Folder. Vigor2830 Series User’s Guide...
Page 289 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB storage disk into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor2830 Series User’s Guide...
Page 290: File Explorer
Disconnect USB Disk first. And then, remove the USB storage disk later. Connection Status If there is no USB storage disk connected to Vigor router, “No Disk Connected” will be shown here. Disk Capacity It displays the total capacity of the USB storage disk. Vigor2830 Series User’s Guide...
Page 291: Syslog Explorer
Always record the new event – only the newest events will be recorded by the system. Time Display the time of the event occurred. Message Display the information for each event. Vigor2830 Series User’s Guide...
Page 292: System Maintenance
For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items for System Maintenance. Vigor2830 Series User’s Guide...
Page 293: System Status
This also helps to provide availability of some features that are bound with some WLAN miniPCi. Display the SSID of the router. SSID WAN------- Link Status Display current connection status. MAC Address Display the MAC address of the WAN Interface. Vigor2830 Series User’s Guide...
Page 294: 282
Such information is useful for Auto Configuration Server. Enable/Disable – Allow/Deny the CPE Client to connect with Auto Configuration Server. Port – Sometimes, port conflict might be occurred. To solve such problem, you might change port number for CPE. Vigor2830 Series User’s Guide...
Page 295: Administrator Password
Type in the new password again. Confirm Password When you click OK, the login window will appear. Please use the new password to access into the web configurator again. This page allows you to set new password for user operation. Vigor2830 Series User’s Guide...
Page 296: Configuration Backup
Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving configuration as a file. Vigor2830 Series User’s Guide...
Page 297 Click Browse button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor2830 Series User’s Guide...
Page 298: Syslog/Mail Alert
Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail address is available or not. SMTP Server The IP address of the SMTP server. Vigor2830 Series User’s Guide...
Page 299 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2830 Series User’s Guide...
Page 300: Time And Date
Enable Daylight Saving Check the box to enable the daylight saving. Such feature is available for certain area. Automatically Update Select a time interval for updating from the NTP server. Interval Click OK to save these settings. Vigor2830 Series User’s Guide...
Page 301: Management
Check to specify user-defined port numbers for the Telnet, User Defined Ports HTTP and FTP servers. Enable SNMP Agent Check it to enable this function. Get Community Set the name for getting community by typing a proper character. The default setting is public. Vigor2830 Series User’s Guide...
Page 302: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor2830 Series User’s Guide...
Page 303: Firmware Upgrade
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 304: Activation
The Activate link brings you accessing into www.vigorpro.com to finish the activation of the account and the router. As for authentication information of web filter, the process of Authentication Message authenticating will be displayed on this field for your reference. Vigor2830 Series User’s Guide...
Page 305 Below shows the successful activation of Web Content Filter: Vigor2830 Series User’s Guide...
Page 306: Diagnostics
(e.g., PPPoE) is triggered by a package sending from the source IP address. Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2830 Series User’s Guide...
Page 307: Routing Table
Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Refresh Click it to reload the page. Click it to clear the whole table. Clear Vigor2830 Series User’s Guide...
Page 308: Dhcp Table
It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. Click Diagnostics and click NAT Sessions Table to open the list page. Vigor2830 Series User’s Guide...
Page 309: Ping Diagnosis
Type in the IP address of the Host/IP that you want to ping. IP Address Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. Vigor2830 Series User’s Guide...
Page 310: Data Flow Monitor
Address, TX rate, RX rate or Session link for arranging the data display. Enable Data Flow Check this box to enable this function. Monitor Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Vigor2830 Series User’s Guide...
Page 311 Peak means the highest peak value detected by the router in data transmission. Speed means line speed specified in WAN>>General Setup. If you do not specify any rate at that page, here will display Auto for instead. Vigor2830 Series User’s Guide...
Page 312: Traffic Graph
WAN1/WAN2/WAN3Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. For Sessions chart, the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past. Vigor2830 Series User’s Guide...
Page 313: Trace Route
Use the drop down list to choose the protocol that you want to ping through. Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Clear Click this link to remove the result on the window. Vigor2830 Series User’s Guide...
Page 314: Web Firewall Syslog
Always record the new event – only the newest events will be recorded by the system. Time Display the time of the event occurred. Display the information for each event. Message Vigor2830 Series User’s Guide...
Page 315 This page displays the syslog recorded on the USB storage disk. Time Display the time of the event occurred. Log Type Display the type of the record. Message Display the information for each event. Vigor2830 Series User’s Guide...
Page 316 This page is left blank. Vigor2830 Series User’s Guide...
Page 317: Application And Examples
Then, For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set Vigor2830 Series User’s Guide...
Page 318 Go to LAN-to-LAN. Click on one index number to edit a profile. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. Vigor2830 Series User’s Guide...
Page 319 Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. Vigor2830 Series User’s Guide...
Page 320 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2830 Series User’s Guide...
Page 321 PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2830 Series User’s Guide...
Page 322 Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. Vigor2830 Series User’s Guide...
Page 323 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2830 Series User’s Guide...
Page 324 Username, Password, and VJ Compression for this Dial-In connection. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection. Vigor2830 Series User’s Guide...
Page 325: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter
PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2830 Series User’s Guide...
Page 326 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor2830 Series User’s Guide...
Page 327 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.DrayTek.com download center. Install as instructed.
Page 328 VPN router. To use default gateway on remote network means that all the packets of remote host will be directed to VPN server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. Vigor2830 Series User’s Guide...
Page 329: Qos Setting Example
HTTPS or VPN to check email and access internal database. Meanwhile, children may chat on Skype in the restroom. Go to Bandwidth Management>>Quality of Service. Click Setup link of WAN(1/2/3). Make sure the QoS Control on the left corner is checked. And select BOTH in Direction. Vigor2830 Series User’s Guide...
Page 330 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the name “E-mail” for Class 1. Vigor2830 Series User’s Guide...
Page 331 POP3 and SMTP. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. Click Setup link for WAN2. Vigor2830 Series User’s Guide...
Page 332 Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. 10. Click Edit to open a new window. Vigor2830 Series User’s Guide...
Page 333 11. Click Add to open the following window. Check the ACT box, first. 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor2830 Series User’s Guide...
Page 334: Upgrade Firmware For Your Router
3. Access into Support >> Downloads. Please find out Utility menu and click it. 4. Click on the link of Router Tools to download the file. After downloading the files, please decompressed the file onto your host. Vigor2830 Series User’s Guide...
Page 335 You will find out two files with different extension names, xxxx.all (keep the old custom settings) and xxxx.rst (reset all the custom settings to default settings). Choose any one of them that you need. Vigor2830 Series User’s Guide...
Page 336 The web page also can guide you to upgrade firmware. Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 337: Request A Certificate From A Ca Server On Windows Ca Server
Go to Certificate Management and choose Local Certificate. Vigor2830 Series User’s Guide...
Page 338 Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate. Vigor2830 Series User’s Guide...
Page 339 64 encoded certificate and Download CA certificate. Now you should get a certificate (.cer file) and save it. Back to Vigor router, go to Local Certificate. Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh and Vigor2830 Series User’s Guide...
Page 340 “------BEGINE CERTIFICATE------..” You may review the detail information of the certificate by clicking View button. Vigor2830 Series User’s Guide...
Page 341: Request A Ca Certificate And Set As Trusted On Windows Ca Server
Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. Vigor2830 Series User’s Guide...
Page 342 You may review the detail information of the certificate by clicking View button. Note: Before setting certificate configuration, please go to System Maintenance >> Time and Date to reset current time of the router first. Vigor2830 Series User’s Guide...
Page 343: Creating An Account For Myvigor
The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filtering the web pages for the sake of protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor.
Page 344 2. Click the Activate link. A login page for MyVigor web site will pop up automatically. 3. Click the link of Create an account now. 4. Check to confirm that you accept the Agreement and click Accept. Vigor2830 Series User’s Guide...
Page 345 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor2830 Series User’s Guide...
Page 346 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2830 Series User’s Guide...
Page 347: Creating An Account Via Myvigor Web Site
11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
Page 348 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. Vigor2830 Series User’s Guide...
Page 349 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor2830 Series User’s Guide...
Page 350 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor2830 Series User’s Guide...
Page 351: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2830 Series User’s Guide...
Page 352 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2830 Series User’s Guide...
Page 353 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2830 Series User’s Guide...
Page 354: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2830 Series User’s Guide...
Page 355: Checking If The Isp Settings Are Ok Or Not
PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek.
Page 356: Backing To Factory Default Setting If Necessary
Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK. After few seconds, the router will return all the settings to the factory settings. Vigor2830 Series User’s Guide...
Page 357: Contacting Your Dealer
After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@DrayTek.com. Vigor2830 Series User’s Guide...

This manual is also suitable for:

Vigor2830n Vigor2830vn

Draytek Vigor2830 Series User Manual

Preface

Configuring Basic Settings

User Mode Operation

Admin Mode Operation

Application and Examples

Trouble Shooting

Quick Links

Related Manuals for Draytek Vigor2830 Series

Summary of Contents for Draytek Vigor2830 Series