Draytek Vigor2930 Series User Manual
  1. Manuals
  2. Brands
  3. Draytek Manuals
  4. Firewall
  5. Vigor2930 Series
  6. User manual

Draytek Vigor2930 Series User Manual

Dual-wan security firewall
Hide thumbs Also See for Vigor2930 Series:
Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual
Vigor2930 Series
Dual-WAN Security Firewall
User's Guide
Version: 1.0
Date: 2007/06/06
Copyright 2007 All rights reserved.
This publication contains information that is protected by copyright. No part may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright
holders. The scope of delivery and other details are subject to change without prior notice.
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Computer Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Vigor2930 Series and is the answer not in the manual?

Questions and answers

Related Manuals for Draytek Vigor2930 Series

Summary of Contents for Draytek Vigor2930 Series

  • Page 1 Vigor2930 Series Dual-WAN Security Firewall User’s Guide Version: 1.0 Date: 2007/06/06 Copyright 2007 All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.
  • Page 2 Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be Updates regularly upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
  • Page 3 Product: Vigor2930 Series Router DrayTek Corp. declares that Vigor2930 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 89/336/EEC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.

  • Page 4: Table Of Contents

    3.2.3 Static Route ........................41 3.2.4 VLAN..........................44 3.2.5 Bind IP to MAC ....................... 45 3.3 NAT ............................46 3.3.1 Port Redirection ......................47 3.3.2 DMZ Host........................49 3.3.3 Open Ports........................52 3.4 Objects Settings ........................54 Vigor2930 Series User’s Guide...
  • Page 5 3.11.4 Call Control ......................... 140 3.12 Wireless LAN ........................142 3.12.1 Basic Concepts......................142 3.12.2 General Setup......................144 3.12.3 Security ........................146 3.12.4 Access Control......................147 3.12.5 WDS..........................148 3.12.6 AP Discovery ......................151 3.12.7 Station List ........................152 Vigor2930 Series User’s Guide...
  • Page 6 5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ....208 5.3 Pinging the Router from Your Computer ................210 5.4 Checking If the ISP Settings are OK or Not .................211 Vigor2930 Series User’s Guide...
  • Page 7 5.5 Backing to Factory Default Setting If Necessary ..............213 5.6 Contacting Your Dealer ....................... 214 Vigor2930 Series User’s Guide...

  • Page 9: Preface

    Add new settings for specified item. Edit the settings for the selected item. Delete the selected item with the corresponding settings. Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed explanation. Vigor2930 Series User’s Guide...

  • Page 10: Led Indicators And Connectors

    ISDN S0 intern in Germany. The ISDN S0 (1) port on Vigor2930 series is fixed to connect phone forever and the LED on the connecter will light orange always. However ISDN S0 (2) port on this device is configurable for connecting phone or accessing Internet according to the settings that you adjust on WEB UI (please refer to VoIP>>Phone Setting for detailed information).

  • Page 11: For Vigor2930

    Then the router will restart with the factory default configuration. Restart Restart the router forcefully. WAN(1/2) Connecters for remote networked devices. LAN (1-4) Connecters for local networked devices. Connecter for a power adapter. Power Switch. ON/OFF Vigor2930 Series User’s Guide...

  • Page 12: For Vigor2930N

    Restart Restart the router forcefully. Phone (1/2) Connecters for PSTN phones. WAN (1/2) Connecters for remote networked devices. LAN (1-4) Connecters for local networked devices. Connecter for a power adapter.. Power Switch. ON/OFF Vigor2930 Series User’s Guide...

  • Page 13: For Vigor2930Vn

    Restart Restart the router forcefully. Phone (1/2) Connecters for PSTN phones. WAN (1/2) Connecters for remote networked devices. LAN (1-4) Connecters for local networked devices. Connecter for a power adapter. Power Switch. ON/OFF Vigor2930 Series User’s Guide...

  • Page 14: For Vigor2930Vs

    (phone call) is transmitting. Left LED The port is connected. WAN 1/2 (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 100Mbps. (Green) The port is disconnected with 10Mbps. Vigor2930 Series User’s Guide...
  • Page 15 Connecter for ISDN line or ISDN phone adapter in particular condition. Refer to section 2.2 for more details. WAN (1/2) Connecters for remote networked devices. LAN (1-4) Connecters for local networked devices. Connecter for a power adapter. Power Switch. ON/OFF Vigor2930 Series User’s Guide...

  • Page 16: For Vigor2930Vsn

    (phone call) is transmitting. Left LED The port is connected. WAN 1/2 (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 100Mbps. (Green) The port is disconnected with 10Mbps. Vigor2930 Series User’s Guide...
  • Page 17 Connecter for ISDN line or ISDN phone adapter in particular condition. Refer to section 2.2 for more details. WAN (1/2) Connecters for remote networked devices. LAN (1-4) Connecters for local networked devices. Connecter for a power adapter. Power Switch. ON/OFF Vigor2930 Series User’s Guide...

  • Page 18: Hardware Installation

    (For the detailed information of LED status, please refer to section 1.2.) Caution: Each of the Phone ports can be connected to an analog phone only. Do not connect the phone ports to the telephone wall jack. Such connection might damage your router. Vigor2930 Series User’s Guide...

  • Page 19: Isdn Phone Adapter Installation

    However, if the user configures ISDN S0 2 as ISDN line in VoIP>> Phone Settings, the green LED will light on to indicate ISDN2-TE mode is selected. Then, the port is specified for ISDN line only. Refer to the following figure for reference. Vigor2930 Series User’s Guide...
  • Page 20 Vigor2930 Series User’s Guide...

  • Page 21: Configuring Basic Settings

    Please type default values (both username and password are Null) on the window for the first time accessing and click OK for next screen. Now, the Main Screen will pop up. Vigor2930 Series User’s Guide...
  • Page 22 New Password and retype it on the field of Retype New Password. Then click OK to continue. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. Vigor2930 Series User’s Guide...

  • Page 23: Quick Start Wizard

    On the next page as shown below, please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface. Then click Next for next step. Vigor2930 Series User’s Guide...

  • Page 24: Pppoe

    User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Click Next for viewing summary of such connection. Vigor2930 Series User’s Guide...
  • Page 25 Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2930 Series User’s Guide...

  • Page 26: Pptp

    Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2930 Series User’s Guide...

  • Page 27: Static Ip

    After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2930 Series User’s Guide...

  • Page 28: Dhcp

    After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor2930 Series User’s Guide...

  • Page 29: Online Status

    If you select PPPoE/PPTP as the protocol, you will find out a link of Dial PPPoE/PPPoA or Drop PPPoE/PPPoA in the Online Status web page. Online status for PPPoE Online status for PPTP (for WAN2) Online status for Static IP (for WAN1) Vigor2930 Series User’s Guide...
  • Page 30 Displays the total number of received packets at the ISDN interface. RX Rate Displays the speed of received octets at the ISDN interface. Up Time Displays the total uptime of the interface. Displays the charge information of the interface. Vigor2930 Series User’s Guide...

  • Page 31: Saving Configuration

    Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor2930 Series User’s Guide...
  • Page 32 This page is left blank. Vigor2930 Series User’s Guide...

  • Page 33: Advanced Web Configuration

    Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP. Vigor2930 Series User’s Guide...

  • Page 34: General Setup

    Type the description for the WAN1/WAN2 interface. Physical Mode For WAN1, the physical connection is done through ADSL port; yet the physical connection for WAN2 is done through an Ethernet port (P1). You cannot change it. Vigor2930 Series User’s Guide...
  • Page 35 15 seconds. WAN1 Download speed exceed XX kbps– It means the connection for WAN2 will be activated when WAN1 Download speed exceed certain value that you set in this box for 15 seconds. Vigor2930 Series User’s Guide...

  • Page 36: Internet Access

    There are three access modes provided for PPPoE, Static or Dynamic IP and PPTP. Details Page This button will open different web page according to the access mode that you choose in WAN1 or WAN2. Vigor2930 Series User’s Guide...
  • Page 37 ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have Vigor2930 Series User’s Guide...
  • Page 38 After finishing all the settings here, please click OK to activate them. For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers. In most cases, a Vigor2930 Series User’s Guide...
  • Page 39 PING Interval - Enter the interval for the system to execute the PING operation. RIP Protocol Routing Information Protocol is abbreviated as RIP (RFC1058) specifying how routers exchange routing tables information. Click Enable RIP for activating this function. Vigor2930 Series User’s Guide...
  • Page 40 Specify a MAC Address and enter the MAC address in the MAC Address field. DNS Server IP Type in the primary IP address for the router if you want to use Address Static IP mode. If necessary, type in secondary IP address for Vigor2930 Series User’s Guide...
  • Page 41 In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. Click Yes to use this function and type in a Vigor2930 Series User’s Guide...

  • Page 42: Load-Balance Policy

    WAN2 interface. The user can assign traffic category and force it to go to dedicate network interface based on the following web page setup. Twenty policies of load-balance are supported by this router. Note: Load-Balance Policy is running only when both WAN1 and WAN2 are activated. Vigor2930 Series User’s Guide...
  • Page 43 Displays the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Click Index 1 to access into the following page for configuring load-balance policy. Vigor2930 Series User’s Guide...
  • Page 44 Type the destination port start for the destination IP. Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the destination ports will be passed through the WAN interface. Vigor2930 Series User’s Guide...

  • Page 45: Lan

    IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor2930 Series User’s Guide...
  • Page 46 You can group local hosts by physical ports and create up to 4 virtual LANs. To manage the communication between different groups, please set up rules in Virtual LAN (VLAN) function and the rate of each. Vigor2930 Series User’s Guide...

  • Page 47: General Setup

    Type in secondary IP address for connecting to a subnet. (Default: 192.168.2.1/ 24) Subnet Mask An address code that determines the size of the network. (Default: 255.255.255.0/ 24) DHCP Server You can configure the router to serve as a DHCP server for the 2nd subnet. Vigor2930 Series User’s Guide...
  • Page 48 DHCP server to assign IP addresses to. The default is 50 and the maximum is 253. Gateway IP Address - Enter a value of the gateway IP address for the DHCP server. The value is usually as same as the 1st IP address Vigor2930 Series User’s Guide...

  • Page 49: Static Route

    There are two common scenarios of LAN settings that stated in Chapter 4. For the configuration examples, please refer to that chapter to get more information for your necessity. Go to LAN to open setting page and choose Static Route. Vigor2930 Series User’s Guide...
  • Page 50 Before setting Static Route, user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router. Go to LAN page and click General Setup, select 1st Subnet as the RIP Protocol Control. Then click the OK button. Vigor2930 Series User’s Guide...
  • Page 51 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor2930 Series User’s Guide...

  • Page 52: Vlan

    To add or remove a VLAN, please refer to the following example. If, VLAN 0 is consisted of hosts linked to P1 and P2 and VLAN 1 is consisted of hosts linked to P3 and P4. Vigor2930 Series User’s Guide...

  • Page 53: Bind Ip To Mac

    Click this radio button to disable this function. All the settings on this page will be invalid. Strict Bind Click this radio button to block the connection of the IP/MAC which is not listed in IP Bind List. Vigor2930 Series User’s Guide...

  • Page 54: Nat

    192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Vigor2930 Series User’s Guide...

  • Page 55: Port Redirection

    The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor2930 Series User’s Guide...
  • Page 56 Specify which port can be redirected to the specified Private IP and Port of the internal host. If you choose Range as the port redirection mode, you will see two boxes on this field. Simply type Vigor2930 Series User’s Guide...

  • Page 57: Dmz Host

    DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN. Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption. DMZ Host allows a defined Vigor2930 Series User’s Guide...
  • Page 58 We suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: If you previously have set up WAN Alias in Internet Access>>PPPoE/PPPoA or Internet Access>>MPoA, you will find them in Aux. WAN IP list for your selection. Vigor2930 Series User’s Guide...
  • Page 59 DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor2930 Series User’s Guide...

  • Page 60: Open Ports

    Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor2930 Series User’s Guide...
  • Page 61 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor2930 Series User’s Guide...

  • Page 62: Objects Settings

    You can set up to 192 sets of IP Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Name Type a name for this profile. Maximum 15 characters are allowed. Vigor2930 Series User’s Guide...
  • Page 63 Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed above will be applied later while it is chosen. Below is an example of IP objects settings. Vigor2930 Series User’s Guide...

  • Page 64: Ip Group

    Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Click >> button to add the selected IP objects in this box. Vigor2930 Series User’s Guide...

  • Page 65: Service Type Object

    The filter rule will filter out any port number. (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this profile. Vigor2930 Series User’s Guide...

  • Page 66: Service Type Group

    Below is an example of service type objects settings. This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2930 Series User’s Guide...

  • Page 67: Csm Profile

    You can define policy profiles for different policy of IM (Instant Messenger)/P2P (Peer to Peer) application. CSM profile can be used in Filter Setup page. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor2930 Series User’s Guide...
  • Page 68 Simple check the box (es) and then click OK. Later, in the Firewall>>Edit Filter Set>>Edit Filter Rule page, you can use Content Management drop down list to choose the proper CSM profile as the standard for the host(s) to follow. Vigor2930 Series User’s Guide...

  • Page 69: Firewall

    The users on the LAN are provided with secured protection by the following firewall facilities: User-configurable IP filter (Call Filter/ Data Filter). Stateful Packet Inspection (SPI): tracks packets and denies unsolicited incoming data Selectable Denial of Service (DoS) /Distributed DoS (DDoS) attacks protection URL Content Filter Vigor2930 Series User’s Guide...
  • Page 70 The stateful firewall of Vigor router not just examine the header information also monitor the state of the connection. Vigor2930 Series User’s Guide...
  • Page 71 For example, an ActiveX control object is usually used for providing interactive web feature. If malicious code hides inside, it may occupy user’s system. Vigor2930 Series User’s Guide...

  • Page 72: General Setup

    So here you assign the Start Filter Set only. Also you can configure the Log Flag settings, Apply IP filter to VPN incoming packets, and Accept incoming fragmented UDP packets. Click Firewall and click General Setup to open the general setup page. Vigor2930 Series User’s Guide...

  • Page 73: Filter Setup

    Select Pass or Block for the packets that do not match with the filter rules. For troubleshooting needs you can specify the filter log and/or CSM log here by checking the box. The log will be displayed on Draytek Syslog window. Content Security Select a CSM profile for global IM/P2P application blocking.
  • Page 74 Data Filter only. For the Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Source/Destination IP Click Edit to access into the following dialog to choose the source/destination IP or IP ranges. Vigor2930 Series User’s Guide...
  • Page 75 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please Vigor2930 Series User’s Guide...
  • Page 76 For troubleshooting needs you can specify the filter log and/or CSM log here. Check the corresponding box to enable the log function. Then, the filter log and/or CSM log will be shown on Draytek Syslog window. Vigor2930 Series User’s Guide...
  • Page 77 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor2930 Series User’s Guide...

  • Page 78: Dos Defense

    Port Scan attacks the Vigor router by sending lots of packets to detection many ports in an attempt to find ignorant services would respond. Check the box to activate the Port Scan detection. Whenever detecting this malicious exploration behavior by monitoring the Vigor2930 Series User’s Guide...
  • Page 79 ICMP packets with more fragment bit set are dropped. Block Unknown Check the box to activate the Block Unknown Protocol function. Protocol Individual IP packet has a protocol field in the datagram header to indicate the protocol type running over the upper layer. However, Vigor2930 Series User’s Guide...

  • Page 80: Url Content Filter

    Or you may simply specify the full or partial URL such as “www.sex.com” or “sex.com”. Also the Vigor router will discard any request that tries to retrieve the malicious code. Click Firewall and click URL Content Filter to open the setup page. Vigor2930 Series User’s Guide...
  • Page 81 URL Access Control. You must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before. Enable Restrict Web Check the box to activate the function. Vigor2930 Series User’s Guide...
  • Page 82 URL Access Subnets Control. To enable an entry, click on the empty checkbox, named as ACT, in front of the appropriate entry. Time Schedule Specify what time should perform the URL content filtering facility. Vigor2930 Series User’s Guide...

  • Page 83: Web Content Filter

    A PC with private IP address can access to the Internet via NAT router. The router will generate the records of NAT sessions for such connection. The P2P (Peer to Peer) applications (e.g., BitTorrent) always need many sessions for procession and also they will Vigor2930 Series User’s Guide...
  • Page 84 You can type in four sets of time schedule for your request. Setup All the schedules can be set previously in Application – Schedule web page and you can use the number that you have set in that web page. Vigor2930 Series User’s Guide...

  • Page 85: Bandwidth Limit

    Define the limitation for the speed of the downstream. If you do not set the limit in this field, the system will use the default speed for the specific limitation you set for each index. Add the specific speed limitation onto the list above. Vigor2930 Series User’s Guide...

  • Page 86: Quality Of Service

    The core routers in the backbone will do the same checking before executing treatments in order to ensure service-level consistency throughout the whole QoS-enabled network. Vigor2930 Series User’s Guide...
  • Page 87 There are four queues allowed for QoS control. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. Yet, the last one is reserved for the packets which are not suitable for the user-defined class rules. Vigor2930 Series User’s Guide...
  • Page 88 The ratio typed here is reserved for limited bandwidth of UDP application. On Line Statistics Display an online statistics for quality of service for your reference. This link will be seen only if you click OK in WAN1/WAN2 General Setup web page and click Setup again Vigor2930 Series User’s Guide...
  • Page 89 Edit link of that one. After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this case, “Test” is used as the name of Class Index #1. Vigor2930 Series User’s Guide...
  • Page 90 By the way, you can set up to 20 rules for one Class. If you want to edit an existed rule, please select the radio button of that one and click Edit to open the rule edit page for modification. Vigor2930 Series User’s Guide...
  • Page 91 To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. After you click the Edit link, you will see the following page. For adding a new service type, click Add to open the following page. Vigor2930 Series User’s Guide...
  • Page 92 Range as the type. By the way, you can set up to 40 service types. If you want to edit/delete an existed service type, please select the radio button of that one and click Edit/Edit for modification. Vigor2930 Series User’s Guide...

  • Page 93: Applications

    Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface Display current WAN interface used for accessing Internet. Domain Name Display the domain name that you set on the setting page of DDNS setup. Vigor2930 Series User’s Guide...
  • Page 94 Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. Vigor2930 Series User’s Guide...

  • Page 95: Schedule

    You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule, please click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. Vigor2930 Series User’s Guide...

  • Page 96: Radius

    Remote Authentication Dial-In User Service (RADIUS) is a security authentication client/server protocol that supports authentication, authorization and accounting, which is widely used by Internet service providers. It is the most common method of authenticating and authorizing dial-up and tunneled network users. Vigor2930 Series User’s Guide...
  • Page 97 The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. Vigor2930 Series User’s Guide...

  • Page 98: Upnp

    NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor2930 Series User’s Guide...

  • Page 99: Wake On Lan

    PC on this web page of Wake on LAN of this router. In addition, such PC must have installed a network card supporting WOL function. By the way, WOL function must be set as “Enable” on the BIOS setting. Vigor2930 Series User’s Guide...
  • Page 100 MAC Address Type any one of the MAC address of the binded PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor2930 Series User’s Guide...

  • Page 101: Vpn And Remote Access

    NAT settings, such as DMZ or open port. The Vigor router will not accept the ISDN dial-in connection if the box of Enable ISDN Dial-in is not checked. This submenu only applies to PPP-related VPN connections, such as PPTP, L2TP, L2TP over IPSec. Vigor2930 Series User’s Guide...
  • Page 102 For example, if the local private network is 192.168.1.0/255.255.255.0, you could choose 192.168.1.200 as the Start IP Address. But, you have to notice that the first two IP addresses of 192.168.1.200 and 192.168.1.201 are reserved for ISDN remote dial-in user. Vigor2930 Series User’s Guide...

  • Page 103: Ipsec General Setup

    IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. Pre-Shared Key -Currently only support Pre-Shared Key authentication. Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. Vigor2930 Series User’s Guide...

  • Page 104: Ipsec Peer Identity

    Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor2930 Series User’s Guide...
  • Page 105 Click to check the specific fields of digital signature to accept the peer with matching value. The field includes Country (C), State (ST), Location (L), Organization (O), Organization Unit (OU), Common Name (CN), and Email (E). Vigor2930 Series User’s Guide...

  • Page 106: Remote Dial-In User

    Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will guide you to fill all the necessary fields. Vigor2930 Series User’s Guide...
  • Page 107 L2TP connection. Specify Remote Node Check the checkbox-You can specify the IP address of the remote dial-in user, ISDN number or peer ID (used in IKE aggressive mode). Uncheck the checkbox-This means the connection type you Vigor2930 Series User’s Guide...
  • Page 108 Once the callback budget has been exhausted, the callback mechanism will be disabled automatically. Callback Budget (Unit: minutes)- Specify the time budget for the dial-in user. The budget will be decreased automatically per callback connection. Vigor2930 Series User’s Guide...

  • Page 109: Lan To Lan

    4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. For the web page is too long, we divide the page into several sections for explanation. Vigor2930 Series User’s Guide...
  • Page 110 VPN connection. Call Direction Specify the allowed call direction of this LAN-to-LAN profile. Both:-initiator/responder Dial-Out- initiator only Dial-In- responder only. Always On or Idle Timeout Always On-Check to enable router always keep VPN connection. Vigor2930 Series User’s Guide...
  • Page 111 This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. PPP Authentication This field is applicable when you select ISDN, PPTP or L2TP with or without IPSec policy above. PAP/CHAP is the most common selection due to wild compatibility. Vigor2930 Series User’s Guide...
  • Page 112 Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session. However, the Aggressive mode is faster. The default value in Vigor router is Main mode. Vigor2930 Series User’s Guide...
  • Page 113 Vigor router to callback, the local ISDN number will be provided to the remote peer. Check here to allow the Vigor router to send the ISDN number to the remote router. This feature is useful for i model only. Vigor2930 Series User’s Guide...
  • Page 114 L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. Vigor2930 Series User’s Guide...
  • Page 115 ONLY call back to the specified Callback Number. Callback budget- By default, the callback function has limitation of callback period. Once the callback budget is exhausted, the function will be disabled automatically. Vigor2930 Series User’s Guide...
  • Page 116 Be aware that this setting is available only for one WAN interface is enabled. It is not available when both WAN interfaces are enabled. You have to disable one WAN interface (WAN 1 or WAN 2) on WAN >> General Setup for enabling such setting. Vigor2930 Series User’s Guide...

  • Page 117: Connection Management

    Tool and clicking Dial button. Dial Click this button to execute dial out function. Refresh Seconds Choose the time for refresh the dial information among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Vigor2930 Series User’s Guide...

  • Page 118: Certificate Management

    Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Generate Click this button to open Generate Certificate Request window. Vigor2930 Series User’s Guide...
  • Page 119 Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After clicking Generate, the generated information will be displayed on the window below: Vigor2930 Series User’s Guide...

  • Page 120: Trusted Ca Certificate

    For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor2930 Series User’s Guide...

  • Page 121: Certificate Backup

    Internet bandwidth. Usually there will be two types of calling scenario, as illustrated below: Calling via SIP Servers First, the Vigor V models of yours will have to register to a SIP Registrar by sending Vigor2930 Series User’s Guide...

  • Page 122: Dialplan

    This page allows you to set phone book and digit map for the VoIP function. Click the Phone Book and Digit Map links on the page to access into next pages for dialplan settings. Vigor2930 Series User’s Guide...
  • Page 123 0-9 and * . Display Name The Caller-ID that you want to be displayed on your friend’s screen. This let your friend can easily know who’s calling without memorizing lots of SIP URL Address. Vigor2930 Series User’s Guide...
  • Page 124 For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Vigor2930 Series User’s Guide...
  • Page 125 VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” will be changed to “88631111111” and sent to Vigor2930 Series User’s Guide...

  • Page 126: Sip Accounts

    SIP Address as in Account Name@ Domain name As Vigor VoIP Router is turned on, it will first register with Registrar using AuthorizationUser@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity. Vigor2930 Series User’s Guide...
  • Page 127 Vigor2930 Series User’s Guide...
  • Page 128 If you want to make VoIP call without register personal information, please choose None and check the box to achieve the goal. Some SIP server allows user to use VoIP function without registering. For such server, please check the box of Vigor2930 Series User’s Guide...
  • Page 129 Set Phone1, Phone2, ISDN1-S0 or ISDN-TE as the default ring port for this SIP account. If you choose Phone1, Phone2 or ISDN1-S0, the ISDN2-TE selection will be dimmed, vice versa. There are ten internal lines with numbers (30 – 39) Vigor2930 Series User’s Guide...
  • Page 130 SIP account. By the way, ISDN-S0 can be used by mapping with MSN numbers. Ring Pattern Choose a ring tone type for the VoIP phone call. Below shows successful SIP accounts for your reference. Vigor2930 Series User’s Guide...

  • Page 131: Phone Settings

    Symmetric RTP – Check this box to invoke the function. To make the data transmission going through on both ends of local router and remote router not misleading due to IP lost (for example, sending data from the public IP of remote router Vigor2930 Series User’s Guide...
  • Page 132 Click the number link of each port, you can access into the following page for configuring Phone settings. Below is the sample page for Phone1. Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically when you pick up the phone set. Vigor2930 Series User’s Guide...
  • Page 133 If your upstream speed is only 64Kbps, do not use G.711 codec. It is better for you to have at least 256Kbps upstream if you would like to use G.711. Single Codec – If the box is checked, only the selected Codec Vigor2930 Series User’s Guide...
  • Page 134 ID type automatically. Or you can adjust tone settings manually if you choose User Defined. TOn1, TOff1, TOn2 and TOff2 mean the cadence of the tone pattern. TOn1 and TOn2 represent sound-on; TOff1 and TOff2 represent the sound-off. Vigor2930 Series User’s Guide...
  • Page 135 There are several standards provided here for displaying the caller ID on the panel of the telephone set. Choose the one that is suitable for the phone set according to the area of the router installed. If you don’t know what standard that the Vigor2930 Series User’s Guide...
  • Page 136 Please use the drop down list to choose the one you want. If you choose ISDN2-S0, please refer to Detailed Settings for Phone1, Phone2, ISDN1-S0 for the configuration. However, if you choose ISDN-TE and click the number link for that port, you will see the following page. Vigor2930 Series User’s Guide...
  • Page 137 Index (1-15) in Schedule - Enter the index of schedule profiles to control the DND mode according to the preconfigured schedules. Refer to section 3.5.2 Schedule for detailed configuration. Vigor2930 Series User’s Guide...
  • Page 138 Enable VoIP to ISDN (Off-Net) Calls –Check this box to make all the incoming calls coming from Internet to be forwarded to receivers by ISDN line. Loop Through to Phone Port – Choose this radio button to Vigor2930 Series User’s Guide...
  • Page 139 Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ringing tone, busy tone, congestion tone by yourself for VoIP phone. Vigor2930 Series User’s Guide...
  • Page 140 DTMF tone. SIP INFO: Choose this one then the Vigor will capture the DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message. Vigor2930 Series User’s Guide...

  • Page 141: Status

    ISDN port. Be aware that ISDN1/2 port is available for the users living in Europe and using Vigor 2930VSn only. For other V models, only the status for VoIP1 and VoIP2 will be shown in this page. Vigor2930 Series User’s Guide...

  • Page 142: Isdn

    Display logs of VoIP calls. ISDN means integrated services digital network that is an international communications standard for sending voice, video, and data over digital telephone lines or normal telephone wires. Below shows the menu items for ISDN. Vigor2930 Series User’s Guide...

  • Page 143: General Settings

    1-10 fields – Fill in the portion that is different with the own number. For example, the own number is 1234567 and MSN numbers are 1234550, 1234517 and 1234582 respectively. You can Vigor2930 Series User’s Guide...
  • Page 144 You have set 70, 71, 72 as external MSN numbers for the router and check ISDN-S0 32, 33, None internal MSN numbers for ISDN1-S0 port. Open ISDN>> General Setup and set as the following: Vigor2930 Series User’s Guide...

  • Page 145: Dial To Single/Dual Isps

    B channel in low traffic situations. Once the single B channel bandwidth is fully used, the other B channel will be activated automatically through the dialup. For more detailed BOD parameter settings, please refer to the section of Call Control. Vigor2930 Series User’s Guide...
  • Page 146 3.10.5) stands for bandwidth-on-demand. The router will use only one B channel in low traffic situations. Once the single B channel bandwidth is fully used, the other B channel will be activated Vigor2930 Series User’s Guide...
  • Page 147 Yes and enter the IP address in the field of Fixed IP Address. After entering the necessary settings and clicking OK, you will see Goto ISDN Diagnostic link appears on the bottom of the webpage. To have an ISDN connection, please click this link. Vigor2930 Series User’s Guide...

  • Page 148: Call Control

    The default setting is no dial retry. If set to 5, for each triggered packet, the router will dial 5 times until it is connected to the ISP or remote access router. Dial Delay Interval - It specifies the interval between dialup Vigor2930 Series User’s Guide...
  • Page 149 Low Water Mark and these two channels are being used over the High Water Time, the additional channel will be dropped. As a result, the total link speed will be 64kbps (one B channel). Vigor2930 Series User’s Guide...

  • Page 150: Wireless Lan

    Complete Security Standard Selection: To ensure the security and privacy of your wireless communication, we provide several prevailing standards on market. Vigor2930 Series User’s Guide...
  • Page 151 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor2930 Series User’s Guide...

  • Page 152: General Setup

    Channel Width you set. If you choose Auto 20/40 MHz, you will have the following items to choose. You may switch channel if the selected channel is under serious interference. Vigor2930 Series User’s Guide...
  • Page 153 56 bit sync filed instead of long preamble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Check it to use Long Preamble if needed to communicate with this kind of devices. Vigor2930 Series User’s Guide...

  • Page 154: Security

    Mixed or WPA2 only in the field below. Since the key will be auto-negotiated during authentication, the field of key setting below will be not available for input. Note: You should also set RADIUS Server simultaneously if WEP/802.1x Only or WPA/802.1x Only mode is selected. Vigor2930 Series User’s Guide...

  • Page 155: Access Control

    MAC address that has been configured can access the wireless LAN interface. By clicking the Access Control, a new web page will appear, as depicted below, so that you could edit the clients' MAC addresses to control their access rights. Vigor2930 Series User’s Guide...

  • Page 156: Wds

    Provide bridge traffic between two LANs through the air. Extend the coverage range of a WLAN. To meet the above requirement, two WDS modes are implemented in Vigor router. One is Bridge, the other is Repeater. Below shows the function of WDS-bridge interface: Vigor2930 Series User’s Guide...
  • Page 157 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Vigor2930 Series User’s Guide...
  • Page 158 Wireless>>General Setup. If not, you will get the following dialog to ask you changing the channel width for this router. Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill Vigor2930 Series User’s Guide...

  • Page 159: Ap Discovery

    This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP which is in the same channel of this router can be found. Please click Scan to discover all the connected APs. Vigor2930 Series User’s Guide...

  • Page 160: Station List

    There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Refresh Click this button to refresh the status of station list. Click this button to add current selected MAC address into Access Control. Vigor2930 Series User’s Guide...

  • Page 161: Station Rate Control

    The VLAN >> Wired VALN allows you to configure VLAN settings through wired connection to achieve the above intention. Simply check P1 and P2 boxes on the line of VLAN0; and check P3 and P4 boxes on the line of VLAN1. Vigor2930 Series User’s Guide...

  • Page 162: Wireless Vlan

    PCs under the same groups can use same Login ID and password to access into Internet. For example, see the following graphic. Both A and B use the same login ID (City) and password (1234). Therefore, they are grouped in the same W_VLAN. Vigor2930 Series User’s Guide...
  • Page 163 7890 in the boxes of W_VLAN1. Users can configure fifteen groups of wireless VLAN in this page. Enable Check this box to invoke wireless VLAN function. Login ID Type Login ID for different groups of W_VLAN with 1 to 11 characters. Vigor2930 Series User’s Guide...
  • Page 164 After finishing the configuration of wireless VLAN, the wireless clients connecting to this router must do the following steps to access into Internet. 1. Open a browser and type http://www.draytek.vlan/login.htm or http://(vigor router’s IP address)/login.htm on the address line. 2. The following screen will appear.
  • Page 165 4. When the accessing is successful, the following screen will appear. Note: The floating window with connection time will be shown on the screen till you logout. 5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want. Vigor2930 Series User’s Guide...

  • Page 166: Vlan Cross Setup

    The VLAN >> VALN Cross Setup allows you to set a communication bridge between computers in Wireless VLAN and wired VLAN. To achieve the intention of the above illustration, simply check the box under VLAN0 on the line of W_VLAN0. Vigor2930 Series User’s Guide...

  • Page 167: Wireless Rate Control

    Rate Control. The following page will appear. Click Enable to invoke VLAN function. For the rate control of wireless connection, please open VLAN menu and choose Wireless Rate Control. The following page will be shown for you to adjust. Vigor2930 Series User’s Guide...
  • Page 168 100,000kbps. Adjust the values according to your necessity. Download Rate It decides the rate of data transmission for input. The default setting is 1000. The range must be between 100 kbps to 100,000kbps. Adjust the values according to your necessity. Vigor2930 Series User’s Guide...

  • Page 169: System Maintenance

    Display the IP address of the LAN interface. Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHCP server of the LAN interface. MAC Address Display the MAC address of the WAN Interface. Vigor2930 Series User’s Guide...

  • Page 170: Administrator Password

    Follow the steps below to backup your configuration. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Click Backup button to get into the following dialog. Click Save button to open Vigor2930 Series User’s Guide...
  • Page 171 The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Vigor2930 Series User’s Guide...

  • Page 172: Syslog/Mail Alert

    Assign a port for the Syslog protocol. SMTP Server The IP address of the SMTP server. Mail To Assign a mail address for sending mails out. Return-Path Assign a path for receiving the mail from outside. Vigor2930 Series User’s Guide...
  • Page 173 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor2930 Series User’s Guide...

  • Page 174: Time And Date

    Type the IP address of the time server. Time Zone Select the time zone where the router is located. Automatically Update Interval Select a time interval for updating from the NTP server. Click OK to save these settings. Vigor2930 Series User’s Guide...

  • Page 175: Management

    Check it to enable this function. Get Community Set the name for getting community by typing a proper character. The default setting is public. Set Community Set community by typing a proper name. The default setting is private. Vigor2930 Series User’s Guide...

  • Page 176: Reboot System

    Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpect errors of the router in the future. Vigor2930 Series User’s Guide...

  • Page 177: Firmware Upgrade

    Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.

  • Page 178: Diagnostics

    (e.g., ISDN, PPPoE, PPPoA, etc) is triggered by a package sending from the source IP address. Decoded Format It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Vigor2930 Series User’s Guide...

  • Page 179: Routing Table

    Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Refresh Click it to reload the page. Clear Click it to clear the whole table. Vigor2930 Series User’s Guide...

  • Page 180: Dhcp Table

    It displays the host ID name of the specified PC. Refresh Click it to reload the page. Click Diagnostics and click NAT Sessions Table to open the setup page. Private IP:Port It indicates the source IP address and port of local PC. Vigor2930 Series User’s Guide...

  • Page 181: Wireless Vlan Online Station Table (For N Models Only)

    IP address, MAC address and Login ID information for all the Wireless VLAN stations. IP Address Display the IP address of the wireless station. MAC Address Display the MAC address of the wireless station. Login ID Display the login ID that the wireless station belongs to. Vigor2930 Series User’s Guide...

  • Page 182: Data Flow Monitor

    Use the drop down list to choose the order of data arranging. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Vigor2930 Series User’s Guide...

  • Page 183: Traffic Graph

    The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past. Vigor2930 Series User’s Guide...

  • Page 184: Ping Diagnosis

    Type in the IP address of the Host/IP that you want to ping. Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to remove the result on the window. Vigor2930 Series User’s Guide...

  • Page 185: Trace Route

    Unspecified to be determined by the router automatically. Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Clear Click this link to remove the result on the window. Vigor2930 Series User’s Guide...
  • Page 186 This page is left blank. Vigor2930 Series User’s Guide...

  • Page 187: Application And Examples

    For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both Vigor2930 Series User’s Guide...
  • Page 188 If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Vigor2930 Series User’s Guide...
  • Page 189 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2930 Series User’s Guide...
  • Page 190 Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both Vigor2930 Series User’s Guide...
  • Page 191 If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Vigor2930 Series User’s Guide...
  • Page 192 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2930 Series User’s Guide...
  • Page 193 At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection. Vigor2930 Series User’s Guide...

  • Page 194: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter

    PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IPSec General Setup, such as the pre-shared key that both parties have known. Vigor2930 Series User’s Guide...
  • Page 195 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor2930 Series User’s Guide...
  • Page 196 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.draytek.com download center. Install as instructed.
  • Page 197 VPN router. To use default gateway on remote network means that all the packets of remote host will be directed to VPN server then forwarded to Internet. This will make the remote host seem to be working in the enterprise network. Vigor2930 Series User’s Guide...

  • Page 198: Qos Setting Example

    Meanwhile, children may chat on Skype in the restroom. Go to Bandwidth Management>>Quality of Service. Click Setup link of WAN 1. Make sure the QoS Control on the left corner is checked. And select BOTH in Direction. Vigor2930 Series User’s Guide...
  • Page 199 For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. Vigor2930 Series User’s Guide...
  • Page 200 Chapter 3 VPN for detail instruction), he may set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserve bandwidth for 1 VPN tunnel. Click Edit to open a new window. Vigor2930 Series User’s Guide...

  • Page 201: Lan - Created By Using Nat

    DHCP server is enabled so it assigns every local NATed host an IP address of 192.168.1.x starting from 192.168.1.10. You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. Vigor2930 Series User’s Guide...
  • Page 202 To use another DHCP server in the network rather than the built-in one of Vigor Router, you have to change the settings as show below. You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. Vigor2930 Series User’s Guide...

  • Page 203: Calling Scenario For Voip Function

    Display Name: David Account Name: 4321 Authentication ID: unchecked Password: **** Expiry Time: (use default value) David calls John He picks up the phone and dials 2222# (DialPlan CODEC/RTP/DTMF --- Phone Number for John) (Use default value) Vigor2930 Series User’s Guide...
  • Page 204 Expiry Time: (use default value) CODEC/RTP/DTMF--- David calls John (Use default value) He picks up the phone and dials 2222# (DialPlan Phone Number for John) Or, He picks up the phone and dials 1234# (John’s Account Name) Vigor2930 Series User’s Guide...

  • Page 205: Peer-To-Peer Calling

    Display Name: Paulin Account Name: 4321 Authentication ID: unchecked Password: (blank) Expiry Time: (use default value) Paulin calls Arnor CODEC/RTP/DTMF--- He picks up the phone and dials 2222# (DialPlan (Use default value) Phone Number for John) Vigor2930 Series User’s Guide...

  • Page 206: Upgrade Firmware For Your Router

    4. The file RTSxxx.exe will be asked to copy onto your computer. Remember the place of storing the execution file. 5. Go to www.draytek.com to find out the newly update firmware for your router. 6. Access into Support Center >> Downloads. Find out the model name of the router and click the firmware link.
  • Page 207 You will find out two files with different extension names, xxxx.all (keep the old custom settings) and xxxx.rst (reset all the custom settings to default settings). Choose any one of them that you need. Vigor2930 Series User’s Guide...

  • Page 208: Request A Certificate From A Ca Server On Windows Ca Server

    14. Click Send. 15. Now the firmware update is finished. Vigor2930 Series User’s Guide...
  • Page 209 You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Vigor2930 Series User’s Guide...
  • Page 210 Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Vigor2930 Series User’s Guide...
  • Page 211 (.cer file) into Vigor router. When finished, click refresh and you will find the below window showing “------BEGINE CERTIFICATE------..” You may review the detail information of the certificate by clicking View button. Vigor2930 Series User’s Guide...

  • Page 212: Request A Ca Certificate And Set As Trusted On Windows Ca Server

    Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. Vigor2930 Series User’s Guide...
  • Page 213 You may review the detail information of the certificate by clicking View button. Note: Before setting certificate configuration, please go to System Maintenance >> Time and Date to reset current time of the router first. Vigor2930 Series User’s Guide...
  • Page 214 This page is left blank. Vigor2930 Series User’s Guide...

  • Page 215: Trouble Shooting

    Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “2.1 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor2930 Series User’s Guide...
  • Page 216 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor2930 Series User’s Guide...
  • Page 217 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used MacOs on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2930 Series User’s Guide...

  • Page 218: Pinging The Router From Your Computer

    Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. It the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor2930 Series User’s Guide...

  • Page 219: Checking If The Isp Settings Are Ok Or Not

    Click Details Page of WAN1/WAN2 to review the settings that you configured previously. Check if the Enable option is selected. Check if Username and Password are entered with correct values that you got from your ISP. Vigor2930 Series User’s Guide...
  • Page 220 Check if the Enable option is selected. Check if IP address, Subnet Mask and Gateway are entered with correct values that you got from your ISP. Vigor2930 Series User’s Guide...
  • Page 221 Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK. After few seconds, the router will return all the settings to the factory settings. Vigor2930 Series User’s Guide...
  • Page 222 After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor2930 Series User’s Guide...

This manual is also suitable for:

Vigor2930nVigor2930vnVigor2930vsVigor2930vsn

Table of Contents