Home

Untitled - DrayTek.Sklep.Pl

1. Can t work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly This is because these applications will block the accessing ability of some network ports Vigor2760 Series User s Guide 157 Dr ay Te k Security Considerations Activating the UPnP function on your network may incur some security threats You should consider carefully these risks before activating the UPnP function gt Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches gt Non privileged users can control some router functions including removing and adding port mappings The UPnP function dynamically adds port mappings on behalf of some UPnP aware applications When the applications terminate abnormally these mappings may not be removed 4 7 4 IGMP IGMP is the abbreviation of Internet Group Management Protocol It is a communication protocol which is mainly used for managing the membership of Internet Protocol multicast groups Applications IGMP Enable IGMP Snooping C Enable IGMP Proxy C External Proxy Interface Up Stream DSL PYC1 w Internal Proxy Interface Down Stream Available Items selected Items LAN LAN na ta GsApply B Refresh Available parameters are listed below Item Description Enable IGMP Snooping Check this b
2. Your reliable networking solutions partner User s Guide V1 0 Vigor2 760 Series High Speed VDSL2 Router User s Guide Version 1 0 Firmware Version V1 0 0 RC14 For future update contact DrayTek Date 14 12 2012 Dr ay Te k ii Vigor2760 Series User s Guide Copyright Information Copyright Declarations Trademarks Copyright 2012 All rights reserved This publication contains information that is protected by copyright No part may be reproduced transmitted transcribed stored in a retrieval system or translated into any language without written permission from the copyright holders The following trademarks are used in this document Microsoft is a registered trademark of Microsoft Corp Windows Windows 95 98 Me NT 2000 XP Vista and Explorer are trademarks of Microsoft Corp Apple and Mac OS are registered trademarks of Apple Inc Other products may be trademarks or registered trademarks of their respective manufacturers Safety Instructions and Approval Safety Instructions Warranty Be a Registered Owner Firmware amp Tools Updates Vigor2760 Series User s Guide Read the installation guide thoroughly before you set up the router The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel Do not try to open or repair the router yourself Do not place the router in a damp or humid place e g a b
3. cccccccseseccecceeeeceeeeeeseeeeceeeeeeceeeeeaaeeeeeeeaeeeeeseeaeeeeesseneeeeeeeas 182 4 10 1 Local Cerificate ctecasutatawaceadiaiassacanaanidansuniatearacariiantaanddan see A ERREEN EEIE ENE EELE ER 182 4 10 1 1 G nerate Local Cerlilfical srereserrsriiei inre ain a EEEE A LENSE EEni 183 4 10 1 2 Upload Local CertifiCate cccccccccccsccssseeeeeecceeessseeeeseeccesassueeeeecesssssuaaseseecessaaas 186 4 10 2 Remote Certificate viaiwitcrrestiesaaatsturnyansacannaduilarteatstdnancnddanhmtiisnindnllnctantatduansanbedtactataneauns 188 4 10 3 Trusted CA Certificate svacsidessinnnt scan docdandaaistessnennisesonceinatensatdeprandsnteceecdautwonedvuendndianses 190 4 10 4 Certificate Revocation LiSt 0 anaenanonnennnnnnnenonnennenonrernrrennrrorrerenrorrnrernrronrnrnrrerenrerrnne 192 4 11 System Maintenance tnencecctsssachoccsscnse dee ecses catavedosecenatssaneracedacadaebesasataensaussesedeneedenatesedasemess 193 AT TROO gt ena nn ee ean ere ee 193 4 11 2 Administrator Setting sedectaspinnietcenccaseadweieneclasylnsciovesposteetsevsesloesendesansaenetaneddcdusscannetiodsdieesner 195 4 11 3Configuration Backup 00010nnno0000110n1eeooonnnnnnnnroornnnnnrrerornnnrrerornnnnnnrerrrnnnnnnrerrrrnnnnneeene 196 4 11 4 Syslog and Mail Alert cccccccccccceccceesseeeeeeeeeeeeeseeceeeeeeseeeesseeeeeessseaeaeeeeeeeeessaaeaeeeees 197 4 1 134 1 GYSIOG ACCESS OLUD ariris anaE EEEE REELE R ATENEA 197 4 1142 M ll 2 o1 Sa ee PO Ye e
4. Objects Setting gt Keyword Dashboard Guick Start t zard iene Keyword Group Biba AAA a A a Name Group Available terns Selected tems Hmp A Chat dib g 9 gif E Jpeg jpg w jpg2 jp ct pox Hic wi Bappy clear E cancel Available parameters are listed below Item Description Name Type a name for this group profile Maximum 15 characters are allowed Group Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display the available keyword profiles Selected Items Display the keyword profiles selected for such group Note New added keyword object profiles will be displayed on the bottom on Available Items Vigor2760 Series User s Guide 115 Dr ay Te k Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears See Keyword Group BiG ea ee etme De Name Chatting Group E fwir 192 168 1 1 says FA Saved succesfully jp 4 Click OK A new group profile has been created E Dashboard Quick Start if Peel Keyword Group Bilinear Ol eae Pia ee mere Gaade Gea delete Reset Refresh Name Group Chatting Chat reg Objects Setting gt Keyword 4 4 3 3 Default Keyword Object Group There are several keywor
5. Item WMM Capable APSD Capable Parameters of Access Point Parameters of Station Apply Reset Refresh Description To apply WMM parameters for wireless data transmission please check this box The default setting is not enabled Display the value for each parameter Click it to save the settings Click it to retrieve the default settings of this page Click it to clear current settings and return to the settings saved previously To edit the parameter of Access Point or Station please do the following 1 Move your mouse cursor on the parameter of Access Point or Station you want to edit and click on it Vigor2760 Series User s Guide 87 Dray Tek Parameters of Access Point Parameters of Station Type Ajfsn Cy iin Cv hax Txop ACM AC BE 3 4 6 0 Disable AC_ BE T 4 10 0 Disable A yl 1 3 4 G4 Disable AC YO 2 3 47 Disable Type Ajfsn Cy Min Cihla Txop ACM AC BE 3 4 10 0 Disable AC_ BE T 4 10 0 Disable A yl 2 3 4 G4 Disable AC YO 2 2 3 Ay Disable 2 The following page will appear immediately Parameters of Access Point Type Ajfsn CV Min CMa Top ACM AckPolicy Bappy clear Ed cancel Available parameters are listed below Item Type Aifsn CWMin CWMax Txop Dray Tek Description Display the name type of the parameter Such name is defined by the router in default It controls how long the client waits for each data transmission Please specify the valu
6. Network gt Quality of Service Quality of Service Interface LAM LAM 2 it Outbound Gos Enable Outbound Bandwidthi kbps Outbound Borrow Bandwidth C Outbound Gos Class Mame Bandwidth Fatini High Medium Low Reserved Bappy clea Escancel Available parameters are listed below Item Description Interface Choose an interface for applying the QoS function Outbound QoS Check the box to make the outgoing traffic following the limitation specified in this page Outbound Type the transmission rate to limit the outgoing traffic Bandwidth Outbound Borrow Check this box to enable the bandwidth borrowed by other Bandwidth clients When a client in LAN needs more bandwidth for data transmission the reserved bandwidth can be used temporarily by the client in request if there is no other client occupying the bandwidth Outbound QoS Class Specify the value for Low Normal Medium and High High class means it owns the highest priority Usually it will occupy the most of the bandwidth ratio Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the settings Vigor2760 Series User s Guide 67 Dray Te k Quality of Service Add Edt Delete Refresh Interface Outbound G05 Outbound Borrow Bandwidth C LAN LAN Disable Disable DSL Pvc Disable Disable ILAN LAN 2 Enabl
7. Reguired This field is applicable when you select PPTP as server type Required Optional Required MPPE Encryption 1 28 bit Optional The local end accepts any MPPE encryption settings from the remote end Required If such option is selected a new option of MPPE Encryption box will appear If you check this box the local end will only accept the data sent with the encryption of 128 bit from the remote end If not the local end will only accept the data send without encryption This option 128 bit indicates that the router will use the MPPE encryption scheme with maximum bits 128 bit to encrypt the data This field is applicable when you select PPTP or L2TP above VJ Compression is used for TCP IP protocol header compression Normally set to Yes to improve bandwidth utilization This field is applicable when you select L2TP above Currently the default setting 1s ESP This group of fields is applicable for both L2TP and L2TP over IPsec boxes are enabled 177 Dray Tek Dray Tek Advanced Pre shared Key Pre shared Key Digital Certificate If you choose Pre shared Key you have to configure Pre shared Key Type 1 63 characters as pre shared key Confirm Pre shared Key Type the pre shared key again for confirmation If you choose Digital Certificate you have to configure the following settings for both local end and remote end Local Certificate Choose a certifica
8. Choose Local or Custom as the DNS server for such DHCP server profile Local The system will use the IP address specify in Network gt gt DNS as the DNS server for the clients within the IP range If not simply choose Custom and define IP address as the DNS server Custom You can specify another DNS server IP address es here if your ISP often provides you more than one DNS Server If your ISP does not provide it the router will automatically apply default primary DNS Server IP address Custom v IP Address r et ee 4 This function is used to bind the IP and MAC address in LAN to have a strengthening control in network When this function is enabled all the assigned IP and MAC address binding together cannot be changed If you modified the binding IP or MAC address it might cause you not access into the Internet When the client with the MAC address specified in this page has the request of IP address from the DHCP server the bound IP of the MAC address will be assigned to that client MAC Address Type the MAC address that is used to bind with the assigned IP address IP Address Type the IP address that will be used for the specified MAC address Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 59 Dray Tek 3 After finished the settings above click Apply to save the settings DHCP Service Giada edt delete Refresh Enable Mame
9. Local Certificate Type PKCS12 wr Certificate File wees S500 p12 Ed Apply fi Clear EJ Cancel Available parameters are listed below Item Description Type There are three types offered to fit your request PKCS12 w Local Certificate Certificate PKCS12 Local Certificate If you want to use the certificate stored on your PC You can choose it as the Type Certificate You might want to use the certificate not generated by Vigor router coming from other places Simply choose it as the Type Usually such certificate needs private key for authentication PKCS12 Some certificates are made based on PKCS12 If you want to upload onto Vigor router You can choose it as the Type Certificate File Locate and choose the certificate from your host Private Key This item will be available when Certificate is chosen as the Type Locate the private key files from your host according to the certificate file selected Passphrase This item will be available when Certificate or PKCS12 is 186 Vigor2760 Series User s Guide chosen as the Type Such string will be used for confirmation while signing remote CA It is similar to a password but generally it is longer for security Confirm Passphrase This item will be available when Certificate or PKCS12 is chosen as the Type Type the string again for confirmation Apply Click it to save the settings Clear Click it to remove the modification of th
10. Pre shared Key Digital Certificate If you choose Pre shared Key you have to configure Pre shared Key Type 1 63 characters as pre shared key Confirm Pre shared Key Type the pre shared key again for confirmation If you choose Digital Certificate you have to configure the following settings for both local end and remote end Local Certificate Choose a certificate profile used for Vigor router The certificate profile is defined in Certificate Management gt gt Local Certificate Peer Certificate Choose a certificate profile used for remote end Such certificate profile is defined in Certificate Management gt gt Remote Certificate This field is applicable when you select IPsec as server type or L2TP with L2TP over IPsec enabled Click the small triangle to unfold the available setting items Peer ID Type This option is available when Digital Certificate is selected as Authentication Method above Choose the ID type for the remote end If you choose Accept any peer ID it is not necessary for you to specify any ID further All the peer IDs are acceptable 172 Vigor2760 Series User s Guide Accept any peer ID We Accept any peer ID Accept custom peer DOM Peer ID DN If you choose Accept custom peer DN you have to type the name you got from the peer end in the field of Peer ID DN Only the specified one is acceptable The data shall be typed as e g C TW ST Hsinchu L Hokou O Draytek OU
11. The SSL TLS is activated Disable The SSL TLS is not activated To add a new mail alert profile please do the following 1 Click the Add button system Maintenance gt Syslog Syslog Access Setup ail Jada XE a Enable Name Dray Tek 198 Vigor2760 Series User s Guide 2 The following setting page will appear Enable Name Mail Title Mail From SMTP Server Port Authentication Username Password Confirm Password E mail ta b Advanced lappy clear Mail Alert J J J J Name E mail Heceler Empty Edcancel Available parameters are listed below Item Enable Name Mail Title Mail From SMTP Server Port Authentication E mail to Advanced Vigor2760 Series User s Guide Description Check the box to enable such profile Type a name for the mail alert profile Type a heading of the mail Type a mail address for reiving the mail from outside The IP address of the SMTP server Type a port number for the mail alert Check this box to activate this function while using e mail application User Name Type the user name for authentication Password Type the password for authentication Confirm Password Type the password again for confirmation Add the mail address for sending mails out You can type several mail addresses in this field All of the them will receive the mail alert at the same time Name
12. Display the name of the rule profile Display filter set comments description Display the profile s that the filter rule will be valid at certain time interval Display the action to be taken when packets match the rule Display the activation status of NAT for such profile 93 Dray Tek Enable NAT is activated Disable NAT is not activated To add a filter rule profile please do the following 1 Click Add Firewall gt Filter Setup Filter Rule Default Rule F Add x Enable Mame Des 2 The following page appears Description Source Interface a Destination Interface Filter Part Schedule Source Address Destination Address Service Action Inspect Log MAT ser Management Bandwidth Limit BYW Limit B Session Limit Application Quality of Service 205 High v Part k O Web Content Filter CF Mone URL Content Filter UF Mone Application Filter APPF Mone EApply OClear Cancel Available parameters are listed below Item Description A Filter Part Enable Check the box to enable the profile Name Type the name of the rule profile Description Enter filter set comments description Maximum length is 14 character long Source Interface Set the direction of packet flow Use the drop down list to Destination Interface choose the source interface and the destination interface Dray Te k 94 Vigor2760 Series User s Guide Schedule Source
13. Host m mM Refresh Available parameters are listed below Dray Tek Item System Time Time Zone Daylight Saving Mode Description Display the current system time Select the time zone where the router is located Check the box to enable the daylight saving Such feature is available for certain area Choose the mode for adjusting the time and the date 200 Vigor2760 Series User s Guide ayvnchronize with NTP Server ul User Define Time Synchronize with NTP Server Synchronize with NTP Server NTP Server Type the URL or the IP address of the NTP server Update Interval hours Type the time interval for updating from the NTP server User Define Time Date Use the drop down calendar to choose the date you want Synchronize with Host The date and time of the router and the operation system will be synchronized Time Type the starting time with the format of hh mm ss Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to clear current settings and return to the settings saved previously 4 11 6 Management This page allows you to set the port number for different server The system administrators can login from the Internet to manage the router System Maintenance gt Management Dashboard Quick Start Access Control SSH Server Port J Telnet Server Port 7 HTTP Server Port PJ PJ oo HT TPs server
14. This field lists the interface chosen for applying such Dos Defence profile DoS Policy Name Display the name of different DoS policy Enable Check the box to activate the defence function Log Check the box to send the DoS defence data to Syslog Threshold Set a value for each DoS policy Block time Set a timeout value for each DoS policy SYN Flood Check the box to activate the SYN flood defense function Once detecting the Threshold of the TCP SYN packets from Vigor2760 Series User s Guide 99 Dr ay Te k the Internet has exceeded the defined value the Vigor router will start to randomly discard the subsequent TCP SYN packets for a period defined in Timeout The goal for this is prevent the TCP SYN packets attempt to exhaust the limited resource of Vigor router By default the threshold and block time values are set to 2000 packets per second and 10 seconds respectively UDP Flood Check the box to activate the UDP flood defense function Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value the Vigor router will start to randomly discard the subsequent UDP packets for a period defined in Timeout The default setting for threshold and block time values are 2000 packets per second and 10 seconds respectively ICMP Flood Check the box to activate the ICMP flood defense function Similar to the UDP flood defense function once detecting the Threshold of IC
15. Bandwidth Limit BW Lint T Applications z Session Limit USB Applications Quality of Service 205 VPN and Remote Acce _ Web Content Filter WCF Certificate MA URL Content Filter UCF None block porn website _ System Maintenance Application Filter APPF Copyright amp 2012 Dray Ea Apply fClear EJ Cancel All Rights Reser ill 12 Click Apply to finish the page configuration Now the website with porn information classified by Commtouch can be blocked easily For example if you try to access into www pornhub com or www xvideos com you will get the following message The requested Web page from 192 168 1 22 to www pormhub com that is categorized with Pron amp Sexually has been blocked by Vigor Web Content Filter Please contact your system administrator tor further information And The requested Web page from 192 168 1 22 to Wii xvideos com that is categorized with Pron amp Sexually has been blocked by Vigor Web Content Filter Please contact your system administrator for further information However general website without porn information can be accessed normally Developers Design Develop Distribute Q Android Training API Guides Reference Tools Developer Tools Get the Android SDK Download a The Android SOK provides you the API libraries and org the sr developer tools necessary to build test and debug apps for Android Exploring the S
16. Mame GRese Refresh Group Empty Each item will be explained as follows Item Add Edit Delete Reset Refresh Name Group Dray Tek Description Create a new service type group profile Modify the selected service type group profile You have to check the service type group you want and then click this button to open the edit window for modification Remove the selected service type group You have to check the service type group you want and then click this button Click it to retrieve the default settings of this page Click it to fresh the web page Display the name of the profile Display the service type object profiles grouped under such group 110 Vigor2760 Series User s Guide To create a new service type object group profile please do the following 1 Click the Add button Objects Setting Service Type SCRE CRSl tina Service Esadd Edit E Delete Rec Gr 2 The following setting page will appear Objects Setting gt Service Type Dashboa Service Type Object Service Type Group Mame Group Ej Apply Clear Available Items Selected Items SRY_0BJ HITTA SRY OBJ FOF SRY OBJ FTP SRY OBJ SMTF SRY OBJ IMAP SRY OBJ TEST D D 8 Ed Cancel Available parameters are listed below Item Name Group Apply Clear Cancel Vigor2760 Series User s Guide Description Type a name for this group profile Maximum 15 char
17. Network gt DHCP a DHCP Service Ga Add T E Refresh Enable Mame Interface Cl Enable LAN DHCP LAN LAN Available parameters are listed below Item Description Add Create new DHCP profiles Edit Edit the selected DHCP profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected DHCP profile Refresh Click it to refresh the web page Enable Display the activation status for such interface Enable The DHCP profile is activated Disable The DHCP profile is not activated Name Display the profile name for DHCP Interface Display the interface of such DHCP profile Vigor2760 Series User s Guide 57 Dr ay Te k To add a NAT profile please do the following 1 Click Add Network gt DHCP DHCP Service Ee Add Refresh Enable Name 2 The following page appears Network Dashboard Quick Start Wizard DHCP Service Enable Mame For test only Interface LAM LAM 2 Type DHCP_Server IF Range Start IF Address End IF Address 192 168 1 65 192 168 1 95 Gateway 197 168 1 100 Lease Timefmini a640i DNS Server custom IP Address 172 16 23 90 IF DHCP Binding MAC Address IF Address 0050 7AF 00 12 39 192 168 1 66 d Ga Apply clear Egcancel Available parameters are listed below Item Description Enable Check the box to enable such profile Name Type a name for such profile Interface Use the drop down
18. Off The router is powered off The DSL port is connected a Blinking i The router is ready DSL Green Slowly Blinking The connection is training Quickly On Green The port is connected Blinking The data is transmitting LAN 1 2 3 4 Green A USB device is connected and active USB1 2 Dray Te k 2 Vigor2760 Series User s Guide lt lt S 7 e VOSLADSL Uaz LLLI 4 PWR I O Factory Reset VDSL ADSL USB 1 2 LAN 1 4 Vigor2760 Series User s Guide Connector for a power adapter Power switch Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration Connector for accessing the Internet Connector for USB storage device Pen Driver Mobile HD or printer or 3G backup Connectors for local network devices 3 Dray Tek 1 1 2 For Vigor2760n Eryn wa w LCR Vigor2760n Blinking The router is powered on and running normally Activity Off The router is powered off On Green The wireless access point is ready Blinking ve os Wireless LAN The data is transmitting via wireless connection On Oft WPS Blinking Blinks with one second cycle for two minutes The WPS Orange function is active Off
19. Type Fange Start IP Address End IP Address MAC Binding MAC Address 00 50 7F 11 06 00 Invert Selection h EJ Apply clar E Cancel Available parameters are listed below Item Description Name Type a name for this profile Maximum 20 characters are allowed Description Give a brief description for such profile Type Determine the address type for the IP address Range iw Subnet WAC Range The object contains several IPs within a range If you choose this type you have to specify Start IP Address and End IP Address Subnet The object contains one subnet for IP address If you choose this type you have to specify Start IP Address and the Subnet Mask MAC The object contains MAC address If you choose this type you have to specify a MAC Address Start IP Address Type the start IP address for Range and Subnet type N Dray Tek Vigor2760 Series User s Guide Note If you want to specify just a single IP address for the object you have to set the same IP address in the fields of Start IP Address and End IP Address End IP Address Type the end IP address if the Range type is selected Subnet Mask Type the subnet mask if the Subnet type is selected MAC Address Type the MAC address of the network card which will be controlled if the MAC type is selected MAC Binding This setting changes slightly based on the Type Range Subnet and MAC you choose If you choose Rang
20. Vigor2760 Series User s Guide 173 Dray Te k Dray Tek Network My WAN IP Local Subnet Remote LAN Gateway you add another one option instead Phasel DH Group Phase2 DH Group It is available if Custom for IKE Proposals is selected above Both parameters are used to choose the length of the session key The more the length is the safer the data transmission will be However the time to generate the security key will be long Group e 1024 bit 5 sroup 1 60 bit Group 201024 bit sroup 5 1556 bit sroup 14 2040 bit sroup 16 4096 bit sroup 1o 019 bit Phasel Key Lifetime min For security reason the lifetime of key should be defined The default value is 28800 seconds You may specify a value in between 900 and 86400 seconds Phase2 Key Lifetime min For security reason the lifetime of key should be defined The default value is 3600 seconds You may specify a value in between 600 and 86400 seconds Perfect Forward Secrecy PFS The IKE Phase 1 key will be reused to avoid the computation complexity in phase 2 The default value is inactive this function Dead Peer Detection Action This function will detect if any response received from the peer If no response the chosen action will be performed Hold means such VPN connection is still active Clear means such VPN connection will be down Clear Dead Peer Detection Delay Time sec It is available when Clear is selected
21. Web Content Filter web page first Select one of the URL Content Filter profile settings created in CSM gt gt URL Content Filter for applying with this router Please set at least one profile for choosing in CSM gt gt URL Content Filter web page first Select an APPF profile created in CSM gt gt Application Filter for global IM P2P application blocking All the hosts in LAN must follow the standard configured in the APPF profile selected here Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the settings A new filter rule profile has been created Additional Information for User Management When the box of User Management is checked the router allows you to add more filter settings Refer to the following figure Empty Click the button on the right side to open the following setting page Vigor2760 Series User s Guide Dray Tek User Management Rule Available Items Selected Items Descripti SoOurcellr Destinati Source A Description Destinati Service Action Ts Bandwidth k BIS Rs Bandwidth KB s Log C NAT ae Application session Limit Part og WCF Apply iclear Egcancel All the incoming packets must be filtered with settings in A User Part for identity authentication first then B Application Part If the pa
22. inside the local network LAN such as web servers FTP servers E mail servers etc Most of the case you need a public IP address for each server and this public IP address domain name are recognized by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of port redirection function is to forward all access request with public IP address from external users to the mapping private IP address port of the server Protocol Select the transport layer protocol TCP or UDP Start External Port End External Port Specify which public port or port range start and end can be redirected to the specified Mapped Port s of the internal host Start Mapped Port End Mapped Port Simply specify the private port number of the service offered by the internal host The End Mapped Port value will be calculated based on the external port range and added automatically by the router When PPTP L2TP IPsec Passthrough is selected PPTP L2TP IPsec Passthrough is prepared for general users to get more conveniences If they want to connect the VPN server on LAN from external interface they can choose any one of these types for such profile The default values for each type will be shown immediately whenever the type is selected Protocol Select the transport layer protocol TCP or UDP Start External Port End External Port Specify
23. jar Evv O_OBJ jay EvvD_OBWJ java KvYD_OBLJ jem KAND OBR Js KAD_0B J jse KWD_OBJ jsp KVVD_OBJ jtk KWD_OB alk KVVWO_OBJ apb KVWO_OBJ axs KVWDO_ OBJ ocx EVVO_OBJ olb KWD_OB ole KVVD_ OBJ tlh KvWO_ OBJ wiv EVD OBJ vn The Vigor router has a built in real time clock which can update itself manually or automatically by means of Network Time Protocols NTP As a result you can not only schedule the router to dialup to the Internet at a specified time but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours say business hours The schedule is also applicable to other functions You have to set your time before set schedule You can inquiry an NTP server a time server on the Internet to synchronize the router s clock This method can only be applied when the WAN connection has been built up 4 4 4 1 Schedule Object This page is simply used to define the keyword object Objects Setting gt Schedule Schedule Object Flaca E Mame Schedul Dashboard Quick Sti GJReset Refresh Type Start Date End Date Erripty Each item will be explained as follows Item Add Edit Delete Reset Refresh Vigor2760 Series User s Guide Description Create a new schedule object profile Modify the selected schedule object profile You have to check the schedule object you want and then click this button to open th
24. 4 1 7 DNS DNS means Domain Name System It just likes a bridge between the virtual host and the web URL Through the DNS server the web URL can be mapped into the virtual host correctly 4 1 7 1 DNS Status DNS Status displays the IP address for all of the DNS servers inside the router The default IP address setting for the DNS server is 8 8 8 8 Dashboard Quick Start Wizard Network gt DNS DNS Status bby sch Gl Refresh Server Name 0 0 0 0 Available parameters are listed below Item Description Server Name Display the IP address of the DNS server D ra y Ti e k 64 Vigor2760 Series User s Guide 4 1 7 2 DNS Setting This page is used to set the DNS server including primary DNS and secondary DNS that the router will use Network gt DNS Dashboard Quick Start Wiz yc DNS Setting Primary DNS GA Ap yl Ga Reset E Refresh PP y Available parameters are listed below Item Description Primary DNS You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the router will automatically apply default DNS Server IP address 198 95 1 1 to this field Secondary DNS You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server If your ISP does not provide it the router will automatically apply default secondary DNS Server IP address 4 2
25. Access Control profile please do the following 1 Choose the profile from SSID1 to SSID4 you want and click the check box 2 Click Edit to open the following page Vigor2760 Series User s Guide 81 Dray Te k E Dash board Access Control Name solDe Enable F Filter Type Deny List MAC List MAC Address Empty GsApply GiClear EJ Cancel Available parameters are listed below Item Description Name Display the name of the Access Control profile Such name is assigned by the router in default Enable Check the box to enable the Access Control profile Filter Type Allow List The clients displayed on MAC List are allowed to pass through the router Deny List The clients displayed on MAC List are NOT allowed to pass through the router Allow List v a List MAC List Type the MAC address of the wireless client Click the button to display the entry box to fill in the MAC address Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the settings Dray Tek 82 Vigor2760 Series User s Guide 4 2 5 WDS WDS means Wireless Distribution System It is a protocol for connecting two access points AP wirelessly Usually it can be used for the following application Provide bridge traffic between two LANs through the air Extend the coverag
26. DNS Service Advanced Name Type ONS A ow Host Name OF IP Address 172 16 5 21 Ga Apply fil Clear x Cancel Available parameters are listed below Item Description Name Type a name for such local DNS profile Type Choose the type for such DNS service profile DNS Wh Dray Tek 148 Vigor2760 Series User s Guide Host Name IP Address Mail Server Preference Apply Clear Cancel DNS_A The domain name must be mapped to an IP address DNS_MX The domain name must be mapped to a mail server If DNS_A is selected as a type simply type the name of the host e g draytek com If DNS_MX is selected as a type simply type the name of the mail server e g draytek com If DNS_A is selected as a type type an IP address e g 192 168 1 56 for mapping to the host If DNS_MX is selected as a type type an IP address e g 172 16 2 8 of the mail server Set the priority of the mail server ranging from 0 65535 This setting is available when DNS_MxX lt is selected as the Type Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Applications gt Local DNS Mame Type Host Mare IP Address Vigor2760 Series User s Guide WaterFall DNS A frit 192 168 1 1 says HMA mav
27. DSL mode configured in the profiles under the DSL Mode tab will work only if they match the configurations here Network gt WAN Status DSL Bridge a ae Physical Type DSL Debug Mode GeApply Ej Clear Dashboard Quick Start Y TA DSL Mode Auto wt d Available parameters are listed below Item Physical Type DSL Debug Mode Apply Clear Refresh Dray Tek Description Use the drop down list to specify the physical type of the WAN interface Anto Bd ADSL Multimode a Auto The router will detect which mode that the ISP is using Usually it might be ADSL1 2 2 or VDSL2 ADSL Multimode The DSL physical type can be ADSL ADSL2 or ADSL2 VDSL only The DSL interface is fixed with VDSL only Check it to enable the debug mode to find out the problem via DSL synchronization Click it to save the settings Click it to remove the modification of the web page Click it to refresh the web page 48 Vigor2760 Series User s Guide 4 1 2 LAN 4 1 2 1 Basics of LAN Local Area Network LAN is a group of subnets regulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP The most generic function of Vigor router is NAT It creates a private subnet of your own As mentioned previously the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private
28. Interface Enable LAN DHCP LAM LAN Enable For test only LAM LAM 2 4 1 5 Static Route The static route is used to specify a gateway for certain LAN users for outgoing traffic 4 1 5 1 Static Default Route This page is used to enable the function of default static route and specify the interface to apply the default route You can change the default whenever you want If this function is not enabled the router will use other successful DSL connection as the default route Network gt Static Route fj Dashboard Quick Start Wizard Static Default Route Static Route Enable Interface OSL PWC ka Bj Apply Refresh Available parameters are listed below Item Description Enable Check this box to enable the function of static route Interface Specify an interface for the static route USB 3G_BACKUP USB 3G BACKUP Dray Tek 60 Vigor2760 Series User s Guide 4 1 5 2 Static Route When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static route function rather than other method You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP This page allows you to create several static routes to be selected for the route Click Network gt gt Static Route gt gt Static Route to get the following page E Dashboard Quick Stat Static Default Route Static Route
29. It is a 16 bit field inside ATM cell s header that indicates the cell s next destination as it travels through the network A virtual channel is a logical connection between two end devices on the network Dray Tek 18 Vigor2760 Series User s Guide Connection Type Select a connection mode for this WAN interface PPP if you click PPP as the protocol please manually type the Username Password and type the values for ADSL settings it can be ignored if VDSL service is offered provided by your ISP Then click Finish to complete the configuration Wizard gt Quick Start Wizard E Dashboard Quick Start eS Password fe Confirm Password a Y ADSL vc B20 Connection Type PPPoE LLOISNAP Frey Finish Available parameters are listed as follows Item Description Username Assign a specific valid user name provided by the ISP Password Assign a valid password provided by the ISP Confirm Password Type the password again for confirmation VPI Stands for Virtual Path Identifier It is an 8 bit header inside each ATM cell that indicates where the cell should be routed The ATM is a method of sending data in small packets of fixed sizes It is used for transferring data to client computers VCI Stands for Virtual Channel Identifier It is a 16 bit field inside ATM cell s header that indicates the cell s next destination as it travels through the network A virtual channel is a logical connection between two
30. Items for choosing the suitable wireless SSID members to be used in the new profile Available Items Display the available wireless SSID member Selected Items Display the wireless SSID member selected for such profile Note that the wireless SSIDs selected here can not be used in other profiles Such configuration is applied to upstream packets Such information will be provided by ISP Please contact with your ISP for detailed information Select a proper QoS type 45 Dray Tek Apply Clear Cancel for the channel according to the information that your ISP provides REVBR w UBR CBR NRT VBR WER The following options appear according to the QoS type you select Peak Cell Rate The default setting is 0 Cell Delay Variation The default setting is 0 Minimum Cell Rate The default setting is 0 Sustainable Cell Rate The value of Sustainable Cell Rate SCR must be smaller than PCR Peak Cell Rate Maximum Burst Size The default setting is 0 Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the settings 4 1 1 9 WAN USB If your router connects to a 3G modem and you want to access Internet via 3G modem choose 3G as connection type and type the required information in this web page Network gt WAN C Backup C Di
31. O ADSL O VDSL CO Fiber O 3G C WiMAX O LTE 6 Now your router information has been added to the database Click OK to leave this web page and return to My Information web page Your device has been successfully added to the database Vigor2760 Series User s Guide 25 Dray Te k 7 Take a look at the page of My Information the new added Vigor router is listed under Your Device List Dray _ A Home My Information D about Ua Welcome drayte kise C Product Last Login Time 2011 08 24 09 39 13 Last Login From 123 110 144 220 VJ My Information Current Login Time 2011 08 24 23 01 15 C VigorACs SI Current Login From 114 37 142 184 RowNo 5 PageNo 2 u Vigor Series Your Device List a Management Device Name Model Note a Customer Survey Note Vigor3300V Vigor3300 Vigor2020 Vigor 7870 2010100510480 Vigor 710vn Vigor 10 Vigor2320 Vigor2920 Vigor2760 Vigor2760 8 Return to the web user interface of Vigor router and refresh the page 3 2 Activating Web Content Filter Mechanism We all know that the content on the Internet just like other types of media may be inappropriate sometimes As a responsible parent or employer you should protect those in your trust against the hazards With Web filtering service of the Vigor router you can protect your business from common primary threats such as productivity legal liability network and security threats For parents you ca
32. Proxy Filter Upload Filter Bappy cear E cancel Available parameters are listed below Item Description Name Type a name for this filter profile Maximum 63 characters are allowed Action It determines the action that this router will apply Pass The router will let all the packages that match with the conditions specified in this page passing through Block The router will block all the packages that match with the conditions specified in this page Log None There is no log file will be recorded for this profile Pass Only the log about Pass will be recorded in Syslog Dray Tek 126 Vigor2760 Series User s Guide URL Filter Block IP Address Access Cookie Filter Proxy Filter Upload Filter Apply Clear Cancel Vigor2760 Series User s Guide Block Only the log about Block will be recorded in Syslog All All the actions Pass and Block will be recorded in Syslog None Pass j Block All The Vigor router provides several profiles for users to define keywords and each profile supports multiple keywords The keyword could be a file extension noun a partial noun or a complete URL string Multiple keywords within a profile are separated by space comma or semicolon In addition the maximal length of each frame is 32 character long After specifying keywords the Vigor router will decline the connection request to the website whose URL string matched to any user defined
33. Share Pec Gadd B GdReset Refresh Share Name Share Path Descriptions Empty Each item will be explained as follows Item Description Add Create a new disk share profile Edit Edit the selected profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected profile Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Share Name Display the name for such profile Share Path Display the location of the hardware storage Descriptions Display the brief explanation for such profile Vigor2760 Series User s Guide 161 Dray Te k To add a new profile for disk share please do the following 1 Click the Add button USB Applications gt SAMBA Disk Share GAdd edit Delete GIR Share Name 2 The following setting page will appear USB Applications gt SAMBA Disk Share Ea Share Name Share Path Internal Storage Descriptions Allowed Users User Name Privilege Empty Bappy clear E Cancel Available parameters are listed as follows Item Description Share Name Type a name for such profile Share Path Specify the location of the hardware storage Internal Storage Such profile is applied to the internal storage of Vigor router USB Disk Such profile is applied to an external USB disk Description Give a brief explanation for such profile Allowed Users Click the button to
34. The wireless access point is turned off The DSL port is connected Blinking The router is read DSL Green Slowly 7 Blinking The router is trying to connect to Internet Quickly _ The port is connected Blinkin LAN1 2 3 4 Green The data is transmitting N On A USB device is connected and active USB1 2 Dray Te k 4 Vigor2760 Series User s Guide PWR Connector for a power adapter I O Power switch Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration WLAN WLAN WPS Press this button for 2 seconds to wait for client device making ON OFF WPS network connection through WPS When the LED lights up the WPS connection will be on WLAN ON OFF Press the button once to enable WLAN LED on or disable WLAN LED off wireless connection VDSL ADSL Connector for accessing the Internet USB 1 2 Connector for USB storage device Pen Driver Mobile HD or printer or 3G backup LAN 1 4 Connectors for local network devices Vigor2760 Series User s Guide 5 Dray Te k 1 1 3 For Vigor2760Vn Vigor2 760Vin Blinking The router is powered on and running normally Off The router is powered off ACT n A PSTN phone call comes in and out However when the phone call is disconnec
35. add a new LAN to LAN profile please do the following 1 Click the Add button iE VPN and Remote Access gt LAN to LAN LAN to LAN EeAdd E3 GRefresh Enable Name Descrit 2 The following setting page will appear VPN and Remote Access gt LAN to LAN E Dashboard S Quick Start Wiza LAN to LAN Idle Timeout sec 300 Call Direction Both Dial out Diakin Dial out Server Type O PPTP LTP O IPsec L2TP over IPsec Always On Remote Host Username Password eee Confirm Password eee PPP Authentication CHAP be WJ Compression Security Method ESP Authentication Method Pre shared Key Pre shared Key eres Confirm Pre shared Key eee gt Dial out Advanced Options Available parameters are listed as follows Item Description Enable Check the box to enable such profile Name Type the name of the profile Description Type a description for such profile Idle Timeout The default value is 300 seconds If the connection has been idled over the value the router will drop the connection Call Direction Specify the allowed call direction of this LAN to LAN profile Both initiator responder Dial Out initiator only Dial In responder only Dial out Dray Te k 170 Vigor2760 Series User s Guide Server Type L2TP over IPsec Always On Remote Host Username Password Confirm Password PPP Authentication MPPE Encryption Vigor2760 Series User s Guide PPTP Build a PPTP VPN conn
36. and receiving according to the station capability Such channel can increase the performance for data transit Guard Interval It is to assure the safety of propagation delays and reflections for the sensitive digital data If you choose auto as guard interval the AP router will choose short guard interval increasing the wireless performance or long guard interval for data transmit based on the station capability Aggregation MSDU Aggregation MSDU can combine frames with different sizes It is used for improving MAC layer s performance for some brand s clients The default setting 1s Enable TX Power Set the power percentage for transmission signal of access point The greater the value is the higher intensity of the signal will be Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page To edit the SSID setting please do the following 1 Move your mouse cursor on the SSID profile from SSID1 to SSID4 based on the order you want to edit and click on it In this case we choose SSID2 SSID Mame Enable SSID Hide SSID Soll Enable DrayTekt Disable Selb Disable DrayTek Disable SSlD3 Disable DrayTek3 Disable Selb4 Disable DrayTek4 Disable Dray Tek 76 Vigor2760 Series User s Guide 2 The following page will appear immediately SSID_Table Mame Enable SSID Hide SSID Isolate Member Isolate LAM Security Setting Pre S
37. assure that the peer must receive the WMM packets Check the box means the AP router will not answer any response request for the transmitting packets It will have better performance with lower reliability 3 After finished the settings above click Apply to save the settings Parameters of Access Point Dararpnotore of Ofationg Type Alfsn ihin Char Txop ACh AckPolicy AC_BE 3 4 Bi 0 Disable Disable Al Ake T 4 10 0 Enable Enable AC Vl 3 4 g4 Disable Disable AC WI 2 3 47 Disable Disable Tyne AITSA CATA Chay Teor Schl 4 Now the parameter has been modified 4 2 7 AP Discovery Vigor router can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of this router can be found Please click Refresh to discover all the connected APs 4 2 7 1 AP List This page will scan automatically to find out surrounding APs and display the scanned AP with SSID channel MAC address and Security settings Wireless LAN gt AP Discovery AP List Ber U UT EE Refresh Channel SSID W760 rd2 kyeh DrayTek SF Wireless Makatihted z DrayTe
38. connection has not established UP the network connection is established successfully Display the network connection time via the WAN interface Display the WAN IP address of the router Display the MAC address of the router Display the total received packets via such WAN interface Display the total transmission packets via such WAN interface 38 Vigor2760 Series User s Guide 4 1 1 7 WAN DSL This page allows you to configure DSL settings for WAN interface Network gt WAN ESAdd Edit Delete Enable Mame Enable DSL PVC Em gt Dashboard Quick Start Wizard C Refresh Description Profile Type Default Route Both Enable Each item will be explained as follows Item Add Edit Delete Refresh Enable Name Description Profile Type Default Route Description Create new WAN profiles Edit the selected WAN profile To edit the profile simply check the profile box you want to edit and then click this button Remove the selected WAN profile Click it to refresh the web page Display the activation status for such DSL interface Enable The DSL interface is activated Disable The DSL interface is not activated Display the profile name for DSL USB interface Display a brief description for such profile Display the nature ADSL VDSL or both for such profile Display if the default route is applied to such WAN profile or not Enable The default route is appli
39. eee ee OPE eee eee eee Pee 147 AF te PROVO sate tcc tates Baran ted cane dane daa cedee ane e aiiesidaatsenansccidacasecebase sauce A 150 FT NG DNG asse E EEEE 151 ONE EE E EANA a ee EE Se es 151 4 7 2 2 SOIVICC 2 cecccccccccccecccecccneccneecueecaeecueecseenseenaeenaeeaanessnesanesaeesaesaesaaeesaeeseesaeesaeesaeesas 152 a 218 FOV ANC vies ndtirnrrdonsdearceiduseneaedinanasiaeessmsadidsinerstiantendduendensdiatienisviecbeedinemestediauses 155 nR a see E A a ee ee ee eee eee eee 156 Ar eS ee eee ee er eee eee 158 AW SPOON ANIONS saeeereiss meceseesesenzaecsagavancocesassescues vane E RASNA Or EREA Eea EANA a 159 4L TI USB ahs gt 0 oe nn a eee 159 Ps Wl iat es BY Sy ts 10 er en ee ee eee ee E eee ee eee ee eee 160 Fe FINS OUI S ene iwat ate eh uaaaadencaceae a E damit dinahcataseie 160 Ao SANEA ae eo aCe a a ne E ee eee 161 ACI IIS QO e tots auich costa aus E EEEE E 161 Eh CPCI PE AAE AA EA OAR EE TER AE AEE EA A TEA 164 aspe PP ee E E E EIE EE E E EE T A ASA AE E E E 165 LES F said O Gea ae N OA E EAT E OO OE OA E E AEE 165 Aoo GONO e e a E EE N E E N E N E 167 4 9 VPN and Remote ACCESS amp oacccesicccevcecndesicdexc eetiiecets acnnicveudonesees vedducansiendeiiaee tadeceas teitemecteueletnaeataned 168 49 1 Service 01 2 Sener nee ne nr enn anani 168 4 9 2 LAN to LAN sete kes etc se rc ec se res os etc cc se ee eee 169 4 9 3 Remote Dial in USET ee ee eee 176 PANES A SAUS ee E E ie a 181 4 10 Certificate ManageMe nt
40. end devices on the network Connection Type Select a connection mode for this WAN interface Vigor2760 Series User s Guide 19 Dray Tek Dray Tek DHCP if you click DHCP as the protocol just enter the values for ADSL settings it can be ignored if VDSL service is offered provided by your ISP Then click Finish to complete the configuration Dashboard Wizard gt Quick Start Wizard ise STEP A vel Connection Type 1463 Bridge IP LLC ha 1463 Bridge IP LLC 1483 Routed IP LLC 1453 Bridge IP ViC Mux Prev Finish 1465 Routed IP VC Mux Available parameters are listed as follows Item Description VPI Stands for Virtual Path Identifier It is an 8 bit header inside each ATM cell that indicates where the cell should be routed The ATM is a method of sending data in small packets of fixed sizes It is used for transferring data to client computers VCI Stands for Virtual Channel Identifier It is a 16 bit field inside ATM cell s header that indicates the cell s next destination as it travels through the network A virtual channel is a logical connection between two end devices on the network Connection Type Select a connection mode for this WAN interface 20 Vigor2760 Series User s Guide 7 When you click Finish to complete the configuration the system will display a summary screen for you to confirm Simply click Confirm Later the Dashboard screen will appear You can enjoy surfing on
41. for Dead Peer Detection above Set the interval for the detection The default setting shall be 30 seconds Dead Peer Detection Timeout sec It is available when Clear is selected for Dead Peer Detection above Set the time that the system will wait for the response The default setting shall be 120 seconds In default the detection will be done for four times within the default time If there is no response the VPN tunnel will be disconnected Type the WAN IP address for the VPN tunnel Add a static route to direct all traffic destined to Local Subnet through the VPN connection This field is only applicable when you select PPTP or L2TP with or without IPsec policy above Type the LAN gateway address of the remote router for the VPN tunnel 174 Vigor2760 Series User s Guide Remote LAN Add a static route to direct all traffic destined to this Remote Subnet Mask LAN Subnet Mask through the VPN connection For IPsec this is the destination clients Ds of phase 2 quick mode 3 After finished the settings above click Apply to save the file and wait for the following dialog appears LAN to LAN AUTINENICATION WieTnod Ligital Vertiticate Local Certificate Mone Peer Certificate Any W Dial out Advanced iii SUreite etre E Peer ID Type saved successfully Peer ID DN Phasel Mode IKE Proposals Auto v 4 Click OK A new LAN to LAN profile has been created VPN and Remote Access gt LAN
42. for connecting to VigorACS Server Such information is useful for Auto Configuration Server In default the system will detect related information of the CPE automatically and displayed in this field Port Sometimes port conflict might be occurred To solve such problem you might change port number for CPE CPE URL Display the URL of the CPE CPE Username Display the username of the CPE CPE Password Display the password of the CPE Confirm CPE Password Display the password of the CPE for confirmation Periodic Update Check the box Enable to make the system send inform message to ACS server periodically with the time set in the box of interval time Periodic Time second The default setting is Enable Please set interval time or schedule time for the router to send notification to CPE Click it to save the settings Click it to retrieve the default settings of this page Click it to clear current settings and return to the settings saved previously 4 11 2 Administrator Setting This page allows you to modify the content of the message box of the profiles with different purposes Message GiReset Refresh Name COl URL Content Filter C Web Content Filter Advertisement stem Maintenance Administrator Administration Message lt hody lt centere lt bre lt bre lt bre lt p The requested Web page lt br gt from SIP lt breto URL lt brethatis categor
43. implementation provides users with significant ease of use Meanwhile it provides access control billing and type of service according to user requirement When a router begins to connect to your ISP a serial of discovery process will occur to ask for a connection Then a session will be created Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system And your IP address DNS server and other related information will usually be assigned by your ISP 4 1 1 4 Network Connection by 3G USB Modem Since 3G mobile communication through Access Point is popular more and more Vigor router adds the function of 3G network connection to offer the user more convenience There are two available USB ports in Vigor router With an optional USB 3G modem installed into one of them Vigor router supports only one dongle at one time it can be treated as a backup WAN interface when the specified WAN interface e g DSL connection is down due to some reason and then the backup WAN will take over all the job of data communication Later if the specified WAN interface is active again the backup one will disconnect automatically Note that you have to specify the function of the 3G USB modem to be backup or failover WAN from Network gt gt Failover Dray Tek 36 Vigor2760 Series User s Guide The supported 3G USB Modem will be listed on DrayTek web site Please visit www draytek com for more detailed information 4 1
44. in a range usually will be applied in configuring router s settings we can define them with objects and bind them with groups for using conveniently Later we can select that object group for applying it For example all the IP addresses in the same department can be defined with an IP object a range of IP address 4 4 1 1 Address Object This page is simply used to define the IP address object STEPS ie UP ot ERE Address Object Ad ess Group Bau B GdReset Refresh Mame Invert Selection Empty Each item will be explained as follows Item Description Add Create a new object profile Edit Modify the selected object profile You have to check the object you want and then click this button to open the edit window for modification Delete Remove the selected object You have to check the object you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile Invert Selection Display if such function is enabled or disabled To create a new object profile please do the following 1 Click the Add button Vigor2760 Series User s Guide 101 Dray Te k Objects Setting gt Address Address Object hii eeiyy Eada Eat Delete Reset L Mame In 2 The following setting page will appear Objects Setting gt Address Address Object Etli s e Mame ales Description Sales Department i S
45. into one group User Management gt User Profile E Dashboard l Iser C J t User Group Ga Add Reset Refresh Enable Hame Type Group Empty Each item will be explained as follows Item Description Add Create a new user object group Edit Modify the selected user group profile You have to check the user group profile you want and then click this button to open the edit window for modification Delete Remove the selected user group profile You have to check the user group profile you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Enable Display the activation status of the user group profile Enable The user group profile is available for choosing Disable The user group profile is not available for choosing Name Display the name of the profile The profile with a name admin is defined in default Type Display the type of the group profile Group Display the user object profiles grouped under such user group Vigor2760 Series User s Guide 137 Dray Te k To create a new user group profile please do the following 1 oi Dray Tek Click the Add button User Management gt User Profile IA a User Group FI Add fiJDelete Reset Mame Type The following setting page will appear User Management gt User Profile Dashboard Quick SI iT elite User Group Enable M
46. list to specify one LAN profile which can be created from Network gt gt LAN gt gt Ethernet If you cannot find any selection here simply open Network gt gt LN gt gt Ethernet to create new ones Each DHCP service setting belongs to one LAN profile Type DHCP_Server If it is selected such profile will be used to enable the DHCP server It can respond to the client with the gateway and DNS server DHCP_ Relay If it is selected it means the real DHCP server is one of the internal hosts The client must inquire to the relay agent which DHCP server will be used Therefore you have to configure Forward to and the Server IP additionally Forward To Use the drop down list to choose a LAN Dray Tek 58 Vigor2760 Series User s Guide IP Range Gateway Lease Time min DNS Server IP DHCP Binding Apply Clear Cancel Vigor2760 Series User s Guide profile for locating the DHCP server Server IP Address Type the IP address of the DHCP server Click the plus button to set an IP group with starting and ending addresses which will be dispatched to the hosts in LAN by DHCP server Start IP Address Enter a value of the IP address for the DHCP server to start with when issuing IP addresses End IP Address Enter a value of the IP address for the DHCP server to end with when issuing IP addresses Type the IP address of the DHCP server It allows you to set the leased time for the specified PC
47. on you do not need to use this wizard Click Cancel to close the wizard and then plug the printer s cable Edit view Favorites Tools into your computer or point the printer toward your i computer s infrared port and turn the printer on S P Sea Server Properties Windows will automatically install the printer for you Set Up Faxing Printers and Faxes To continue click Next reate Shortcut Delete Rename Properties Close Cancel 4 Click Local printer attached to this computer and click Next Add Printer Wizard Local or Network Printer The wizard needs to know which type of printer to set up Select the option that describes the printer you want to use _ Automatically detect and install my Plug and Play printer A network printer or a printer attached to another computer e Toset up a network printer that is not attached to a print server J use the Local printer option 5 In this dialog choose Create a new port Type of port and use the drop down list to select Standard TCP IP Port Click Next Add Printer Wizard Select a Printer Port Computers communicate with printers through ports Select the port you want your printer to use If the port is not listed you can create a new port O Use the following port LPT 1 Recommended Printer Port Create a new port Type of port Standard TCP IP Port Dray Tek 10 Vigor2760 Serie
48. or IP Address 192 168 1 1 Protocol O Baw Raw Settings CILPR Byte Counting Enabled LPR Settings Queue Name C SNMP Status Enabled Vigor2760 Series User s Guide Dray Tek The printer can be used for printing now Most of the printers with different manufacturers are compatible with vigor router Note 1 Some printers with the fax scanning or other additional functions are not supported If you do not know whether your printer is supported or not please visit www draytek com to find out the printer list Open FAQ Application Notes find out the link of Printer Server and click it then click the What types of printers are compatible with Vigor router link D Ti k MyVigor Register E newsletter DrayTek HQ Media Center Global English bi Logi About DrayTek Products Solutions Multi Media Demo Contact Us FAQ Application You are here Home Supports FAQ oc Personer gt Basic ioi a Printer Server WAN IPv6 1 What types of printers are compatible with Vigor router Triple Play 2 How do configure LPR printing on Windows7 Dual WAN 3 How do I configure LPR printing on My Windows Vista LAN DHCP 4 How do configure LPR printing on Linux boxes NAT 5 How do configure LPR printing on Windows2000 XP Note 2 Vigor router supports printing request from computers via LAN ports but not DSL port Vigor2760 Series User s Guide 13 Dr a
49. s Guide 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Objects Setting gt Address Tea lites Address Group Name Description fir 192 168 1 1 says FAA Type eaved successfully Group 4 Click OK A new group profile has been created Objects Setting gt Address Dashboard Quick Start VWize hie elise Address Group Gadi leat Delte GiReset Refresh Hame Description Type Group ADDR GRP 2F Subnet ADDR OBJ Market 4 4 2 Service Type Service types with specified ports are usually applied in configuring router s settings For the convenience this feature offers several default set of service type with port value for you to use Moreover it allows you to define other service types by yourself 4 4 2 1 Service Type Object This page is simply used to define the service type object Objects Setting gt Service Type i Service Type Object Seely Se ada E ccr Delete Reset Refresh Name Protocol Application SRY OBJ HTTP TCP HTTP C sR _OBJ POP3 TCF POP3 O BRV OBJ FTP TCP FTP SR _OBJ SMTP TCP SMTP 0 O BRV_OBJ IMAP TCP IMAP Each item will be explained as follows Vigor2760 Series User s Guide 107 Dray Te k Item Add Edit Delete Reset Refresh Name Protocol Application Description Create a new service type profile Modify the selected service type profile You have to check the service type
50. session number that you specified in Limit Session web page Expired Time Display the remaining time to block or pass Login Time Display the login time of the PC Idle Time Display the idle time of the PC Status Display the status block or pass of the PC 4 12 5 System Table The information displayed here is available for technical support if encountering troubles in using Vigor router Diagnostics gt System Table Dashboard amp Quick start Wiz System Resource ote 1 nformation DSL Information CPU Loading 0 Memory Usage 48 Refresh Each item will be explained as follows Item Description Refresh Click it to refresh the web page Memory Usage The used memory and remaining capacity will be displayed by blue and white Basic system information will be seen by clicking Diagnostics gt gt System Table gt gt System Information Vigor2760 Series User s Guide 209 Dray Tek Diagnostics gt System Table E Dashboard Quick Start Wiza rd SOL System Information Beetle System Detail Name system Detail Data Model Mame Yigor2760n Firmware Version 1 0 0 RC10 Build Date Thu Oct 4 12 04 39 CST 2012 Web Yersion 0 0 521 g9cd4645 Configure Version 1 0 29 Uptime 7 dayisi 1 hour s 50 mints System Time 1970 01 08 01 50 18 Refresh Each item will be explained as follows Item Description Model Name Display the model name of the Vigor router F
51. successfully 4 Click OK A new object profile has been created Objects Setting gt Keyword Dal Keyword Object Ead eat Delete Reset Refresh Name Content Wahoo msn skype 4 4 3 2 Keyword Group You can bind several keyword objects into one group The keyword groups set here will be chosen as black white list in CSM gt gt URL Web Content Filter Profile Objects Setting gt Keyword Dashboard Quick Stan Default Keyword Object Default Keyword Group Eaka a Keyword Group GeAdd Kedi Delte Reset Refresh Name Group Empty Each item will be explained as follows Item Description Add Create a new keyword group profile Edit Modify the selected keyword group profile You have to check the keyword group you want and then click this button to open the edit window for modification Delete Remove the selected keyword group Dray Te k 114 Vigor2760 Series User s Guide You have to check the keyword group you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile Group Display the keyword object profiles grouped under such group To create a new keyword object group profile please do the following 1 Click the Add button Objects Setting Keyword Pe EA Keyword Group BAET Ki Add cdt Delete Reset Refresh Name Group 2 The following setting page will appear
52. which public port start and end or port range can be redirected to the specified Mapped Port s of the internal host Start Mapped Port End Mapped Port Specify the private port number start and end or port range of the service offered by the internal host Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 56 Vigor2760 Series User s Guide 3 After finished the settings above click Apply to save the settings then click Cancel to return to previous page Network gt NAT Dashboard Quick Start Wigart Virtual Host EsAdd edit Delte GdReset Refresh Enable Name External Interface Specific External IP Address Mapped IP Address Enable and_floor DSL PVA ENE 192168113 4 1 4 DHCP DHCP stands for Dynamic Host Configuration Protocol DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network At least one profile must be kept in this page If you just want to have the default profile note that do not disable the default LAN_DHCP profile otherwise the system may not run well E Dashboard Quick Start Wizare
53. you finish the selection click Next Add Printer Wizard Install Printer Software The manufacturer and model determine which printer software to use mr Select the manufacturer and model of your printer If your printer came with an installation disk click Have Disk If your printer is not listed consult your printer documentation for compatible printer software Manufacturer Eidi AST i Canon i Eai aina v zy This driver is digitally signed Tell me why driver signing is important 10 For the final stage you need to go back to Control Panel gt Printers and edit the property of the new printer you have added amp Brother HL 1070 Properties General Sharing Ports Advanced Device Settings Brother HL 1070 iao Sa Print to the following port s Documents will print to the first free checked port Port Description O 3 250 Standard TCP IP Port 1 Standard TCP IP Port 1 Standard TCP IP Port 1 Standard TCP IP Port 1 Standard TCP IP Port 1 Standard TCP IP Port Local Pot Printer Epson Stylus COLOR 1160 HP LaserJet 1300 Brother HL 1070 PDF995 11 Select LPR on Protocol type p1 number 1 as Queue Name Then click OK Next please refer to the red rectangle for choosing the correct protocol and UPR name Configure Standard TCP IP Port Monitor Port Settings Port Name IP_192 168 1 1 Printer Name
54. you want and then click this button to open the edit window for modification Remove the selected service type You have to check the service type you want and then click this button Click it to retrieve the default settings of this page Click it to fresh the web page Display the name of the profile Display the protocol that this profile applies to Display the type e g HTTP POP3 and etc of such profile To create a new service type object profile please do the following 1 Click the Add button Ca Add ld Reset Name Protoco C SR _OBJ HTTP TCP 2 The following setting page will appear Dray Tek Objects Setting Service Type Service Type Object sees iyi Group Mame Protocol Start Source Port End Source Port Stait Destination Port End Destination Port Application Ea Apply Clear Ed cancel Available parameters are listed below Item Name Protocol Description Type a name for this profile Maximum 15 characters are allowed Specify the protocol s which this profile will apply to 108 Vigor2760 Series User s Guide TCP WIDP ICMP Start End Source Source Port and the Destination Port column are available Port for TCP UDP protocol It can be ignored for other protocols Type the port values for both start source port and end source port respectively Start End Type the port values for both start destination port and end Destination Po
55. 0 00 00 00 01 00 00 00 00 00 02 00 00 00 00 00 03 00 00 00 00 00 04 Available parameters are listed below Item Enable Mode WDS Apply Reset Refresh Description Check this box to enable WDS setting Choose the mode for WDS setting Bridge mode is designed to fulfill the first type of application Repeater mode is for the second one Fepeater W Name Display the name of the WDS profile Such name is assigned by the router in default Enable Display the activation status for such interface Enable The profile is activated Disable The profile is not activated Peer MAC Address Display the MAC address of the peer Click it to save the settings Click it to retrieve the default settings of this page Click it to clear current settings and return to the settings saved previously To edit a WDS profile please do the following 1 Move your mouse cursor on the WDS profile from WDS1 to WDS4 you want to edit and click on it In this case we choose WDS2 Dray Tek 84 Vigor2760 Series User s Guide WOS Mame WDS WDS WDSS WOS4 Enable Disable Disable Disable Disable 2 The following page will appear immediately J WDS Table Mame Enable Peer MAC Address Security Setting Key confirm Key OO 00 00 00 00 02 WPACTKIF E Apply clear Egcancel Available parameters are listed below Item Name Enable Peer MAC Address Security Setting Vigor27
56. 1 Type the packet priority number for such VLAN The range is from 0 to 7 Note In default there is no item displayed here All the Ethernet Port Members from port1 to port4 are dedicated to the default LAN profile Before configuring the settings for new LAN profiles or Bridge profiles please reconfigure the default LAN profile enter Ethernet tab located in the Network gt gt LAN page to release some port members first Otherwise you may not be able to complete the profile configurations for the new interface Use the gt button to move the selected item listed in Available Items onto Selected Items for choosing the suitable port for the new profile Available Items Display the available port member Selected Items Display the port member selected for such group Note that the LAN Port port to port4 selected here can not be used in other profiles Note In default there is no item displayed here All the Wireless SSID Members SSID1 SSID4 and WDS1 WDS4 are dedicated to the default LAN profile Before configuring the settings for new LAN profiles or Bridge profiles please reconfigure the default LAN profile enter Ethernet tab located in the Network gt gt LAN page to release some port members first Otherwise you may not be able to complete the profile configurations for the new interface Then use the gt button to move the selected item listed in Available Items onto Selected
57. 1 5 Several Connection Protocols Used for the Router PPPoE stands for Point to Point Protocol over Ethernet It relies on two widely accepted standards PPP and Ethernet It connects users through an Ethernet to the Internet with a common broadband medium such as a single DSL line wireless device or cable modem All the users over the Ethernet can share a common connection And the PPPoA stands for Point to Point Protocol over ATM PPPoA uses the PPP dial up protocol with ATM as the transport PPPoE or PPPoA is used for most of DSL modem users All local users can share one PPPoE or PPPoA connection for accessing the Internet Your service provider will provide you information about user name password and authentication mode DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet If you choose DHCP mode the DHCP server of your ISP will assign a dynamic IP address for your router automatically It is not necessary for you to assign any setting For Static RFC1483_ROUTED RFC1483 BRIDGE IP mode you usually receive a fixed public IP address or a public subnet namely multi
58. 2 1 to this field Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to refresh the web page After finished the settings above click Apply to save the settings 4 1 8 Quality of Service Service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise network One reason for QoS is that numerous TCP based applications tend to continually increase their transmission rate and consume all available bandwidth which is called TCP slow start If other applications are not protected by QoS it will detract much from their performance in the overcrowded network This is especially essential to those are low tolerant of loss delay or jitter delay variation Another reason is due to congestions at network intersections where speeds of interconnected circuits mismatch or traffic aggregates packets will queue up and traffic can be throttled back to a lower speed If there s no defined priority to specify which packets should be discarded or in another term dropped from an overflowing queue packets of sensitive applications mentioned above might be the ones to drop off How this will affect application performance There are two components within Primary configuration of QoS deployment Vigor2760 Series User s Guide 65 Dray Te k Classification Identifying low latency or crucial applicati
59. 2 152 168 1 18 13 Dray Tek 90 Vigor2760 Series User s Guide Each item will be explained as follows Item Description Refresh Click it to fresh the web page MAC Address Display the channel sued by the scanned AP Security Display the security mode used by the wireless station Associated SSID Display which SSID associated with the station client For example if station 1c 4b d6 a0 91 d6 connects to the router through SSID 1 the value displayed will be 1 If station2 00 26 c7 40 c8 64 connects to the router through SSID2 the value displayed here will be 2 o IP Address Display the IP address of the wireless station connecting to Vigor2760 Connected Time Display the duration of the wireless stations connecting to Vigor2760 Vigor2760 Series User s Guide 91 Dr ay Tek 4 3 Firewall 4 3 1 Basics for Firewall While the broadband users demand more bandwidth for multimedia interactive applications or distance learning security has been always the most concerned The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders It also restricts users in the local network from accessing the Internet Furthermore it can filter out specific packets that trigger the router to build an unwanted outgoing connection 4 3 1 1 Denial of Service DoS Defense The DoS Defense functionality helps you to detect and mitigate the DoS attack The attacks are usually cate
60. 3 Privilege This page allows you to configure different privilege profile for the user object Different privilege represents different authority that the user group will have The great the authority is the more functions the user user group will have User Management gt Privilege E Dashboard amp Quick Privilege Readd Eedit Gijdelete Reset Refresh F Mame F Administrator F Guest Each item will be explained as follows Item Description Add Create a new privilege profile Dray Te k 142 Vigor2760 Series User s Guide Edit Modify the selected privilege profile You have to check the privilege profile you want and then click this button to open the edit window for modification Delete Remove the selected privilege profile You have to check the privilege profile you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the privilege profile The profiles with names Administrator and Guest are defined in default To create a new privilege profile please do the following 1 Click the Add button Privilege FI Add EJ i Reset Refres F Mame F Administrator F Guest 2 The following setting page will appear User Management gt Privilege Dashboard Quick Start Wie Privilege Name Family_Member Max Login 3 Idle Timeout min 20 Log O Menu Privil
61. 4 sroup 1 60 bit Group 21024 bit sroup 5 1556 bit sroup 14 2040 bit sroup 16 4096 bit sroup 1o 0 1 S bit Phasel Key Lifetime min For security reason the lifetime of key should be defined The default value is 28800 seconds You may specify a value in between 900 and 86400 seconds Phase2 Key Lifetime min For security reason the lifetime of key should be defined The default value is 3600 seconds You may specify a value in between 600 and 86400 seconds Perfect Forward Secrecy PFS The IKE Phase 1 key will be reused to avoid the computation complexity in phase 2 The default value is inactive this function Dead Peer Detection Action This function will detect if any response received from the peer If no response the chosen action will be performed Hold means such VPN connection is 179 Dray Tek still active Clear means such VPN connection will be down Dead Peer Detection Delay Time sec It is available when Clear is selected for Dead Peer Detection above Set the interval for the detection The default setting shall be 30 seconds Dead Peer Detection Timeout sec It is available when Clear is selected for Dead Peer Detection above Set the time that the system will wait for the response The default setting shall be 120 seconds In default the detection will be done for four times within the default time If there is no response the VPN tunnel will be disconnec
62. 6 Mapped IF Address 192 168 1 13 Type DMZ Host a Bappy clar Ecancel Available parameters are listed below Item Description Enable Check the box to enable such profile Name Type a name for such profile External Interface It is used to specify the WAN interface for external connection for applying such virtual host profile The default setting is PVC1 USB 3G_BACKUP Y Specific External IP Check the box to specify a specific IP address for such Address profile It means when the destination IP matches with the condition specified here it will be transformed into the Mapped IP Address If the box is not checked it means any packet from any destination IP via the external interface will be transformed into Mapped IP Address External IP Address Type the IP address of the LAN interface Mapped IP Address Such LAN IP address is the one that the Destination IP will be transferred to Type Note that the type you choose will result in different web settings offered by this web page Vigor2760 Series User s Guide 55 Dr ay Te k Dray Tek Apply Clear Cancel DMZ Host Fort Forward FPPTF Passthrough LATP Passthrough IPsec Passthrough DMZ Host It allows a defined internal user to be totally exposed to the Internet which usually helps some special applications such as Netmeeting or Internet Games etc When Port Forward is selected Port redirection is usually set up for server related service
63. 60 Series User s Guide Description Display the name of the WDS profile Such name is assigned by the router in default Check the box to enable the WDS profile If you choose Bridge as the connecting mode please type in the peer MAC address in these fields There are several types for security OPEN WEP and WPA TKIP and WPA2 AES The setting you choose here will make the following WEP or WPA key field valid or not Choose one of the types for the router WPA2 AES OPEN WEP WPAITKIP EZES WEP If you choose such type you have to type the same encryption key configured in Wireless LAN gt gt General Setup WPA TKIP and WPA2 AES You can set the encryption mode as WPA or WPA2 to establish your WDS system between AP and the router Type 8 63 ASCII characters or 64 hexadecimal digits leading by 0x Such function 1s available when WEP WPA is selected as Security Setting The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or 85 Dray Tek Dray Tek Confirm Key Apply Clear Cancel restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCH characters from 33 to 126 except and Such function is available when WEP WPA is selected as Security Setting Type the encryption key again for confirmation Click it to save the settings Click it to remove t
64. 72 Vigor2760 Series User s Guide 4 2 Wireless LAN This function is used for n models 4 2 1 Basic Concepts Over recent years the market for wireless communications has enjoyed tremendous growth Wireless technology now reaches or is capable of reaching virtually every location on the surface of the earth Hundreds of millions of people exchange information every day via wireless communication products The Vigor n model a k a Vigor wireless router 1s designed for maximum flexibility and efficiency of a small office home Any authorized staff can bring a built in WLAN client PDA or notebook into a meeting room for conference without laying a clot of LAN cable or drilling holes everywhere Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access The Vigor wireless routers are equipped with a wireless LAN interface compliant with the standard IEEE 802 11n protocol To boost its performance further the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy stream music and video Note The actual data throughput will vary according to the network conditions and environmental factors including volume of network traffic network overhead and building materials In an Infrastructure Mode of wireless network Vigor wireless router plays a role as an Acces
65. 760 Series User s Guide Type Valid From Valid To Display the type e g request or certificated of current certificate Display the starting point of the valid time of the certificate Display the end point of the valid time of the certificate 4 10 1 1 Generate Local Certificate To generate a new certificate request profile please do the following 1 Click the Generate button Local Certificate it Upload Refresh Mame Status Type Valid From Empty 2 The following setting page will appear EAEE G0 Gti Meee MSE 2 Dashboard Quick St Local Certificate Mame Common Mame Country State Province Locality City Organization Organization Unit E mail key size Fassphrase Confirm Passphrase EeApply C9 Clear AFGHANISTAN AF ha y Y 1024 bit DO EJ Cancel Available parameters are listed as follows Item Name Common Name Country State Province Locality City Organization Vigor2760 Series User s Guide Description Type the name of the local certificate Type the common name for such certificate Type the name of the country that such certificate located Type the name of the state province for such certificate Type the name of the city for such certificate Type the name of the organization 183 Dray Tek Organization Unit Type a description for the organization unit E mail Type the e mail address for such certificate Key Si
66. Address Destination Address Service Action Log NAT ia Ary LAN LAN OSL Pict SB 30 _BACKIJP PPTP L2TP 00 00044 Set PCs on LAN to work at certain time interval only You may choose up to 4 schedules out of the 15 schedules pre defined in Applications gt gt Schedule setup The default setting of this field is Any and the function will always work Set the IP address es which will be filtered by such rule Use the drop down list to choose the source address and the destination address Check the box es from the drop down list to choose suitable service type Choose the action to be taken when packets match the rule Inspect The settings of filter rule can be divided into two parts A Filter Part and B Application Part When the Action is set with Inspect such filter rule will check the incoming packets with the conditions listed in A first and then B If the packets doest not match with the conditions listed in A Filter Part they will not be filtered by B but filtered by next filter rule Block Immediately Packets matching the rule settings in A Filter Part will be dropped immediately Pass Immediately Packets matching the rule settings in A Filter Part will be passed immediately Inspect w Fass immediately Block immediately The filtered information for any packet matches with such rule will be recorded in Syslog 1f such box is checked The NAT function w
67. DK NDK Download the SDK for Windows Dray Tek 30 Vigor2760 Series User s Guide 3 2 2 By Means of MyVigor Website You have to register the user account and Vigor device refer to section 3 1 before activating the WCF mechanism 1 Open System Maintenance gt gt Activation System Maintenance TR 069 Administrator setting Configuration Backup syslog and Mail Alert Time and Date Management SMMP Reboot System Firmware Upgrade Activation 2 From the following web page click Activate System Maintenance gt Activation PJ Activate Refresh Name Service Provider Start Date C Wreb Filter License N 4 You will get the following page Here we take BPjM license as an example If the trial version has not been activated you will see a Trial button in this page Yet if the trial version has been activated the Active button will be shown instead Click Active i Te ea ri OIE oe a a o gt VIS a 77 myg r drayek coom H me rage maln pap sae PRL Search G0 D About Us You have logged in as Device Information draytekfae Product yt Nickname 2760 test My Information Serial 2012070515303901 LogOut Z VigorACS SI Model Vigor2760 Series pi Rename Transfer Back Register your router here Vigor Series h Customer Survey Device s Service Expired License Vigor2760 Series User s Guide 31 Dr ay Te k 5 In the following page check the box of I
68. Daytime End Daytime Weekdays Apply Clear Cancel Specify the ending date of the schedule Specify the starting time of the schedule Specify the ending time of the schedule Check the day box to specify which days in one week should perform the schedule Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Objects Setting Schedule Schedule Object Su a Seu Name Type start Date End Date Start Daytime End Daytime Weekdays Periodically twit 192 168 1 1 says FAA paved successtully ISun Litton Tue Lived OiThu LIF ri 4 Click OK A new object profile has been created Objects Setting Schedule E Dashboard Quick Stat Schedule Object Smr e Dau de GdReset Refresh Mame Type Start Date End Date F SCH_OBJ Weekend Periodically 2012 11 13 2012 11 17 Vigor2760 Series User s Guide no Dray Tek 4 4 4 2 Schedule Group Schedule objects can be grouped under a group profile Objects Setting Schedule Dashboard Quick Sta Wizard Seiente oie Schedule Group ada Eat Delete Reset Refresh Mame Group Empty Each item will be explained as follows Item Description Add Create a new schedule group profile Edit Modify the selected schedule group profile You have to check t
69. Dr ay Te k 4 10 3 Trusted CA Certificate Trusted CA certificate lists three sets of trusted CA certificate You can upload a pre saved trusted CA certificate to Vigor router through this page i Certificate Management gt Trusted CA E Dashboard Quick Start Wizard Trusted CA Certificate fi go Upload Refresh Hame Status Type Valid From Valid To Empty Each item will be explained as follows Item Description Edit Edit the selected certificate To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected profile Download Allow you to download an existing CA certificate request from the router to your PC Upload Allow you to download an existing CA certificate request from the PC to your router Refresh Click it to refresh the web page Name Display the name of the certificate Status Display the status of the certificate Valid From Display the starting point of the valid time of the certificate Valid To Display the end point of the valid time of the certificate Trusted CA certificate obtained from other sources and stored on the PC can be uploaded to Vigor router do the following 1 Click the Upload button Certificate Management gt Trusted CA Trusted CA Certificate T EFUpload Refresh Name Status Type Valid From Empty Dray Tek 190 Vigor2760 Series User s Guide 2 3 4 The following setting pa
70. Ea Add Reset Refresh Enable Name Destination IP 4Address Mask Interface Gatey Empty Each item will be explained as follows Item Description Add Create new NAT profiles Edit Edit the selected NAT profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected NAT profile Reset Click it to rest to factory default settings Refresh Click it to refresh the web page Enable Display the activation status for such interface Enable The profile is activated Disable The profile is not activated Name Display the profile name for the static route Destination IP Display the destination address mask of the static route Address Mask Interface Display the interface that such static route uses Gateway Display the IP address receiving the packets from destination IP address mask Vigor2760 Series User s Guide 61 Dray Te k To add a static route profile please do the following 1 2 Dray Tek Click Add Static Default Route Static Route GeAdd Edi Enable fi Delete Ca Reset l Name Dest The following page appears Network gt Static Route O ashboard Selim wii Static Route Enable Mame Carrie_router Destination IP Address Mask 192 168 1 42e 32 Interface Gateway Bappy Giclear LAM LAN w 192 168 1 3 EsCancel Available parameters are listed below Item Enable Name Destinatio
71. FBALO anbltDiraboM W PGWijIPpGBOSEG DrayTek Service Activation VWeb Filter License 2012 07 09 2013 07 09 BPM D F ay Te k 32 Vigor2760 Series User s Guide 8 Click Close to return to the web configurator of Vigor router The license has been activated and displayed on the web page System Maintenance gt Activation Dashboard Quick J Activate Refresh Start Wizard Name Service Provider Start Date Expire Date Authentication Messa Wreb Filter License BFj hl 2010 07 09 2013 07 09 WebFilter Get new lic Vigor2760 Series User s Guide 33 Dr ay Te k This page is left blank Dray Tek 34 Vigor2760 Series User s Guide GP Advanced Web Configuration This chapter will guide users to execute advanced full configuration 1 Open a web browser on your PC and type http 192 168 1 1 The window will ask for typing username and password 2 Please type admin admin on Username Password for administration operation Now the Main Screen will appear Dray Tek Vigor2760 Series Login admin 15 06 36 Dashboard gt Dashboard E Dashboard Quick Start Wizard Le A Dashboard Dashboard Dashboard COLI so ra system Detail Name system Detail Data Name Connection Up Time Model Name Vigor2760n DSL P C1 Idle 00 00 00 Firmware Version 1 0 0_RC10 USB 3G_BACKUP Idle Thu Oct 4 12 04 39 Build Date OST 2012 _ _ _ _ a Web Version 1 0 0 521 g9cd4645 Configure V
72. Filter Setup and available for choosing as filter rule Vigor2760 Series User s Guide 133 Dray Tek 4 6 1 1 User Object This page allows you to configure user object profiles User Management gt User Profile Dashboard Quick Start Mizar User Object Esada r Delete Reset Refresh F Enable Mame F Enable admin Each item will be explained as follows Item Description Add Create a new user object profile Edit Modify the selected user object profile You have to check the user object profile you want and then click this button to open the edit window for modification Delete Remove the selected user object profile You have to check the user object profile you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Enable Display the activation status of the user object profile Enable The user object profile is available for choosing Disable The user object profile is not available for choosing Name Display the name of the profile The profile with a name admin is defined in default To create a new user object profile please do the following 1 Click the Add button User Object Ga Add EJE i fii ste Ge Reset d Enable Name F Enable admin Dray Te k 134 Vigor2760 Series User s Guide 2 The following setting page will appear User Object Enable Mame Type Password Confirm Password Pri
73. Guide 49 Dray Te k 4 1 2 4 LAN Status This page allows you to check LAN status of the router Network gt LAN Dashboard Quick Start Wizard Refresh Name IP Address MAC Address RX Packet TX Packet LAN LAN 192 165 1 1 O0 1d aacec oc 40 s0604 odd Each item will be explained as follows Item Description Refresh Click it to refresh the web page Name Display the profile name for LAN interface IP Address Display the LAN IP address of the router MAC Address Display the MAC address of the router RX Packet Display the total received packets via such LAN interface TX Packet Display the total transmission packets via such LAN interface 4 1 2 5 Ethernet This page can define the details settings of the LAN ports in a profile including IP settings physical interface members LAN ports on the front panel of the router and wireless interfaces SSID and WDS settings Currently two LAN interfaces may be configured for the Vigor2760 Each LAN interface can be configured to support different firewall settings servers and applications according to the settings in other configuration web pages Network gt LAN Dashboard Quick Start Wiz ES Add EJ Refresh C Enable Hame Description IF 4ddress Subnet Mask C Enable LAN LAN 192 168 1 1 255 255 255 0 Available parameters are listed below Item Description Add Create new LAN profiles Edit Edit the selected LAN profile To edit the profile simply c
74. IP address What NAT does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address to each local host In some special case you may have a public IP subnet from your ISP such as 220 135 240 0 24 This means that you can set up a public subnet or call second subnet that each host is equipped with a public IP address As a part of the public subnet the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside Therefore the router should be set as the gateway for public hosts 4 1 2 2 What is Routing Information Protocol RIP Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing This allows users to change the information of the router such as IP address and the routers will automatically inform for each other 4 1 2 3 What is Static Route When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP Below shows the configuration tabs for LAN including Status and Ethernet Network gt LAN Status Refresh Vigor2760 Series User s
75. MP packets from Internet has exceeded the defined value the router will discard the ICMP echo requests coming from the Internet The default setting for threshold and block time values are 250 packets per second and 10 seconds respectively Port Scan Port Scan attacks the Vigor router by sending lots of packets to many ports in an attempt to find ignorant services would respond Check the box to activate the Port Scan detection Whenever detecting this malicious exploration behavior by monitoring the port scanning Threshold rate the Vigor router will send out a warning By default the Vigor router sets the threshold and block time values are 2000 packets per second and 10 seconds respectively Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the settings then click Cancel to return to previous page Firewall gt DoS Defence waves sacs Dashboard DoS Defence Add GiReset Refresh Enable Mame Interface Enable test 1 LISA 3G_BACKLP Dray Te k 100 Vigor2760 Series User s Guide 4 4 Objects Setting IP address service type keyword and schedule can be pre defined as object setting The object can be applied into different setting pages to simplify the setting procedure Objects Setting Address service Type Keyword Schedule 4 4 1 Address For IPs
76. Mode Grean Field Channel Bandwidth C20 MHZ Auto 20 40 MHZ Guard Interval O Long Auto Aggregation MSO TH Power 100 w GSapply Rese Refresh Dray Tek 74 Vigor2760 Series User s Guide Available parameters are listed below Item Description Enable Mode Channel SSID Advanced Settings Vigor2760 Series User s Guide Check it to enable the wireless LAN function At present the router can connect to 11n Only 11g Only Mixed 11b 11g and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Mixed 11b 11g 11n 11g only Tin only Mixed 11b 11 Mixed 11b 11g 11n FA Means the channel of frequency of the wireless LAN The default channel is 6 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select Auto to let system determine for you Mixed 11b 11g 11n Channel 2437MHz v Auto Channel 2412W1Hz Channel 41 MHz Channels 24422w1Hz Channel 2447 MHz Channels 24432w1Hz Channels 2437 MHz Channel 44 MHz Channela 44 MHz Channel 445 MHz Channelld 245 MHz Channell 2462hHz Channell 2467 MHz Channella 247 2M1Hz It means the identification of the wireless LAN SSID can be any text numbers or various special characters The router offers 4 SSID groups to be configured for wireless LAN The default SSID groups are named with Dr
77. P It is used to specify the LAN interface for internal connection for applying such function Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display all the available user objects based on the type you specify above Selected Items Display the user object selected for such 156 Vigor2760 Series User s Guide group profile Apply Click it to save the settings Refresh Click it to remove the modification of the web page After finished the settings above click Apply to save the settings After setting Enable UPNP Service setting an icon of IP Broadband Connection on Router on Windows XP Network Connections will appear The connection status and control status will be able to be activated The NAT Traversal of UPnP enables the multimedia features of your applications to operate This has to manually set up port mappings or use other similar methods The screenshots below show examples of this facility Address S Network Connections IP Broadband Connection on Router Status AA General d Broadband Network Tasks z A hiet E Create a new connection vs Bistonnected 9 Set up a home or small mf WAN Miniport PPPOE Internet Gateway office network Status Connected peki Duration 00 19 06 See Also SI test Speed 100 0 Mbps i Network Troubleshooter SA Disconnected x mdi S DrayTek ISDN PPP Kanai Intern
78. PCs under the management of a router since they do not need to be accessed by the public Hence the NIC has reserved certain addresses that will never be registered publicly These are known as private IP addresses and are listed in the following ranges From 10 0 0 0 to 10 255 255 255 From 172 16 0 0 to 172 31 255 255 From 192 168 0 0 to 192 168 255 255 4 1 1 2 What are Public IP Address and Private IP Address As the router plays a role to manage and further protect its LAN it interconnects groups of host PCs Each of them has a private IP address assigned by the built in DHCP server of the Vigor router The router itself will also use the default private IP address 192 168 1 1 to communicate with the local hosts Meanwhile Vigor router will communicate with other network devices through a public IP address When the data flow passing through the Network Address Translation NAT function of the router will dedicate to translate public private addresses and the packets will be delivered to the correct host PC in the local area network Thus all the host PCs can share a common Internet connection 4 1 1 3 Get Your Public IP Address from ISP In DSL deployment the PPP Point to Point style authentication and authorization is required for bridging customer premises equipment CPE Point to Point Protocol over Ethernet PPPoE connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator This
79. Pass allow accessing into the corresponding webpage with the categories listed on the box below Block restrict accessing into the corresponding webpage with the categories listed on the box below If the web pages do not match with the specified feature set here it will be processed with reverse action Keyword Object Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display all the available keyword objects and keyword groups including user defined and default ones Selected Items Display the object and or group selected for such profile Categories There are several categories such as Child Protection Leisure Business Chatting Computer Internet and Other displayed in this page By clicking the small triangle you can expand the categories to get more detailed items under the category Pass Block An action to be executed for such profile Enable If you check this box when such profile is invoked the system will process the data related to such category item based on the action selected here Log If you check this box information related to such category item will be recorded in Syslog Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page Vigor2760 Series User s Guide 131 Dray Te k 3 After finished the settings above click Ap
80. Periodic Time second EaAppy GiReset GRefresh Available parameters are listed below Dray Tek Item Description Enable Check the box to enable TR 069 parameters Such data must be typed according to the ACS Auto Configuration Server you want to link Please refer to VigorACS user s manual for detailed information ACS Server URL Type the URL for VigorACS server If the connected CPE needs to be authenticated please set URL as the following and type username and password for VigorACS server http IP address of VigorACS 8080 ACSServer services ACSServlet If the connected CPE does not need to be authenticated please set URL as the following http IP address of VigorACS 8080 ACSServer services UnAuthACSSe rvlet Username Password Type username and password for ACS Server for authentication ACS Server Username Type the username for ACS Server for authentication For example if you want to use such CPE with VigorACS you can type as the following Username acs Password XXXXXX ACS Server Password Type the password for ACS Server for authentication For example if you want to use such CPE with VigorACS 194 Vigor2760 Series User s Guide you can type as the following Username XXX Password password Confirm ACS Server Type the password for ACS Server for authentication again Password for confirmation Register Interface Advanced Apply Reset Refresh Display the interface used
81. Port 4 SNMF Agent Port 161 Telnet Max Login w a Apply Reset Refresh Available parameters are listed below Item Description SSH Server Port Type the standard port numbers for such server The default setting is 22 Telnet Server Port Type the standard port numbers for such server The default Setting is 23 Vigor2760 Series User s Guide 201 Dray Te k HTTP Server Port Type the standard port numbers for such server The default setting is 80 HTTPS Server Port Type the standard port numbers for such server The default setting 1s 443 SNMP Agent Port Type the standard port numbers for such server The default setting is 161 Telnet Max Login Choose the number to determine how many remote users are allowed to telnet Vigor router through Internet Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to clear current settings and return to the settings saved previously 4 11 7 SNMP This page allows you to configure settings for SNMP Simple Network Management Protocol Service System Maintenance gt SNMP Dashboard Quick Start Wize SNMP Add EA Ge Reset C Refresh SNMP Enable Get Community Empty Each item will be explained as follows Item Description Add Create new SNMP profiles Edit Edit the selected SNMP profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the sele
82. RD CN John emailAddress john test com or C TW O Draytek Local ID optional and Peer ID optional This option is available when Pre shared Key is selected as Authentication Method above You can define a name to be used by local user and the peer user If no name specified here the system will use My WAN IP as the local ID and the Remote Host as the Peer ID configured in this web page Phasel Mode Select from Main mode and Aggressive mode The ultimate outcome is to exchange security proposals to create a protected secure channel Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session However the Aggressive mode is faster The default value in Vigor router is Main mode IKE Proposals To propose the local available authentication schemes and encryption algorithms to the VPN peers and get its feedback to find a match We suggest you select the combination that covers the most schemes Custom Auto C a aj Hi Phasel Phase2 It is available if Custom for IKE Proposals is selected above Simply move your mouse on each item and click on it A pop up dialog will appear for you to modify the value of Hash Cipher Hash DES MIDS IDES MOS AFS120 MIDS AES192 MIDS AF S256 MOS EOU E E 66 99 There are several options offered in default If you click the button to remove one of them a button will appear to let
83. Refresh Click it to remove the modification of the web page After finished the settings above click Apply to save the settings Vigor2760 Series User s Guide 155 Dray Te k 4 7 3 UPnP The UPnP Universal Plug and Play protocol is supported to bring to network connected devices the ease of installation and configuration which is already available for directly connected PC peripherals with the existing Windows Plug and Play system For NAT routers the major feature of UPnP on the router is NAT Traversal This enables applications inside the firewall to automatically open the ports that they need to pass through a router It is more reliable than requiring a router to work out by itself which ports need to be opened Further the user does not have to manually set up port mappings or a DMZ UPnP is available on Windows XP and the router provide the associated support for MSN Messenger to allow full use of the voice video and messaging features E Dashboard Enable External Interface Internal Interface E Apply Refresh L DSL PC v Available Items Selected Items D G2 O i Available parameters are listed below Item Enable External Interface Internal Interface Dray Tek Description Check this box to enable this profile It is used to specify the WAN interface for external connection for applying such function The default setting is PVC1 DSL PWC wi DSL PCI USB 3G BACKU
84. Service Provider service Type Domain Mame Username Password Confirm Password Wildcard Backup Mi Mail Exchanger EdApply GiClear DONS _ 1 OSL PWC w DynDNS w Dynamic dnsorgy DONS forgeneral Mail carrie draytek com EJ Cancel Available parameters are listed below Item Enable Name External Interface Service Provider Service Type Vigor2760 Series User s Guide Description Check this box to enable the current account Type a name for such profile While connecting the router will use PVC 1 or 3G_BACKUP as the channel for such account Choose the one you want DSL PWC iv USB 3G BACKUP Select the service provider for the DDNS account DynDNS DynDNs No IP ChangelP DONS TwoDNS vigorDONS CERA Huagal Select a service type Dynamic Custom or Static If you choose Custom you can modify the domain that is chosen in the Domain Name field 153 Dray Tek Domain Name Username Password Confirm Password Wildcard Backup MX Mail Exchanger Apply Clear Cancel Dynamic Custom Static Type in one domain name that you applied previously Use the drop down list to choose the desired domain Type in the name that you set for applying domain Type in the password that you set for applying domain Type in the password again for confirmation The Wildcard and Backup MX Mail Exchange features are not supported for all Dynam
85. Stibenpiec tes aaisasseacmiaecetien fececeesaasaugneeeeantoaracaateee 122 4 5 1 Application Filter cccccccscccecssceceseeeceeeeeceeeeeseeessaseessaeeeseaeeeseeeeseeeesaeeeeseeessueeessagees 122 4 5 2 URL Content Filter ccccccceccceceeeeeseeeeeeeeeeeeeeeeseeeeeeeeseeeeseeeeeeeseeaseeeeeeeessaaaaeeeeeess 124 4 5 3 Web Content Filter ccccccceccceeeceeeeseeeeceeeeeeeeeeseeceeeeessseeeeeeeeesseeeaaeeeseesessasaaseeeees 128 4 5 3 1 Web Content Filtet cap cssenearastanedpsnceaitiep cade adepdstatadeoctavenisncetpetncetasadptesetcapanstvienseeds 129 AD IZ POVANCCO vines sninpuiesieveriedamedniasxpermicsvviraedannijesasaianviesniieasutectnnnedamedrivasbeleicanvsetondts 132 4 6 User Manageme n cccccccccssseeeccceeeeeececsaueceeeceessececesseaseceeesseaecesesseaseeeesssaeeeesssaaneeeess 133 Dray Te k vi Vigor2760 Series User s Guide A 6 1 User Profile en een ee nee eee eee eee 133 IO Td ISO OD OG iE R E ERE RE O 134 e T Oe E E EEE E EE E ener ee EEE 137 A 62 RADIUS ocene ena ERRE E PEO E EE ENEE T EAEE 140 AG FIN NGOS eee e E E E E a E EENES 142 464 OY SIS SIN Oss ctscrcites as copecictin sn seca se eecinca tenascin E A EE EE EAEE REENER 145 4 6 4 1 Example for Advertisement 1cccccccccseeeccsesecsseeecseeecssueeessusesseeeessesessaeeesseeesans 145 ATO OIG AU ON a iarcaoas sictnsaassintiesestanteawnnieap oniiaria E E E A Siiinidibtanaicen 147 4 7 1 Local DNS ae nea Pe Pe ene eee 147 BATTO eee e na an eee
86. Type a name of the receiver E mail Receiver Type the e mail address of the receiver E mail to Name E mail Receiver John john draytek com id SSL TLS Check the box to enable the network connection 199 Dray Tek 3 Apply Clear Cancel 4 11 5 Time and Date This page allows you to specify where the time of the router should be inquired from Time and Date System Time Time one Daylight Saving Mode NTP Server Update Interval hours GaApply Reset System Maintenance gt Time and Date with SSL TLS encryption Not every SMTP server supports such function However if the SMTP server you specify here supports such feature you can check this box to avoid wiretapping the communication between the SMTP server and the client Test Description Simply type the description in the box The content will be seen by the receiver Send Test Mail Make a simple test for the e mail address specified in this page Please assign the mail address first and click this button to execute a test for verify the mail address is available or not Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page After finished the settings above click Apply to save the settings then click Cancel to return to previous page Dashboard Quick Start Wize 1970 01 13 25 05 27 UTC Greenwich Mean Time Dublin w LI Synchronize with NTP Server
87. UEL Filter Block IP Address Access Empty Each item will be explained as follows Item Description Add Create a new filter profile Edit Modify the selected filter profile You have to check the filter profile you want and then click this button to open the edit window for modification Delete Remove the selected filter profile You have to check the filter profile you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile Action Display the action applied to the profile Log Display the type of the action that the related information about that action will be recorded in Syslog URL Filter Display the URL filter applied to the profile Block IP Address Access Display the activation of IP address blocked or not Vigor2760 Series User s Guide Enable The function is enabled Disable The function is disabled 125 Dray Tek To create a new filter profile please do the following 1 Click the Add button CSM gt URL Content Filter URL Content Filter Ge Add w tag R Name Action Log 2 The following setting page will appear CSM gt URLContentFilter E Dashboard URL Content Filter Name CdD Action Block Log Mone eee Available Items selected Items IKWO OBJ bmp KND OBJ dib KID OBJ pex MAND OBJ pic Block IP Address Access Cookie Filter
88. able parameters are listed below Item Description Enable Check the box to enable such function Name Type a name of the profile Interface Choose an item as the original WAN interface None ow DSL FYC USB 3G_BACKUP Failover Pool It displays all the available interfaces The selected item shall not be the same as the one selected in Interface The interface selected in Selected Items is the failover interface when the original WAN interface disconnects Apply Click it to save the settings Vigor2760 Series User s Guide 69 Dray Te k Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the settings i Network gt Failover Failover aaa Eet Delete Reset Refresh Enable Mame Interface Failover Pool US i Enable Travel paired KLIP OSL PY 4 1 10 Switch This page allows you to configure physical port setting and LAN port mirror settings 4 1 10 1 Switch This page allows you to configure the line speed of the LAN port and set the port mirror configuration Network gt Switch Dashboard Guic Physical Port Refresh L Name Port Type O Porti Switch C Port Switch O Pota Switch Porta Switch Available parameters are listed below Item Description Edit Edit the selected profile To edit the profile simply check the profile box you want to edit and then click this butt
89. acters are allowed Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display the available object profiles Selected Items Display the object profiles selected for such group Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 11 Dray Tek 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Sodas lise Service Type Group Name Group Hie 192 168 1 1 says HHE Saved successfully 4 Click OK A new group profile has been created Objects Setting gt Service Type Sees a a Service Type Group adi edt Delete Rese Refresh Name Group SR _GRP Senice1 SR _OBJ HTTP SRY _OBJ FTP 4 4 3 Keyword You can set keyword object key word group profiles for choosing as black white list in CSM gt gt URL Web Content Filter Profile In addition the system offer some pre defined keyword objects and keyword groups to fit your request 4 4 3 1 Keyword Object This page is simply used to define the keyword object Objects Setting Keyword E Dashboard amp Quick Start Wizat Keyword Object Bae ei ee a hte a a E LT Gada Geot Delete GdReset Refresh Name Content Empty Each item will be explained as follows Item Description Add Create a new service type group profile Edit Modify the selecte
90. ad Allow you to upload lists on the host to the router Refresh Click it to refresh the web page Name Display the name of the file Status Display the status of the file Revocation List obtained from other sources and stored on the PC can be uploaded to Vigor router do the following 1 Click the Upload button Certificate Revocation List K E E Upload Refresh Mame Status Empi 2 The following setting page will appear To specify a CRL file click the Select File button to locate the one you want Certificate Revocation List CRL File iett myrootca cri a Apply fii Clear Ei Cancel Dray Te k 192 Vigor2760 Series User s Guide 3 After finished the selection click Apply to upload the file Certificate Management gt Certificate Certificate Revocation List EJ Edit ij Delete FJ Download Ea Upload CJ Refresh Mame Status _Rootla 4 Click Edit to open the following page This page displays the issuer information for your reference Certificate Management gt Certificate E E Dashboard amp Quick Start W izard Certificate Revocation List Name status Valid Issuer C PAS T Hsinchu L Hokou O Draytek OU ROS Ch RootlA femallAddress rootcai draytek carr Bj Apply fy Clear x Cancel 5 If required you can modify the name of the certificate e g for identification and click Apply to save the change If not click Cancel to return to previous p
91. address for the specified PC that DHCP assigned IP address for it IP Address It displays the IP address assigned by this router for specified PC Host It displays the host ID name of the specified PC 4 12 4 Data Flow Monitor This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds The IP address listed here is configured in Bandwidth Management You have to enable IP bandwidth limit and IP session limit before invoke Data Flow Monitor If not a notification dialog box will appear to remind you enabling it Diagnostics gt Data Flow Monitor Data Flow Monitor Block Pass BLogouwt Refresh C IP Address User Session Expired Time Login Time Idle Time Status 1927 168 1 100 admin 0 1970 01 07 18 41 13 01 57 06 Each item will be explained as follows Item Description Block Prevent specified PC accessing into Internet within 5 minutes Pass The device with the IP address 1s allowed to access into Dray Te k 208 Vigor2760 Series User s Guide Internet Logout Force the selected login user leaving the web user interface of Vigor router Simply check the box of the one to be exited then click this button to force it logging out Refresh Click it to refresh the web page IP Address Display the IP address of the monitored device User Display the identification of the one e g admin user who wants to access into Internet Session Display the
92. after 11 00PM ce 192 168 1 1 PRE_ADY html MBS 192 168 1 1 PRE_ADY html Warning Do not use the computer after 11 00PM Vigor27 60 Series Username Password 4 7 Applications Below shows the menu items for Applications Applications Local ONS Dynamic DNS UPnP IGMP 4 7 1 Local DNS You can define the IP address mapping to a specified domain name When a user inquires that domain name the request will be sent to local DNS first which can speed up the inquiry 4 7 1 1 Service This page is used to add new domain name profiles and modify the profiles whenever you want Applications gt Local DNS sAdd EJE fi Dele GaReset Refresh Name Empty Each item will be explained as follows Item Description Vigor2760 Series User s Guide 147 Dray Te k Add Create a new DNS profile Edit Modify the selected DNS profile You have to check the DNS profile you want and then click this button to open the edit window for modification Delete Remove the selected DNS profile You have to check the DNS profile you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile To create anew DNS service profile please do the following 1 Click the Add button addi KA fi GaReset Mame 2 The following setting page will appear Applications gt Local
93. age 4 11 System Maintenance For the system setup there are several items that you have to know the way of configuration TR 069 Administrator Setting Configuration Backup Syslog and Mail Alert time and Date Management SNMP Reboot System Firmware Upgrade and Activation Below shows the menu items for System Maintenance System Mainten ar Administrator Setting Configuration Backup Syslog and Mail Alert Time and Date Wanagement SNMP Reboot System Firmware Upgrade Activation 4 11 1 TR 069 Vigor router with TR 069 is available for matching with VigorACS server Such page provides VigorACS and CPE settings under TR 069 protocol All the settings configured here is for CPE to be controlled and managed with VigorACS server Users need to type URL username and password for the VigorACS server that such device will be connected However URL username and password under CPE client are fixed that users cannot change it The Vigor2760 Series User s Guide 193 Dray Tek default CPE username and password are vigor and password You will need it when you configure VigorACS server ystem Maintenance gt TR 069 Dashboard TR 069 Enable ACS Server URL o Ja ACS Server Username a ACS Server Password z Confirm ACS Server Password lt Fegister Interface DSL P C1 Y Advanced Port S069 CPE URL Att B06 Sicwmecreg CPE Username vigor CPE Password Confirm CFE Password Periodic Update
94. alue for FTP port is 21 Just keep the default setting Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to clear current settings and return to the settings saved previously Vigor2760 Series User s Guide 167 Dray Te k 4 9 VPN and Remote Access A Virtual Private Network VPN is the extension of a private network that encompasses links across shared or public networks like the Internet In short by VPN technology you can send data between two computers across a shared or public network in a manner that emulates the properties of a point to point private link Below shows the menu items for VPN and Remote Access Service Control LAN to LAN Remote Dialin User tats 4 9 1 Service Control Enable the necessary VPN service as you need If you intend to run a VPN server inside your LAN you should disable the VPN service of Vigor Router to allow VPN tunnel pass through as well as the appropriate NAT settings such as DMZ or open port VPN and Remote Access gt Service Control Dashbo Service Control PPTP WPN Service LATP WPN Service IPsec WPN Service Ed Apply Refresh Available parameters are listed below Item Description PPTP VPN Service Check the box to enable such service L2TP VPN Service Check the box to enable such service IPsec VPN Service Check the box to enable such service Apply Click it to save the settings Refresh Cl
95. ame Type Group EsApply iClear Family 2F Local ka Available Items Selected tems admin carrie GS Erian EJ Cancel Available parameters are listed below Item Enable Name Type Group Description Check this box to enable the user object Type a name for such user group Choose the type you want to display the available user objects External Local External Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display all the available user objects based on the type you specify above Selected Items Display the user object selected for such 138 Vigor2760 Series User s Guide group profile Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears IA User Group Enable Name Family _2F Type fit 192 168 1 1 says FAB Sroup Saved successfully 4 Click OK A new user group profile has been created f Dashboard Quick Start User Management gt User Profile Cis Slits User Group g Ace i dit elete aiReset Gy Refresh Add GXEdit Del Ga R O Refrest Enable Name Type Group Enable Family 2F Local Vigor2760 Series User s Guide 139 Dr ay Te k 4 6 2 RADIUS Remote Authentic
96. and get into Utilities Double click Terminal The Terminal window will appear Type ping 192 168 1 1 and press Enter If the link is OK the line of 64 bytes from 192 168 1 1 icmp_seq 0 ttl 255 time xxxx ms will appear 216 Vigor2760 Series User s Guide 60 8 Terminal bash 80x24 Last login Sat Jan 3 B2 24 16 on ttypi Welcome ta Darwin Vigorla draytekd ping 192 168 1 1 PING 192 168 1 1 192 168 1 1 56 data bytes 64 bytes from 192 165 1 1 tcomp_seq 6 ttl 255 times8 755 ms 64 bytes from 192 165 1 1 icmp_seg 1 ttl 255 times8 697 ms t bytes from 192 165 1 1 icmp_seg 2 ttl 255 times6 716 ms 64 bytes from 192 165 1 1 icmp_seg 3 ttl 255 timesh 731 ms 64 bytes from 192 168 1 1 tcmp_seq 4 ttl 255 timesh 72 ms AE 192 168 1 1 ping statistics EF packets transmitted 5 packets received 6 packet loss round trip minfgaygemax 0 697 6 7236 755 ms Vigoria draytekd fj 5 4 Checking If the ISP Settings are OK or Not Open Network gt gt WAN and check whether the ISP settings are set correctly Network t WAN LAM MAT LIAR static Route Dynamic Route ONS Gualty of Service Failover Switch Network gt WAN CDashboat DSL ada Gea Delete Refresh Enable Mame Description Profile Type Default Enable OSL PYT Both Enable Vigor2760 Series User s Guide 217 Dray Te k 5 5 Backing to Factory Default Setting If Necessary Sometimes a wrong connection can be improved by returni
97. at this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization Dray Tek 128 Vigor2760 Series User s Guide 4 5 3 1 Web Content Filter CSM gt Web Content Filter f Da shboard GL Web Content Filter C0 EA Ga Adad GdReset Refresh Log Empty Each item will be explained as follows Item Add Edit Delete Reset Refresh Name Log Description Create a new filter profile Modify the selected filter profile You have to check the filter profile you want and then click this button to open the edit window for modification Remove the selected filter profile You have to check the filter profile you want and then click this button Click it to retrieve the default settings of this page Click it to fresh the web page Display the name of the profile Display the type of the action that the related information about that action will be recorded in Syslog To create a new filter profile please do the following 1 Click the Add button O heiii Web Content Filter Advanced EI Add Rese Re Vigor2760 Series User s Guide Hame Log 129 Dray Tek Dray Tek The following setting page will appear Ee reviteresntces i Web Content Filter Mame Log Alack white List Categories Child Protection Leisure Business Chating a Computer Internet Ot
98. athroom The router should be used in a sheltered area within a temperature range of 5 to 40 Celsius Do not expose the router to direct sunlight or other heat sources The housing and electronic components may be damaged by direct sunlight or heat sources Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards Keep the package out of reach of children When you want to dispose of the router please follow local regulations on conservation of the environment We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials we will at our discretion repair or replace the defective products or components without charge for either parts or labor to whatever extent we deem necessary tore store the product to proper operating condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal value and will be offered solely at our discretion This warranty will not apply if the product is modified misused tampered with damaged by an act of God or subjected to abnormal working co
99. ation Dial In User Service RADIUS is a security authentication client server protocol that supports authentication authorization and accounting which is widely used by Internet service providers It is the most common method of authenticating and authorizing dial up and tunneled network users The built in RADIUS client feature enables the router to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management User Management gt RADIUS Dashboard RADIUS Ga Add Reset Refresh Name Server IP Address Port Empty Each item will be explained as follows Item Description Add Create anew RADIUS group Edit Modify the selected RADIUS profile You have to check the RADIUS profile you want and then click this button to open the edit window for modification Delete Remove the selected RADIUS profile You have to check the RADIUS profile you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile Server IP Address Display the IP address of the RADIUS server Port Display the port number of the RADIUS server To create anew RADIUS profile please do the following 1 Click the Add button User RADIUS Ea Add E Gal Re Name Serve Dray Te k 140 Vigor2760 Series User s Guide 2 T
100. ayTek1 to DrayTek4 We suggest you to change it These SSID groups can be configured by clicking on each SSID item Refer to the later sections for detailed configuration Tx Burst This feature can enhance the performance in data transmission about 40 more for 11g station It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke 75 Dray Tek the function too Preamble Type This option is to define the length of the sync field in an 802 11 packet Most modern wireless network uses short preamble with 56 bit sync field instead of long preamble with 128 bit sync field However some original 11b wireless network devices only support long preamble Operation Mode Mixed Mode allows the router to transmit data with the ways supported in both 802 1 1a b g and 802 11n standards However the entire wireless transmission will be slowed down if 802 11g or 802 11b wireless client is connected Green Field allows the router to get the highest throughput Such mode can make the data transmission happening between 11n systems only In addition it does not have protection mechanism to avoid the conflict with neighboring devices of 802 1 1a b g Channel Bandwidth The router can use 20Mhz for data transmission and receiving between the AP and the stations Or it can use 20Mhz or 40Mhz for data transmission
101. board URL Content Filter Mame URL Java_scr Action Block Log None URL Filter l Available Items Selected tems PF frit 192 168 1 1 ay HBA maved successfull fa 4 Click OK A new group profile has been created CSM URL Content Filter E Dashboard Quick Start W URL Content Filter Ga add EJ Edit Delete Ged Reset O Refresh Name Action Log URL Filter Block IP Address Access URL Java Block None scr Java Disable 4 5 3 Web Content Filter We all know that the content on the Internet just like other types of media may be inappropriate sometimes As a responsible parent or employer you should protect those in your trust against the hazards With Web filtering service of the Vigor router you can protect your business from common primary threats such as productivity legal liability network and security threats For parents you can protect your children from viewing adult websites or chat rooms Once you have activated your Web Filtering service in Vigor router and chosen the categories of website you wish to restrict each URL address requested e g www bbc co uk will be checked against our server database This database is updated as frequent as daily by a global team of Internet researchers The server will look up the URL and return a category to your router Your Vigor router will then decide whether to allow access to this site according to the categories you have selected Please note th
102. btain DNS server address automatically Internet Protocol TCP IP Properties General Alternate Configuration You can get IP settings assigned automatically if your network supports thie capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address Use the folowing ONS server addresses ar ees For Mac OS 1 Double click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop down list of Configure Pv4 aa Network Aae a Show All Displays Sound Network Startup Disk Location Automatic Show Built in Ethernet TCP IP PPPoE AppleTalk Proxies IP Address 5 Renew DHCP Lease Subnet Mask 255 255 255 0 DHCP Client ID If required Router 192 168 1 1 DNS Servers Optional Search Domains Optional IPv6 Address fe80 0000 0000 0000 020a 95ff fe8d 72e4 rr Click the lock to prevent further changes Assist me Apply Now Vigor2760 Series User s Guide 215 Dr ay Te k 5 3 Pinging the Router from Your Computer The default gateway IP address of the router is 192 168 1 1 For some reason you might need to use ping command to check the link status of the router The most important thi
103. cccccccccceeeceeesseeeeeeeeeesaaeeeeeesessaeeeeeeeeees 213 5 2 Checking If the Network Connection Settings on Your Computer Is OK or Not 0 214 FO WVIAC VU S ca ssa eae eens ate tte ee ee cece wee ee tee ee 214 FOMC hs eee enn E E een eee en eee re eee ee eer ree 215 5 3 Pinging the Router from Your Computer cccccccseeseeeeceeeeeeeaeeeeeeeeeseseeeeeeeeeeeeessaaeeeeeeeees 216 POW WV IO OWS aar coeds cee tees NEE EAEE EE EENE EE E E deco tears ares EEEE R 216 FOP IMAC OS TT T abeacostes EE E EES EEE E E E 216 5 4 Checking If the ISP Settings are OK or Not sssssssnnnnnnnssssseesssssrrrrnnnrnnrreessssrrrnnnnnnnnnnneeeeee 217 5 5 Backing to Factory Default Setting If Necessary nnnnnnnnssseeseeennnnnnnnnnrrrereessrrrrrnnnnnrrreees 218 SOENE AAEE 2 PEE E AAA IEE AS O ne A EN AAAS EE N eee A EET 218 FIALOWANC POSOL oessa i EEE EEEa 218 5 6 Contacting Your Dealer cccccccseeecccceeeceeeseeeeceeeeceaeeeseeeeeeeeeseeeaseeceeessuaaaseeeeeeeessaaeseeeeeeeees 219 D ray Tek Viii Vigor2760 Series User s Guide O introduction The Vigor2760 series are the routers with high speed in data transmission through DSL port and LAN ports With the development of NGN Next Generation Network you may recently hear the news about FTTx deployment in your local area or even have already subscribed the unbundling last mile service e g VDSL2 from local ITSP for FTTx As adopting FTTx the main question for end us
104. che Table fi Delete Refresh IP Address Hardware Type MAC Address Interface 192 16 1 100 ether e0 cb 4e da 48 9 Each item will be explained as follows Item Description Delete Remove the selected line You have to check the line you want and then click this button Refresh Click it to refresh the web page IP Address Display the IP address of the host Hardware Type Display the type of hardware e g ether means Ethernet Vigor2760 Series User s Guide 207 Dr ay Te k MAC Address Display the MAC address of the host Interface Display interface to which packets for this route will be sent 4 12 3 DHCP Table The facility provides information on IP address assignments This information is helpful in diagnosing network problems such as IP address conflicts etc Diagnostics gt DHCP Table E Dashboard Quick Start Wizard gt DHCP Table Refresh Expire Date Time MAC Address IP Address Hast 1970 03 08 20 23 28 1c b0 94 18 bd 7d 192 168 1 14 android 6e332589a021832d 1970 03 08 01 23 02 B db 7 94 01 dd 192 168 1 34 android_8212e958633932c3 1970 03 07 16 54 27 69 09 27 dc 20 e8 192 168 1 27 1970 03 03 03 59 36 68 09 27 d1 07 9d 192 168 1 28 Anna Wang 1970 03 05 17 26 32 eD ch de da 4o 4 192 168 1 16 carrie 0crch25 1 Each item will be explained as follows Item Description Refresh Click it to refresh the web page Expire Date Time It displays the leased time of the specified PC MAC Address It displays the MAC
105. ckets doest not pass the identity authentication they will not be filtered with current filter rule B but filtered by next filter rule directly 4 3 2 2 Default Rule When there is no filter rule existed or the incoming packets cannot match with any filter conditions they will be filtered by the default rule configured in this page Firewall gt Filter Setup E Dashboard Quick Start Wizara Filter Rule Default Rule Action Block immediately Log LI MAT Jappy clear Reset Vigor2760 Series User s Guide 97 Dray Te k Available parameters are listed below Item Description Action Choose the action to be taken when packets match the default rule Log Check the box to record related information on Syslog NAT Check the box to enable the NAT function Apply Click it to save the settings Clear Click it to remove the modification of the web page Reset Click it to retrieve the default settings of this page 4 3 3 DoS Defence As a sub functionality of IP Filter Firewall there are several types of detect defense function in the DoS Defence setup The DoS Defence functionality is disabled for default Firewall gt DoS Defence Dashboard Quick Start A DoS Defence ada E m Reset N Refresh C Enable Mame Interface Empty Each item will be explained as follows Item Description Add Create a new rule profile Edit Modify the selected rule profile You have to check the rule you want and then clic
106. create a new one A dialog box will be popped up Acea E cCancel Allowed Users User Mame admin Privilege Readiirite O Read Only Gappy Ocea cancel User Name Use the drop down list to select a name from a list of available users or user groups created under User Management gt gt User Profile Privilege Determine the right read write or ready only that such user profile will have Dray Te k 162 Vigor2760 Series User s Guide Apply Save the settings Clear Remote the settings Cancel Ignore the settings and exit the dialog If you have successfully created a user profile you will see a page similar to the following Descriptions Allowed Users User Mame Privilege admin Readtyrite J Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to exit the web page without saving the configuration 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Tare Mame Home are Path ESC eee TT escriptions E Saved Successfully Yank Mea Arane 4 Click OK A new profile has been created Disk Share adaa Eat Delete Reset Refresh Share Name Share Path Descriptions Home For photos Vigor2760 Series User s Guide 163 Dr ay Te k 4 8 2 1 General This page allows you to enable or disable the SAMBA service For the NetBios service of USB storage disk yo
107. cted SNMP profile Reset Click it to rest to factory default settings Refresh Click it to refresh the web page SNMP Enable Display the activation status for such interface Enable The SNMP profile is activated Disable The SNMP profile is not activated Get Community Display the name for getting community To add a SNMP profile please do the following 1 Click Add Dray Te k 202 Vigor2760 Series User s Guide System Maintenance gt SNMP SNMP Madi K Mi Reset SNMP Enable Get Community 2 The following page appears Dashboard SNMP SNMP Enable Get Community Manager IF IP Address g SNMP Event All oo Sa Apply fi Clear E4 Cancel Available parameters are listed below Item Description SNMP Enable Check the box to enable such profile Get Community Set the name for getting community by typing a proper character The default setting is public Manager IP Set one host as the manager to execute SNMP function Please type in IP address to specify certain host Click the button to add a new IP address SNMP Event Specify the items to be executed by SNMP function Al v All Event Available events will be shown as follows You have to specify the event you want by checking the box related to that event Vigor2760 Series User s Guide 203 Dray Te k SNMP Event system Interface At Ip ChIP ME UDOP E OMOUOOOUOOWOUOo oO Transmission oN hr E All All even
108. d objects and groups pre defined and stored in Vigor router Click the Default Keyword Object and the Default Keyword Group tab for viewing the details Refer to the following two figures SIO hee eae Default Keyword Object Bilitiiia aes Meals Dray Tek Refresh M 4 1 300f77 H Name Content EVD OBJ bmp bmp KMVD_OBJ dib dibs o_O git itt EVVWO_OBJ jpeg jpegs EVD _ OBJ jpg JOS EMVD_ OBJ jpg jJpg25 EKVMVD_OBJ jp ipf EVD OBJ pct pet EMD OBJ pcx pex Kow _OB pic pics KEMVD_OBJ pict picth KMD OBJ png Argh 116 Vigor2760 Series User s Guide Keyword Object Refresh Mame KVWD_GRP Image EMVD_GRP Video KVWD_ GRP Audio KMWO_ GRP Java KVWD_ GRP Activex 4 4 4 Schedule MOFU Group Hee seh itis Default Keyword Group Group EVVD_ OBJ bmp EVVD_OBJ dib KVvO_OBJ gif EVVD_OBJ jpeg EVV D_OBJ jpg EVVD_OBJ Jpg KEVvWO_OBJ jp EVWDO_OBJ pet EVVD_OBJ pexs KVVvWO_OBJ pic EVWD_OBJ pict EVWD_OBJ prng EVVD_OBJ tif EMD OBJ tiff KVVD_ OBJ ast EVVD_OBJ avi KVVO_OBJ mov EVVD_OBJ mpe KVvO_OBJ mpeg EVD _OBJ mpg EVVWO_ OBJ mp4 EVO OBJ gt EMWO_OBJ 1m KVvWO_OBJ awry EMVD_OBJ Sap kow D OBJ Sapp EVVD_OBJ 3qpp2 KVVD_OBJ 3g EVVD_ OBJ aac EVVO_OBJ aiff EVVWD_OBJ au EYVD_OBJ mpa EVVD_OBJ mda KVvO_OBJ m p EVO OBJ ogg EVO OBJ ra EVD OBJ ram EMD OBJ vox EVD OBJ war EVD OBJ win IVD _ OBJ lass KVWO_OBJ jad EY D_OBJ
109. d service type group profile You have to check the service type group you want and then Dray Te k 112 Vigor2760 Series User s Guide click this button to open the edit window for modification Delete Remove the selected service type group You have to check the service type group you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile Content Display the content defined in this profile To create a new keyword object profile please do the following 1 Click the Add button Keyword Object Keyword i FJ Add Res Mame Content 2 The following setting page will appear Objects Setting gt Keyword Keyword Object WAJ E T Mame Content yahoo msn skype Bappy clear E Cancel Available parameters are listed below Item Description Name Type a name for this group profile Maximum 15 characters are allowed Content Type the keyword one by one and separate the words with comma Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page Vigor2760 Series User s Guide 113 Dray Te k 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Keyword Object Baie ite ear ae eh te De Name Content fh 192 168 1 1 says MAA Bappy Ec paved
110. disk with different applications Then the client can use the FTP site USB storage disk or share the Samba service through Vigor router USB Applications USB Status SAMBA FIP Server 4 8 1 USB Status This page displays the storage status of the USB disk which users can access via FTP or Samba If you plug in one USB disk related information will be shown here If you plug in two USB disks then both of them will be displayed at the same time Vigor2760 Series User s Guide 159 Dray Te k 4 8 1 1 Disk Status This page display the general information of the USB disk connected USB Applications gt USB Status 7 Dashboard Quick Start Wiz Disk Status MCAT Refresh Usage Total sed Available File System Mount Path Device 3 37 512 MB 1 220 MB 36 292 MB JFFS2 Internal Storage Each item will be explained as follows Item Description Refresh Click it to fresh the web page Usage Display the percentage of the disk space used Total Display the total storage of the disk Used Display the disk space in used Available Display the remaining disk space File System Display the file system of the disk Mount Path Display the file system path where a storage device can be accessed Device Display the type of the hardware storage disk 4 8 1 2 Printer Status This page display the general information of the USB printer connected USB Applications gt USB Status HA anie Printer Status Refresh Status Ma
111. e Disable 4 1 9 Failover This page will determine which interface will be treated as a backup interface when the original WAN interface disconnects without any reason Network gt Failover n Dashboard T Start Wizard Failover ade G fi Reset Refresh Enable Mame Interface Failover Poal Empty Each item will be explained as follows Item Description Add Create new failover profiles Edit Edit the selected failover profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected failover profile Reset Click it to rest to factory default settings and remove all of the failover profile Refresh Click it to refresh the web page Enable Display the activation status for such interface Enable The profile is activated Disable The profile is not activated Name Display the profile name for the static route Interface Display the interface used by such profile Failover Pool Display the interface s selected as the failover interface D F ay Te k 68 Vigor2760 Series User s Guide To add a static route profile please do the following 1 Click Add Failover CgAdd KA 1 Enable Mame Inter 2 The following page appears Dashboard Quic NEUES EMEA ee Failover Enable Name Intertace USA 3G BACKUP 4 Failover Pool Available items Selected tems USB 3G BACKLI DSL PWC a B E cj Bappy Ocea Escancel Avail
112. e Disable 4 Now you have configured the SSID2 successfully Dray Tek 78 Vigor2760 Series User s Guide 4 2 3 WPS WPS Wi Fi Protected Setup provides easy procedure to make network connection between wireless station and wireless access point vigor router with the encryption of WPA and WPA2 internet Wireless Card Installed Connection via WPS 8 F iil Station set SSID and lt gt Encryption WPA WPA2 Note Such function is available for the wireless station with WPS supported It is the simplest way to build connection between wireless network clients and vigor router Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time He she only needs to press a button on wireless client and WPS will connect for client and router automatically There are two methods to do network connection through WPS between AP and Stations pressing the Start PBC button or using PIN Code On the side of Vigor 2760 series which served as an AP press WPS button once on the front panel of the router or click Start PBC on web configuration interface On the side of a station with network card installed press Start PBC button of network card WLAN Card Vigor2760 Series User s Guide 79 Dr ay Te k If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to c
113. e EARE ERARIK R NAET AS 198 7s Fa Vo Yad 4 S93 16 BB gt gt cee ee ea eee ee 200 ATELO IACI ONT Cl sufesinari asin eaniatsnatdaeeramain stan dude nisetoneuhena tana EA E wuacealleceaen 201 TN aT PR esc assets es ta ee cies ese se to te eee sees a ge es ce ate 202 Taba ro gl 816 0 Mes 2 0 eee E N E ee ee ee ee 205 Ais tao IRINA e UD dE a E fears seectea sence sods eases tase uses ascesinieaaecnadonce cannes 205 AAA Mig WO ACUI CUI OM cewsaee css uesraeacatacesaconcacsesateeredasimadatesacsogueadeceacgesvaiocenecsmeodeceteessenaresaaumaconsesats 206 A12 Dagos C secs cctenc Sansa E E E EOE 207 4 12 1 Routing Table 20 0 cecccccccseeeeeeeeceeeseceeeeeeeeeeeeeseeeeeeesseaeseeeesseaeeeeessaaaeeeeesaaaeeeesesseases 207 Vigor2760 Series User s Guide vii Dray Tek 4 12 2 ARP Cache Table ccc ccccccccccccsceccececsceccucececucscaucusecsceeaueececseauausecscauaueenscseauaunenenseas 207 4123 Daal gt pee ee ee ee ee ee ee eee 208 4 12 4 Data Flow MONitor cccccccccccceececeeeeeceeceeceeeeeseceeeeeeeseeceseueeeseeeeeseueessaucessueeesseeeesaees 208 4 12 5 System Table sessirnir iiia iea anii 209 4 126 Me AS AN UN tt ccs orice eet cece rss a ET 211 4 12 7 Web SYSIOQ ccccccccseeeeeccceeeeeeeseeeeeeeeeeeeeeseeeeeeeeessseeesseeeeeeeesseesseeeeeeeeesaaeaseeeeeeeesanseeeees 212 TOUDE SIO OWING orreee E su eaewacu seduces tees tevetare teas teuss 213 5 1 Checking If the Hardware Status Is OK or NoOb cc
114. e and wait for the following dialog appears Objects Setting gt Schedule lt TR ely 288 Schedule Group Mame Dragon Plan Group TE fui 192 168 1 1 says FAA saved successfully Vigor2760 Series User s Guide 121 Dray Tek 4 Click OK A new group profile has been created Dashboard Guic Objects Setting Schedule Se ae ioftee Schedule Group Gadi Cleat Delete Reset Refresh Mame Group 5 S RF Dragon SCH_OBJ Weekend 4 5 CSM CSM is an abbreviation of Content Security Management which is used to control IM P2P usage filter the web content and URL content to reach a goal of security management Anplication Filter URL Content Filter Web Content Filter 4 5 1 Application Filter As the popularity of all kinds of instant messenger application arises communication can become much easier Nevertheless while some industry may leverage this as a great tool to connect with their customers some industry may take reserve attitude in order to reduce employee misusage during office hour or prevent unknown security leak It is similar situation for corporation towards peer to peer applications since file sharing can be convenient but insecure at the same time To address these needs we provide CSM functionality You can define policy profiles for IM Instant Messenger P2P Peer to Peer Protocol Misc application This page allows you to set 64 profiles for different requirements The Application Filt
115. e as the type and check the box of MAC Binding you have to specify a MAC Address of this router in the related field Type Range Start IP Address End IP Address MAC Binding MAC Address O0 50 7F 01 02 03 The router will inspect if the MAC address of the incoming packets matches with the specified MAC address or not If not the packet will be block If you choose Subnet as the type and check the box of MAC Binding you have to specify a MAC Address of this router in the related field Type Subnet Start IF Address 192 168 1486 Subnet Mask WAC Binding MAC Address The router will inspect if the MAC address of the incoming packets matches with the specified MAC address or not If not the packet will be block If you choose MAC as the type and check the box of MAC Binding you have to specify a range for IP address in the related field Start IP Address and End IP Address Type MAC w MAC Address MAC Binding Start IF Address End IF Address If it is checked and MAC is selected as the Type the router will inspect if the IP address of the incoming packets matches with the specified IP address es or not If not the Vigor2760 Series User s Guide 103 Dray Tek packet will be block Invert Selection If it is checked all the IP addresses except the ones listed above will be applied later while it is chosen Apply Click it to save the settings Clear Click it to remove the modificat
116. e edit window for modification Remove the selected schedule object You have to check the schedule object you want and then click this button Click it to retrieve the default settings of this page Click it to fresh the web page 7 Dray Tek Name Display the name of the profile Type Display the type frequency of execution of the profile Start Date Display the starting date of the schedule End Date Display the ending date of the schedule To create a new schedule object profile please do the following l Dray Tek Click the Add button Objects setting gt Schedule Schedule Object gfs Minia erT ie ES Add Rese Rei Mame Type The following setting page will appear Objects Setting gt Schedule Dashboard Guic Schedule Object Wisa Name Type Periodically Start Date 11 135 2012 End Date 11 135 2012 Start Daytirne hhcrrniernss End Daytime hhiorarnss Weekdays sun mon Tue wea Thu Fri isat Bappy clear ECancel Available parameters are listed below Item Description Name Type a name for this group profile Maximum 19 characters are allowed Type Specify how often the schedule will be applied Periodically Once Periodically 343 343 Amin Once The schedule will be applied just once Periodically Specify which days in one week should perform the schedule Start Date Specify the starting date of the schedule 118 Vigor2760 Series User s Guide End Date Start
117. e listed below Item Description Name Type a name for this filter profile Maximum 63 characters are allowed Description Type a brief description for such profile Maximum 63 characters are allowed Vigor2760 Series User s Guide 123 Dray Te k Application List In default there are several types of applications listed on this page Block Pass Use the drop down list to choose Block or Pass the data transmission for each application Log After checking the box related record for such application will be shown in Syslog Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears CSM gt Application Filter Application Filter Name Block ALL Description fait 192 168 1 1 says HHA Application List Web HD saved successfully T rm ok DOl l bf i 4 Click OK A new group profile has been created CSM gt Application Filter f Dashboard Application Filter Sadd Edit MDelete Reset Refresh Mame Description Block ALL 4 5 2 URL Content Filter To provide an appropriate cyberspace to users Vigor router equips with URL Content Filter not only to limit illegal traffic from to the inappropriate web sites but also prohibit other web feature where malicious code may conceal O
118. e profile simply check the profile box you want to edit and then click this button Delete Remove the selected WAN profile Refresh Click it to refresh the web page Enable Display the activation status for such DSL interface Enable The DSL interface is activated Disable The DSL interface is not activated Name Display the profile name for DSL USB interface Description Display a brief description for such profile Bridge Profile Display which type of DSL network ADSL or VDSL this bridge will connect to To add a new WAN profile please do the following 1 Click the Add button Network gt WAN EgAdd Edit Delete Refresh Enable Name Descript Vigor2760 Series User s Guide 43 Dr ay Te k Dray Tek 2 The following setting page will appear Network gt WAN PDashboard CUICK Start Bite ME Bridge MIEGS Bee Enable Name _ Bridge Profile Type ADSL OVDSL ADSL_Mode vPI eooo CI Encapsulation LLOSSMAP VLAN Encapsulation C Ethernet Port Members Available Items Selected Items Part4 E Available parameters are listed below Item Description Enable Check the box to enable such profile Name Type a name for such profile Description If required type brief description for such profile Bridge Profile Type Please select which type of DSL network this bridge will connect to The bridge interface will operate only when the configuration here
119. e range of a WLAN To meet the above requirement two WDS modes are implemented in Vigor router One is Bridge the other is Repeater Below shows the function of WDS bridge interface LAN3 LAN1 The application for the WDS Repeater mode is depicted as below WDS Link repeater Vigor2760 Series User s Guide 83 Dr ay Te k In Bridge mode the router will connect to up to four Vigor2760 which use the same mode and all wired Ethernet clients of every Vigor2760 will be connected together You can use this mode to connect a network to other networks which is physically isolated Please note that when you set to this mode Vigor2760 will not accept regular wireless clients anymore In Repeater mode the router will connect to up to four Vigor2760 which use the same mode and all wired Ethernet clients of every Vigor2760 will be connected together You can use this mode to connect a network to other networks which is physically isolated When you use this mode this access point is still able to accept wireless clients Open Wireless LAN gt gt WDS to open the following page It allows you to enable the WDS setting specify WDS mode Bridge or Repeater and modify the WDS settings WDS Enable Mode WDSs Mame WDS1 WDOS2 WDS WDS4 E Apply Gd Reset Wireless LAN WDS O Bridge Enable Disable Disable Disable Disable Refresh Dashboard Quick Stat g haa Feer WAC Address 00 0
120. e ranging from to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from to 15 Be aware that CWMax value must be greater than CWMin or equals to CWMin value Both values will influence the time delay for WMM accessing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 88 Vigor2760 Series User s Guide ACM AckPolicy It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note Vigor2760 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification Uncheck default value the box means the AP router will answer the response request while transmitting WMM packets through wireless connection It can
121. e web page Cancel Click it to exit the web page without saving the configuration 3 After finished the settings above click Apply to upload the file and wait for the following dialog appears Local Certificate SSU0 p12 uploading fw 192 168 1 1 says HMA Saved successfully 4 Click OK The Certificate has been uploaded to Vigor router and displayed on this page i Certificate Management gt Local Certificate 1 Dashboard Quick Start Wizard Local Certificate EXEdit Delete Download EF Upload U Generate Refresh O Name Status Type Valid From Valid To CI Local CAA Valid Request Certificate Apr 19 07 55 57 2012 GMT Apr 19 07 55 57 2032 GMT Vigor2760 Series User s Guide 187 Dr ay Te k 4 10 2 Remote Certificate Certificates defined in this page are prepared for IPSec and LAN to LAN profiles j Dashboard Quick Start W zar Certificate Management gt Remote Certificate Remote Certificate E E Upload Gi Refresh Mame Status Valid From Valid Ta Empty Each item will be explained as follows Item Description Edit Edit the selected profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected profile Download Allow you to download an existing certificate from the router to your PC Upload Allow you to download an existing certificate from the PC to your router Refresh Click it to refresh the web
122. ection to the server through the Internet You should set the identity like User Name and Password below for the authentication of remote server IPsec Build an IPsec VPN connection to the server through Internet L2TP Build a L2TP VPN connection through the Internet You can select to use L2TP alone or with IPsec Select from below If L2TP is chosen as the server type check this item to enable the function of L2TP over IPsec Check to enable router always keep VPN connection Specify the IP address of the remote host to build such VPN connection This field 1s applicable when you select PPTP or L2TP with or without IPsec policy above The maximum length for username is 63 characters This field is applicable when you select PPTP or L2TP with or without IPsec policy above The maximum length for password is 63 characters Type the password again for confirmation This field is applicable when you select PPTP or L2TP above PAP CHAP is the most common selection due to wild compatibility PAP v CHAP hiS CHAP hiSs CHAP v2 This field is applicable when you select PPTP as server type If you choose Dial in as the Call Direction there are two options for you to choose Required kdj Optional Required MPPE Encryption 1 28 bit Optional The local end accepts any MPPE encryption settings from the remote end Required If such option is selected a new option of MPPE Encryption box will a
123. ed successfully 149 Dray Tek 4 Click OK A new DNS service profile has been created Applications gt Local DNS Service WOCE Add Edi Delete GgReset Refresh Name 4 7 1 2 Advanced This page offers some advanced settings such as TTL Cache Size and so on for local DNS service Applications gt Local DNS Advanced TTL oC Cache Size GA pl Ga Reset M Refresh ppy Each item will be explained as follows Item Description TTL TTL means Time to Live Type the value for the local DNS cache lives Cache Size Type the size default is 150 of the cache The cache is used to record the result of DNS inquiry Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Dray Tek 150 Vigor2760 Series User s Guide 4 7 2 Dynamic DNS The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP It means that the public IP address assigned to your router changes each time you access the Internet The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address It allows the router to update its online WAN IP address mappings on the specified Dynamic DNS server Once the router is online you will be able to use the registered domain name to access the router or internal virtual servers from the Internet It is particularly helpful if you host a web server FTP server or
124. ed to the WAN profile Disable The default route is not applied to the WAN profile To add a new WAN profile please do the following 1 Click the Add button Vigor2760 Series User s Guide Network gt WAN Ga Add Ed Enable Enable Delete Refresh Name Descriptic DSL PWE 39 Dray Tek 2 The following setting page will appear Seuk DSL Eia maby Enable Mame Description Profile Type ADSL Mode Protocol Username Password Network WAN Dashboard Quick Start Wiz DSL Mode Both O ADSL OVDSL ve oS vel Encapsulation LLOVSNAP PPPoE Available parameters are listed below Item Enable Name Description Profile Type ADSL_Mode Protocol Dray Tek Description Check the box to enable such profile Type a name for such profile If required type brief description for such profile Both Choose it to configure the settings including ADSL and VDSL ADSL Choose it to configure the settings specified for ADSL VDSL Choose it to configure the settings specified for VDSL Note that the type you choose will result in different web settings offered by this web page This setting is available when Both ADSL is chosen as Profile Type VPI Stands for Virtual Path Identifier It is an 8 bit header inside each ATM cell that indicates where the cell should be routed The ATM is a method of sending data in
125. eeessaeenessaenes 49 4 123 What is Slate AOU C eniros E eae eee eee 49 Vigor2760 Series User s Guide v Dray Te k A eed oi E ENO r ene ee eS ee E E ee meee eee meen ae E een re ee ore ener ener ener 50 A Mes DA T cote cece peter E E E E E A EE EE EE E E E E 53 ria es l Oe E OE E E EE E E EE E AE A E 57 A Vi Staus ROUTE aeniei Ee ei EEEE Ee iae A DEEE ia eam Ee URE 60 TOs Statie OT MUI AO sisiran naarn E a SENE aaia i ein 60 AT ae AUG ROO ea S E lates S EEEE EE EE EE 61 4 1 6 Dynamic Route 1 0 eee ccceeccecceeeeeeeceeeeecaeeeeeeneeseeeeeaseeessaueeesseeseeessaeeessageesessseeessaneeessageees 63 ar DN ee E E E E E 64 AI DNS AUS e S 64 4172 DNS SEUNG teeta et ce cess enira ri EE TEE ENEE TEE E 65 AT Or UO o N Ge e E E E 65 AT E ON T a e E EE EE 68 ATION e e E E E E 70 7 E EE E 1 EE E E AE E E E E E A ee E EEE E TA 70 Be VO FO TTO a EE E E E EE EEA E EA E E EE E E 72 4 2 Wireless LAN ccccceeccccceecceceeeeeeeeeeeeeeeaeeeeeeeeeeeeseaeeeessaueeeesaseeeesaaeeeeneaeeeessageeessaeeessanseeeensags 73 AT BSC 16 9 61 D ke eee E ee ene eee eee eee eee ee ee eee ee 73 4 2 1 1 Security Setting OVEIVICW ssccccccccececssseeeeeccesesssueeseeececssssaeseeecesssssaaaesseeeesenaas 73 aE Ge Sal E T o E sence T A E E A A AEE T agent T E 74 ASN e ee ee E ee eee 79 ALAAN ES OR 0 aa ee che ee ee nee ene nee eee nee eee eee ee ee eee ee eee ee 81 a B ee eee ee eee ee eee eee ee eee 83 a2 O INN recs eset EE E E E O E E E oendousesssteunas
126. ege Dashboard Read write v Wizard Read only v gt Network Read write v Wireless LAN gt Firewall i Objects Setting gt CSM gt User Management Read only Available parameters are listed below Item Description Name Type a name for such new privilege profile Vigor2760 Series User s Guide 143 Dray Te k Max Login The number specified here means the system allows the number of the remote user accessing into web user interface at one time Idle Timeout Set the timeout for breaking down the Internet after passing through the time without any action Log Check the box to make the accessing information of the user be displayed in Syslog Menu Privilege All the menu items are displayed in this page When you create a privilege profile you have to specify which item is Read only or Read write If that item shall not be seen by the user simply choose None Read write Mone Read only Fead write Any user accesses into web user interface of Vigor router will see different menu items according to the privilege defined for that user account Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Privilege Dashboard Read write b a Wizard Read on
127. el Mode Select from Main mode and Aggressive mode The ultimate outcome is to exchange security proposals to create a protected secure channel Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session However the Aggressive mode is faster The default value in Vigor router is Main mode IKE Proposals To propose the local available authentication schemes and encryption algorithms to the VPN peers and get 178 Vigor2760 Series User s Guide Vigor2760 Series User s Guide its feedback to find a match We suggest you select the combination that covers the most schemes Custom Auto C 5 aj Hi Phasel Phase2 It is available if Custom for IKE Proposals is selected above Simply move your mouse on each item and click on it A pop up dialog will appear for you to modify the value of Hash Cipher Hash DES MIDS IDES MIDS AFS120 MIDS AES192 MDS AE S256 MOS EO E ee There are several options offered in default If you click the button to remove one of them a button will appear to let you add another one option instead Phasel DH Group Phase2 DH Group It is available if Custom for IKE Proposals is selected above Both parameters are used to choose the length of the session key The more the length is the safer the data transmission will be However the time to generate the security key will be long Group 2 1024 bit
128. ent Filter Advertisement 3 Open System Maintenance gt gt Administrator Setting System Maintenance TR 00649 Administrator setting Configuration Backup syslog and Mail Alet Time and Date 4 Check the box in front of Advertisement Then click Edit System Maintenance Administrator Setting Message Oeit Reset Refresh Name Administration Message hody lt center lt bre lt bre lt bresp gt The requested vveb page lt br gt f C URL Content Filter categorized with CL lt brehas been blocked by SRAAME LIF system administrator for further information lt center body hody lt center lt bre lt bre lt bresp2 The requested eb page br f C Web Content Filter categorized with CL lt brehas been blocked by SRAAMES We system administrator for further information center lt body gt Advertisement Hello this is an advertiement example 5 In the Administration Message box type the message that you want to display on the screen e g Warning Do not use the computer after 11 00PM Message Mame Advertisement Administration Message Warning Do not use the computer after 11 00PM EJ Apply Clear Ed cancel D P ay Te k 146 Vigor2760 Series User s Guide 6 After finishing the writing click Apply to save the setting 7 Log out Vigor router and re log into the web user interface of Vigor2760 You will see a pop up window with the sentence Warning Do not use the computer
129. er profile will be applied in Filter Rule of Firewall gt gt Filter Setup for filtering CSM gt Application Filter Dashboard Quick Start Wizard Application Filter Ga aAdd fi Reset Refresh Name Description Empty Each item will be explained as follows Item Description Add Create a new filter profile Edit Modify the selected filter profile You have to check the filter profile you want and then click Dray Te k 122 Vigor2760 Series User s Guide this button to open the edit window for modification Delete Remove the selected filter profile You have to check the filter profile you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile Description Display the filter description To create a new filter profile please do the following 1 Click the Add button CSM gt Application Filter Application Filter GeAdd Ei fi Reset Refresh Mame Description 2 The following setting page will appear CSM gt Application Filter Dashboard Quick Start Wiz Application Filter Name Block ALL Application List Web HD Block OLog IM Block MLog P2P Block MLog Games Block v FlLog Remote Control Block Log Database Block OLog Tunnel Block LlLog Stream Block OLog VoIP Block OLog Ea Apply ty Clear Ed Cancel Available parameters ar
130. ers is whether your legacy router could fully utilize its bandwidth or not DrayTek launches Vigor 2760 series High speed router perfectly complied with VDSL2 environment including Vigor2760 Vigor2760n and Vigor2760Vn for speed wanted customers With high throughput performance and secured broadband connectivity provided by Vigor 2760 series you can simultaneously engage these bandwidth intensive applications such as high definition video streaming online gaming and Internet telephony access 1 1 Web Configuration Buttons Explanation Several main buttons appeared on the web pages are defined as the following oh Save and apply current settings Cancel Cancel current settings and recover to the previous saved settings CNS Clear all the selections and parameters settings including selection from drop down list All the values must be reset with factory default settings ue Add new settings for specified item Edit Edit the settings for the selected item Delete Delete the selected item with the corresponding settings Note For the other buttons shown on the web pages please refer to Chapter 4 for detailed explanation Vigor2760 Series User s Guide 1 Dray Tek 1 2 LED Indicators and Connectors Before you use the Vigor router please get acquainted with the LED indicators and connectors first 1 1 1 For Vigor2760 koa Gaw ee Vigor2760 Blinking The router is powered on and running normally ACT
131. ersion 10 29 Name IP Address RX Packe O day s 1 hour s 3 LAN LAN 192 168 1 1 4679 min s p U System Time 1970 01 01 01 03 09 les DSL Enable SSID Enable DrayTek1 Mele DSL Info Data i Name Disable DrayTek2 Pine 05 04 08 00 00 06_05 04 04 04 00 01 Disable DrayTek3 Disable DrayTek4 Modem State Line mode UNKNOWN Uptime SILENT Line Uptime 0000 00 00 Nnwnstrearm Meanfile hla nam Cannan tims 4 1 Network This menu allows you to configure network settings such as WAN LAN NAT DHCP Static Route Dynamic Route DNS Quality of Service Failover and Switch WAN LAN MAT DHCP Static Foute Dynamic Route DNS ualt Of Service Failover Switch Vigor2760 Series User s Guide 35 Dr ay Te k 4 1 1 WAN Quick Start Wizard offers user an easy method to quick setup the connection mode for the router Moreover if you want to adjust more settings for different WAN modes please go to Internet Access group 4 1 1 1 Basics of Internet Protocol IP Network IP means Internet Protocol Every device in an IP based Network including routers print server and host PCs needs an IP address to identify its location on the network To avoid address conflicts IP addresses are publicly registered with the Network Information Centre NIC Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP IP local area networks LANs such as host
132. ertificates should first request a certificate issued by a CA server It should also retrieve certificates of other trusted CA servers so it can authenticate the peer with certificates issued by those trusted CA servers Here you can manage generate and manage the local digital certificates and set trusted CA certificates Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate Below shows the menu items for Certificate Management 4 10 1 Local Certificate Certificate Manag Local Certificate Remote Certificate Trusted CA Certificate Certificate Revocation List Certificate Management gt Local Certificate Dashboard Quick Si art Local Certificate E Mame Upload Pl Generate Refresh Type Valid Fram Valid To Ernpty Each item will be explained as follows Dray Tek Item Edit Delete Download Upload Generate Refresh Name Status Description Modify the content of the selected certificate displayed on this page Remove the selected item of local certificate listed below Allow you to download an existing certificate request from the router to your PC Allow you to download an existing certificate request from the PC to your router Open a window to generate certiface request Click it to refresh the web page Display the name of the certificate Display the status of the certificate 182 Vigor2
133. ervices on your router E Enable Web Content Filter Commtouch 6 Now the one month free trial of WCF mechanism has been activated correctly Seer Tbe El URES amp books PO Eo DSR 06RD ge bce grr ae ober gie aH gC ocr PEA oe Be DrayTek Service Activation Serice Name Sanba Epro Dae Sus Web Filter License 2012 07 09 2012 08 08 _ Chee 7 Click Close to return to the web configurator of Vigor router enu search O O Wizard gt Activation Wizard F Dashboard Activation Wizard Quick Start Wizard Name Service Provider Start Date Expire Date Authentication Message Status Veb Filter 2012 07 VWebFilter Authenticate C t h 07 License aye 09 2013 07 09 successfully 2012 07 09 Dashboard Quick Start Wizard gt Logout Activation Wizard Product Registration Activated EE 8 Open CSM gt gt Web Content Filter Click Add to configure new WCF rule for special purpose e g child protection CSM gt Web Content Filter E Dashboard Quick S Dashboard Web Content Filter Wizard esac Jars Delete Reset Refresh Network Mame Log Wireless LAN Empty Firewall Objects Setting Application Filter URL Content Filter Web Content Filter Dray Tek 28 Vigor2760 Series User s Guide 9 In the field of Name type block porn website as the rule name In this case Child Protection is the chosen category so check the box of Enable
134. esperese 87 BT AP WIS COW GLY cerren EE EEEE E EE E a E AE E EEE TAE 89 ALTA L a a E E E E E E E A R 89 GZ A ONAE Sa SU CS aerieni i aE Ei EEE E aS ES 90 4 2 8 Staon Lisiasen A E EEEE EE 90 a EE eV EEEE E PEE OA EE A E OE E E T PE A A E A TET E E 92 dol Basies lor RiINOW Al liesinnssunicavectenvcussnnies eutsnireaseaadatesdansasachsanzranseisteaiscomeniassasantuagnaadeauats 92 4 3 1 1 Denial of Service DoS DOfCNSC 2 ccccssssecccccccessssneseeeccessesaeeseeeessssasaeeseeeeesseaas 92 ae An EES WWD E E E EA A A A A I E E AE E axa aien eee 92 CIES alas go 0 2 ee N E A E A E E E ere oe 92 rN eae B I 0 ene ee ne eee E E ee ee oF ewe ee ee ene T 97 ASS DOO DEIGNCE en ne ee ne ae ee 98 Ph OIG S 5 UNG ccna A N E E E O N AT E A E A T 101 AA AI EE aa A E E 101 4411 Address ODOC esseri oine A EE E eee eee eee 101 Aak Te POSS OGOUN iussi EE E E E EE eae 105 LAZ SOI VCS TYDE e EEE EEE 107 AALTO TYPO ODOC oors ee E A E E NEEE EEA 107 4A A2 SCIVICE Type GOUD sssi iese ia AAEE EV EEEE 110 RG ING VW Ol CO P A A N E E E E E E E 112 AAG Keyword ODJEC creron cas reenn A EEEE EAEE 112 BALD Keyword GOUD sssrinin aE AAE ARE EEEE 114 4 4 3 3 Default Keyword Object GIOUD scccccccssseeeccceescssseeeeeccessssaeeeeseeceessusneeseecesenaas 116 aE ES Ee 6 E E E E E S E E E ee 117 444 T SCHCOUIC ODC snien ATEA EEEN EEEE 117 4a 4 CIC OU OI OUD waissshiee cep Sosa oes tte cise n a E T tes 120 PGI escent cece adige agro sisecce tees bale E
135. et Internet Gateway My Computer Other Places Internet Gateway W J G Control Panel IP Broadband Connection on My Network Places Router T Enabled Packets L3 My Documents Sent 404 Fad ig My Computer __LAN or High Speed Internet Local 4rea Connection Enabled Tah Realtek RTL8139 810 Family Received 1 115 BBE Details Network Connections System Folder Close The UPnP facility on the router enables UPnP aware applications such as MSN Messenger to discover what are behind a NAT router The application will also learn the external IP address and configure port mappings on the router Subsequently such a facility forwards packets from the external ports of the router to the internal ports used by the application FIP Broadband Connection on Router Properties 2 x E s General Services Connect to the Internet using Select the services running on your network that Internet users can access Advanced Settings IP Broadband E on A outer Ftp E sample menmegr 192 168 29 11 13135 60654 UDP menmegr 192 168 29 11 7824 13251 UDP This connection allows you to connect to the Internet through a menmegr 192 168 29 11 8789 63231 TCP shared connection on another computer nae Show icon in notification area when connected Add Edit jilete O
136. ettings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings After trying the above section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK For Windows The example is based on Windows XP As to the examples for other operation systems please refer to the similar steps or find support notes in www draytek com 1 Goto Control Panel and then double click on Network Connections Webwork Connections 2 Right click on Local Area Connection and click on Properties Disable Status Repair Bridge Connections Create Sharkcut Rename Properties 3 Select Internet Protocol TCP IP and then click Properties ethO Properties General Authentication Advanced Connect using BS ASUSTek Broadcom 440 10 100 Ir Configure This connection uses the following items El Client tor Microsoft Networks a File and Printer Sharing for Microsoft Networks fm 0s Packet Scheduler Internet Protocol TCP IP Description Transmission Control Protocol lnternet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in notification area when connected Notify me when this connection has limited or no connectivity D ray Tek 214 Vigor2760 Series User s Guide 4 Select Obtain an IP address automatically and O
137. ey Confirm Key Pre Shared Key PSK Confirm Pre Shared Key PSK Apply Clear Cancel 802 1x authentication Mixed WPA WPA2 PSK Accepts WPA and WPA2 clients simultaneously and the encryption key should be entered in PSK Such function is available when WEP is selected as Security Setting Choose one of the key selections as the default key All wireless devices must support the same WEP encryption bit size and have the same key Such function is available when WEP is selected as Security Setting The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCH characters from 33 to 126 except and Such function is available when WEP is selected as Security Setting Type the encryption key again for confirmation Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Type the PSK again for confirmation Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the settings Mame SSID SsiD SsiD3 Enable Enable Enable Disable SSID Hide 5SSI0 Isolate Member DrayTekt Disable Disable DrayTek Enable Enable DrayTek3 Disabl
138. fforts please contact your dealer for further help right away For any questions please feel free to send e mail to support draytek com Vigor2760 Series User s Guide 219 Dray Tek
139. for it and choose Block as the filtering way Use the default settings for other categories in this page When you finished click Apply CSM gt Web Content Filter Start izard E Dashboard i E u ick Web Content Filter Mame Log Black White List Categories Child Protection Leisure Business a Chating sal Computer Internet E Other Block Disable Block FlEnable Log Block Enable Il Log Black LJEnable M Log Block ClEnable MlLog Block ClEnable vl Log Block JEnable lLog EdApply GClear EJ Cancel 10 Next open Firewall gt gt Filter Setup to set a rule to activate the new created WCF rule e g block porn website Click Add Firewall gt Filter Setup A Firewall Filter Setup Dos Defence 11 Dashboard Quick Start Wizard Filter Rule Soe es Gada G cdit Menable JDisable MDelete EMove Reset Refresh Enable Name Description Schedule Action NAT Empty In the following web page check the box of Enable and type block porn as a firewall rule name Choose block porn website as the Web Content Filter WCF Firewall Filter Setup Dos Defence Objece Vigor2760 Series User s Guide Firewall gt Filter Setup Enable Name block porn Description E Dashboard A Quick Start Wizard Filter Rule Soe jee Source Interface An B Destination Interface An fa Schedule a 29 Dray Tek
140. ge will appear To specify a file click the Select File button to locate the one you want Certificate Management gt Trusted CA Trusted CA Certificate Certificate File pitaa hoa cer Ga Apply Clear EJ Cancel After finished the selection click Apply to upload the file and wait for the following dialog appears Cerificate Management gt Trusted CA Trusted CA Certificate fwca cer Uploading ti 192 168 1 1 says HBR paved successfully Click OK A trusted CA certificate has been uploaded to Vigor router and displayed on this page E Dashboard 2 uic k Sta rt Wizard Lag Certificate Management gt Trusted CA Trusted CA Certificate BEdi Delete QJ Download EJ Upload Refresh Name Status Type Valid From Valid To Nov 30 07 31 28 2011 GMT Mov SO 07 31 25 2031 GMT Vigor2760 Series User s Guide 191 Dr ay Te k 4 10 4 Certificate Revocation List This page allows you to upload CRL files created by third party and stored on PC host to Vigor router E Dashboard Qu Certificate Management gt Certificate Certificate Revocation List E w Upload Refresh Mame Status Empty Each item will be explained as follows Item Description Edit Edit the selected list file To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected list file Download Allow you to download current CRL list to the router Uplo
141. gorized into two types the flooding type attacks and the vulnerability attacks The flooding type attacks will attempt to exhaust all your system s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables the Vigor router to inspect every incoming packet based on the attack signature database Any malicious packet that might duplicate itself to paralyze the host in the secure LAN will be strictly blocked and a Syslog message will be sent as warning if you set up Syslog server Also the Vigor router monitors the traffic Any abnormal traffic flow violating the pre defined parameter such as the number of thresholds is identified as an attack and the Vigor router will activate its defense mechanism to mitigate in a real time manner Below shows the menu items for Firewall Filter Setup DoS Defence 4 3 2 Filter Setup Filter Setup allows you to adjust settings of IP Filter and common options The Filter Setup contains Filter Rule and Default Rule configuration pages When there is no filter rule existed the incoming packet will be filtered by the default filter rule 4 3 2 1 Filter Rule The mode of the firewall operation is that the router will filter the incoming packets from outside based on the applied filter rules one by one until matching with the set conditions Once the packet matches with the firs
142. hared KeyiPSki Confirm Pre Shared keri P SkY Bappy clear Escancel S5S5ID2 w adl L WIPAZ PSKIAES Available parameters are listed below Item Name Enable SSID Hide SSID Isolate Member Isolate LAN Security Setting Vigor2760 Series User s Guide Description Display the selected SSID Check the box to enable such SSID setting It means the identification of the wireless LAN SSID can be any text numbers or various special characters The default SSID will be displayed automatically We suggest you to change it Uncheck the box to make the SSID being seen by wireless clients Check the box to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Check this box to make the wireless clients stations with the same SSID not accessing for each other Check this box to make the wireless clients stations not accessing the PC with wired connection Choose the wireless mode for this router OPEN OPEN WEP WEA PSKITKIP WPA2 PSKIAES Mixed vWPANWEA2 PSK WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK TKIP WPA2 PSK AES Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 17 Dray Tek Default Key K
143. have read and and click Next Dray Tek E 5 i eca About Us ou have logged in as Cancel sa draytekfae Inf i User Name draytekfae 3 wl rarene Serial 2012070515303901 ma s VigorACS SI p gor Model Vigor2760 Register your router here Vigor Series License Number Service Provider Status 4 Customer Survey END USER LICENSE AGREEMENT FOR BPjM Web Content Filter IMPORTANT PLEASE READ THE TERMS AND CONDITIONS OF THIS LICENSE merens AGREEMENT CAREFULLY BEFORE CONTINUING WITH THIS VigorACS Si PROGRAM INSTALL DrayTek End User License Agreement EULA is a legal agreement between you either an individual or a single entity and DrayTek for the DrayTek software product s identified above which may include associated software components media printed materials and online or electronic documentation 2 M have read and accept the above Agreement Please check this box Next 6 In the following page the Activation Date will be displayed automatically Click Register Dray Tek apply ter A Liccne Mumbar D about Us You have logged in as C Product draytenree Senior ee information Name WEF _Logdut j een aes Register your router ter ri Vigor Series Adivation Date MMOD Yr ry for o3 7012 Register Customer SUEY Darp i Viger i 7 Now the system displays successful activation of the chosen license ecg maiU daaectiol OS vere emee ep iicet ry oh BCP os FXH
144. he following setting page will appear User Management gt RADIUS RADIUS Name David home server P Address 172 16 3 102 Fort 1612 Server Password Confirm Server Password Sa Apply fil Clear x Cancel Available parameters are listed below Item Description Name Type a name for the RADIUS server Server IP Address Type the IP address of RADIUS server Port The UDP port number that the RADIUS server is using The default value 1s 1812 based on RFC 2138 Server Password The RADIUS server and client share a password that is used to authenticate the messages sent between them Both sides must be configured to use the same password Confirm Server Re type the password for confirmation Password Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page Vigor2760 Series User s Guide 141 Dray Te k 3 After finished the settings above click Apply to save the file and wait for the following dialog appears User Management gt RADIUS RADIUS Name serer F Address 172 16 3 102 Port ti 192 168 1 1 says FAA Serer Password Saved Successfully Confirm Server Pass Apply fy Cl 4 Click OK A new RADIUS profile has been created User Management RADIUS Dashboard RADIUS ES Add EJ Edit ii Delete Ga Reset GJ Refresh Hame Server IP Address Port RADIIS 172 16 3 102 David home 4 6
145. he modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the settings WOS Mame WOS WDE WDS3 WOS4 Enable Disable Enable Disable Disable 86 Peer MAC Address OO 00 00 00 00 01 OUO 00 00 00 00 02 UO 00 00 00 00 03 UO 00 00 00 00 04 Vigor2760 Series User s Guide 4 2 6 WMM WMM 1s an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM APSD automatic power save delivery is an enhancement over the power save mechanisms supported by Wi Fi networks It allows devices to take more time in sleeping state and consume less power to improve the performance by minimizing transmission latency Wireless LAN gt WMM WiMM Wilh Capable APSD Capable Parameters of Access Point Parameters of Station GA Ap yl Ca Reset Refresh Ppy LI Type Alfsn Cv Min Cv hdax Txop ACMI AckPolicy AC BE 3 4 B 0 Disable Disable AC BK i 4 10 0 Disable Disable AC yl 1 3 4 zf Disable Disable AC VO 1 2 3 47 Disable Disable Type Alfsn CVV Min Cv vhlax Txop ACI AC BE a 4 10 0 Disable AC BK i 4 10 O Disable AC Wl 2 3 4 a4 Disable AC VO 2 2 3 4 Disable Available parameters are listed below
146. he router will change its source address into the public IP address of the router select the available public port and then forward it At the same time the router shall list an entry in a table to memorize this address port mapping relationship When the public server response the incoming traffic of course is destined to the router s public IP address and the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes Save cost on applying public IP address and apply efficient usage of IP address NAT allows the internal IP addresses of local hosts to be translated into one public IP address thus you can have only one IP address on behalf of the entire internal hosts Enhance security of the internal network by obscuring the IP address There are many attacks aiming victims based on the IP address Since the attacker cannot be aware of any private IP addresses the NAT function can protect the internal network On NAT page you will see the private IP address defined in RFC 1918 Usually we use the 192 168 1 0 24 subnet for the router As stated before the NAT facility can map one or more IP addresses and or service ports into different specified services In other words the NAT function can be achieved by using port mapping methods Below shows the web page of Network gt gt NAT Network gt NAT E Dashboard Quic
147. he schedule group you want and then click this button to open the edit window for modification Delete Remove the selected schedule group You have to check the schedule group you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile Group Display the schedule object profiles grouped under such group To create a new schedule object group profile please do the following 1 Click the Add button Ele SS Meee ae Sanaa joto88 Schedule Group Ga Add dit Delete Reset Refresh Mame Group Dray Tek 120 Vigor2760 Series User s Guide 2 The following setting page will appear Objects Setting gt Schedule z Dashboard Quick Schedule Group Name eed Available Items Selected Items SCH OBJ Office Bappy cla Egcancel Available parameters are listed below Item Description Name Type a name for this group profile Maximum 19 characters are allowed Group Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display the available schedule profiles Selected Items Display the schedule profiles selected for such group Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the fil
148. heck the profile box you want to edit and then click this button Delete Remove the selected LAN profile Dray Tek 50 Vigor2760 Series User s Guide Refresh Enable Name Description IP Address Subnet Mask Click it to refresh the web page Display the activation status for such interface Enable The LAN profile is activated Disable The LAN profile is not activated Display the profile name for LAN interface Display a brief description for such profile Display the IP address of such LAN interface Display the subnet mask address of such LAN interface To add LAN profile please do the following l 2 Click Add Network gt LAN l SECA Ethernet sadi B Enable Enable i Refresh Hame Description LAN LAN The following page appears Network gt LAN Status Ethernet Enable Mame Description IP Address Subnet Mask E Dashboard Quick Start Wizar gt Lan_marketing 192 166 1 66 is Lill foo 2d eda Od Y VLAN and Physical Interface Settings E Ethernet Por Members t Available Items Selected Items on Available parameters are listed below Item Enable Name Vigor2760 Series User s Guide Description Check the box to enable such profile Type a name for such profile 51 Dray Tek Description If required type brief description for such profile IP Address Type the IP address of the LAN interface S
149. her For children Block Disable Block v vlEnable lLog Pass Enable JLog Pass JEnable ILog Pass w Enable JLog Pass Enable ILog Pass Enable ILog Ea Apply a Clear Es Cancel Available parameters are listed below Item Name Log Black White List Description Type a name for this filter profile Maximum 63 characters are allowed None There is no log file will be recorded for this profile Pass Only the log about Pass will be recorded in Syslog Block Only the log about Block will be recorded in Syslog All All the actions Pass and Block will be recorded in Syslog None al Pass j Block All Activate black white list function for such profile Disable ae Enable Disable The black white list will not be applied to such filter profile Enable Activate white black list function for such profile If you enable this function you have to set Black White Action and specify keyword object s additionally 130 Vigor2760 Series User s Guide Ol BlackiVVhite List Blackiv hite List Action Block Keyword Object Available Items Selected Items KYYD_OBJ bmp a KvYD_OBJ dib KWD_ OBJ gif KWD_OBUJ jpeg KWD_ OBJ jpg KWD_OBJ jpg2 KWD_OBJ jp2 KWD_OBJ pet KWD_OBJ pex KWD_OBJ pic v Black White List Action Choose the action to be performed for such profile Block w Fass Block
150. hey all will enhance the over the air data protection and or privacy on your wireless network The Vigor wireless router is very flexible and can support multiple secure connections with both WEP and WPA at the same time The default security mode is Mixed WPA WPA2 PSK Default Pre Shared Key PSK is provided and stated on the label pasted on the bottom of the router For the wireless client who wants to access into Internet through such router please input the default PSK value for connection Vigor2760 Series User s Guide 73 Dray Te k Below shows the menu items for Wireless LAN Wireless LAN General Setup WPS Access Control WOS VA Pl Det AP Discovery Station List 4 2 2 General Setup General Setup will set up the information of this wireless network including its SSID as identification channel This page is used to enable the wireless LAN function specify channel and set advanced wireless settings Wireless LAN gt General Setup i Dashboard amp QUICK Start Wizard L ogout General Enable Mode Mixed T1b 11g 1iny Channel Channel 2437MHzZ Mame Enable Sslb Hide SSID Isolate Member Isolate SSiD1 Enable DrayTek Disable Disable Disab SSID Disable DrayTek Disable Disable Disab SSID3 Disable DrayTeks Disable Disable Disab SSiD4 Disable DrayTek4 Disable Disable Disab Y Advanced Settings Tx Burst Preamble Type Short Preamble O Long Preamble Operation Mode Mixed
151. ic DNS providers You could get more detailed information from their websites If the mail server is defined with another name please type the name in this area Such mail server will be used as backup mail exchange Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the settings and wait for the following dialog appears Applications Dashboard Quick Start v Enable Mame ii 192 168 1 1 says HMA External Inte Saved successfully Service Provid senice Type Marma Alarmo l ee Es 4 Click OK A new DNS service profile has been created Applications gt Fadda G Edit Enable Enable Dray Tek FE Dashboard Quick St fii Delete Reset Refresh Mame External Interface DONS 1 DSL PYE 154 Vigor2760 Series User s Guide 4 7 2 3 Advanced This page offers some advanced settings such as Update Interval for DDNS service Applications gt Dynamic DNS Status Sse Advanced Update Interval Unit Hour 1 iw Sa Appl GaReset S Refresh pp y Each item will be explained as follows Item Description Update Interval Unit Let the router update its information to DDNS server within Hour the interval configured here Apply Click it to save the settings Reset Click it to retrieve the default settings of this page
152. ick it to refresh the web page Dray Tek 168 Vigor2760 Series User s Guide 4 9 2 LAN to LAN Here you can manage LAN to LAN connections by maintaining a table of connection profiles You may set parameters including specified connection direction dial in or dial out connection peer ID connection type VPN connection including PPTP IPSec Tunnel and L2TP by itself or over IPSec and corresponding security methods etc The router supports up to 32 VPN tunnels simultaneously VPH and Remote Access gt LAN to LAN LAN to LAN Gadu B i Enable Mame E Dashboard Quick Start Wizard Refresh Description Call Direction Remote LANM Gateway Empty Each item will be explained as follows Item Add Edit Delete Refresh Enable Name Description Call Direction Remote LAN Gateway Vigor2760 Series User s Guide Description Create anew VPN LAN to LAN profile Edit the selected profile To edit the profile simply check the profile box you want to edit and then click this button Remove the selected profile Click it to fresh the web page Display the activation status for such interface Enable The profile is activated Disable The profile is not activated Display the name of the profile Display the comments description of the VPN profile Display the allowed call direction of this LAN to LAN profile Display the IP address of the remote dial in user 169 Dray Tek To
153. ides Peak Cell Rate The default setting is 0 Cell Delay Variation The default setting is 0 Minimum Cell Rate The default setting is 0 Sustainable Cell Rate The value of Sustainable Cell Rate SCR must be smaller than PCR Peak Cell Rate Maximum Burst Size The default setting is 0 MAC Address Check to box to display the MAC address field and type the MAC address here Management Enable the checkbox to allow system administrators to login from the Internet There are several servers provided by the system to allow you managing the router from Internet Check the box es to specify Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the settings then click Cancel to return to previous page Dray Tek 42 Vigor2760 Series User s Guide 4 1 1 8 WAN Bridge Bridge connections can be configured on the Vigor router making the router work partially as a bridge modem It can be configured from the Bridge tab located in the Network gt gt WAN web page Network gt WAN Dashboard Quick Start Wizard H da edit Delete Refresh Enable Hame Description Bridge Profile Type Pure Bridge Mode Empty Each item will be explained as follows Item Description Add Create new WAN profiles Edit Edit the selected WAN profile To edit th
154. ies User s Guide 7 Choose Local Certificate as the Type and click Select File to locate the one you want Certificate Management gt Local Certificate Local Certificate Type Local Certificate Certificate File eae FBO cer Bi Apply GiClear Ej Cancel 8 After finished the settings above click Apply to upload the file and wait for the following dialog appears Certificate Management gt Local Certificate Local Certificate 2fbU cer uploading tahe 192 168 1 1 says AJME Saved Successfully 9 Click OK The Certificate has been uploaded to Vigor router and displayed on this page Certificate Management gt Local Certificate Local Certificate fi E Upload Cl Generate Refresh d Name Status Type Valid From Valid T F 2fbu Valid Certificate Mov 6 03 17 29 2012 GMT Mov 6C Note Do not manually delete the certificate request file before completing the process of Uploading If the uploading is successfully the system will remove the request automatically Vigor2760 Series User s Guide 185 Dr ay Te k 4 10 1 2 Upload Local Certificate When the certificate request has been signed by a CA server the issued certificate can be uploaded to Vigor router l Dray Tek Click the Upload button Local Certificate E E Ei Upload Pj Generate Name Status Type Valid Fro The following setting page will appear Certificate Management gt Local Certificate Dashboard Quick
155. ill be enabled when the packet matches with such rule if such box is checked B Application Part it takes effect when Inspect is chosen as Action User Management Vigor2760 Series User s Guide If you check this box you can add more filter profiles with identity authentication All the incoming packets must be filtered with identity authentication first If the packets doest not pass the identity authentication they will not be filtered with current filter rule but filtered by next filter rule directly 95 Dray Tek Bandwidth Limit BW Limit Session Limit Quality of Service QoS Web Content Filter WCF URL Content Filter UCF Application Filter APPF Apply Clear Cancel Check this box to apply the bandwidth limit TX Bandwidth KB s Type a value for outgoing traffic RX Bandwidth KB s Type a value for incoming traffic The number typed here is the total sessions of the packets that do not match the filter rule configured in this page The default setting is 30000 Choose one of the QoS class to be applied as firewall rule High indicates highest bandwidth ratio High st Medium Lowy Reserved For detailed information of setting QoS please refer to the related section later Select one of the Web Content Filter profile settings created in CSM gt gt Web Content Filter for applying with this router Please set at least one profile for anti virus in CSM gt gt
156. ing Relational Information in the Future ccccccceeeeee 23 3 2 Activating Web Content Filter Mechanism cccccccecccccceeceseeseeeeeeeeeseaaeeeeeeeeeeessaaeeeeeeeseeeaas 26 O12 BY Means Ol Serice ACIIV ANON markinu a a aa 26 3 2 2 By Means OF MyVigor Website ascii scrcsicedce ase tide cyscunnncmesdonensis tescdaceaensnnietscnedoteeedeadencecaseaes 31 Advanced Web COMMGUIAUON oiesxcace secrets cncasetecenacetedceasedveecacedeseaweedesesuseseecsaressavecsasiet 35 BUSING UV OING or nc dosbne aun sete E EE E 35 he Ma WAI a A E 36 4 1 1 1 Basics of Internet Protocol IP N twOPk cccccssesececeneeeeeeseeaeeeeeeesaaenseeesnaaaaees 36 4 1 1 2 What are Public IP Address and Private IP ACOIreSS cccccccsesccesesseeseceesenneees 36 4 1 1 3 Get Your Public IP Address from ISP cccccccccccnneseeeceeeennaaenssseeeesessaannseeesenaas 36 4 1 1 4 Network Connection by 3G USB Modem cccccccssssseeseeceeenennessseeeeesseaaeseesesenaas 36 4 1 1 5 Several Connection Protocols Used for the ROUtECL cccssseesseeeeeeeeaneeeeeeeeeaes 37 4 on 2 es 2 0 ene ae E en ee E 38 7 I fd WAN Bo A ee ee eee eee eee ee ne ee 39 ale WAN DOGO iesire E E AE E AE EER 43 ATV AN USD eee ee eer E E E ee eee 46 4 110 WAN DSLMOOG sectors css E E 48 a 2 NINN ETE EEEE E S E A E A E A T E 49 Bed GaS S O LAN erin E E A E TE O EA 49 4 1 2 2 What is Routing Information Protocol RIP cccccsssecccesesecsaneseesse
157. ion of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Objects Setting Address Address Object Etn lego Name Description fw 192 168 1 1 says FAA eaved successfully Type Start IP Address End IF Address 1927 166 1 89 4 Click OK A new object profile has been created Objects Setting gt Address Dashboard Quick Start Vizard Address Object 0n aAa leg Gaai Jean Delete Reset Refresh Name Invert Selection ADOR_OBwJ Sales Disable Dray Te k 104 Vigor2760 Series User s Guide 4 4 1 2 Address Group You can bind several IP address objects into one group Objects Setting Address Address ise Address Group Go Add g GiReset Refresh Name Description Type Gre Empty Each item will be explained as follows Item Description Add Create a new address group profile Edit Modify the selected address group profile You have to check the group you want and then click this button to open the edit window for modification Delete Remove the selected address group You have to check the group you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Name Display the name of the profile Description Display the brief description for such profile Type Display the type range MAC or sub
158. irmware Version Display current firmware version used by the router Build Date Display the date that the firmware is built Web Version Display the version of the web user interface Configure Version Display the configuration version of Vigor router Uptime Display the duration time when the router connects to Internet System Time Display the time of the system Related information of DSL interface will be seen by clicking Diagnostics gt gt System Table gt gt DSL Information Diagnostics gt System Table SUG Cee Bis DSL Information OSL Info Name OSL Info Data Firmware version O5 04 05 00 00 06 05 04 04 04 00 01 Modem state SILENT Line mode UN KAVA Line Coding Trellis Off Line Uptime OO U0 00 00 Downstream Line Rate 0 kbps Upstream Line Rate O kbps Downstream SNE Margin 0 0 dB Upstream SNE Margin 0 0 dB Downstream Line Attenuation 0 0 dB Upstream Line Attenuation 0 0 dB Downstream CRC Errors 0 Upstream CRC Errors 0 GJ Refresh D F ay Te k 210 Vigor2760 Series User s Guide 4 12 6 Traffic Graph The data traffic via LAN DSL USB can be displayed by graph Diagnostics gt Traffic Graph Dashboard Quick tart Wize Traffic Graph Interface LAN LAN wt Rate 22 16 5 ITX i Rx a5 p 01 46 12 26 23 06 09 46 20 26 Time Bappy Refresh Each item will be explained as follows Item Description Interface Choose the interface to display the traffic graph about it Apply Click it to confirm the interface
159. k 5 S5500E MC G Vigoreg1 Ovi Vigor2760 Series User s Guide Dashboard Quick Start W MAC Address Security 00 1 d 33 41 30 c0 WPASPSKASAES 00 50 7 fe 28 50 WPAIPSEMVPASPSE TEIF 00 50 7 16 24 96 NONE 00 50 77 00 00 00 NONE O0 1d aa 29 5d 50 WPATPSEMVPASPSE TEIF 00 1 a 4d ess d9 NONE 89 Dray Tek Each item will be explained as follows Item Description Refresh Click it to fresh the web page Channel Display the channel sued by the scanned AP SSID Display the SSID of the scanned AP MAC Address Display the MAC address of the scanned AP Security Display the type of the security used by such profile Signal Ratio Display the signal strength of the AP 4 2 7 2 Channel Statistics It displays the statistics for the channels used by the APs scanned by Vigor2760 E Dashboard Qu AP List Channel Statistics Channel 1 APs 3 Channel 2 APs 0 Channel 3 APs 0 Channel 4 APs 0 Channel 5 APs 0 Channel 6 APs 2 4 2 8 Station List The router can be treated as an AP which allows the wireless stations connecting to Internet via Vigor router Station List provides the knowledge of connecting wireless clients now along with its status code There is a code summary below for explanation Wireless LAN gt Station List Station List Ga Refresh MAC Address Security Associated SSID IP Address Connected Time 1c 4bd6 al 91 db WER 192 166 1726 44 00 26 c7 40 08 64 NONE
160. k Start W Virtual Host EJ add Ge Reset GJ Refresh Enable Mame External Interface Specific External IP Address Mappe Empty Available parameters are listed below Item Description Vigor2760 Series User s Guide 53 Dray Tek Add Create new NAT profiles Edit Edit the selected NAT profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected NAT profile Reset Click it to rest to factory default settings Refresh Click it to refresh the web page Enable Display the activation status for such interface Enable The NAT profile is activated Disable The NAT profile is not activated Name Display the profile name for NAT External Interface Display the WAN interface for external connection applied by such virtual host profile Specific External IP Display the activation status of the function Address Enable The function is activated Disable The function is not activated Mapped IP Address Display the LAN IP address that the Destination IP will be transferred to To add a NAT profile please do the following 1 Click Add Network gt NAT irtual Host Badi B GaReset R Enable Name External Int Dray Te k 54 Vigor2760 Series User s Guide 2 The following page appears Network gt NAT Virtual Host Enable Name External Interface OSL PWC Specific External IP Address External IF Address 192 168 1 5
161. k this button to open the edit window for modification Delete Remove the selected rule You have to check the rule you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Enable Display the activation status of the rule Enable The rule is activated Disable The rule is not activated Name Display the name of the rule profile Interface Display the interface used for such DoS defence profile Dray Te k 98 Vigor2760 Series User s Guide To add a DoS Defence profile please do the following 1 Click Add Firewall gt DoS Defence DoS Defence aad e d Enable Mare 2 The following page appears Firewall gt DoS Defence aShhOard A GIOICK Starry kad DoS Defence Enable Name test_1 Interface Available Items Selected Items DSL P C1 USB 3G_BACKUI mai l DoS Policy Name Enable Log Threshold packets sec Block Time sec SYN Flood d 2000 10 UDF Flood P 2000 10 ICMP Flood O 250 10 Port Scan O 2000 10 Gapply clear Ecancel Available parameters are listed below Item Description Enable Check the box to enable the profile Name Type the name of the rule profile Interface Choose suitable interfaces configured in Network gt gt WAN for applying the DoS Defence Available Items This filed lists all the available WAN interfaces Selected Items
162. keyword or default keyword group It should be noticed that the more simplified the blocking keyword list is the more efficiently the Vigor router performs Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display all the available keyword objects and keyword groups including user defined and default ones Selected Items Display the object and or group selected for such profile Check the box to deny any web surfing activity using IP address such as http 202 6 3 2 The reason for this is to prevent someone dodges the URL Access Control You must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before Check the box to filter out the cookie transmission from inside to outside world to protect the local user s privacy Check the box to reject any proxy transmission To control efficiently the limited bandwidth usage it will be of great value to provide the blocking mechanism that filters out the multimedia files downloading from web pages Check the box to block the file upload by way of web page Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 127 Dray Tek 3 After finished the settings above click Apply to save the file and wait for the following dialog appears CSM gt URL Content Filter Dash
163. l be explained as follows Item Add Edit Delete Reset Refresh Enable User Name Privilege Login Path Vigor2760 Series User s Guide Description Create a new FTP user profile Edit the selected profile To edit the profile simply check the profile box you want to edit and then click this button Remove the selected profile Click it to retrieve the default settings of this page Click it to fresh the web page Display if the user is allowed to access into Vigor2760 FTP server or not Enable The FTP server is active Disable The FTP server is inactive Display the user name of user profile Display the authority ready only or read write for such profile Display the directory that a user will find himself herself reside in after logging into the FTP server successfully Currently it s either the internal storage or USB disk 168 Dray Tek To add a new profile for disk share please do the following 1 Click the Add button USB Applications TP Serve FTP User EAEI E Add Enable User Wal 2 The following setting page will appear USB Applications gt FIP Serve FTP User gei l Enable UserName Privilege Login Path Bappy clear Item Enable User Name Privilege Login Path Apply Clear Cancel Dray Tek admin Readtrite O Read Only Internal Storage Ed cancel Description Check the box to enable such pr
164. lt br has been blocked by SRAAMES URL Content Filter lt p Please contact your system administrator for further lt center body hody lt center lt bre lt bre lt bre lt p gt The requested Web page lt br gt from WSF lt br to SURLS brethatis categor lt br has been blocked by RANAMES Web Content Filter lt p Please contact your system administrator for further lt Icenter body Hello this is an advertiement example Available parameters are listed below Item Edit Vigor2760 Series User s Guide Description Edit the selected profile To edit the profile simply check the profile box you want to 195 Dray Tek edit and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to clear current settings and return to the settings saved previously Name Display the profile name Administration Display the administration message which is used to inform the user 4 11 3Configuration Backup This page is used to backup the configuration file and restore the configuration file in Note Backup for Certification must be done independently The Configuration Backup does not include information of Certificate In the following page simply click Download and follow the on screen instruction to backup the configuration file Dashboard Cuicl System Maintenance Configuration Backup Click Download button to download current running configurations a
165. ly gt Network Fead write i 192 168 1 1 says HBE paved successfully D ray Tek 144 Vigor2760 Series User s Guide 4 Click OK A new privilege profile has been created User Management gt Privilege Privilege FJ Add EJ Edit fii Delete Ga Reset M Refresh d Mame F Administrator F Guest Family Member 4 6 4 Advertisement This page allows you to open the advertisement mode for your company or for personal request If the function is applied you will see a pop up advertisement screen appeared on your screen according to the condition you defined This function shall be used along with System Maintenance gt gt Admiunistrator Setting User Management gt Advertisement Advertisement Advertisement None Ea Apply GeReset Refresh URL Content Filter Web Content Filter Advertisement Each item will be explained as follows Item Description Advertisement There are three types offered for you to choose Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page 4 6 4 1 Example for Advertisement Here is an example which will show you how to make a log in advertisement 1 Open User Management gt gt Advertisement Vigor2760 Series User s Guide 145 Dray Te k 2 Choose Advertisement and click Apply Advertisement Advertisement Web Content Filter Mone Bappy Reset Refresh URL Content Filter Web Cont
166. ly Click it to save the settings Refresh Click it to fresh the web page 4 2 4 Access Control In Access Control the router may restrict wireless access to certain wireless clients only by locking their MAC address into a black or white list The user may block wireless clients by inserting their MAC addresses into a black list or only let them be able to connect by inserting their MAC addresses into a white list In the Access Control web page users may configure the Allow List Deny List white black list modes used by each SSID and the MAC addresses applied to their lists Wireless LAN gt Access Control Dashboare Access Control Reset Retresh Name Enable Filter Type Ss101 Disable Deny List SSID Disable Deny List SSID3 Disable Deny List S8ID4 Disable Deny List Available parameters are listed below Item Description Edit Edit the selected SSID profile To edit the profile simply check the profile box you want to edit and then click this button Reset Click it to clear all of the setting profiles and return to factory default setting Refresh Click it to refresh the web page Name Display the name of the Access Control profile Such name is assigned by the router in default Enable Display the activation status for such interface Enable The profile is activated Disable The profile is not activated Filter Type Display the type Deny List or Allow List of the profile To edit an
167. main page for your request However some important and common used menu items which can be accessed in a quick way just for convenience Open Dashboard gt gt Dashboard from the main menu on the left side of the main page Scroll down the web page to display the QUICK ACCESS Bar Click to unfold the bar The functions of Dynamic DDNS Syslog LAN to LAN Privilege TR 069 Mail Alert Remote Dial in User and Session Table are displayed under the bar Move your mouse cursor on any one of the links and click on it The corresponding setting page will be open immediately e Dynamic DNS TR 069 Syslog Mail Alert LAN to LAN Remote Dial in User Privilege session Table D P ay Te k 22 Vigor2760 Series User s Guide applications and Tutorials 3 1 Registering the Router for Getting Relational Information in the Future Note After finished the network connection you need to register your router first to get more service from DrayTek In addition such section should be done before activating WCE service stated in section 3 2 Make sure the router has been configured and connected to Internet You can check the WAN status by opening Network gt gt WAN For example the following figure shows the Internet connection through WAN1 ADSL represented by DSL PVC1 is up Vigor2760 Series Toginsadmin 15 06 F Network gt WAN Dashboard Quick Start Wizar Status USB i Drop Refresh Name Connection UpTi
168. matches the current DSL mode of the Vigor router ADSL Choose it to configure the settings specified for ADSL VDSL Choose it to configure the settings specified for VDSL Note that the type you choose will result in different web settings offered by this web page ADSL_Mode This setting is available when ADSL is chosen as Profile Type VPI Stands for Virtual Path Identifier It is an 8 bit header inside each ATM cell that indicates where the cell should be routed The ATM is a method of sending data in small packets of fixed sizes It is used for transferring data to client computers VCI Stands for Virtual Channel Identifier It is a 16 bit field inside ATM cell s header that indicates the cell s next destination as it travels through the network A virtual channel is a logical connection between two end devices on the network 44 Vigor2760 Series User s Guide VLAN Encapsulation Ethernet Port Members Wireless SSID Members ATM QoS Vigor2760 Series User s Guide Encapsulation Choose a proper type for this channel The types will be different according to the protocol setting that you choose Enable the function of VLAN with tag The router will add specific VLAN number to all packets while sending them out Please type the tag value and specify the priority for the packets sending by the router VLAN ID Type the value as the VLAN ID number The range is form 0 to 4095 Priority 802 1
169. me IP Address MAC Address RX O DSL Pvc Up 00 00 41 118 160 96 75 O0 1d aa ec 8c 41 0 O USB 3G_BACKUP Idle 0 Please follow the steps below to register the router 1 Log into the web configurator of Vigor2760 and open Wizard gt gt Product Registration Quick Start Yvizard Activation Vizard Product Registration Vigor2760 Series User s Guide 23 Dr ay Te k 2 From the following web page click Register Wizard gt Product Registration E Dashboard Quick Star Wizard Product Registration Please click the bution to register your router Note that the pop window may be blocked due to browser setting 3 A Login page will be shown on the screen Please type the account and password that you created previously And click Login If you do not have the account and password simply click the link of click here to create a new one then return here to continue Please take a moment to register Membership Registration entitles you to upgrade firmware for your purchased product and receive news about upcoming products and services UserName james fae Auth Code txxhdd If you cannot read the word click here Forgotten password Don t have a My igor Account Create an account now Become the Myviger member you can receive fhe e newsleffer update 4 The following page will be displayed after you logging in MyVigor From this page please click Add Dray Tek My Information D Ab
170. n IP Address Mask Interface Gateway Apply Clear Cancel Description Check the box to enable such profile Type a name for such profile Type the IP address of the destination All the packets into such IP address will be forwarded to the gateway specified in this page Choose an interface for the static route DSL PYC1 USB 3G BACKUP Type an IP address of the other router All packets destined to destination IP address mask will be forwarded to the gateway specified here Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 62 Vigor2760 Series User s Guide 3 After finished the settings above click Apply to save the settings Network gt Static Route f AARAA Static Route Gada Eat Delete Reset Refresh Enable Name Destination IP 4ddress Mask Interface Enable 192 168 1 42 32 LAN LAN 2 Carrie_router 4 1 6 Dynamic Route The Routing Information Protocol RIP is a dynamic routing protocol used in local and wide area networks The routing information packet will be sent out by web server or router periodically and can be used to communicate with other routers It will calculate the number of network nodes on the route to ensure there is no obstruction on the network routine In addition it will choose a correct route based on the method of Distance Vector Routing and use the Bellman Ford algorithm
171. n protect your children from viewing adult websites or chat rooms Note Web Content Filter WCF is not a built in service of Vigor router but a service powered by Commtouch BPjM If you want to use such service trial or formal edition you have to perform the procedure of activation first For the service of formal edition please contact with your dealer for detailed information There are two methods to activate the WCE license By means of Service Activation By means of MyVigor Website 3 2 1 By Means of Service Activation Follow the steps below to activate the WCF mechanism 1 Open Wizard gt gt Service Activation and click Activate Iso Wizard gt Activation Wizard Ni A i F Activation Wizard PJ Activate Refresh QUICK Start Wizard Mame Serice Provider Stat Date Ex Activation Wizard Product Registration AUTR License D ra y Ti e k 26 Vigor2760 Series User s Guide 2 A pop up window will appear Only Free trail edition can be activated Click Next Saa Actrrocion w xx piosan M ee L ee G OM ee ee eee ee p rj x r AA S aa Service ctivatlon Wizard Select the service type that you want ta activate This wizard is used for activating Web Content Filter Please choose the edition you need Free trial edition In the following window check the box of Web Content Filter Commtouch and check the box of I have read and accept The Activation Date will be determi
172. nce a user type in or click on an URL with objectionable keywords URL keyword blocking facility will decline the HTTP request to that web page thus can limit user s access to the website You may imagine URL Content Filter as a well trained convenience store clerk who won t sell adult magazines to teenagers At office URL Content Filter can also provide a job related only environment hence to increase the employee work efficiency How can URL Content Filter work better than traditional firewall in the field of filtering Because it checks Dray Te k 124 Vigor2760 Series User s Guide the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can prevent user from accidentally downloading malicious codes from web pages It s very common that malicious codes conceal in the executable objects such as ActiveX Java Applet compressed files and other executable files Once downloading these types of files from websites you may risk bringing threat to your system For example an ActiveX control object is usually used for providing interactive web feature If malicious code hides inside it may occupy user s system Note The priority of URL Content Filter is higher than Web Content Filter CSM URL Content Filter URL Content Filter Dashboard amp Quick St Ga Add GeaReset Refresh Name Action Log
173. nditions The warranty does not cover the bundled or licensed software of other vendors Defects which do not significantly affect the usability of the product will not be covered by the warranty We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes Web registration is preferred You can register your Vigor router via http www draytek com Due to the continuous evolution of DrayTek technology all routers will be regularly upgraded Please consult the DrayTek web site for more information on newest firmware tools and documents http www draytek com iii Dray Tek European Community Declarations Manufacturer DrayTek Corp Address No 26 Fu Shing Road HuKou County HsinChu Industrial Park Hsin Chu Taiwan 303 Product Vigor2760 Series Router DrayTek Corp declares that Vigor2760 Series of routers are in compliance with the following essential requirements and other relevant provisions of R amp TTE Directive 1999 5 EEC The product conforms to the requirements of Electro Magnetic Compatibility EMC Directive 2004 108 EC by complying with the requirements set forth in EN55022 Class B and EN55024 Class B The product conforms to the requirements of Low Voltage LVD Directive 2006 95 EC by complying with the requirements set forth in EN60950 1 Regulatory Information Federal Communica
174. ned automatically by the system Click Next LE Service Aciwailon Wizard Select the service type that you wani to activale This product provides 30 days of free trial please choose the item s you want to use For WCF service i Web Content Filter BPyM License Agreeme rt Activation Date iror 5 EPJM is the web content fer based on service operated in Germany We recommend only users live m Germany to try the BPyM WCF service This ks a free service without Guaranhae F Web Content Filter Commtouch Licenses Agreement activation Date GOO a Commiouch i the web content fiter based on Commtouch operated in the workdwide There i a 30 day thal penod After trial you can purchare GrayTek s prepared Commtouch Globalview WCF padkage from retailing outlets F have read and accept the above Agreement Please check this box Make a confirmation of activating the free trial license or not If YES click Next LE mydieodayek oom SerieA ciata Windteebiriant php Senica Activation Wizard Please confirm your settings Sevice Type Trial version Sevce Actwated Web Content Filter Commtouch Please click Back to re select service type you to activate Vigor2760 Series User s Guide 27 Dr ay Tek 5 When the following web page appears simply click Finish Service Activation Wizard Connection Succeeded Please check the following item s to enable s
175. net of the object profile Group Display the IP object profiles grouped under such profile To create a new object group profile please do the following 1 Click the Add button Objects Setting gt Address ot i ee Address Group Adi Beit Or GiReset amp Mame De 2 The following setting page will appear Vigor2760 Series User s Guide 105 Dr ay Te k Objects Setting gt Address Dashboard amp Quick Start Wiz Seti Address Group om a lee ACC Name Type Subnet Group Available Items Selected Items ADDR _OBJ Market G E o E EJ Apply clear E cancel Available parameters are listed below Item Description Name Type a name for this group profile Maximum 20 characters are allowed Description Give a brief description for such profile Type Choose the type to display the related object profiles Range subnet WA For example if Range is selected as the Type then all the created Address Object profiles based on Range will be listed in Available Items Group Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display the available object profiles Selected Items Display the object profiles selected for such group Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page Dray Tek 106 Vigor2760 Series User
176. ng is that the computer will receive a reply from 192 168 1 1 If not please check the IP address of your computer We suggest you setting the network connection as get IP automatically Please refer to the section 5 2 Please follow the steps below to ping the router correctly For Windows L Ds 4 Open the Command Prompt window from Start menu gt Run Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista The DOS command dialog will appear w Command Prompt Microsoft Windows AFP Version 5 1 2688 lt C gt Copyright 1985 2001 Microsoft Corp D Documents and Settings fae ping 192 168 1 1 Pinging 192 168 1 1 with 32 bytes of data Reply from 192 168 1 1 bytes 32 time lt ims TTL 255 Reply from 192 168 1 1 bytes 32 time lt ims Reply from 192 168 1 1 bytes 32 time lt ims Reply from 192 168 1 1 bytes 32 time lt ims TTL 255 Ping statistics for 192 168 1 1 Packets Sent 4 Received 4 Lost A loss Approximate round trip times in milli seconds Minimum ms Maximum ms Average Ams D Documents and Settings fae gt _ Type ping 192 168 1 1 and press Enter If the link is OK the line of Reply from 192 168 1 1 bytes 32 time lt Ims TTL 255 will appear If the line does not appear please check the IP address setting of your computer For Mac OS Terminal 1 2 3 4 Dray Tek Double click on the current used Mac OS on the desktop Open the Application folder
177. ng to the default settings Try to reset the router by software or hardware g Warning After pressing factory default setting you will loose all settings you did before i Make sure you have recorded all useful settings before you pressing Software Reset You can reset the router to factory default via Web page Open System Maintenance gt gt Reboot System The following screen will appear Choose Using factory default configuration and click Apply After few seconds the router will return all the settings to the factory settings Vigor2760 Series Login admin 16 20 19 System Maintenance gt Reboot System Dashboard Quick Start iza Reboot System Do you want to reboot your router using current configuration O using factory default configuration EJApply Administrator Setting Configuration Backup Syslog and Mail Alert Time and Date Management SNMP Reboot System Firmware Upgrade Hardware Reset While the router is running ACT LED blinking press the Factory Reset button and hold for more than 5 seconds When you see the ACT LED blinks rapidly please release the button Then the router will restart with the default configuration After restore the factory default setting you can configure the settings for the router again to fit your personal request D F ay Te k 218 Vigor2760 Series User s Guide 5 6 Contacting Your Dealer If the router still cannot work correctly after trying many e
178. nufacturer Product Ernpty Each item will be explained as follows Item Description Refresh Click it to fresh the web page Status Display the activation status of the USB disk Enable The USB printer is available for printing Disable The USB printer is not powered up Manufacturer Display the manufacturer of the disk Product Display the model number of the printer Dray Te k 160 Vigor2760 Series User s Guide 4 8 2 SAMBA Samba is the technology that allows Windows or Mac users to access a drive in the Linux system Vigor2760 allows users in different operating system Windows Mac Android iOS Linux and etc to access either the internal storage or USB disks plugged in the Vigor2760 USB port 4 8 2 1 Disk Share Disk Share profile is a storage space to which different users can write read create delete files as if itis a folder on your own machine once those users connect to Vigor2760 Samba server successfully A disk share is either the internal storage or USB disks plugged in the Vigor2760 USB ports Under the Disk Share tab you can specify a name for this share When someone types in say 192 168 1 1 on the file explorer he she will see a folder with such name Share Path is where this share actually stores its data You can also specify who can access this share 1 e allowed users and to what extent he she can access this share 1 e read only read write USB Applications gt SAMBA TT Disk
179. of LED status please refer to section 1 2 D F ay Ti e k 8 Vigor2760 Series User s Guide 1 4 Printer Installation You can install a printer onto the router for sharing printing All the PCs connected this router can print documents via the router The example provided here is made based on Windows XP 2000 For Windows 98 SE Vista please visit www draytek com Internet Printer Name 192 168 1 1 Port Name IP_192 168 1 1 w T et a l lt Printer Router 192 168 1 1 e n i l Ta Before using it please follow the steps below to configure settings for connected computers or wireless clients l j lt gt Connect the printer with the router through USB parallel port 2 Open Start gt Settings gt Printer and Faxes EG Documents d Settings G Control Panel Ls Network Connections Search Printers and Faxes Help and Support of Taskbar and Start Menu Run Log OFF coco lee Turn OFF Computer 4 Internet Explorer Mad Vigor2760 Series User s Guide Dray Tek 3 Open File gt Add a New Computer A welcome dialog will appear Please click Next Add Printer Wizard Welcome to the Add Printer Q Wizard This wizard helps you install a printer or make printer connections If you have a Plug and Play printer that connects I through a USB port or any other hot pluggable port such as IEEE 1394 infrared and so
180. ofile Use the drop down list to specify the name for the user Determine the right read write or ready only that such user profile will have Specify the directory that a user will find himself herself residing in once logging in Internal Storage It indicates Vigor2760 internal NAND flash storage which is about 38MB and is designed to store configuration related settings Currently the path is mnt share USB Disk Each USB disk plugged in will have a mounting path e g mnt usb Disc A1 Click it to save the settings Click it to remove the modification of the web page Click it to exit the web page without saving the configuration 166 Vigor2760 Series User s Guide 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Enable UserName Erom ete AEren LE pa paved puccesfuly Login Fath 4 Click OK A new LAN to LAN profile has been created USB Applications gt FIP Server Gadai Exec Delete Reset Refresh Enable User Name Privilege Login Path Enable admin Read vrite Internal Storage 4 8 3 2 General This page allows you to enable disable the FTP function and configure the port number for such feature USB Applications gt FIP Server SOS General FTP Enable FTP Por Bappy Reset Refresh Each item will be explained as follows Item Description FTP Enable Check the box to enable such function FTP Port The default v
181. on Refresh Click it to refresh the web page Name Display the name of the physical port Port Type Display the type of the physical port It might be Switch or XXX To edit the switch port setting please do the following Dray Tek 70 Vigor2760 Series User s Guide 1 Choose the port you want and click the check box 2 Click Edit to open the following page Network gt Switch Physical Port Name Port Type Interface Belong Link Speed Port Mirror Fort LAN LAN Auta ka Ea Apply fil Clear x Cancel Available parameters are listed below Item Name Port Type Interface Belong Link Speed Apply Clear Cancel Description Display the name of the physical port At present there is only one type for you to choose Displays the name of the profile in which such physical port is currently used Choose the line speed for downloading and uploading file Usually keep the default setting will be better Auto 100Mlbps Full Duplex 100Mbps Half Duplex 10 bps Full Duplex 10Mbps Half Duplex In default Auto will be selected Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the settings then click Cancel to return to previous page Vigor2760 Series User s Guide 7 Dray Tek 4 1 10 2 Port Mirror Port mirro
182. onnect to the vigor router PIN Code WLAN Card Define a PIN Code PIN Code of Station For WPS is supported in WPA PSK or WPA2 PSK mode if you do not choose such mode in Wireless LAN gt gt Security you will see the following message box Microsoft Internet Explorer Please click OK and go back Wireless LAN gt gt General Setup gt gt SSID to choose WPA PSK or WPA2 PSK mode and access WPS again Below shows Wireless LAN gt gt WPS web page Wireless LAN gt WPS Dashboard Quick Start MY Wi Fi Protected Setup Enable Configure via Client PIM code PIN Configure via Push Button _ Start PAC Bi Apply Refresh Available parameters are listed below Item Description Enable Check this box to enable WPS setting Configure via Client PIN Please input the PIN code specified in wireless client you Code wish to connect and click PIN button The WPS LED on the router will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Push Click Start PBC to invoke Push Button style WPS setup Button procedure The router will wait for WPS requests from wireless clients about two minutes The WPS LED on the router will blink fast when WPS is in progress It will return D P ay Ti e k 80 Vigor2760 Series User s Guide to normal condition after two minutes You need to setup WPS within two minutes App
183. ons and marking them for high priority service level enforcement throughout the network Scheduling Based on classification of service level to assign packets to queues and associated service types Network gt Quality of Service Dashboard Quick Star Quality of Service Add B fil Refresh C Interface Outbound GoS Outbound Borrow Bandwidth C LAN LAN Disable Disable CI OSL Pct Disable Disable Each item will be explained as follows Item Description Add Create new QoS profiles Edit Edit the selected QoS profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected QoS profile Refresh Click it to refresh the web page Enable Display the activation status for such interface Enable The profile is activated Disable The profile is not activated Interface Display the interface used by such profile Outbound QoS Display the activation status for such interface Enable The profile is activated Disable The profile is not activated Outbound Borrow Display the activation status for such interface Bandwidth Enable The profile is activated Disable The profile is not activated To add a static route profile please do the following 1 Click Add Quality of Service Esad E Refr Interface OQutbour O LAN LAN Disable Dray Tek 66 Vigor2760 Series User s Guide 2 The following page appears
184. other server behind the router Before you use the Dynamic DNS feature you have to apply for free DDNS service to the DDNS service providers The router provides up to eight accounts from three different DDNS service providers Basically Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www dyndns org www no ip com www dtdns com www changeip com www twodny com www vigorddns www 3322 org and www huagai com DynDNS Dyn0NS Mo IP ChangelP DONS TwoDNS vigorDONS CERA Huagai You should visit their websites to register your own domain name for the router 4 7 2 1 Status This page displays the information for the available user accounts and all the registered domain names from the DDNS provider Applications gt Dynamic DNS Dashboard Quick Start W Status Se E g Refresh Name Domain Mame Last Status Last Updated IF Last Updated Time Empty Each item will be explained as follows Item Description Update Click it to update the IP address of the DDNS server and display in this page immediately Refresh Click it to refresh the information of the web page Name Display the profile name of the DDNS server profile Domain Name Display the domain name that the DDNS server profile uses Vigor2760 Series User s Guide 151 Dray Te k Last Status Display the status of the DDNS server Last Updated IP Display the IP address which obtained from the las
185. out Us Welcome james_ fae Product Last Login Time 2011 08 24 09 39 13 Last Login From 123 110 144 220 O My Information Current Login Time 2011 08 24 23 01 15 E VigorACS SI Current Login From 114 37 142 164 Vigor Series Your Device List HowNo 5 PageNo Q Management z verial Number Bae 104001703857 Vigor2710 Vigor2710 Customer Survey 200807100001 VigorPro5300 VigorPro5300 200911030001 ryan YigorPro5300 D F ay Ti e k 24 Vigor2760 Series User s Guide Note Below the field of Your Device List all the Vigor routers that you have registered to My Vigor website will be displayed in sequence 5 When the following page appears please type in Nickname for the router and choose the right registration date from the popup calendar it appears when you click on the box of Registration Date After adding the basic information for the router please click Submit Dray Tek Al Home he omens My Product Search for this site Oo Go Product My Information Registration Device D VigorACs SI Serial number 2011082214320301 Vigor Series Nickname Vigor2760 Management Registration Date 08 24 2011 Aiuto Usage elet iy EE Garvey Product Rating Select Your opinion so far No of Employees Select In total within your company Supplier Where you bought it from Date of Purchase mmrdd yyyy Internet Connection O Cable
186. ove the selected item listed in Available Items onto Selected Items for choosing the suitable wireless SSID members to be used in the new profile Available Items Display the available wireless SSID member Selected Items Display the wireless SSID member selected for such profile Note that the wireless SSIDs selected here can not be used in other profiles Transparent Firewall If it is selected the network traffic received via this LAN interface will go through firewall processing Firewall processing details may be defined in the Firewall related configuration web pages Advanced Settings Alias IP Address All the IP address es defined here will be allowed to access to the interface defined in this profile Dray Tek 52 Vigor2760 Series User s Guide IP Address coon O Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the settings 4 1 3 NAT Usually the router serves as an NAT Network Address Translation router NAT is a mechanism that one or more private IP addresses can be mapped into a single public one Public IP address is usually assigned by your ISP for which you may get charged Private IP addresses are recognized only among internal hosts When the outgoing packets destined to some public server on the Internet reach the NAT router t
187. ox to enable this profile Multicast traffic will be forwarded to ports that have members of that group Disabling IGMP snooping will make multicast traffic treated in the same manner as broadcast traffic Enable IGMP Proxy Check this box to enable this profile The application of multicast will be executed through WAN port In addition such function is available in NAT mode External Proxy Interface Define which WAN interface shall receive the Multicast Up Stream Stream IPTV Traffic here Dray Te k 158 Vigor2760 Series User s Guide The default setting is PVC1 DSL Pvt fe DSL PYC1 USB 3G BACKUP Internal Proxy Interface It is used to specify the LAN interface for internal Down Stream connection for applying such function Select the LAN interfaces where the IPTV clients will reside Use the gt button to move the selected item listed in Available Items onto Selected Items Available Items Display all the available user objects based on the type you specify above Selected Items Display the user object selected for such group profile Apply Click it to save the settings Refresh Click it to remove the modification of the web page After finished the settings above click Apply to save the settings 4 8 USB Applications USB storage disk connected on Vigor router can be regarded as a server By way of Vigor router clients on LAN can access write and read data stored in USB storage
188. page Name Display the name of the certificate Status Display the status of the certificate Valid From Display the starting point of the valid time of the certificate Valid To Display the end point of the valid time of the certificate Certificates obtained from other sources and stored on the PC can be uploaded to Vigor router do the following 1 Click the Upload button Certificate Management gt Remote Certificate Remote Certificate ES E Upload m Refi Mame Status Valid From Dray Tek 188 Vigor2760 Series User s Guide 2 The following setting page will appear To specify a file click the Select File button to locate the one you want Certificate Management Remote Certificate Remote Certificate Certificate File ie tet oe fw Cer Bappy GiClear EJ Cancel 3 After finished the settings above click Apply to upload the file and wait for the following dialog appears Certificate Management gt Remote Certificate Remote Certificate fw cer Uploading i 192 168 1 1 says HMA paved successfully 4 Click OK The Certificate has been uploaded to Vigor router and displayed on this page IE Certificate Management gt Remote Certificate E Dashboard amp Quick Start Wiza Remote Certificate EJEdit Delete Q Download Ea Upload O Refresh Name Status Valid From Valid To Nov 30 07 36 04 2011 GMT Mov 30 07 36 04 2031 GhT Vigor2760 Series User s Guide 189
189. ple public IP addresses from your DSL or Cable ISP service providers In most cases a Cable service provider will offer a fixed public IP while a DSL service provider will offer a public subnet If you have a public subnet you could assign an IP address or many IP address to the WAN interface Below shows the configuration tabs for WAN including Status DSL Bridge USB and DSL Mode Network gt WAN a Refresh Vigor2760 Series User s Guide a Dray Te k 4 1 1 6 WAN Status This page displays current status for physical WAN connection DSL PVC1 indicates the network connection via DSL interface USB 3G_BACKUP indicates the backup network connection via USB interface Network gt WAN Dashboard Quick Start Y ea Status file Shoo B GJ Refresh Name C DSL PWE CO USB 36 BACKUP OSL Mode Connection UpTime IF Address MAC Address Idle 00 00 00 0 0 0 0 O0 1d aarec dc 41 Idle Each item will be explained as follows Item Dial Drop Refresh Name Connection UP Time IP Address MAC Address Rx Packet Tx Packet Dray Tek Description Click it to start the network connection via DSL or USB interface Before clicking it check the interface you want Click it to terminate the network connection via DSL or USB interface Click it to refresh the web page Display the profile name for DSL USB interface Display the status of such WAN connection Idle the network
190. ply to save the file and wait for the following dialog appears CSM gt Web Content Filter Web Content Filter Name For_children Log Block Black white List Disable Categories Child Protection ii ae EAR eee ioe E Leisure saved puccessfully Business Chating i Computer Internet Pass w a nable V og 4 Click OK A new group profile has been created CSM gt Web Content Filter Web Content Filter Eadie edt Delete Reset Refresh Mame Log aa For children Block 4 5 3 2 Advanced Such page allows you to configure the processing rate for WCF mechanism CSM gt Web Content Filter j Dashboard Oo Advanced Cache Li L2 Cache w Mone Bappy Reset L1 Cache L Cache L1 L Cache Each item will be explained as follows Item Description Cache None the router will check the URL that the user wants to access via WCF precisely however the processing rate is normal Such item can provide the most accurate URL matching L1 the router will check the URL that the user wants to access via WCF If the URL has been accessed previously it will be stored for a short time about 1 second in the router Dray Te k 132 Vigor2760 Series User s Guide to be accessed quickly if required Such item can provide accurate URL matching with faster rate L2 the router will check the URL that the user wants to access via WCF If the data has been accessed previously the IP addres
191. ppear If you check this box the local end will only accept the data sent with the encryption of 128 bit from the remote end If not the local end will only accept the data send without encryption This option 128 bit indicates that the router will use the MPPE encryption scheme with maximum bits 128 bit to encrypt the data If you choose Dial out as the Call Direction and choose MS CHAP or MS CHAP V2 as PPP Authentication 171 Dray Tek VJ Compression Security Mode Authentication Method Dial out Advanced Options Dray Tek 125 bit Mone 10 bit None It means the MPPE encryption is disabled That is if the remote end chooses Required as MPPE encryption with 128 bit enabled on the remote host the VPN tunnel between both ends cannot be established 128 bit It means the MPPE encryption selected by the local end only accepts 128 bit mechanism If the remote end chooses Required as MPPE encryption without enabling 128 bit the VPN tunnel between both ends cannot be established It is very important to set both ends with the same MPPE Encryption This field is applicable when you select PPTP or L2TP above VJ Compression is used for TCP IP protocol header compression Normally set to Yes to improve bandwidth utilization This field is applicable when you select L2TP or IPsec above Currently the default setting is ESP This group of fields is applicable for IPsec and L2TP Pre shared Key
192. r can be applied for the users in LAN Generally speaking this function copies traffic from one or more specific ports to a target port This mechanism helps manager track the network errors or abnormal packets transmission without interrupting the flow of data access the network By the way user can apply this function to monitor all traffics which user needs to check There are some advantages supported in this feature First it is more economical without other detecting equipments to be set up Second it may be able to view traffic on one or more ports within a VLAN at the same time Third it can transfer all data traffics to be mirrored to one analyzer connect to the mirroring port Last it is more convenient and easy to configure in user s interface Network gt Switch Enable Port Mirror irror Port Mirrored Port Ed Apply Port Mirror Refresh ABEE g nE ias d Porti Pota Pota Port4 L Port L Port L Port L Port4 Available parameters are listed below Item Enable Port Mirror Mirror Port Mirrored Port Apply Refresh Description Check the box to activate this function Select a port to view traffic sent from mirrored ports Select which ports are necessary to be mirrored Click it to save the settings Click it to clear current settings and return to the settings saved previously After finished the settings above click Apply to save the setting Dray Tek
193. r can be under an environment with high speed NAT the configuration provide here can help you to deploy and use the router quickly The Quick Start Wizard is designed for you to easily set up your router for Internet access You can directly access the Quick Start Wizard via Web Configurator 1 Open the web configruator of Vigor router The Main Screen will appear Dray Tek Vigor2760 Series Dashboard gt Dashboard Dashboard Login admin 15 54 04 S Dashboard Quick Start Wizard Lo Dashboard ainan oo So System Detail Name System Detail Data Name Connection Up Time IP Adi Model Name Vigor2760n DSL P C1 Idle 00 00 00 0 0 0 Firmware Yersion 1 0 0_RC14 USB 3G_BACKUP Idle Build Date Tue Dec 4 10 16 28 CST 2012 Web Version 1 0 0 591 gd898c9e p Configure Version 1 0 48 LANSTATUS o e Uptime D day s 0 hour s 5 mints Name IP Address MAC Addre System Time 1970 01 01 00 05 52 LAN LAN 192 168 1 1 00 1 d aa e DSL T lt C DSL Info Name DSL Info Data Firmware Yersion 05 04 08 00 00 06_05 04 04 04 00 01 Enable SSID Modem State SILENT Line mode UNKNOWN Disable DrayTek2 Line Uptime 00 00 00 00 Disable DrayTek3 Downstream Line Disable DrayTek4 Rate Ukbpa Enable DrayTek1 Upstream Line Rate 0 kbps svs teu ea Ci F a CPU Loading 0 EZGAI oG i Profile Name Connection Memory Usage 54 E w Empty Uptime lt i ili amp ales The home page will change slightly in accordance with the
194. re listed below Item Description Firmware for upload Click the Select File button to locate the firmware you want from your hard disk Vigor2760 Series User s Guide 205 Dray Te k Apply Click it to process the firmware upgrade Clear Cancel the file selection 4 11 10 Activation There are two ways to activate WCF on vigor router using Activation Wizard or via System Maintenance gt gt Activation After you have finished the setting profiles for WCF refer to Web Content Filter Profile it is the time to activate the mechanism for your computer Click System Maintenance gt gt Activation to open the following page for accessing http myvigor draytek com i system Maintenance gt Acti Dashboard Quick Start License OLEE EActvate GRefresh C Name Service Provider Start Date Expire Date Authentication Message Status C wWeb Filter License Mot Activated Available parameters are listed below Item Description Activate Choose the license list you want and check the front box of the list Then click Activate to access into myvigor website for activating the formal or trial version of the WCF mechanism Refresh Click it to refresh the web page Name Display the name of the web content filter mechanism Service Provider Display the service provider who offers the WCF mechanism Start Date Display the starting date for the valid time of the license Expire Date Display the ending date for
195. router you have Here we take Vigor2760 as an example 3 Click Wizard gt gt Quick Start Wizard or click the Quick Start Wizard link on the quick bar on the top Wizard GUCK Start Vizard me 7 Product Registration E Dashboare Quick Star Wizard Dray Tek 16 Vigor2760 Series User s Guide 4 Inthe tab of STEP1 type the login password on the field of Password and retype it on the field of Confirm Password After restarting the router new password must be typed for accessing into router web page Then click the Next button for next page Wizard gt Quick Start Wizard j Dashboard Quick St Name admin Passwor ES Next 5 Choose the time zone for the router located Then click the Next button for next page Wizard gt Quick Start Wizard E Dashboard Quick Start Wizard 5 Time Zone UTC Greenwich Mean Time Dublin UTC 03 00 Nairobi GaPrev O Hext UTC 03 30 Tehran UTC 04 00 Abu Dhabi Muscat UTC 04 00 Baku Tbilisi UTC 04 50 Kabul UTC 065 00 Ekaterinburg UTC 05 00 Islamabad Karachi Tashkent UTC 05 50 Bombay Calcutta UTC 05 30 Madras New Delhi UTC 05 30 Colombo UTC 06 00 Astana Almaty Dhaka UTC 07 00 Bangkok Hanoi Jakarta UTC 08 00 Beijing Chongqing UTC 08 00 Hong Kong Urumgi UTC 08 00 Singapore UTC HI8 00 Perth UTCHIS 00 Seoul UTC 09 00 Osaka Sapporo Tokyo Vigor2760 Series User s Guide 17 Dr ay Te k 6 Type the ro
196. rt destination port respectively Application Specify the type of the service object It will influence the effect of the firewall setting For example the URL Content Filter and Web Content Filter will run only when HTTP is selected in such field If you choose None then UCF and WCE will not run normally IMAP IFC NNTP POPS SMB ohiTP oh hiP SoH SoLITLS TELNET Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears Service Type Object S220 es 6s Seu Harme TEST Protocal TEP iw Start Source Part gp fait 192 168 1 1 says HBA End Source Port Start Destination Port End Destination Port saved Successfully Application i Clear Vigor2760 Series User s Guide 109 Dr ay Te k 4 Click OK A new object profile has been created Service Type Object Sop oles eee Ea add Seat Delete Mame SRY_OBJ HTTP SRY_OBJ POPS SRY_OBJ FTP SRY_OBJ SMTP SRY_OBJ IMAP SRY_OBJ TEST GiReset Refresh Protocal Application TCF HTTP ee POP3 TCP FTF TEP SMTP TOP MAF 4 4 2 2 Service Type Group You can bind several service type objects into one group Objects Setting Service Type Dashboard Quick Star Y Sop e oo al a Service Type Group Ea Add
197. s Point AP connecting to lots of wireless clients or Stations STA All the STAs will share the same Internet connection via Vigor wireless router 4 2 1 1 Security Setting Overview Real time Hardware Encryption Vigor Router is equipped with a hardware AES encryption engine so it can apply the highest protection to your data without influencing user experience Complete Security Standard Selection To ensure the security and privacy of your wireless communication we provide several prevailing standards on market WEP Wired Equivalent Privacy is a legacy method to encrypt each frame transmitted via radio using either a 64 bit or 128 bit key Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys WPA Wi Fi Protected Access the most dominating security mechanism in industry 1s separated into two categories WPA personal or called WPA Pre Share Key WPA PSK and WPA Enterprise or called WPA 802 1x In WPA Personal a pre defined key is used for encryption during data transmission WPA applies Temporal Key Integrity Protocol TKIP for data encryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection You should select the appropriate security mechanism according to your needs No matter which security suite you select t
198. s User s Guide 6 In the following dialog type 192 168 1 1 router s LAN IP in the field of Printer Name or IP Address and type IP_192 168 1 1 as the port name Then click Next Add Standard CP IP Printer Port Wizard Add Port For which device do you want to add a port Enter the Printer Name or IP address and a port name for the desired device Printer Name or IP Address 192 168 1 1 Port Name IP_192 168 1 1 7 Click Standard and choose Generic Network Card Add Standard ICP IP Printer Port Wizard Additional Port Information Required The device could not be identified The detected device is of unknown type Be sure that 1 The device is properly configured 2 The address on the previous page is correct Either correct the address and perform another search on the network by returning to the previous wizard page or select the device type if you are sure the address is correct Completing the Add Standard TCP IP Printer Port Wizard You have selected a port with the following characteristics SNMP No Protocol RAW Pot 9100 Device 192 163 1 1 Port Name IP_192 168 1 1 Adapter Type Generic Network Card To complete this wizard click Finish i Cancel Vigor2760 Series User s Guide 11 Dray Te k 9 Now your system will ask you to choose right name of the printer that you installed onto the router Such step can make correct driver loaded onto your PC When
199. s a file SJpownload To restore a restored configuration file simply click the Restoration tab Click the Select File button to locate the backup file you want then click Apply The configuration file will be restored to the router System Maintenance gt Configuration Backup FmDashboa Restoration Configuration for upload ates ipa ad Bappy Giclear Dray Tek 196 Vigor2760 Series User s Guide 4 11 4 Syslog and Mail Alert SysLog function is provided for users to monitor router There is no bother to directly get into the Web Configurator of the router or borrow debug equipments 4 11 4 1 Syslog Access Setup System Maintenance gt Syslog and Mail f Dashboard Quick Start Wize Syslog Access Setup Mail Alert Enable Router Name Mode Syslog Server Firewall Log VPN Log User Access Log Interface Log System Log lappy Reset Refresh Stop record when fulls h h h h h Available parameters are listed below Item Enable Router Name Description Check Enable to activate function of syslog Default name is Vigor You can modify the name for your necessity Mode There are two modes for you to choose Stop record fulls v atop record when fulls Always record the event Stop record when fulls when the capacity of syslog is full the system will stop recording Always record the new event only the newest events will be recorded by the sys
200. s for the protocol Subnet Mask Type a subnet mask value for the protocol Gateway Type an IP address to the gateway for the protocol It means Max Transmit Unit for packet The default setting will be 1442 or 1500 based on the protocol you select Check the box to enable the default route for such WAN profile If you want to connect to Internet all the time check the 41 Dray Tek Always On box VLAN Encapsulation Enable the function of VLAN with tag The router will add specific VLAN number to all packets while sending them out Please type the tag value and specify the priority for the packets sending by the router VLAN ID Type the value as the VLAN ID number The range is form to 4000 Priority 802 11 Type the packet priority number for such VLAN The range is from 0 to 7 PPPoE Pass through The router offers PPPoE dial up connection Besides you Settings also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router Thus the PC can access Internet through such direction Check the box to enable such function PPPoE Pass through Interface It is available when PPPoE Pass through Settings is enabled Advanced Settings ATM QoS Such configuration is applied to upstream packets Such information will be provided by ISP Please contact with your ISP for detailed information Select a proper QoS type for the channel according to the information that your ISP prov
201. sable Status DSL J Bridge Refresh DSL Mode Default Route USB 3G BACKUP Enable Each item will be explained as follows Item Edit Refresh Backup Name Default Route Dray Tek Description Edit the selected WAN profile To edit the profile simply check the profile box you want to edit and then click this button Click it to refresh the web page Display if current backup WAN interface is enabled or not Display the profile name for USB interface Display if the default route is applied to such WAN profile or not Enable The default route is applied to the WAN profile Disable The default route is not applied to the WAN 46 Vigor2760 Series User s Guide profile To edit a WAN profile please do the following 1 Choose the profile you want and click the check box 2 Click Edit to open the following page Network gt WAN z DSL Bridge Backup Mame olhd PIM Code Confirm Sihi PIN Code Modem Initial String 1 Modem Initial String 2 APR Mame Modem Dial String PPP Username PPP Password Confirm PPP Password Default Route Dashboard Quick Start W 3_BACKUP O ATEOV1 18D28C150 ATDT 99 ATEOVLAL amp D2RC 1S0 Internet ATDT 9o Ea Apply fy Clear Ed Cancel Available parameters are listed below Item Backup Name SIM Pin Code Modem Initial String 1 2 APN Name Modem Dial String PPP Username PPP Pass
202. se the drop down list to choose an available external server e g RADIUS server If there is no item to be chosen it 139 Dray Tek means you have not created any external server yet Simply open User Management gt gt RADIUS to create a new one The user object with the type of External does not have any privilege Privilege Choose the privilege from the drop down list for such user object Guest w Mone Administrator None No privilege Administrator The user object owns all the right that administrator has Guest The user object owns limited right to access into the web user interface of the router Additional privileges can be defined in User Management gt gt Privilege Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 3 After finished the settings above click Apply to save the file and wait for the following dialog appears User Management gt User Profile Enable Name Type felt 192 168 1 1 says HA Password saved successfully Confirm Password Privilege fy Clear EJ Cancel 4 Click OK A new user object profile has been created User Management gt User Profile Dashboard 3 Eada Edit ijJDelete Reset Refresh d Enable Name F Enable admin Enable Dray Tek 136 Vigor2760 Series User s Guide 4 6 1 2 User Group This page allows you to bind several user profiles
203. selection Refresh Click it to refresh the web page Vigor2760 Series User s Guide 211 Dray Te k 4 12 7 Web Syslog Such page provides real time syslog and displays the time and message for Firewall VPN User Access Interface System settings Diagnostics gt Web Syslog Dashboard Quick Start Wk rard Interface Rese Refresh Date 1970 01 01 1970 01 01 Time 00 00 32 00 00 45 Message IF Interface land is up IF Interface land is up Diagnostics gt Web Syslog System Reset Refresh Date 1970 01 01 1970 01 01 1970 01 01 1970 01 01 1970 01 01 1970 01 01 1970 01 01 1970 01 01 Time 00 00 07 00 00 07 00 00 07 00 00 07 00 00 07 00 00 07 00 00 07 00 00 07 f Dashboard Quick Start Wize rd M4 1 300f231 a H Message syslogd started BusyBox v1 17 1 kernel klogd started BusyBox 1 17 1 2012 10 04 12 12 44 CST kernel Linux version 2 6 52 52 kyeh RO2 mike geo version 4 3 3 GCC 1 Thu Oct 4 13 02 41 CST 2012 kernel phym 04000000 mem O3fT00000 max_ptn OO003T00 kernel Reserving memory for CP1 O0xa3f0000 size Ox001 00000 kernel CPU revision is 00019555 MIPS 34t kernel Determined physical RAM map kernel User defined physical RAM map Each item will be explained as follows Dray Tek Item Reset Refresh Date Time Message Description Click it to rest to factory default settings Click it to refresh the web page Display the date of
204. ses of source and destination IDs will be memorized for a short time about second in the router When the user tries to access the same destination ID the router will check it by comparing the record stored If it matches the page will be retrieved quickly Such item can provide URL matching with the fastest rate L1 L2 Cache the router will check the URL with fast processing rate combining the feature of L1 and L2 Apply Click it to save the settings Reset Click it to retrieve the default settings of this page After finished the settings above click Apply to save the file 4 6 User Management User Management is a security feature which disallows any IP traffic except DHCP related packets from a particular host until that host has correctly supplied a valid username and password Instead of managing with IP address MAC address User Management function manages hosts with user account Network administrator can give different firewall policies or rules for different hosts with different User Management accounts This is more flexible and convenient for network management Moreover the function of Advertisement allows you to display special message for your company or for personal request f User Managemen EE eee RADIUS Privilege Advertisement 4 6 1 User Profile You can set customized profiles for user object and user group The user profile including user object and user group can be found on Firewall gt gt
205. small packets of fixed sizes It is used for transferring data to client computers VCI Stands for Virtual Channel Identifier It is a 16 bit field inside ATM cell s header that indicates the cell s next destination as it travels through the network A virtual channel is a logical connection between two end devices on the network Encapsulation Choose a proper type for this channel The types will be different according to the protocol setting that you choose The following protocols are available when Both is chosen as Profile Type 40 Vigor2760 Series User s Guide MTU Default Route Always On Vigor2760 Series User s Guide PPPoE PPPoA DHCP Static The following protocols are available when ADSL is chosen as Profile Type PPPoA RFC1483_BRIDGE_STATIC_IP RFC1483_BRIDGE_DHCR RFC1483_ROUTED_STATIC_IF RFC1483 ROUTED DHCP owt nr HADO kg The following protocols are available when VDSL is chosen as Profile Type PPPoE Static DHCP PPPoE When PPPoE PPPoA is selected Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this field Confirm Password Type in the password again for confirmation PPP Authentication Select PAP only or PAP or CHAP for PPP PPP Fixed IP Type a fixed IP address for PPP connection When Static RFC1483_ ROUTED RFC1483 BRIDGE under ADSL VDSL is selected IP Address Type an IP addres
206. t filter rule the other filter rules will be ignored and will not be applied to the packet Therefore the sequence of the filter rules influence the operation of the firewall significantly Dray Te k 92 Vigor2760 Series User s Guide You can set several filter rules Firewall gt Filter Setup Dashboard Quick Start Wie Filter Rule etic ii aa Hadi E X Reset Refresh Enable Name Description Schedule Action KAT C Enable san None ANY Inspect Enable Each item will be explained as follows Item Description Add Edit Enable Disable Delete Move Reset Refresh Enable Name Description Schedule Action NAT Vigor2760 Series User s Guide Create a new rule profile Modify the selected rule profile You have to check the rule you want and then click this button to open the edit window for modification Click it to enable the selected rule profile Click it to disable the selected rule profile If any rule profile is disabled it will not be available for selected by other applications Remove the selected rule You have to check the rule you want and then click this button Move the selected rule to a new place Filter Rule SiApply EiCancel Move Block porn before Mone Click it to retrieve the default settings of this page Click it to fresh the web page Display the activation status of the rule Enable The rule is activated Disable The rule is not activated
207. t from Available Items and click the gt arrow to add it onto Selected Items External Server It is available when External is selected as authentication type Only the object profiles configured with External type will be displayed here Thus you have to complete the following settings first before adjusting the settings in this field Addanew RADIUS profile in User Management gt gt RADIUS Dray Te k 176 Vigor2760 Series User s Guide Description Idle Timeout Server Type L2TP over IPsec MPPE MPPE Encryption VJ Compression Security Method Authentication Method Vigor2760 Series User s Guide Add new User Object profiles in User Management gt gt User Profile Remember to choose External as the Type and choose the RADIUS server you just created from the External Server drop down list Type a description for such profile The default value is 300 seconds If the connection has been idled over the value the router will drop the connection PPTP Build a PPTP VPN connection to the server through the Internet You should set the identity like User Name and Password below for the authentication of remote server L2TP Build a L2TP VPN connection through the Internet You can select to use L2TP alone or with IPsec Select from below If L2TP is chosen as the server type check this item to enable the function of L2TP over IPsec Select Optional or Required for MPPE Required
208. t inquiry of DDNS Server Last Updated Time Display the time of the last update 4 7 2 2 Service This page allows you create DDNS service account If the service profile is enabled it will be displayed on Status page Dashboard m Applications gt Dynamic DNS SA Service Advanced l FJ Add i fii Ge Reset M Refresh Enable Name External Interface Empty Each item will be explained as follows Item Description Add Create anew DDNS service profile Edit Modify the selected DDNS service profile You have to check the DDNS service profile you want and then click this button to open the edit window for modification Delete Remove the selected DDNS service profile You have to check the DDNS service profile you want and then click this button Reset Click it to retrieve the default settings of this page Refresh Click it to fresh the web page Enable Display the activation status of the service profile Enable The service profile is available for choosing Disable The service profile is not available for choosing Name Display the name of the profile To create anew DNS service profile please do the following 1 Click the Add button Applications gt Dynamic DNS ESCA Service EUELA EeAdd SE Ei Ga Rese Enable Mame Dray Te k 152 Vigor2760 Series User s Guide The following setting page will appear Applications gt Dynamic DNS Enable Mame External Interface
209. t is designed for POTS DSL 2 4GHz WLAN network throughout the EC region and Switzerland with restrictions in France Please see the user manual for the applicable networks on your product Dray Te k iv Vigor2760 Series User s Guide Table of Contents FTF OG UC ia g prenon E E E E E S 1 1 1 Web Configuration Buttons Explanation ccccccccccccceccseeeeseeeeeeeeseeaeeeeeeeeeseaaeeeeeeeeeeeeseaeaeees 1 1 2 LED Indicators and GOMNCCION S sssr RRi 2 Vidal FOV FOO ee E E E E 2 Wie ee FONO OO eee E E ES 4 LOFO VJe r OV oiee E 6 1 3 Hardware Installation cccccccssscccssececeeeeeceeceeceececeeseesseeeeseaeeeseeeeseaeeeseueessaueeesgeessuseessaaeeees 8 1 4 Printer Installation ce ctasretncs cxestbscteccendd wxeteeews cneietecinaecadsannWnesGauereceaaeseeasud EE 9 Mial OP BI CU AOI csrsyan aaa AEE ENEN Eaa Es 15 2 1 Accessing Web Pag cocoa ese ccipcurrserna sipaccecs iaa Ra an Ea E TEE AE ATENT AEAEE 15 2 2 Quick Start Wizard for Connecting Internet ccssssessssseeesssssssesssssssssessssssssseseseeeeeeees 16 2 3 Dashboard for System Status ccccccccccssssseecceeeeeeeeeeeeeeeeeseeeeseeeeeeeesseeeaeeeeeeeessueaeeeeeesesaas 21 2 4 Quick Access for Common Used MenU ccccccccccsssssssseeseeceeeeeeeeeeceeeeaaaeeeseeeeeeeeeeeeeeeeeenaaaees 22 Applications and Tutorials aasnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn n 23 3 1 Registering the Router for Gett
210. te profile used for Vigor router The certificate profile is defined in Certificate Management gt gt Local Certificate Peer Certificate Choose a certificate profile used for remote end Such certificate profile is defined in Certificate Management gt gt Remote Certificate This field is applicable when you select L2TP as server type and the function of L2TP over IPsec enabled Click the small triangle to unfold the available setting items Peer ID Type This option is available when Digital Certificate is selected as Authentication Method above Choose the ID type for the remote end If you choose Accept any peer ID it is not necessary for you to specify any ID further All the peer IDs are acceptable Accept any peer iD We Accept any peer ID Accept custom peer OM Peer ID DN If you choose Accept custom peer DN you have to type the name you got from the peer end in the field of Peer ID DN Only the specified one is acceptable The data shall be typed as e g C TW ST Hsinchu L Hokou O Draytek OU RD CN John emailAddress john test com or C TW O Draytek Local ID optional and Peer ID optional This option is available when Pre shared Key is selected as Authentication Method above You can define a name to be used by local user and the peer user If no name specified here the system will use My WAN IP as the local ID and the Remote Host as the Peer ID configured in this web page Phas
211. ted Network My WAN IP This field is only applicable when you select L2TP as the server type and enable L2TP over IPsec Type the WAN IP address for the VPN tunnel LAN Interface Use the drop down list to specify a LAN profile Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to exit the web page without saving the configuration After finished the settings above click Apply to save the settings Dray Tek 180 Vigor2760 Series User s Guide 4 9 4 Status This page displays the existed VPN profiles for your reference You can click the Overview IPsec L2TP or PPTP tab to check and choose the VPN profile you want Next click Dial to build the VPN connection between your PC and the remote end VPN and Remote Access gt Status ji Da shba ard a Overview Ania Drop Refresh Profile Name Connection Uptime Username Remote Sub Fi Pa La oe Down 00 00 00 Tand amp Vigor2760 Series User s Guide 181 Dr ay Te k 4 10 Certificate Management A digital certificate works as an electronic ID which is issued by a certification authority CA It contains information such as your name a serial number expiration dates etc and the digital signature of the certificate issuing authority so that a recipient can verify that the certificate is real Here Vigor router support digital certificates conforming to standard X 509 Any entity wants to utilize digital c
212. ted the LED will be off for awhile LINE Off There is no PSTN phone call On The phone connected to this port is off hook Off The phone connected to this port is on hook Phone1 Phone2 Blinking A phone call comes On Green The wireless access point is ready Blinking The data is transmitting via wireless connection Wireless LAN Green On Off WPS Blinking Blinks with one second cycle for two minutes The WPS Orange function is active O The wireless access point is turned off Q 5 The DSL port is connected Blinking The router is ready DSL Green Slowly Blinking The router is trying to connect to Internet Quickly The port is connected Blinking The data is transmitting LAN1 2 3 4 Green On A USB device is connected and active USB1 2 Dray Te k 6 Vigor2760 Series User s Guide PWR I O Factory Reset WLAN ON OFF WPS VDSL ADSL USB 1 2 LAN 1 4 Connector for a power adapter Power switch Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration WLAN WPS Press this button for 2 seconds to wait for client device making network connection through WPS When the LED lights up the WPS connection will be on WLAN ON OFF Press the but
213. tem Syslog Server Specify the IP address with port number for Syslog server Firewall Log VPN Log Check the box listed on this web page to send the User Access Log corresponding message of firewall VPN User Access Interface Log Interface System log information to Syslog System Log Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to clear current settings and return to the settings saved Vigor2760 Series User s Guide 197 Dray Tek previously 4 11 4 2 Mail Alert The system allows you to set several mail alert profiles to apply for different situations System Maintenance gt Syslog and Mail Dashboard amp Quick Start Wizard Jada JEt Delete Reset Refresh Enable Name Port SSL TLS Empty Each item will be explained as follows Item Description Add Create new WAN profiles Edit Edit the selected WAN profile To edit the profile simply check the profile box you want to edit and then click this button Delete Remove the selected WAN profile Reset Click it to rest to factory default settings Refresh Click it to refresh the web page Enable Display the activation status for such profile Enable The profile is activated Disable The profile is not activated Name Display the name of the mail alert profile Port Display the port number of the mail alert server SSL TLS Display the activation status for SSL TLS Enable
214. the Internet STEP Name admin Password admin oT EFP2 Time Zone UTC Greenwich Wean Time Dublin STEPS Router Name Protocol DHCP STEP4 Protocol DHCP Primary_DNS 3 0 0 6 ADSL open VPI 0 VCI 32 Connection Type 1403 Bridge IP LLE Confirm EJ Cancel 2 3 Dashboard for System Status Dashboard shows the system status including System Information DSL Information System Resource Quick Access Physical Port Status WAN Status LAN Status WiFi Station List WiFi AP List All VPN Status IPSec Status Traffic Graph L2TP Status PPTP Status DDNS Status Routing Table ARP Table DHCP Table Session Table and License Table Open Dashboard gt gt Dashboard from the main menu on the left side of the main page or click the Dashboard link on the quick bar on the top Dashboard Dashboard Or Vigor2760 Series User s Guide 21 Dr ay Te k Take a look at the icons on the top right of each status display area Click it to fold the specified status display area Click it to unfold the specified status display area Click it to re display the specified status display area SYSTEM RESOURCE aie CPU Loading 0 Memory Usage 46 e Dynamic OMS TR Ub4 syslog Mail Alert LAN ta LAN Remote Dial in User Privilege Session Table 2 4 Quick Access for Common Used Menu All the menu items can be accessed and arranged orderly on the left side of the
215. the record Display the time of the record Display related information for firewall VPN User Access Interface System 212 Vigor2760 Series User s Guide 5 Trouble Shooting This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration Please follow sections below to check your basic installation status stage by stage Checking if the hardware status is OK or not Checking if the network connection settings on your computer are OK or not Pinging the router from your computer Checking if the ISP settings are OK or not Backing to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 1 Checking If the Hardware Status Is OK or Not Follow the steps below to verify the hardware status 1 Check the power line and WLAN LAN connections Refer to 1 3 Hardware Installation for details 2 Turn on the router Make sure the ACT LED blink once per second and the correspondent LAN LED is bright wheal d EK Vigor2760 3 If not it means that there is something wrong with the hardware status Simply back to 1 3 Hardware Installation to execute the hardware installation again And then try again Vigor2760 Series User s Guide 213 Dray Tek 5 2 Checking If the Network Connection S
216. the valid time of the license Authentication Message Display the brief description of the license Status Display current status Activated or Not Activated of the WCE license Note Refer to section 3 1 to get detailed information Dray Te k 206 Vigor2760 Series User s Guide 4 12 Diagnostics Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router 4 12 1 Routing Table Diagnostics gt Routing Table E Dashboard Quick Start Wizard Routing Table GS Refresh Destination Gateway Mask Interface 192 165 10 0 192 165 1 3 755 255 255 255 LAN LAN 192 165 1 0 0 0 0 0 255 255 255 0 LAN LAN Each item will be explained as follows Item Description Refresh Click it to refresh the web page Destination Display the IP address for destination network or destination host Gateway Display the gateway address or 0 0 0 0 if none set Mask Display the netmask for the destination net 255 255 255 255 is for a host destination and 0 0 0 0 is for the default route Interface Display interface to which packets for this route will be sent 4 12 2 ARP Cache Table Click Diagnostics and click ARP Cache Table to view the content of the ARP Address Resolution Protocol cache held in the router The table shows a mapping between an Ethernet hardware address MAC Address and an IP address Diagnostics gt ARP Cache Table Dashboard Quick Start Wizard Lot ARP Ca
217. tion Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the use is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different form that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 This device may accept any interference received including interference that may cause undesired operation Please visit http www draytek com user SupportDLRTTECE php C OFE This produc
218. to LAN E Dashboard LAN to LAN EsAdd 3Edit Delete Refresh Enable Hame Description Call Direction Rem Enable MY PALL Tahwan to if een Dial out lsermany VPN_TAL GERM Vigor2760 Series User s Guide 175 Dray Tek 4 9 3 Remote Dial in User You can manage remote access by defining a remote dial in user profile so that users can be authenticated to dial in via VPN connection You can set parameters including specified connection peer ID connection type VPN connection including PPTP IPSec Tunnel and L2TP by itself or over IPSec and corresponding security methods etc Open VPN and Remote Access gt gt Remote Dial in User to get the following web page VPN and Remote Access gt Remote Dial in User Dashboard Guic otar Femote Dial in User Enable C Name Authentication Type External External Server w Idle Timeout sec Server Type PPTPR LIL2TP WIFFE Required MPPE Encryption 128 bit VJ Compression Network LAM Interface LAN LAM Bappy clear Available parameters are listed as follows Item Description Enable Check the box to enable such profile Name Type the name of the profile Authentication Type Specify the type Local or External for authentication local Local External User Account It is available when Local is selected as authentication type Only the object profiles configured with Local type will be displayed here Simply choose the account you wan
219. to calculate the routing table Vigor router will exchange routing information with neighboring routers using the RIP Routing Information Protocol to accomplish IP routing This allows users to change the information of the router such as IP address and the routers will automatically inform for each other Network Dynamic Route RIP Enable Update Timer sec Timeout Timer sec Interface send Version Recy Version GaApply Rese Refresh Available parameters are listed below Item Description Enable Check the box to enable such function Update Timer sec It is used to set the time interval of sending the routing information packet out Timeout Timer sec If the user is idle over the limitation of the timer the network connection will be stopped for such user By default the Timeout is set to 180 seconds Interface Choose an interface for the static route Vigor2760 Series User s Guide 63 Dr ay Te k DSL PCI USB 3G BACKUP Send Version It is the version of RIP for sending the packets out Simply use the default setting RIP2 RIP vt RIP W2 Both Recv Version It is the version of RIP for receiving the packets out Simply use the default setting RIP y RIPy Both Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to refresh the web page After finished the settings above click Apply to save the settings
220. ton once to enable WLAN LED on or disable WLAN LED off wireless connection Connector for accessing the Internet Connector for USB storage device Pen Driver Mobile HD or printer or 3G backup Connectors for local network devices NA A AAR eS a a a k TT Sc Ml k Phone a HH e LINE Phone1l Phone2 Vigor2760 Series User s Guide Connector for PSTN life line Connector of analog phone for VoIP communication 7 Dray Tek 1 3 Hardware Installation Before starting to configure the router you have to connect your devices correctly 1 Connect the XDSL interface to the external XDSL splitter with an XDSL line cable for all models For Vigor2760Vn also connect Line interface to external XDSL splitter PHOME Ling 2 Connect one port of 4 port switch to your computer with a RJ 45 cable This device allows you to connect 4 PCs directly Connect Phone port to a conventional analog telephone for V model only 4 Connect detachable antennas to the router for Vigor2760 series for n model only Connect one end of the power cord to the power port of this device Connect the other end to the wall outlet of electricity 6 Power on the router 7 Check the ACT and DSL LAN LEDs to assure network connection D Land line jack POTS ADSL Splitter or Microfilter Analog Phone Analog Phone Power Switch For the detailed information
221. ts will be executed by SNMP function Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to return to previous web page 4 After finished the settings above click Apply to save the settings and return to previous page System Maintenance gt SNMP SMRIP EJ Add GaReset Refresh Fi SNMP Enable Get Community Enable public Dray Te K 204 Vigor2760 Series User s Guide 4 11 8 Reboot System The Web Configurator may be used to restart your router Click Reboot System from System Maintenance to open the following page E Dash pi Reboot System Do WOU want to reboot OLUF router Using current configuration Using factory default configuration EJ Apply Available parameters are listed below Item Description Using current To reboot the router using the current configuration click it configuration and click Apply Using factory default To reset the router settings to default values click it and configuration click Apply Apply Click it to process the system reboot 4 11 9 Firmware Upgrade Download the newest firmware from DrayTek s web site or FTP site to your hard disk The DrayTek web site is www DrayTek com or local DrayTek s web site and FTP site is ftp DrayTek com System Maintenance gt Firmware Upgrade Upgrade Firmware Firmware for upload tease ieee G Bappy clear Available parameters a
222. u have to specify a workgroup name and a host name A workgroup name must not be the same as the host name USB Applications gt SAMBA rm vet wie ch parh DISK Share General Samba Enable Samba Workgroup WORKGROUP Samba Host Mame VIGOR 60 Bappy GdReset Refresh Each item will be explained as follows Item Description Samba Enable Check the box to enable such function Samba Workgroup The default name will be displayed on the screen Change the name if you want The workgroup name can have as many as 15 characters and cannot contain any of the following lt gt Samba Host Name The default name will be displayed on the screen Change the name if you want The host name can have as many as 23 characters and cannot contain any of the following lt gt I Apply Click it to save the settings Reset Click it to retrieve the default settings of this page Refresh Click it to clear current settings and return to the settings saved previously Dray Te k 164 Vigor2760 Series User s Guide 4 8 3 FTP Server FTP server in Vigor2760 is a server that allows users to download from upload files to either internal storage or USB disks plugged in the USB port 4 8 3 1 FTP User It allows you to create login accounts for FTP users FIP User Ga Add Enable USB Applications gt FTP Server Rese Refresh User Name Privilege Login Path Empty Each item wil
223. ubnet Mask Type the subnet mask address of the LAN interface VLAN and Physical Interface Settings Ethernet Port Note In default there is no item displayed here Members All the Ethernet Port Members from port to port4 are dedicated to the default LAN profile Before configuring the settings for new LAN profiles or Bridge profiles please reconfigure the default LAN profile enter Ethernet tab located in the Network gt gt LAN page to release some port members first Otherwise you may not be able to complete the profile configurations for the new interface Use the gt button to move the selected item listed in Available Items onto Selected Items for choosing the suitable port for the new profile Available Items Display the available port member Selected Items Display the port member selected for such group Note that the LAN Port port to port4 selected here can not be used in other profiles Wireless SSID Note In default there is no item displayed here Members All the Wireless SSID Members SSID1 SSID4 and WDS1 WDS4 are dedicated to the default LAN profile Before configuring the settings for new LAN profiles or Bridge profiles please reconfigure the default LAN profile enter Ethernet tab located in the Network gt gt LAN page to release some port members first Otherwise you may not be able to complete the profile configurations for the new interface Then use the gt button to m
224. uter name and choose the protocol PPP Static IP or DHCP according to the information from your ISP For example you should select PPP mode if the ISP provides you PPP interface Then click the Next button for next page Dashboard Quick Start Wizar Wizard gt Quick Start Wizard Protacal PPP Static IP DHCP GJ Prev ES Next Static IP if you click Static IP you will get the following page Please type in the IP address information and type the values for ADSL settings it can be ignored if VDSL service is offered originally provided by your ISP Then click Finish to complete the configuration Dashboard Quick Start wilzal Wizard gt Quick Start Wizard IP Address subnet Mask Gateway DNS Address Y ADSL vPI jo vel Connection Type 1483 Bridge IP LLC 14653 Bridge IP LLC 1493 Routed IP LLC 1463 Bridge IP vC Mux 1483 Routed IP ViC Mux Available parameters are listed as follows GJ Prev E Finish Item Description IP Address Type the IP address Subnet Mask Type the subnet mask Gateway Type the gateway IP address DNS Address Type in the primary IP address for the router VPI Stands for Virtual Path Identifier It is an 8 bit header inside each ATM cell that indicates where the cell should be routed The ATM is a method of sending data in small packets of fixed sizes It is used for transferring data to client computers VCI Stands for Virtual Channel Identifier
225. vilege EsApply E Clear User Management gt User Profile kamra eorna User Group f carrie Local Guest EJ Cancel Available parameters are listed below Item Enable Name Type Password Confirm Password External Server Vigor2760 Series User s Guide Description Check this box to enable the user object Type a name for such user object When a user tries to access Internet through this router an authentication step must be performed first The user has to type the User Name specified here to pass the authentication When the user passes the authentication he she can access Internet via this router However the accessing operation will be restricted with the conditions configured in this user profile The router will authenticate the dial in user by itself or by external service such as External server If External is selected here it is not necessary to configure the password setting below Local External Type a password for such user object When a user tries to access Internet through this router an authentication step must be performed first The user has to type the password specified here to pass the authentication When the user passes the authentication he she can access Internet via this router with the limitation configured in this user profile Type the password above again to make confirmation It is available when External is selected as the Type U
226. word Vigor2760 Series User s Guide Description Check the box to enable such profile Type the name of the profile Type PIN code of the SIM card that will be used to access Internet Such value is used to initialize USB modem Please use the default value If you have any question please contact to your ISP The initial string is shared with APN In some cases users may need another initial AT command to restrict 3G band or do any special settings APN Access Point Name is provided by your ISP for identifying different access points Simply click Apply to apply such name Finally you have to click OK to save the setting Such value is used to dial through USB mode Please use the default value If you have any question please contact to your ISP Type the PPP username optional Type the PPP password optional 47 Dray Tek Confirm PPP Password Default Route Apply Clear Cancel Type the password again for confirmation Check the box to enable the default route for such WAN profile Click it to save the settings Click it to remove the modification of the web page Click it to return to previous web page 3 After finished the settings above click Apply to save the settings then click Cancel to return to previous page 4 1 1 10 WAN DSL Mode The DSL mode tab is used to configure which xDSL mode is used by the router Please configure this according to the DSL type provided by the ISP The
227. y Te k This page is left blank Dray Tek 14 Vigor2760 Series User s Guide initia Configuration For using the router properly it is necessary for you to change the password of web configuration for security and adjust primary basic settings for your router to run well This chapter will guide you to perform initial configuration for Internet access activating WCEF license and register your Vigor router 2 1 Accessing Web Page 1 Make sure your PC connects to the router correctly You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and type http 192 168 1 1 The following window will be open to ask for username and password Dray Tek Username admin yrignt i 40124 Dray lek Corp All Rights Reserved 3 Please type admin admin on Username Password and click Login for opening the web configurator Q Notice If you fail to access to the web configuration please go to Trouble Shooting for detecting and solving your problem Vigor2760 Series User s Guide 15 Dray Te k 2 2 Quick Start Wizard for Connecting Internet g Notice Quick Start Wizard for user mode operation is the same as for admin mode operation If your route
228. ze Choose one of the key sizes for such certificate Passphase Such string will be used for confirmation while signing remote CA It is similar to a password but generally it is longer for security Confirm Type the string again for confirmation Passphrase Apply Click it to save the settings Clear Click it to remove the modification of the web page Cancel Click it to exit the web page without saving the configuration 3 After finished the settings above click Apply to save the settings A new generated Local Certificate has been created Certificate Management gt Local Certificate Dashboard Guic Local Certificate Edit Delete 9Download Upload J Generate Refresh Name Status Type Valid From Valid C 2760 Valid Request 4 Select the new generated certificate request and click Download to download the request to the PC Certificate Management gt Local Certificate Local Certificate EXEdit M Delete EiRownload E Upload Pl Generate Refresh Hame Status Type Valid From Valid Valid Request 5 ACA server shall sign the certificate request and send it back to the PC 6 Next click Upload to transmit the issued certificate from the PC to your router Certificate Management gt Local Certificate Local Certificate EJ fil p upio C Generate B Refresh C Name Status Type Valid From Valid 2760 Valid Request D ray Tek 184 Vigor2760 Ser

Untitled - DrayTek.Sklep.Pl

Contents

Download Pdf Manuals

Related Search

Related Contents