Home

Draytek Vigor2700e ADSL2+ Wi-Fi Ethernet LAN Black, Blue

1. H 83 For MPoA Users 1 Check if the Enable option for Broadband Access is selected Internet Access gt gt MPoA RFC1483 2684 WAN IP Network Settings Obtain an IP address automatically Router Name Multi PVC channel Channel 2 R r Domain Name BB Ke 5 WAN IP Alias 1483 Bridged IP LLC Specify an IP address 8 zs ateway IP Address Modulation Multimode Required for some ISPs Default MAC Address O Specify a MAC Address Bridge Mode MAC Address OG 50 7F 00 00 001 Enable Bridge Mode L L _ L RIP Protocol L TEnable RIP DNS Server IP Address Primary IP Address Secondary IP Address 2 Check if all parameters of DSL Modem Settings are entered with correct value that provided by your ISP Especially check if the encapsulation is selected properly or not it should be the same with the setting on Quick Start Wizard 3 Check if IP Address Subnet Mask and Gateway are set correctly must identify with the values from your ISP if you choose Specify an IP address 4 5 Backing to Factory Default Setting if Necessary Sometimes a wrong connection can be improved by returning to the default settings Try to reset the router by software or hardware Q VVarning After pressing factory default setting you vvill loose all settings you did before Make sure you have recorded all useful settin
2. gt 1 Cx The reminder as regards concern about Firewall and UPnP Can t work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly This is because these applications will block the accessing ability of some network ports Security Considerations Activating the UPnP function on your network may incur some security threats You should consider carefully these risks before activating the UPnP function Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches gt Non privileged users can control some router functions including removing and adding port mappings The UPnP function dynamically adds port mappings on behalf of some UPnP aware applications When the applications terminate abnormally these mappings may not be removed 3 6 Wireless LAN Over recent years the market for wireless communications has enjoyed tremendous growth Wireless technology now reaches or is capable of reaching virtually every location on the surface of the earth Hundreds of millions of people exchange information every day via wireless communication products The Vigor Ge model a k a Vigor wireless router 1s designed for maximum flexibility and efficiency of a small office home Any authorized staff can bring a built in WLAN client PDA or notebook into a meeting room for
3. Set up the DSL parameters required by your ISP These are vital for building DSL connection to your ISP Multi PVC channel The selections displayed here are determined by the page of Internet Access Multi PVCs Select M PVCs Channel means no selection will be chosen Encapsulating Type Drop down the list to choose the type provided by ISP VPI Type in the value provided by ISP VCI Type in the value provided by ISP Routing Information Protocol is abbreviated as RIP RFC1058 specifying how routers exchange routing tables information Click Enable RIP for activating this function If you choose Bridged IP as the protocol you can check this box to invoke the function This group allows you to obtain an IP address automatically and allows you type in IP address manually Obtain an IP address automatically Click this button to obtain the IP address automatically Router Name Type in the router name provided by ISP Domain Name Type in the domain name that you have assigned VVAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 8 public IP addresses other than the current one you are using 19 S WAN IP Alias Microsoft Internet Explorer EH WAN IP Alias Multi NAT Index Enable Aux WAN IP Join NAT IP Pool rr ELL m Y Specify an IP address Click this radio button to specify some d
4. You just set the settings wrapped inside the red rectangles to fit the request of NAT usage Ethernet TCP IP and DHCP Setup LAN IP Network Configuration For MAT Usage ist IP Address 192 165 1 1 ist Subnet Mask 255 255 255 0 For IP Routing Usage O Enable Disable 2nd IP Address 152 168 2 1 2nd Subnet Mask 255 255 255 0 end Subnet DALE Server DNS Server IP Address DHCP Server Configuration Enable Servel amp Disable Server Relay Agent 2151 Subnet 210 Subnet Start IP Address IP Pool Counts Gateway IP Address DHCP Server IP Address 192168311 for Relay Agent 192 168 3 11 RIP Protocol Control Disable b Primary IP Address Secondary IP Address Vigor2700Ge e Users Guide 4 2 Upgrade Firmvvare for Your Router Before upgrading your router firmware you need to install the Router Tools The Firmvvare Upgrade Utility is included in the tools 1 Insert CD of the router to your CD ROM 2 From the webpage please find out Utility menu and click it 3 On the webpage of Utility click Install Now under Syslog description to install the corresponding program Please remember to set as follows in your DrayTek Router server F Address IP address of the PC that runs the syslog e Port Number Default value 514 Install Now 4 The file RT
5. etc An eavesdropper outside might learn the details of your private networks Check the box to enforce the Vigor router to defense the Land attacks The Land attack combines the SYN attack technology with IP spoofing A Land attack occurs when an attacker sends spoofed SYN packets with the identical source and destination addresses as well as the port number to victims Check the box to activate the Block Smurf function The Vigor router will ignore any broadcasting ICMP echo request Check the box to enforce the Vigor router not to forward any trace route packets Check the box to activate the Block SYN fragment function The Vigor router will drop any packets having SYN flag and more fragment bit set Check the box to activate the Block fraggle Attack function Any broadcast UDP packets received from the Internet is blocked Activating the DoS DDoS defense functionality might block some legal packets For example when you activate the fraggle attack defense all broadcast UDP packets coming from the Internet are blocked Therefore the RIP packets from the Internet might be dropped Check the box to activate the Block TCP flag scan function Any TCP packet with anomaly flag setting is dropped Those scanning activities include no flag scan FIN without ACK scan SYN FINscan Xmas scan and full Xmas scan Check the box to activate the Block Tear Drop function Many machines may crash when receiving ICMP datagrams packets that
6. Data Filter Log Flag Check Enable to activate the Call Filter function Assign a start filter set for the Call Filter Check Enable to activate the Data Filter function Assign a start filter set for the Data Filter For troubleshooting needs you can specify the filter log here None The log function is not activated Block All blocked packets will be logged Pass All passed packets will be logged No Match The log function will record all packets that are not matched Note that the filter log will be displayed on the Telnet terminal when you type the log f command Some on line games for example Half Life will use lots of fragmented UDP packets to transfer game data Instinctively as a secure firewall Vigor router will reyect these fragmented packets to prevent attack unless you enable Accept Incoming Fragmented UDP Packets By checking this box you can play these kinds of on line games If security concern is in higher priority you cannot enable Accept Incoming Fragmented UDP Packets Vigor2700Ge e User s Guide 3 4 3 Filter Setup Click Firevvall and click Filter Setup to open the setup page Firewall gt gt Filter Setup Filter Setup Set to Factory Default Set Comments Set Comments 1 Default Call Filter d Default Data Filter 8 3 24 4 10 Da 11 6 12 To edit or add a filter click on the set number to edit the individual set The following page will be shown Each filter
7. Further the user does not have to manually set up port mappings or a DMZ UPnP is available on Windows XP and the router provides the associated support for MSN Messenger to allow full use of the voice video and messaging features Applications gt gt UPnP Setup UPnP Setup Enable Connection control Service Enable Connection Status Service Note If you intend running UPnP service Inside your LAN you should check the appropriate service above to allow control as well as the appropriate UPnP settings Enable UPNP Service Accordingly you can enable either the Connection Control Service or Connection Status Service After setting Enable UPNP Service setting an icon of IP Broadband Connection on Router on Windows XP Network Connections will appear The connection status and control status will be able to be activated The NAT Traversal of UPnP enables the multimedia features of your applications to operate This has to manually set up port mappings or use other similar methods The screenshots below show examples of this facility Address e Network Connections EY IP Broadband Connection on Router Status kili Broadband Network Tasks General T1 hinet E Create a new connection c l Zei Disconnected 2 Set up a home or small KE WAN Miniport PPPOE office network Internet Gateway Status Connected Dial up Duration 00 19 06 See Al ee Also J
8. Lite 3 Desktop KE Mw Snap300 K TeleDanmarl v kz 232 config 1 Mu Documents y l v2k6_250_config_1 3 Mu Computer biy Network gave as type Configuration file wi Click Save button the configuration will download automatically to your computer as a file named config cfg The above example is using Windows platform for demonstrating examples The Mac or Linux platform will appear different windows but the backup function is still available Restore Configuration 1 Go to System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below System Maintenance gt gt Configuration Backup Confiquration Backup Restoration Restoration Select a configuration file 000 g Click Restore to upload the file Backup Click Backup to download current running configurations as a file Click Browse button to choose the correct configuration file for uploading to the router Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful 3 7 4 Syslog Mail Alert SysLog function is provided to help users to monitor router There is no bother to directly get into the Web Configurator of the router or borrow debug equipments Vigor2700Ge e User s Guide 63 64 System Maintenance gt gt SysLog Mail Alert Setup SysLog Access Setup ll Enable Server IP
9. UU 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 h 00 00 00 00 00 00 00 00 00 00 h 00 00 UU h 00 00 00 00 00 00 00 00 00 00 00 00 00 UU Decoded Format 0 0 0 0 gt 0 0 0 0 Pro len 0 Refresh Click it to reload the page 68 Vigor2700Ge e User s Guide 3 8 3 Routing Table Click Diagnostics and click Routing Table to open the web page Diagnostics gt gt View Routing Table Current Running Routing Table Refresh Fey connected 5 static R RIP default private Wee 0 0 0 0 0 0 0 0 via 192 168 1 1 IFO a 192 168 10 0 255 255 255 0 via 192 168 1 2 IFO 192 168 1 0 255 255 255 0 15 directly connected IFO oe 211 100 88 0 255 255 255 0 via 192 1658 1 5 IFO Refresh Click it to reload the page 3 8 4 ARP Cache Table Click Diagnostics and click ARP Cache Table to view the content of the ARP Address Resolution Protocol cache held in the router The table shows a mapping between an Ethernet hardware address MAC Address and an IP address Diaqnostics gt gt View ARP Cache Table Ethernet ARP Cache Table Clear Refresh IF Address Mac Address 192 168 1 11 00 0 6 24 05 1 Refresh Click it to reload the page Clear Click it to clear the whole table 3 8 5 DHCP Table The facility provides information on IP address assignments This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnos
10. if you add key words such as sex Vigor router will limit web access to web 99 99 sites or web pages such as www sex com www backdoor net images sex p_386 html Or you may simply specify the full or partial URL such as www sex com or sex com Also the Vigor router will discard any request that tries to retrieve the malicious code Click Firewall and click URL Content Filter to open the setup page Vigor2700Ge e User s Guide Firewall gt URL Content Filter Setup Content Filter Setup Black List block those matching keyword O White List pass those matching keyword Keyword Mo ACT Keyword dE ETTE 20 4086860 s m a 9BH o a A 0 Note that multiple keywords are alowed to specify in the blank For example hotmail yahoo msn L Prevent web access from IP address TEnahle Restrict Web Feature Java Actuex Cookie Proxy L lEnahle Excepting Suhnets IB Address Suhnet Mack No Act Compressed files Executable files Multimedia files LI L L LI L 14 41 5 1114 3 LI L L LI iL L 4 te it 1114 Time Schedule Scheduler defined in Call Schedule Setup 1 15 I I b Note Action and Idle Timeout settings will be ignored Enable URL Access Control Black List block those matching keyword White List pass those matching keyword Keyword Prevent web access from IP address Vigor2700Ge
11. you also can establish the PPPoE connection directly from local clients to your ISP via the Vigor router Vigor2700Ge e User s Guide For Wired LAN If you check this box PCs on the same network can use another set of PPPoE session different with the Host PC to access into Internet For Wireless LAN If you check this box PCs on the same network through wireless connection can use another set of PPPoE session different with the Host PC to access into Internet ISP Access Setup Enter your allocated username password and authentication parameters according to the information provided by your ISP If you want to connect to Internet all the time you can check Always On ISP Name Type in the ISP Name provided by ISP in this field Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this field PPP Authentication Select PAP only or PAP or CHAP for PPP Always On Check this box if you want the router keeping connecting to Internet forever Idle Timeout Set the timeout for breaking down the Internet after passing through the time without any action IP Address From ISP Usually ISP dynamically assigns IP address to you each time you connect to it and request In some case your ISP provides service to assign you the same IP address whenever you request In this case you can fill in this IP address in the Fixed IP field Please contact your ISP before you
12. 168 1 1 with 32 hytes of data Reply from 172 168 1 1 bytes 32 time lt ims TTL 255 Reply from 192 168 1 1 hutes 32 time lt ims TTL 255 Reply from 192 168 1 1 hytes 32 time lt ims TTL 255 Reply from 192 168 1 1 bytes 32 timetlms TTL 255 Ping statistics for 192 168 1 1 Packets Sent 4 Received 4 Lost A Hx loss Approximate round trip times in milli seconds Minimum Ams Maximum ms Average Pms D Documents and Settings fae gt _ Type ping 192 168 1 1 and press Enter It the link is OK the line of Reply from 192 168 1 1 bytes 32 time lt Ims TTL 25 will appear If the line does not appear please check the IP address setting of your computer For MacOs Terminal L 2 3 4 Double click on the current used MacOs on the desktop Open the Application folder and get into Utilities Double click Terminal The Terminal window will appear Type ping 192 168 1 1 and press Enter It the link is OK the line of 64 bytes from 192 168 1 1 icmp_seq 0 ttl 255 time xxxx ms will appear Vigor2700Ge e User s Guide 81 82 8006 Terminal bash 80x24 Last login Sat Jan 3 62 24 16 on ttypi Welcome to Darwin Viqor18 draytek ping 192 168 1 1 PING 192 168 1 1 192 168 1 13 56 data bytes 64 bytes from 192 166 1 1 1cmp_seq l ttl 255 time 6 755 ms 64 bytes from 192 166 1 1 icmp seg 1 ttl 255 time 6 697 ms 64 bytes from 192 166 1 1 icmp seg 2 ttl 255 time 6 716 ms 64 bytes from 192 16
13. 3 Configuration Backup 62 3 7 4 Syslog Mail Alert 63 3 7 5 Time and Date s s ng TK TT KT Kha 65 3 7 6 Management 66 3 7 7 Reboot System EE 67 3 7 8 Firmware Upgrade 82 HT HT ng KT KT TK is ii 67 3 9 DI 17 ie 68 OPPE I DIGGING ii aaa 68 3 8 2 Triggerred Dial out Packet Header 68 20 TL ii 69 ACS 333 69 69 3 8 6 NAT Port Redirection ID 2i iasassaiosie0x6010032306662505805360546085509050905200368085508383 70 3 8 6 NAT Active Sessions Table 71 Application and Examples 8 888888888888888889 REENEN RE 73 4 4 LAN Created by Using NAT 22222 73 4 2 Upgrade Firmware for Your Router 3883388338 8333333333 75 WOUDE SINOQUIG ada aaa aaa ala a aaa aad 78 4 1 Checking If the Hardware Status Is OK or Not 08328 33 33 6 78 4 2 Checking If the Network Connection Settings on Your Computer Is OK or Not 78 4 3 Pinging the Router from Your Computer 81 4 4 Checking If the ISP Settings are OK orhot c2 112 1S nSS vn ng xu 83 4 5 Backing to Factory Default Setting If Neceseanm nh kh 84 4 6 Contacting Your Dealer 85 Vigor2700Ge e Users Guide 1 Preface Targeting requirement for residential SOHO Small Office and Home Office and business users the Vigor2700Ge e is an ADSL2 2 enabled integrated access device
14. Address Destination Port Mail Alert Setup Enable SMTP Server Mail To PF U 0 Return Path Enable Click Enable to activate this function Syslog Server IP The IP address of the Syslog server Destination Port Assign a port for the Syslog protocol SMTP Server The IP address of the SMTP server Mail To Assign a mail address for sending mails out Return Path Assign a path for receiving the mail from outside Click OK to save these settings For viewing the Syslog please do the following 1 2 Just set your monitor PC s IP address in the field of Server IP Address Install the Router Tools in the Utility within provided CD After installation click on the Router Tools gt gt Syslog from program menu Router Tools 72 54 Wii About Router Tools Ez Configurator Vigsor2100 Series KP Firmware Upgrade Utlity el Uninstall Router Tools Y2 5 4 42 Visit DrayTek Web Site From the Syslog screen select the router you want to monitor Be reminded that in Network Information select the network adapter used to connect to the router Otherwise you won t succeed in retrieving information from the router Vigor2700Ge e User s Guide J DrayTek Syslog Contrals 182 168 1 1 WAN Status v bal gt S al Se Gateway IP Fixed TX Packets RX Rate x gj j vigor series Dmt Bis ET L N Stat
15. Password New Password Retype New Password Old Password Type in the old password The factory default setting for password 1s blank New Password Type in new password in this filed Vigor2700Ge e User s Guide 61 62 Retype New Password Type in the new password again When you click OK the login window will appear Please use the new password to access into the web configurator again 3 7 3 Configuration Backup Backup the Configuration Follow the steps below to backup your configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below System Maintenance gt gt Confiquration Backup Confiquration Backup Restoration Restoration Select a configuration file 0 kul Click Restore to upload the file Backup Click Backup to download current running configurations as a file 2 Click Backup button to get into the following dialog Click Save button to open another dialog for saving configuration as a file File Download P You are downloading the file o m config chg From 192 168 1 1 Would you like to open the file or save it to your computer Always ask before opening this type of file 3 mn Save As dialog the default filename is config cfg You could give it another name by yourself Vigor2700Ge e User s Guide 4 _ My Documents My Computer Mu Recent amp uy Network Places Documents
16. Using NAT An example of default setting and the corresponding deployment are shown below The default Vigor router private IP address Subnet Mask is 192 168 1 1 255 255 255 0 The built in DHCP server is enabled so it assigns every local NATed host an IP address of 192 168 1 x starting from 192 168 1 10 Internet Public IP Address 220 135 240 207 Private Subnet Router IP Address 192 168 1 1 192 168 1 22 192 166 1 11 192 168 1 12 192 168 1 13 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage LAN gt gt EL Be ai Bilsin Ethernet TCP IP and DHCP Setup IP Network Confiquration DHCP Server Configuration 6 Enable Server O Disable Server ist IP Address 192 165 1 1 Relay Agent 1st Subnet 2nd Subnet 152 Subnet Mask 255 255 255 0 Start IP Address 192 168 1 10 For IP Routing Usage Enable Disable IP Pool Counts nd IP Address 192 166 2 1 Gateway IP Address 192 168 1 1 2nd Subnet Mask 255 255 255 U DHCP Server IP Address i TT for Relay Agent os ed Pers RIP Protocol Control Secondary IP Address To use another DHCP server in the network rather than the built in one of Vigor Router you have to change the settings as show below Vigor2700Ge e User s Guide 13 74 internet Public IP Address 220 135 240 207 Private Subnet 7 Router IP Address 192 168 1 1 192 168 1 22 192 168 1 11 192 168 3 22 192 168 3 11
17. VPI 0 YEI 34 Protocol Encapsulation PPPoE LLC Fixed IP M Primary DNS Secondary DNS Always On Ves Click Finish The online status of this protocol will be shown as below Online Status System Status System Uptime 0 13 15 LAN Status Primary DNS 194 109 56 66 Secondary DNS 194 98 0 1 IP Address TX Packets RX Packets 192 168 1 1 693 WAN Status GW IP Addr Dial PPPoE Flode IP Address TX Packets TX Rate RX Packets RX Rate Up Time m r OG 00 00 Message PPP Shutdown ADSL Information ADSL Firmware Version 113111 43 ATM Statistics TX Blocks RX Blocks Corrected Blocks Uncorrected Blocks ADSL Status Mode State Up Speed Down Speed SNRMargin Loop Att oS READY 2 2 3 Bridged IP Click 1483 Bridged IP as the protocol Type in all the information that your ISP provides for this protocol Vigor2700Ge e User s Guide 10 Quick Start VVizard 2 Connect to Internet VPI Protocol Encapsulation Fixed IP IP Address Subnet Mask Default Gateway Primary DNS Second DNS 1483 Bridged IP LLC O Yes no Dynamic IP Cancel After finishing the settings in this page click Next to see the following page Quick Start Wizard 4 Please confirm your settings YPI CI Protocol Encapsulation Fixed IP Primary DNS Secondary DNS SP 34 1483 Bridge LLC Na Click Finish The onlin
18. With downstream speed up to 12Mbps ADSL2 or 24Mbps ADSL2 the Vigor2700Ge e provides exceptional bandwidth for Internet access To secure your network the Vigor2700Ge e provides an advanced firewall with advanced features such as Stateful Packet Inspection SPI to offer network reliability by detecting and prohibiting malicious penetrating packets or DOS attacks user configurable web filtering for parental control against network abuse etc Vigor 2700Ge is embedded with an 802 I I g compliant wireless module which provides wireless LAN access with data rate as much as 54Mbps As for data privacy of wireless network the Vigor2700Ge can encode all transmissions data with standard WEP and industrial strength WPA2 IEEE 802 111 encryption Additional features include Wireless Client List and MAC Address Control for maintaining control over user s authorization in your network and Hidden SSID for being invisible to outside intruders scanning 1 1 LED Indicators and Connectors The displays of LED indicators and connectors for the routers are different slightly For Vigor2700Ge ADSL2 ADSL2 2 Router Link Data For Vigor2700e ADSL2 2 Router 1 1 1 LED Explanation LED Status Explanation ACT The router 1s povvered on and running properly Activity The router is povvered on VVLAN VVireless access point 1s turned off Wireless access point 1s ready Wireless traffic goes throug
19. applied just once Weekdays Specify which days in one week should perform the schedule Example Suppose you want to control the PPPoE Internet access connection to be always on Force On from 9 00 to 18 00 for whole week Other time the Internet access connection should be disconnected Force Down er e Office 21 o 1 Hour 4 d Force On amp sj Ki Lei Mon Sun 9 00 am to 6 00 pm Make sure the PPPoE connection and Time Setup is working properly Configure the PPPoE always on from 9 00 to 18 00 for whole week Configure the Force Down from 18 00 to next day 9 00 for whole week Assign these two profiles to the PPPoE Internet access profile Now the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre defined in the schedule profiles Vigor2700Ge e User s Guide 53 3 5 3 UPnP The UPnP Universal Plug and Play protocol is supported to bring to network connected devices the ease of installation and configuration which is already available for directly connected PC peripherals with the existing Windows Plug and Play system For NAT routers the major feature of UPnP on the router is NAT Traversal This enables applications inside the firewall to automatically open the ports that they need to pass through a router It is more reliable than requiring a router to work out by itself which ports need to be opened
20. conference without lay ng a clot of LAN cable or drilling holes everywhere Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access The Vigor wireless routers are equipped with a wireless LAN interface compliant with the standard IEEE 802 11g protocol To boost its performance further the Vigor Router is also loaded with advanced wireless technology Super G to lift up data rate up to 108 Mbps The actual data throughput will vary according to the network conditions and environmental Vigor2700Ge e User s Guide 55 56 factors including volume of network traffic network overhead and building materials Hence you can finally smoothly enjoy stream music and video 3 8 1 Basic Concept In an Infrastructure Mode of wireless network Vigor wireless router plays a role as an Access Point AP connecting to lots of wireless clients or Stations STA All the STAs will share the same Internet connection with other wired hosts via Vigor wireless router The General Settings will set up the information of this wireless network including its SSID as identification located channel etc Internet SSID Draytek Channel 6 Mode WEP only ya 3 192 168 1 2 192 168 1 1 Real time Hardvvare Encryption Vigor Router is equipped with a hardware AES encryption engine so it can apply highest protection to your data without influencing user exper
21. exceed the maximum length To avoid this type of attack the Vigor router is designed to be capable of discarding any fragmented ICMP packets with a length greater than 1024 octets Check the box to activate the Block Ping of Death function This attack involves the perpetrator sending overlapping packets to the target hosts so that those target hosts will hang once they re construct the packets The Vigor routers will block any packets realizing this attacking activity Check the box to activate the Block ICMP fragment function Any ICMP packets with more fragment bit set are dropped Check the box to enforce the Vigor router to defense the Land attacks The Land attack combines the SYN attack technology with IP spoofing A Land attack occurs when an attacker sends spoofed 47 48 SYN packets vvith the identical source and destination addresses as well as the port number to victims Block Unknovvn Check the box to activate the Block Unknovvn Protocol function Protocol Individual TP packet has a protocol fteld in the datagram header to indicate the protocol type running over the upper layer However the protocol types greater than 100 are reserved and undefined at this time Therefore the router should have ability to detect and reject this kind of packets Warning Messages We provide Syslog function for user to retrieve message from Vigor router The user as a Syslog Server shall receive the report sending from Vigor router whic
22. goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping private IP address port of the server Vigor2700Ge e User s Guide Destined to Internet 220 135 240 207 Port 213 2 192 168 1 22 DMZ FTP server Web Server 192 168 1 11 192 168 1 12 192 168 1 13 Port 21 Port 80 The port redirection can only apply to incoming traffic The server users inside the LAN can not access public IP address of the server The correct route is to access the server using the local private IP address of the server or you should set up an alias in a Windows hosts file Please only redirect the ports you know you have to forward rather than forward all ports Otherwise you will compromise the firewall type security initially deployed by the NAT facility To use this function please go to NAT page and choose Port Redirection web page The Port Redirection Table provides 10 port mapping entries for the internal hosts NAT gt gt Confiqure Port Redirection Table Port Redirection Table Index Service Name Protocol Public Port Private IP Private Port Active 1 b TI o 2 1 oo s ol oo o ee pb Do lt lt o LI oo 5 1 o 6 bo LJ oo 7 1 b nb 8 8 o oo a b 8 1000 0 o JP JG oo Service Name Enter the description of the specific network service Protocol Select the transport layer pro
23. on the field of Old Password Type a new one in the field of New Password and retype it on the field of Retype New Password Then click OK to continue Now the password has been changed Next time use the new password to access the Web Configurator for this router Connect to 192 168 1 1 Login to the Router Web Configurator User name 0 Password TRemember my password z Vigor2700Ge e User s Guide 2 2 Quick Start VVizard If your router can be under an environment with high speed NAT the configuration provide here can help you to deploy and use the router quickly The first screen of Quick Start Wizard is entering login password After typing the password please click Next Quick Start Wizard 1 Enter login password Please enter an alpha numeric string as your Password Max 23 characters 2 2 1 Adjusting Protocol Encapsulation In the Quick Start Wizard you can configure the router to access the Internet with different protocol modes such as PPPoE PPPoA Bridged IP or Routed IP The router supports the Ethernet WAN interface for Internet access Quick Start Wizard 2 Connect to Internet M 34 PPPoE VC M A irutacal Encapsulation Fixed IP PPPoA LLC SNAP 1483 Bridged IP LLC Subnet Mask 1483 Routed IF LLC 1483 Bridged IP YC Mux Default Gateway 1483 Routed IP VC Mux IPoA Primary DNS a Now you have to select an appropriate WAN connection type for connecting to the
24. set contains up to 7 rules Click on the rule number button to edit each rule Check Active to enable the rule Firewall gt gt Filter Setup gt gt Edit Filter Set Filter Set 1 Comments Default Call Filter Filter Rule Active Comments Block NetBios 8 4L O Next Filter Set Mone Filter Rule Click a button numbered 1 7 to edit the filter rule Click the button will open Edit Filter Rule web page For the detailed information refer to the following page Active Enable or disable the filter rule Comment Enter filter set comments description Maximum length is 23 character long Next Filter Set Set the link to the next filter set to be executed after the current filter run Do not make a loop with many filter sets To edit Filter Rule click the Filter Rule index button to enter the Filter Rule setup page Vigor2700Ge e User s Guide 41 42 Firewall gt gt Edit Filter Rule gt gt Edit Filter Rule Filter Set 1 Rule 1 Comments Block NetBios Pass or Block Check to enable the Filter Rule Branch to Other Filter Set Block Immediately v LlLaq Direction Protocol TCP UDP ze IF Address Subnet Mask Operator Start Port End Part Source any 255 255 255 255 32 v 1137 L kKeep State Comments Check to enable the Filter Rule Pass or Block Branch to other Filter Set Log Direction Protocol IP Address Subnet Mask Operator Start Port an
25. setup menu check Enable Dynamic DNS Setup Applications gt gt Dynamic DNS Setup Dynamic DNS Setup v Enahle Dynamic DNS Setup Force Update Accounts Index Domain Name Active 1 con 2 3 nu x 3 Select Index number I to add an account for the router Check Enable Dynamic DNS Account and choose correct Service Provider dyndns org type the registered hostname hostname and domain name suffix dyndns org in the Domain Name block The following two blocks should be typed your account Login Name fest and Password test Applications gt gt Dynamic DNS Setup gt gt Dynamic DNS Account Setup Index 1 H Enable Dynamic DNS Account Service Provider Service Type Login Name chrono6853 max 23 characters Password ui max 23 characters OI Wildcards Backup Mx Service Provider Select the service provider for the DDNS account Service Type Select a service type Dynamic Custom Static Domain Name Type in a domain name that you applied previously Login Name Type in the login name that you set for applying domain Password Type in the password that you set for applying domain 4 Click OK button to activate the settings You will see your setting has been saved The Wildcard and Backup MX features are not supported for all Dynamic DNS providers You could get more detailed information from their websites Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu uncheck
26. time protocol Server IP Address Type the IP address of the time server Time Zone Select the time zone where the router is located Automatically Update Select a time interval for updating from the NTP server Interval Click OK to save these settings Vigor2700Ge e User s Guide 65 66 3 7 6 Management System Maintenance gt gt Management Management Setup Management Access Control Management Port Setup Default Ports Telnet 23 HTTP 80 FTP 21 Enable remote firmware upgrade FTP User Define Ports Allow management from the Internet Disable PING from the Internet Access List List IP 3 180 25 157 230 Enable remote firmvvare upgrade Allovv management from the nternet Disable PING from the nternet Access List Default Ports User Defined Ports Enable SNMP A gent Get Community Set Community Manager Host IP Subnet Mask 1 135 5 BB 5 255 255 255 255 32 SNMP Setup 2 2212 49 189 0 255 255 255 0 24 L Enable SNMP Agent 255 255 255 255 32 Telnet Port HTTP Fort FTF Fort Get Community public Set Community private Manager Host IP Trap Community public i Notification Host IP Trap Timeout seconds Chick the checkbox to allow remote firmware upgrade through FTP File Transfer Protocol Enable the checkbox to allow system administrators to login from the Internet By default it is not allowed Check the checkbox to rejec
27. want to use this function Fixed IP Click Yes to use this function and type in a fixed IP address in the box VVAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 8 public IP addresses other than the current one you are using E WAN IP Alias Microsoft Internet Explorer WAN IP Alias Multi NAT Index Enable Aux WAN IP Join MAT IP Pool CTT ELL r Y By checking the checkbox Join NAT IP Pool data from NAT hosts will be round robin forwarded on a session basis Vigor2700Ge e User s Guide 17 internet Public IP Address 220 135 240 207 220 135 240 208 Public IP Address 220 135 240 210 a 8 192 168 1 11 192 168 1 12 192 168 1 13 192 168 1 22 If you do not check Join NAT IP Pool you can still use these public IP addresses for other purpose such as DMZ host Open Ports Public IP Address Public IP Address 220 135 240 207 220 135 240 210 192 168 1 22 192 168 1 11 192 168 1 12 192 168 1 13 Default MAC Address Type in MAC address for the router You can use Default MAC Address or specify another MAC address for your necessity MAC Address Type in the MAC address for the router manually Index 1 15 in You can type in four sets of time schedule for your request All the Schedule Setup schedules can be set previously in Application Schedule web page and you can use the number th
28. 0 IP Address E ess DHCP Server Ves Default Gateway DNS 194 109 56 56 voIP Port d z Wireless LAN SIP registrar MAC Address 00 50 7f 00 00 00 Account ID p0 pi Frequency Domain FEC Register No Firmware version Codec In Calls H Out Calls Model Name Displays the model name of the router Firmware Version Displays the firmware version of the router Build Date amp Time Displays the date and time of the current firmware build MAC Address Displays the MAC address of the LAN Interface 1 IP Address Displays the IP address of the LAN interface 1 Subnet Mask Displays the subnet mask address of the LAN interface DHCP Server Displays the current status of DHCP server of the LAN interface MAC Address Displays the MAC address of the WAN Interface IP Address Displays the IP address of the WAN interface Default Gateway Displays the assigned IP address of the default gateway DNS Displays the assigned IP address of the primary DNS MAC Address Displays the MAC address of the wireless Interface Frequency Domain Firmware Version Displays the available channel supported by the wireless product It vartes in different country Europe 13 usable channels USA 11 usable channels Displays information about equipped WLAN card driver 3 7 2 Administrator Password This page allows you to set new password System Maintenance gt gt Administrator Password Setup Administrator Password Old
29. 6 1 1 icmp seg 3 ttl 255 time 731 ms E4 bytes from 192 166 1 1 emp seg 4 ttl 255 time ll 72 ms AL 192 168 1 1 ping statistics 5 pockets transmitted 5 pockets received 4 pocket 1055 round trip min avg max H B6377H 725 H 7hh ms Vigor18 draytek Vigor2700Ge e Users Guide 4 4 Checking If the ISP Settings are OK or Not Click Internet Access group and then check vvhether the ISP settings are set correctly PPPoE PPPoA MlFnA RFC 40346504 Mut HvLe LAN NAT Firewall 1 Applications Wireless LAN System Maintenance Diagnostics For PPPoE PPPoA Users 1 Check if the Enable option is selected 2 Check if Username and Password are entered with correct values that you got from your ISP nternet Access gt gt PPPoE PPPoA DSL Modem Settings Multi PYC channel Channel 1 vi VPI 8 VCI 35 Encapsulating Type VC MUX PPPoA v Protocol Modulation Multimode m vi PPPoE Pass through Wired LAN ETFar Wireless LAN Vigor2700Ge e User s Guide ISP Access Setup ISP Name Username Password PPP Authentication PAP or CHAP 21 LJ Always On Idle Timeout 180 second s IP Address From ISP WAN IP Alias Fixed IP Yes Dynamic IP Fixed IP Address 1 Required for some ISPs G Default MAC Address O Specify a MAC Address MAC Address war inn Scheduler 1 15
30. Dray Tek Vigor2700Ge e ADSL2 2 Firewall Router DrayTek Vigor 2700Ge e ADSL2 2 Firewall Router User s Guide Version 1 0 Date 2005 11 14 Copyright 2005 All rights reserved This publication contains information that is protected by copyright No part may be reproduced transmitted transcribed stored in a retrieval system or translated into any language without written permission from the copyright holders The scope of delivery and other details are subject to change without prior notice Microsoft 1s a registered trademark of Microsoft Corp Windows Windows 95 98 Me NT 2000 XP and Explorer are trademarks of Microsoft Corp Apple and Mac OS are registered trademarks of Apple Computer Inc Other products may be trademarks or registered trademarks of their respective manufacturers 1 Vigor2700Ge e Users Guide Table of Contents le n 1 1 1 LED Indicators and Connectors 888 8838833 8333 1 EN TX A Le 1 1 1 2 Connector Explanation 333 Ki ni Ki ngu 2 1 2 Hardware Installanon c0 00092200100 TT ni TH ch nh nh n 2 Configuring Basic Setting E 5 EG 6 FAS OW ON Gl 0000000 0 00 00 hs 5 PORT 7 2 2 1 Adjusting Protocol Encapsulation 3883883388 nh ng 7 22 1 NN 8 UP r iii iii 9 c c 3 11 2 3 Online Gtatus 8338232 8388333888338833 3 12 2 4 Saving COTTTTOLIESUOTTsesesssdssskesdsdadssisidnds
31. E PPPoA and MPoA Multi PVC is provided for more advanced setup of the above In ADSL deployment the PPP Point to Point style authentication and authorization is required for bridging customer premises equipment CPE Point to Point Protocol over Ethernet PPPoE connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator This implementation provides users with significant ease of use Meanwhile it provides access control billing and type of service according to user requirement When a router begins to connect to your ISP a serial of discovery process will occur to ask for a connection Then a session will be created Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system And your IP address DNS server and other related information will usually be assigned by your ISP Vigor2700Ge e User s Guide 15 3 1 2 PPPoE PPPoA PPPoA included in RFC1483 can be operated in either Logical Link Control Subnetvvork Access Protocol or VC Mux mode As a CPE device Vigor router encapsulates the PPP session based for transport across the ADSL loop and your ISP s Digital Subscriber Line Access Pultiplexer SDLAM To choose PPPoE or PPPOA as the accessing protocol of the internet please select PPPoE PPPoA from the Internet Access menu The following web page will be shown Internet Access gt gt PPPoE PPPoA PPPoE PPPoA Client Mode PPPoE PPPoa Cli
32. Enable Dynamic DNS Setup and push Clear All button to disable the function and clear all accounts from the router Vigor2700Ge e User s Guide 51 52 Delete a Dynamic DNS Account In the DDNS setup menu click the Index number you want to delete and then push Clear All button to delete the account 3 5 2 Schedule The Vigor router has a built in real time clock which can update itself manually or automatically by means of Network Time Protocols NTP As a result you can not only schedule the router to dialup to the Internet at a specified time but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours say business hours The schedule is also applicable to other functions You have to set your time before set schedule In System Maintenance gt gt Time Setup menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is another way to set up time You can inquiry an NTP server a time server on the Internet to synchronize the router s clock This method can only be applied when the WAN connection has been built up Applications gt gt Schedule Call Schedule Setup Index Status Index Status 1 x ER x SS 10 GI x 11 GI 4 x 12 x dh x 13 p 6 GI 14 LA x 15 x 6 V Status v Active Inactive You can set up to 15 schedules Then you c
33. IP Network Configuration DHCP Server Configuration For NAT Usage Enable Server Disable Server ist IP Address Relay Agent ist Subnet 2nd Subnet ist Subnet Mask Start IP Address For IP Routing Usage Enable Disable ID Pool Counts end IP Address Gateway IP Address 19216811 2nd Subnet Mask DHCP Server IP Address SC Subnet DUCP 5 for Relay Agent SE Primary IP Address RIP Protocol Control Ili Secondary IP Address st IP Address Type in private IP address for connecting to a local private network Default 192 168 1 1 st Subnet Mask Type in an address code that determines the size of the network Default 255 255 255 0 24 For IP Routing Usage Click Enable to invoke this function The default setting is Disable 2 IP Address Type in secondary IP address for connecting to a subnet Default 192 168 2 1 24 2 4 Subnet Mask An address code that determines the size of the netvvork Default 255 255 255 0 24 Vigor2700Ge e User s Guide 23 24 2 DHCP Server RIP Protocol Control DHCP Server Configuration You can configure the router to serve as a DHCP server for the 2nd subnet Router Web Configurator Microsoft Internet Explorer 2nd DHCP Server Start IP Address IP Pool Counts O max 10 Index Matched MAC Address given IP Address MAC Address F d DE H Start IP Address Enter a value of the IP address pool for the DHCP server to start with
34. Internet through this router according to the settings that your ISP provided VPI Stands for Virtual Path Identifier It is an 8 bit header inside each ATM cell that indicates where the cell should be routed The ATM is a method of sending data in small packets of fixed sizes It is used for transferring data to client computers Vigor2700Ge e User s Guide 7 VCI Stands for Virtual Channel Identifier It is a 16 bit field inside ATM cell s header that indicates the cell s next destination as it travels through the network A virtual channel is a logical connection between two end devices on the network Protocol Encapsulation Select an IP mode for this WAN interface There are several available modes for Internet access such as PPPoE PPPoA Bridged IP and Routed IP Fixed IP Click Yes to specify a fixed IP for the router Otherwise click No Dynamic IP to allow the router choosing a dynamic IP If you choose No the following IP Address Subnet Mask and Default Gateway will not be changed IP Address Assign a private IP address for the protocol that you select Subnet Mask Assign a subnet mask value for the protocol of Routed IP and Bridged IP Default Gateway Assign a private IP address to the gateway for the protocol of Routed IP and Bridged IP Primary DNS Assign a private IP address to the primary DNS Second DNS Assign a private IP address to the secondary DNS 2 2 2 PPPoE PPPoA PPPoE stands for Point to Point Protoco
35. JEnable Port Scan detection Block IP options Block Land Block Smurf Blnck trace route Block SYN fragment Blnck Fraggle Attack Threshold en packets sec Timeout nn Sec Threshold 150 packets sec Timeout hu sec Threshold en packets sec Timeout ho Sec Threshold 150 packets sec L Blnck TCP flag scan LlElack Tear Drop Block Ping of Death L Blnck ICMP fragment Jelock UnknownProtocol Enable Dos Defense Enable SYN flood defense Enable UDP flood defense Enable ICMP flood defense Enable PortScan detection Check the box to activate the DoS Defense Functionality Check the box to activate the SYN flood defense function Once detecting the Threshold of the TCP SYN packets from the Internet has exceeded the defined value the Vigor router will start to randomly discard the subsequent TCP SYN packets for a period defined in Timeout The goal for this is prevent the TCP SYN packets attempt to exhaust the limited resource of Vigor router By default the threshold and timeout values are set to 50 packets per second and 10 seconds respectively Check the box to activate the UDP flood defense function Once detecting the Threshold of the UDP packets from the Internet has exceeded the defined value the Vigor router will start to randomly discard the subsequent UDP packets for a period defined in Timeout The default setting for threshold and timeout are 150 packets p
36. K cfgs0a12 SSID Draytek Channel 6 Mode WPA WPA2 VVEP VVPA VVPA2 WPA2 Keyl AB312 cfgs0a12 PSK cfgs a12 VVEP PSK cfgs0a12 i RADIUS 192 168 1 1 1 192 168 1 2 station List vvill display all the station in your vvireless netvvork and the status of their connection Besides you can allow the connection of only trusted user with the function MAC Access control Station Rate Control can assign specific download upload rate to each STA WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons To isolate means neither of the parties can access each other To elaborate an example for business use you may set up a wireless LAN for visitors only so they can connect to Internet without hassle of the confidential information leakage For a more flexible deployment you may add a filter of MAC address to isolate single user s access from wired LAN 3 6 2 General Settings This web page allows you to enable wireless LAN function Wireless LAN gt gt General Settings General Setting IEEE 807 11 Enable Wireless LAN Mode 16 11 ze Channel Channel Overdrive Technology L Tx Burst Note the same technology must also be supported in clients to boost WLAN performance LI Hide 5510 C Long Preamble Hide SSID prevent SSID from being scanned Long Preamble necessary for some older 802 11b devices only l
37. Route IP LLC Encapsulation 1453 Bridged IP LLC 1463 Route IP LLC VAZ M L s 1453 Bridged IP VC Mux 1483 Routed IP VU MuxilPuA 1453 Bridged IP IPoE VC MUX LLC NAP Local Area Network LAN is a group of subnets regulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP 3 2 1 Basics of LAN The most generic function of Vigor router is NAT It creates a private subnet of your own As mentioned previously the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address What NAT does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address to each local host See the following diagram for a briefly understanding Vigor2700Ge e User s Guide 21 22 internet Public IP Address Private Subnet Router IP Address 192 168 1 1 a 192 168 1 10 192 168 1 11 192 168 1 12 192 166 1 13 In some special case you may have a public IP subnet from your SP such as 220 135 240 0 24 This means that you can set up a public subnet or call second subnet that each host is equipped with a public IP address a part of the public subnet the Vigor router will serve for IP routing to help hosts in the public subnet to com
38. Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router 26 Vigor2700Ge e Users Guide Internet Router C Set Static 192 168 1 1 Foute Router A 192 168 1 2 Gateway 192 168 1 1 Router B 192 168 1 3 publ ic subnet 211 10 88 0 24 private subnet 192 168 10 0 24 q 4 User G m User B w 1 Go to LAN page and click General Setup select st Subnet as the RIP Protocol Control Then click the OK button Note There are two reasons that we have to apply RIP Protocol Control on st Subnet The first is that the LAN interface can exchange RIP packets with the neighboring routers via the st subnet 192 168 1 0 24 The second is that those hosts on the internal private subnets ex 192 168 10 0 24 can access the Internet via the router and continuously exchange of IP routing information with different subnets 2 Click the LAN Static Route and click on the Index Number 1 Please add a static route as shown below which regulates all packets destined to 192 168 10 0 will be forwarded to 192 168 1 2 Click OK LAN gt gt Static Route Setup Index No 1 Status Action Destination IP Address Subnet Mask Gateway IP Address Network Interface LAN 3 Return to Static Route Setup page Click on another Index Number to add another st
39. Sxxx exe will be asked to copy onto your computer Remember the place of storing the execution file 5 Go to www draytek com to find out the newly update firmware for your router 6 Access into Support Center gt gt Downloads Find out the model name of the router and click the firmware link The Tools of Vigor router will display as shown below Hote Brief introduction for Tools Tools of Vigor m English ag 04 22003 Maco53 7 Choose the one that matches with your operating system and click the corresponding link to download correct firmware zip file 8 Next decompress the zip file Vigor2700Ge e User s Guide 75 9 Double click on the icon of router tool The setup vvizard will appear ie setup Draylek Router Tools Y2 5 4 Sie Welcome to the DrayTek Router Tools V2 5 4 Setup Wizard This wll install DrayTek Router Tools VA DA on your computer b iz recommended that you close all other applications before continuing Click Next to continue ar Cancel to eut Setup Cancel 10 Follow the onscreen instructions to install the tool Finally click Finish to end the installation 11 From the Start menu open Programs and choose Router Tools XXX gt gt Firmware Upgrade Utility mu DrayTek Firmware Upgrade Utility Silas Operation Mode Router IP Upgrade Lo Backup Setting Firmware file Time Out 5ec 25 zel Password port PJ Abort 12 Type in yo
40. Web Content Filter user s guide for detailed information 3 5 Applications 50 3 5 1 Dynamic DNS The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP It means that the public IP address assigned to your router changes each time you access the Internet The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address It allows the router to update its online WAN IP address mappings on the specified Dynamic DNS server Once the router is online you will be able to use the registered domain name to access the router or internal virtual servers from the Internet It 1s particularly helpful if you host a web server FTP server or other server behind the router Before you use the Dynamic DNS feature you have to apply for free DDNS service to the DDNS service providers The router provides up to three accounts from three different DDNS service providers Basically Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www dyndns org Www no ip com www dtdns com www changeip com www dynamic nameserver com You should visit their websites to register your own domain name for the router Enable the Function and Add Dynamic DNS Account Vigor2700Ge e Users Guide 1 Assume you have a registered domain name from the DDNS provider say hostname dyndns org and an account with username test and password test 2 Inthe DDNS
41. an apply them to your Internet Access To add a schedule please click any index say Index No 1 The detailed settings of the call schedule with index 1 are shown below Applications gt gt Schedule Index No 1 Start Date yyyy mm dd Start Time hh mm Duration Time hh mm Action Idle Timeout How Often O Once Weekdays 2000 v 1 ell ei wei eat v Force On v minute s max 255 0 for default Osun lYlMon Mwed MThu Meri LElsat Enable Schedule Setup start Date yyyy mm dd Start Time hh mm Duration Time hh mm Check to enable the schedule Specify the starting date of the schedule Specify the starting time of the schedule Specify the duration or period for the schedule Vigor2700Ge e Users Guide Action Specify which action Call Schedule should apply during the period of the schedule Force On Force the connection to be always on Force Down Force the connection to be always down Enable Dial On Demand Specify the connection to be dial on demand and the value of idle timeout should be specified in Idle Timeout field Disable Dial On Demand Specify the connection to be up when it has traffic on the line Once there is no traffic over idle timeout the connection will be down and never up again during the schedule Idle Timeout Specify the duration or period for the schedule How often Specify how often the schedule will be applied Once The schedule will be
42. and subsequently a window having a list of private IP addresses of local hosts will automatically pop up Select the appropriate IP address of the local host in the list Protocol Specify the transport layer protocol It could be TCP UDP or none for selection Start Port Specify the starting port number of the service offered by the local host End Port Specify the ending port number of the service offered by the local host NAT gt gt Open Ports Setup Open Ports Setup Index Comment Aux WAN IP Local IP Address Status Emule 220 135 240 247 182 168 1 11 d BPPRPPERPN SE Ka Ka Vigor2700Ge e User s Guide 35 3 3 4 VVell Knovvn Ports List This page provides you a view of well known ports NAT gt gt View Well Known Ports List Well Known Ports List Service Application Protocol Port Number File Transfer Protocol FTP TCP 21 SSH Remote Login Protocol ex pcanyvWhere UDP 22 Telnet TCP 23 Simple Mail Transfer Protocol SMTP TCP 25 Domain Name Server DNS UDP 53 WW Server HTTP TCP G Post Office Protocol ver 3 POPS TCP 110 Network News Transfer Protocol NNTP TCP 119 Point to Point Tunneling Protocol PPTP TCP 1723 pcANYWHEREdata TCP 5631 pcan YWHEREstat 5632 WH VAC TCP 5900 3 4 Firevvall 3 4 1 Basics for Firevvall While the broadband users demand more bandwidth for multimedia interactive applications or distance learning security has been always the most concerned The f
43. and the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes Save cost on applying public IP address and apply efficient usage of IP address NAT allows the internal IP addresses of local hosts to be translated into one public IP address thus you can have only one IP address on behalf of the entire internal hosts Enhance security of the internal network by obscuring the IP address There are many attacks aiming victims based on the IP address Since the attacker cannot be aware of any private IP addresses the NAT function can protect the internal network On NAT page you will see the private IP address defined in RFC 1918 Usually we use the 192 168 1 0 24 subnet for the router As stated before the NAT facility can map one or more IP addresses and or service ports into different specified services In other words the NAT function can be achieved by using port mapping methods 3 3 1 Port Redirection 30 Port Redirection is usually set up for server related service inside the local network LAN such as web servers FTP servers E mail servers etc Most of the case you need a public IP address for each server and this public IP address domain name are recognized by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the
44. ase execute a Firmware Upgrade Utility software to upgrade router s firmware This server will be closed by itself when the firmware upgrading finished For the detailed information about firmware update please go to Chapter 4 3 8 Diagnostics Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router 3 8 1 PPPoE PPPoA Diagnostics Click Diagnostics and click PPPoE PPPoA Diagnostics to open the web page Diagnostics gt gt PPPoE PPTP Diagnostics PPPoE PPPoA Diagnostics Refresh Broadband Access Mode Status Internet Access gt gt Dial PPPoE PPPoA WAN IP Address Drop Connection gt gt Drop PPPoE PPPoA Refresh To obtain the latest information click here to reload the page Broadband Access Display the broadband access mode and status If the Mode Status broadband connection 1s active it will show Internet access mode is enabled If the connection is idle it will show WAN IP Address The WAN IP address for the active connection Dial PPPoE or PPPoA Click it to force the router to establish a PPPoE or PPPoA connection 3 8 2 Triggerred Dial out Packet Header Click Diagnostics and click Dial out Trigger to open the web page Diagnostics gt gt Triggered Dial out Packet Header Dial out Triggered Packet Header Refresh HES Format 00 00 00 00 00 00 00 00 00 00 00 00 00 00 h 00 00 00 00 00 00 00 00 00 00 h 00 00 UU h 00 00 00 00 00 00 00 00 00 00 00 00 00
45. ast Index Indicate the relative number for the particular entry that you want to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Specify the name for the defined network service Aux WAN IP Display the private IP address of the local host that you specify in WAN Alias Local IP Address Display the private IP address of the local host offering the service Status Display the state for the corresponding entry X or V is to represent the Inactive or Active state Vigor2700Ge e Users Guide To add or edit port settings click one index number on the page The index entry setup page will pop up n each index entry you can specify 10 port ranges for diverse services NAT gt gt Open Ports Setup gt gt Edit Open Ports Setup Index No 1 Enable Open Ports Comment P2P Emule WAN IP 220 135 240 247 se Local Computer 192 165 h In Choose PC Protocol Start Port End Part Protocol Start Port End Part o o UI UI UU However if you previously have set up WAN Alias in Internet Access gt gt PPPoE PPPoA or Internet Access gt gt MPoA you will find that WAN IP appeared for your selection Enable Open Ports Check to enable this entry Comment Make a name for the defined network application service Local Computer Enter the private IP address of the local host or click Choose PC to select one Choose PC Click this button
46. at you have set in that web page After finishing all the settings here please click OK to activate them 3 1 3 MPoA MPoA is a specification that enables ATM services to be integrated with existing LANs which use either Ethernet token ring or TCP IP protocols The goal of MPoA is to allow different LANs to send packets to each other via an ATM backbone 18 Vigor2 700Ge e User s Guide To choose MPoA as the accessing protocol of the internet please select MPoA from the Internet Access menu The following web page will be shown Internet Access gt gt MPoA RFC1483 2684 MPoA RFC1483 2684 Mode MPoA RFC1483 2684 Enable Disable WAN IP Network Settings Obtain an IP address automatically Multi P C channel Channel 2 R Domain Name Encapsulation WAN IP Alias IB Alias 1483 Routed P LLC a Specify an IP address IP Address 132 18n 1 100 Subnet Mask 255 255 255 0 Gat IP Add 152 168 1 1 l RIP Protocol Required for some ISPs ETEnahle RIP Default MAC Address O Specify a MAC Address Bridge Mode MAC Address Enable Bridge Mode DNS Server IP Address Primary IP Address Secondary IP Address MPoA RFC1483 2684 Click Enable for activating this function If you click Disable this DSL Modem Settings RIP Protocol Bridge Mode WAN IP Network Settings Vigor2700Ge e User s Guide function will be closed and all the settings that you adjusted in this page will be invalid
47. ata IP Address Type in the private IP address Subnet Mask Type in the subnet mask Gateway IP Address Type in gateway IP address Default MAC Address Type in MAC address for the router You can use Default MAC Address or specify another MAC address for your necessity MAC Address Type in the MAC address for the router manually DNS Server IP Type in the primary IP address for the router If necessary type in Address secondary IP address for necessity in the future After finishing all the settings here please click OK to activate them 3 1 4 Multi PVCs This router allows you to create multi PVCs for different data transferring for using Simply go to Internet Access and select Multi PVC Setup page Internet Access gt gt Multi PVCs Setup Multi PYGS Channel Enable YPI V I QoS Type Protocol Encapsulation 1 2 3 o bB z O b LJ 5 o bB is 5 HE n 7 O e w 8 HE l Enable Type in the primary IP address for the router If necessary type 20 Vigor2700Ge e User s Guide VPI VCI QoS Type Protocol Encapsulation 3 2 LAN Type in the value provided by your ISP Type m the value provided by your ISP Select a proper QoS type for the channel 005 Type Select a proper protocol for this channel Protocol PFoA PPPoE Choose a proper type for this channel The types will be different according to the protocol setting that you choose Encapsulation 1453
48. atic route as show below which regulates all packets destined to 211 100 88 0 will be forwarded to 192 168 1 2 Vigor2700Ge e User s Guide 27 LAN gt gt Static Route Setup Index No 2 Status Action Destination IP Address Subnet Mask Gateway IP Address Network Interface LAN ze 4 Goto Diagnostics and choose Routing Table to verify current routing table Diagnostics gt gt View Routing Table Current Running Routing Table Refresh Key connected 5 static R RIF default private Ve 0 0 0 0 0 0 0 0 via 192 168 1 1 IFO ao 192 168 10 0 255 255 255 0 via 192 168 1 2 IFO 192 168 1 0 255 255 255 0 15 directly connected IFO ae 211 100 86 0 255 255 255 0 via 192 168 1 3 IFO Delete or Deactivate Static Route 1 Goto LAN page and click Static Route to open the web page Select the index number Of the one that you vvant to delete 2 Select Empty Clear from the drop dovvn menu and then click the OK button to delete the route LAM gt gt Static Route Setup Index No 2 Status Action Actve Add ae Ernpty Clear Destination IP Address Ke Ul Subnet Mask Inactive Disable Gateway IP Address 192 168 1 3 Network Interface Virtual LAN function provides you a very convenient way to manage hosts by grouping them based on the physical port You can also manage the in out rate of each port Go to LAN menu and select VLAN The following page will appear Click Enable to invoke VLAN funct
49. ch as ActiveX Java Applet compressed files and other executable files Once downloading these types of files from websites you may risk bringing threat to your system For example an ActiveX control object is usually used for providing interactive web feature If malicious code hides inside it may occupy user s system Web Filtering We all know that the content on the Internet just like other types of media may be inappropriate sometimes As a responsible parent or employer you should protect those in your trust against the hazards With Web filtering service of the Vigor router you can protect your business from common primary threats such as productivity legal liability network and security threats For parents you can protect your children from viewing adult websites or chat rooms Once you have activated your Web Filtering service in Vigor router and chosen the categories of website you wish to restrict each URL address requested e g www bbc co uk will be checked against our server database powered by SurfControl The database covering over 70 languages and 200 countries over billion Web pages divided into 40 easy to understand categories This database is updated as frequent as daily by a global team of Internet researchers The server will look up the URL and return a category to your router Your Vigor router will then decide whether to allow access to this site according to the categories you have selected Please note tha
50. d End Port Enter filter set comments description Maximum length is 14 character long Check this box to enable the filter rule Specifies the action to be taken when packets match the rule Block Immediately Packets matching the rule will be dropped immediately Pass Immediately Packets matching the rule will be passed immediately Block If No Further Match A packet matching the rule and that does not match further rules will be dropped Pass If No Further Match A packet matching the rule and that does not match further rules will be passed through If the packet matches the filter rule the next filter rule will branch to the specified filter set Select next filter rule to branch from the drop down menu Check this box to enable the log function Use the Telnet command log f to view the logs Set the direction of packet flow It is for Data Filter only For the Call Filter this setting is not available since Call Filter is only applied to outgoing traffic Specify the protocol s which this filter rule will apply to Specify a source and destination IP address for this filter rule to apply to Place the symbol before a specific IP Address will prevent this rule from being applied to that IP address To apply the rule to all IP address enter any or leave the field blank Select the Subnet Mask for the IP Address column for this filter rule to apply from the drop down menu The operator column speci
51. ddress is mandatory for those devices participated in the public network but not in the private TCP IP local area networks LANs such as host PCs under the management of a router since they do not need to be accessed by the public Hence the NIC has reserved certain addresses that will never be registered publicly These are known as private IP addresses and are listed in the following ranges From 10 0 0 0 to 10 255 255 255 From 172 16 0 0 to 172 31 255 255 From 192 168 0 0 to 192 168 255 255 What are Public IP Address and Private IP Address As the router plays a role to manage and further protect its LAN it interconnects groups of host PCs Each of them has a private IP address assigned by the built in DHCP server of the Vigor router The router itself will also use the default private IP address 192 168 1 1 to communicate with the local hosts Meanwhile Vigor router will communicate with other network devices through a public IP address When the data flow passing through the Network Address Translation NAT function of the router will dedicate to translate public private addresses and the packets will be delivered to the correct host PC in the local area network Thus all of the host PCs can share a common Internet connection Get Your Public IP Address from ISP To acquire a public IP address from your ISP for Vigor router as a customer premises equipment there are three common protocols Point to Point Protocol over Ethernet PPPo
52. detdssbebladisblekitdssiidssisidsslsblaidistlsrlsbiskistdssjsblsslstieidsblsgiliskietdssisblaiistjeidsklseiiigrit 14 Advanced Web Configuration c5 c1 EEEsseEEsssesessseersseeerssr 15 3 1 Internet aaa anaya NN 15 3 1 1 Basics of Internet Protocol IP Network 3883883838 15 Qar ya E PPPOA 00 e E E C EEE 16 PN 18 EEE 20 UNN 21 7251 C O LAIN ay la n n da 21 05 ucu 1000 ia aaa eer tern eee tr eer tear 23 22 ee E 25 Se ANAR a 28 MM 30 JP REE 30 I Kl e 32 EP 000000 34 3 3 4 Well Known Ports List 8222228 8232 nu TK ng 36 GE EEE EEE 36 eege 36 942 General SEP de 39 ES ER ES EEE 41 3 4 4 IM BlockInQ lt 2 13211112 111 111 n1 TT TT TT Khi ng r 44 3 4 5 P2P Blocking c c TK TK tich r 45 017000 r 46 Vigor2700Ge e User s Guide iii 3 4 7 URL Content Filter m a a 48 3 4 8 Web Content b b NE EEE 50 SSAP 0 102 e a 50 SE LDN DT a d 50 DENE 52 DUN 54 VENN 55 3 8 1 Basic Concept 56 3 6 2 General Settings rrranrrrnnnrrnnnrrnnnrrnnnrrnnrrrnanrnnnnrnnnnennnnennnnennnsennnsennnsennnsennnennnsennnsennnee 57 3 6 3 Gecuty rinni rnrnrrerre nrn nrnni 58 3 6 4 Access Control 59 3 7 System MAINTENANCE HH HT TH TT TT TT Ki KT Ti 60 EEE 0 E E 60 3 7 2 Administrator Password s s eee eee eee aaa TH Khi tr 61 3 7
53. e User s Guide Check the box to activate URL Access Control Click this button to restrict accessing into the corresponding webpage with the keywords listed on the box below Click this button to allow accessing into the corresponding webpage with the keywords listed on the box below The Vigor router provides 8 frames for users to define keywords and each frame supports multiple keywords The keyword could be a noun a partial noun or a complete URL string Multiple keywords within a frame are separated by space comma or semicolon In addition the maximal length of each frame is 32 character long After specifying keywords the Vigor router will decline the connection request to the website whose URL string matched to any user defined keyword It should be noticed that the more simplified the blocking keyword list the more efficiently the Vigor router perform Check the box to deny any web surfing activity using IP address such as http 202 6 3 2 The reason for this 1s to prevent someone dodges the URL Access Control You must clear your browser cache first so that the URL content filtering facility operates properly on a web page that you visited before 49 Enable Restrict Web Check the box to activate the function Feature Java Check the checkbox to activate the Block Java object function The Vigor router will discard the Java objects from the Internet ActiveX Check the box to activate the Block ActiveX object f
54. e status of this protocol will be shown as below Online Status System Status LAN Status Primary DNS 194 109 6 66 IP Address TX Packets RX Packets 192 168 1 1 1856 WAN Status GW IP Addr Mode IP Address TX Packets TX Rate RX Packets 0 ADSL Information ADSL Firmware Version 113111 4 Corrected Blocks Uncorrected Blocks ATM Statistics TX Blocks RX Blocks ADSL Status Mode State Up Speed READY System Uptime 0 17 22 Secondary DNS 194 98 0 1 Renew RX Rate Up Time 00 00 00 0 Down Speed SNR Margin Loop Att 0 0 Vigor2700Ge e User s Guide 2 2 4 Routed IP Click 1483 Routed IP as the protocol Type in all the information that your ISP provides for this protocol Quick Start Wizard 2 Gonnect to Internet VPI Protocol Encapsulation e ea 1483 Routed IP LLC Fixed IP IP Address Subnet Mask Default Gateway Primary DNS Second DNS After finishing the settings in this page click Next to see the following page Quick Start Wizard 4 Please confirm your settings VPI VC Protocol Encapsulation Fixed IP IP Address Subnet Mask Default Gateway Primary DNS Secondary DNS G Yes ONo Dynamic IP 192 168 1 100 255 255 255 0 192 168 1 1 su 36 1483 Route LLC Yes 192 168 1 100 m255 255 255 0 192 168 1 1 Click Finish The online status of this protocol v
55. ed packets Unfragmented Apply the rule to unfragmented packets Fragmented Apply the rule to fragmented packets Too Short Apply the rule only to packets that are too short to contain a complete header 43 44 Example As stated before all the traffic will be separated and arbitrated using on of two IP filters call filter or data filter You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner Each filter set is composed by 7 filter rules which can be further defined After that in General Setup you may specify one set for call filter and one set for data filter to execute first Firewall gt gt General Setup General Setup Call Filter Enable Start Filter Set Set Y O Disable Data Filter Enable Start Filter Set 582 v O Disable Log Flag None v Firewall gt gt Filter Setup Enable stateful packet inspection Filler Setup Set to Factory Default Cl Apply IP filter to VPN incoming packets hi ti REP Pan 8 Comments Set Comments rop non p connection on por Default Call Filter d Z Accept incoming fragmented UDP packets for some games ex CS z Default Data Filter 8 3 9 h m 3 11 6 12 Firewall gt gt Filter Setup gt gt Edit Filter Set Filter Set 1 Comments Default Filter il n pule Active Comments 2 Block NetBios Firewall gt gt Edit Filter Rule gt gt Edit Filter Rule ES m Filter Set 1 Rule 1 mi Comments Block N
56. ent Enable 62 Disable ISP Access Setup DSL Modem Settings eege VPI PPP Authentication PAP or CHAP v M T Encapsulating Type LLC SNAP ze PPPoE e Protocol Modulation PPPoE Pass through L lFnr Wired LAN For Wireless LAN PPPoE PPPoA Client DSL Modem Settings PPPoE Pass through 16 51 Lal Always On H second s IP Address From ISP WAN IP Alias Fixed 1 O Yes No Dynamic IP Fixed IP Address Idle Timeout Multimode Required for some ISPs Default MAC Address O Specify a MAC Address MAC Address Scheduler 1 15 Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid Set up the DSL parameters required by your ISP These are vital for building DSL connection to your ISP Multi PVC channel The selections displayed here are determined by the page of Internet Access Multi PVCs Select M PV Cs Channel means no selection will be chosen VPI Type in the value provided by ISP VCI Type in the value provided by ISP Encapsulating Type Drop down the list to choose the type provided by ISP Protocol Drop down the list to choose the one provided by ISP If you have already used Quick Start Wizard to set the protocol then it is not necessary for you to change any settings in this group The router offers PPPoE dial up connection Besides
57. er second and 10 seconds respectively Check the box to activate the ICMP flood defense function Similar to the UDP flood defense function once if the Threshold of ICMP packets from Internet has exceeded the defined value the router will discard the ICMP echo requests coming from the Internet The default setting for threshold and timeout are 50 packets per second and 10 seconds respectively Port Scan attacks the Vigor router by sending lots of packets to many ports in an attempt to find ignorant services would respond Check the box to activate the Port Scan detection Whenever detecting this malicious exploration behavior by monitoring the Vigor2700Ge e Users Guide Block TP options Block Land Block Smurf Block trace router Block SYN fragment Block Fraggle Attack Block TCP flag scan Block Tear Drop Block Ping of Death Block ICMP Fragment Block Land Vigor2700Ge e User s Guide port scanning Threshold rate the Vigor router will send out a warning By default the Vigor router sets the threshold as 150 packets per second Check the box to activate the Block IP options function The Vigor router will ignore any IP packets with IP option field in the datagram header The reason for limitation is IP option appears to be a vulnerability of the security for the LAN because it will carry significant information such as security TCC closed user group parameters a series of Internet addresses routing messages
58. er to get more information for your necessity 3 2 3 Static Route Go to LAN to open setting page and choose Static Route Vigor2700Ge e User s Guide 25 LAN gt gt Static Route Setup Static Route Configuration View Routing Table Index Destination Address Status Index Destination Address Status 1 TTT 1 TTT T 2 777 1 777 9 3 777 8 777 4 TTT T 9 TTT T 1 TTT T 10 TTT T Sue Active Inactive 7 Empty Index The number 1 to 10 under Index allows you to open next page to setup static route Destination Address Displays the destination address of the static route Status Displays the status of the static route Viewing Routing Table Displays the routing table for your reference Current Running Routing Table Refresh Key C connected 5 static R RIP default private z 0 0 0 0 0 0 0 0 via 192 168 1 1 IFO C 192 168 1 0 255 255 255 0 is directly connected IFO 4 Add Static Routers to Private and Public Netvvorks Here is an example of setting Static Route in Main Router so that user A and B locating in different subnet can talk to each other via the router Assuming the Internet access has been configured and the router works properly use the Main Router to surf the Internet create a private subnet 192 168 10 0 using an internal Router A 192 168 1 2 create a public subnet 211 100 88 0 via an internal Router B 192 168 1 3 have set Main
59. etBios F Check to enable the Filter Rule m Pass or Block Branch to Other Filter Set Block Immediately None ze Ls sg Dm Direction IN Protocol TCP UDP Ss IP Address Subnet Mask Operator Start Port End Port OK Clear Cancel 1 Lu Source any 255 255 255 255 32 vi 137 1139 Destination any 255 255 255 255 32 Y 1 Keep State Fragments Dont Care 3 4 4 IM Blocking IM Blocking means instant messenger blocking Click Firewall and click IM Blocking to open the setup page You will see a list of common IM such as MSN Yahoo ICQ AQL applications Check Enable IM Blocking and select the one s that you want to block To block selected IM applications during specific periods enter the number of the scheduler predefined in Applications gt gt Call Schedule Firewall gt IM Blocking Setup Instant Messenger Applications Blocking Setup Black MSN Messenger C Block Yahoo Messenger Black ICO AOL Time Schedule Scheduler defined in Call Schedule Setup 1 15 I b 1 LI Note Action and Idle Timeout settings will be ignored Vigor2700Ge e Users Guide 3 4 5 P2P Blocking P2P is the short name of peer to peer Click Firewall and click P2P Blocking to open the setup page You will see a list of common P2P applications Check Enable P2P Blocking and select the one s to block To block selected P2P applications during specific periods enter the number of
60. f the power cord to the power port of this device Connect the other end to the wall outlet of electricity 4 Power on the router 5 Check the ACT and ADSL2 LAN LEDs to assure network connections For the detailed information of LED status please refer to section 1 1 2 Vigor2700Ge e User s Guide ADSL2 O Link C Data 00000000 00000000 OO 00000000 oo 00000000 ADSL Splitter Microfilter Land line jack Vigor2700Ge e User s Guide Vigor2700Ge e User s Guide Configuring Basic Settings For use the router properly it is necessary for you to change the password of web configuration for security and adjust primary basic settings This chapter explains how to setup a password for an administrator and how to adjust basic settings for accessing Internet successfully Be aware that only the administrator can change the router configuration 2 1 Changing Password To change the password for this device you have to access into the web browse with default password first 1 sure your computer connects to the router correctly Q Notice You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed information please refer to the later section Trouble Shooting of this guide 2 a web browser on y
61. fies the port number settings If the Start Port is empty the Start Port and the End Port column will be ignored The filter rule will filter out any port number the End Port is empty the filter rule will set the port number to be the value of the Start Port Otherwise the port number ranges between the Start Port and the End Port including Vigor2700Ge e Users Guide Keep State Fragments Vigor2700Ge e User s Guide the Start Port and the End Port If the End Port is empty the port number is not equal to the value of the Start Port Otherwise this port number is not between the Start Port and the End Port including the Start Port and End Port gt Specify the port number is larger than the Start Port includes the Start Port lt Specify the port number is less than the Start Port includes the Start Port This function should work along with Direction Protocol IP address Subnet Mask Operator Start Port and End Port settings It is used for Data Filter only Keep State 1s in the same nature of modern term Stateful Packet Inspection It tracks packets and accept the packets with appropriate characteristics showing its state 1s legal as the protocol defines It will deny unsolicited incoming data You may select protocols from any TCP UDP TCP UDP ICMP and IGMP Specify the action for fragmented packets And it is used for Data Filter only Don t care No action will be taken towards fragment
62. gateway IP Address in WAN Displays the IP address of the WAN interface TX Rate Displays the speed of transmitted packets at the WAN interface RX Rate Displays the speed of received packets at the WAN interface Up Time Displays the total system uptime of the interface ADSL Information Displays the firmware version of this router Vigor2700Ge e User s Guide 13 2 4 Saving Configuration Each time you click OK on the web page for saving the configuration you can find messages showing the system interaction with you Ready indicates the system is ready for you to input settings Settings Saved means your settings are saved once you click Finish or OK button 14 Vigor2700Ge e User s Guide 3 Advanced Web Configuration After finished basic configuration of the router you can access Internet with ease For the people who want to adjust more settings for suiting his her request please refer to this chapter for getting detailed information about the advanced configuration of this router As for other examples of application please refer to Chapter 4 3 1 Internet Access 3 1 1 Basics of Internet Protocol IP Network IP means Internet Protocol Every device in an IP based Network including routers print server and host PCs needs an IP address to identify its location on the network To avoid address conflicts IP addresses are publicly registered with the Network Information Centre NIC Having a unique IP a
63. ge this as a great tool to connect with their customers some industry may take reserve attitude in order to reduce employee misusage during office hour or prevent unknown security leak It is similar situation for corporation towards peer to peer applications since file sharing can be convenient but insecure at the same time To address these needs we provide IM and P2P blocking functionality Denial of Service DoS Defense The DoS Defense functionality helps you to detect and mitigate the DoS attack The attacks are usually categorized into two types the flooding type attacks and the vulnerability attacks The flooding type attacks will attempt to exhaust all your system s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables the Vigor router to inspect every incoming packet based on the attack signature database Any malicious packet that might duplicate itself to paralyze the host in the secure LAN will be strictly blocked and a Syslog message will be sent as warning if you set up Syslog server Also the Vigor router monitors the traffic Any abnormal traffic flow violating the pre defined parameter such as the number of thresholds is identified as an attack and the Vigor router will activate its defense mechanism to mitigate in a real time manner The below shows the attack types that DoS DDoS defense function can de
64. gor2700Ge e User s Guide 59 Wireless LAN gt gt Access Control Access Control Z Enable Access Control Index MAC Address MAC Address HEKK Note Add or remove the wireless user s MAC address to accept or deny the access to the network Enable Access Control Select to enable the MAC Address access control feature Mac Address Manually enter the MAC address of wireless client Add Add a new MAC address into the list Remove Delete the selected MAC address in the list Edit Edit the selected MAC address m the list Cancel Give up the access control set up OK Click it to save the access control list Clear All Clean all entries in the MAC address list 3 7 System Maintenance For the system setup there are several items that you have to know the way of configuration Status Administrator Password Configuration Backup Syslog Time setup Reboot System Firmware Upgrade 3 7 1 System Status The System Status provides basic network settings of Vigor router It includes LAN and WAN interface information Also you could get the current running firmware version or firmware related information from this presentation 60 Vigor2700Ge e User s Guide System Status Router 2 0 0RC3 Sep 20 2005 15 38 25 Model Name Firmware Version Build Date Time LAN 00 50 7F 00 00 00 WAN MAC Address MAC Address 00 50 7F 00 00 01 ist IP Address eee 1 1 Connection hung ist Subnet Mask Pecos 55
65. gs before you pressing The password of factory default is null Software Reset You can reset the router to factory default via Web page Go to System Maintenance and choose Reboot System on the web page The following screen will appear Choose Using factory default configuration and click OK After few seconds the router will return all the settings to the factory settings 84 Vigor2700Ge e User s Guide Reboot System Do You want to reboot your router using current configuration using factory default configuration Hardware Reset While the router is running ACT LED blinking press the Factory Reset button and hold for more than 5 seconds When you see the ACT LED blinks rapidly please release the button Then the router will restart with the default configuration Reser 00000000 i C 00000000 ON LAN R OFF P m oo oo 00000000 oo o O oo ADSL2 After restore the factory default setting you can configure the settings for the router again to fit your personal request 4 6 Contacting Your Dealer If the router still cannot work correctly after trying many efforts please contact your dealer for further help right away For any questions please feel free to send e mail to support draytek com Vigor2700Ge e User s Guide 85
66. h ADSL2 ADSL is show time Link The device starts handshaking ADSL2 Data is transmitting Data LAN 1 2 3 A normal connection is through its corresponding port 4 Ethernet packets are transmitting Vigor2700Ge e User s Guide 1 1 1 2 Connector Explanation For Vigor2700Ge Factory Reset Q 4 3 2 1 LAN for Annex A Factory Reset for Annex B Factory Reset for Annex A Factory Reset for Annex B Interface Description ADSL 2 Connecter for accessing the Internet through ADSL 2 LAN4 1 Connecter for local networked devices Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration ON OFF Power Switch PWR Connecter for a power adapter with 7 7 5VDC 1 2 Hardware Installation Before starting to configure the router you have to connect your devices correctly 1 Connect the DSL interface to the external ADSL splitter with an ADSL line cable 2 Connect one port of 4 port switch to your computer with a RJ 45 cable This device allows you to connect 4 PCs directly 3 Connect one end o
67. h is a Syslog Client Refer to Chapter 13 System Maintenance Syslog Access Setup for detail information All the warning messages related to DoS defense will be sent to user and user can review it through Syslog daemon Look for the keyword DoS in the message followed by a name to indicate what kind of attacks is detected SysLog Access Setup Enable Server IP Address 192 168 1 115 Destination Port 514 0 DrayTek Syslog Controls 192 168 1 1 v WAN Status gt S Getway IP Fixed TX Packets RX Rate vigor 3100 series Dmt Bis m u K FT L N Status TX Packets RX Packets WAN IP Fixed RX Packets TX Rate Firewall Log VPN Log User Access Log Call Los WAN Los BudgetLog Network Infomation Net State Time Host Message Jan 1 00 00 42 Vigor Do syn flood Block 10s 192 168 1 115 10605 gt 192 168 1 1 23 PR len 20 40 3943751 Jan 1 00 00 34 Vigor DoS emp flood Block 10s 192 168 1 115 gt 192 168 1 1 PR 18emp len 20 60 icmp 0 8 s ADSL Status Mode State Up Speed Down Speed SNR Margin Loop Att 11 413 HANDSHAKE 0 0 0 0 0 3 4 7 URL Content Filter Based on the list of user defined keywords the URL Content Filter facility in Vigor router inspects the URL string in every outgoing HTTP request No matter the URL string is found full or partial matched with a keyword the Vigor router will block the associated HTTP connection For example
68. he router using the current configuration check Using current configuration and click OK To reset the router settings to default values check Using factory default configuration and click OK The router will take 5 seconds to reboot the system 3 7 8 Firmware Upgrade Before upgrading your router firmware you need to install the Router Tools The Firmware Upgrade Utility is included in the tools The following web page will guide you to upgrade firmware by using an example Note that this example is running over Windows OS Operating System Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www draytek com or local DrayTek s web site and FTP site is ftp draytek com Click System Maintenance gt gt Firmware Upgrade to launch the Firmware Upgrade Utility System Maintenance gt gt Firmware Upgrade Firmware Upgrade Current Firmware Version v2 6 0RC3 Firmware Upgrade Procedures Click OK ta start the TFTP server Open the Firmware Upgrade Utility or other 3 party TFTP client software Check that the firmware filename is correct Click Upgrade on the Firmware Upgrade Utility to start the upgrade After the upgrade is compelete the TFTP server will automatically stop running in B 2 E1 Do you want to upgrade firmware Click OK The following screen will appear Vigor2700Ge e User s Guide 67 Firewall gt gt Firmware Upgrade A TFTP server Is running Ple
69. ience Complete Security Standard Selection To ensure the security and privacy of your wireless communication we provide several prevailing standards on market WEP Wireless Equivalent Privacy is a legacy method to encrypt each frame transmitted via radio using either a 64 bit or128 bit key Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys Wi Fi Protected Access the most dominating security mechanism in industry 15 separated into two categories WPA personal or called WPA Pre Share Key WPA PSK and WPA Enterprise or called WPA 802 1x In WPA Personal a pre defined key is used for encryption during data transmission WPA applies Temporal Key Integrity Protocol TKIP for data encryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the over the air data protection and Jor privacy on your wireless networks The Vigor wireless router is very flexible and can support multiple secure connections with both WEP and WPA at the same time Below shows three examples for your reference Vigor2700Ge e User s Guide Mode WEP or WPAPSK Mixed WPA WPA2 PS
70. in PSK Mixed WPA WPA2 PSK Accepts WPA and WPA2 clients simultaneously and the encryption key should be entered in PSK Mode Disable Disable Pre Shared Key PSEK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde For key length 64 bits For 64 bits WEP key either 5 ASCII characters such as 12345 or 10 hexadecimal digitals leading by Ox such as 0x4142434445 For key length 128 bits For 128 bits WEP key either 13 ASCII characters such as ABCDEFGHIJKLM or 26 hexadecimal digits leading by Ox such as 0x4142434445464748494A4B4C4D All wireless devices must support the same WEP encryption bit size and have the same key Four keys can be entered here but only one key can be selected at a time The keys can be entered in ASCII or Hexadecimal Check the key you wish to use For additional security of wireless access the Access Control facility allows you to restrict the network access right via the MAC address of wireless client Only the valid MAC address that has been configured can access the wireless LAN By clicking the Access Control a new web page will appear as shown below You could edit the clients MAC addresses to control their access rights Vi
71. ion 28 Vigor2700Ge e User s Guide LAN gt gt VLAN Confiquration YLAN Confiquration JEnable YLANU YLAN1 YLAN2 YLANG To add or remove a VLAN please refer to the following example 1 If VLAN 0 is consisted of hosts linked to P1 and P2 and VLAN 1 is consisted of hosts linked to P3 and P4 Internet 2 After checking the box to enable VLAN function you will check the table according to the needs as shown below LAN gt gt VLAN Configuration YLAN Configuration Enable VL AND YLAN1 YLANZ YLANG Hn D000 Ek x 3 Toremove VLAN uncheck the needed box and click OK to save the results Vigor2700Ge e User s Guide 29 3 3NAT Usually the router serves as an NAT Network Address Translation router NAT is a mechanism that one or more private IP addresses can be mapped into a single public one Public IP address is usually assigned by your ISP for which you may get charged Private IP addresses are recognized only among internal hosts When the outgoing packets destined to some public server on the Internet reach the NAT router the router will change its source address into the public IP address of the router select the available public port and then forward it At the same time the router shall list an entry in a table to memorize this address port mapping relationship When the public server response the incoming traffic of course 1s destined to the router s public IP address
72. irewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders It also restricts users in the local network from accessing the Internet Furthermore it can filter out specific packets that trigger the router to build an unwanted outgoing connection The most basic security concept 1s to set user name and password while you install your router The administrator login will prevent unauthorized access to the router configuration from your router Quick Start Wizard 1 Enter login password Please enter an alpha numeric string as your Password Max 23 characters Mew Password Confirm Password If you did not set password during installation you can go to System Maintenance to set up your password 36 Vigor2700Ge e User s Guide System Maintenance gt gt Administrator Password Setup Administrator Password Firewall Facilities The users on the LAN are provided with secured protection by the following firewall facilities User configurable IP filter Call Filter Data Filter Stateful Packet Inspection SPI tracks packets and denies unsolicited incoming data Selectable Denial of Service DoS Distributed DoS DDoS attacks protection 6 URL Content Filter IP Filters Depending on whether there is an existing Internet connection or in other words the WAN link status is up or down the IP filter architecture categorizes traffic into two Cal
73. l Filter and Data Filter Call Filter When there is no existing Internet connection Call Filter is applied to all traffic all of which should be outgoing It will check packets according to the filter rules If legal the packet will pass Then the router shall initiate a call to build the Internet connection and send the packet to Internet Data Filter When there is an existing Internet connection Data Filter is applied to incoming and outgoing traffic It will check packets according to the filter rules If legal the packet will pass the router The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively Outgoing Traffic Vigor2700Ge e User s Guide 37 38 Stateful Packet Inspection SPI Stateful inspection is a firewall architecture that works at the network layer Unlike legacy static packet filtering which examines a packet based on the information in its header stateful inspection builds up a state machine to track each connection traversing all interfaces of the firewall and makes sure they are valid The stateful firewall of Vigor router not just examine the header information also monitor the state of the connection Instant Messenger IM and Peer to Peer P2P Application Blocking As the popularity of all kinds of instant messenger application arises communication cannot become much easier Nevertheless while some industry may levera
74. l over Ethernet It relies on two widely accepted standards PPP and Ethernet It connects users through an Ethernet to the Internet with a common broadband medium such as a single DSL line wireless device or cable modem All the users over the Ethernet can share a common connection And the PPPoA stands for Point to Point Protocol over ATM PPPoA uses the PPP dial up protocol with ATM as the transport PPPoE or PPPoA is used for most of DSL modem users All local users can share one PPPoE or PPPoA connection for accessing the Internet Your service provider will provide you information about user name password and authentication mode If your ISP provides you the PPPoE or PPPoA connection please select PPPoE or PPPoA for this router The following page will be shown Quick Start Wizard 3 Set PPPoE PPPoA User Name 84005755 hinet net Password Confirm Password Corre eee Always On Idle Timeout Seconds ISP Name Assign a specific name for ISP requirement Vigor2700Ge e User s Guide User Name Assign a specific valid user name provided by the ISP Passvvord Assign a valid password provided by the ISP Confirm Password Retype the password Always On Check this box to allow the router connecting to Internet forever Idle Timeout Type in the value unit is second as the idle timeout of the connect10n Click Next for viewing summary of such connection Quick Start Wizard 4 Please confirm your settings
75. lias in Internet Access gt gt PPPoE PPPoA or Internet Access gt gt MPoA you will find them in Aux WAN IP list for your selection NAT gt gt DMZ Host Setup DMF Host Setup Index Enable Aux WAN IP Private IP 220 135 240 247 FETT Enable Check to enable the DMZ Host function Private IP Enter the private IP address of the DMZ host or click Choose PC to select one Choose PC Click this button and then a window will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host Vigor2700Ge e User s Guide 33 34 E ms ma LI 192 168 1 11 When you have selected one private IP from the above dialog the IP address will be shown on the following screen Click OK to save the setting NAT gt gt DMZ Host Setup DMZ Host Setup Enable Private IP 192 168 1 1 11 Choose PC 3 3 3 Open Ports Open Ports allows you to open a range of ports for the traffic of special applications Common application of Open Ports includes P2P application e g BT KaZaA Gnutella WinMX eMule and others Internet Camera etc Ensure that you keep the application involved up to date to avoid falling victim to any security exploits Click Open Ports to open the following page NAT gt Open Ports Setup Open Ports Setup Index Comment AUX WAN IP Local IP Address Status x BrPPRPPPPEPRN PE
76. municate with other public hosts or servers outside Therefore the router should be set as the gateway for public hosts Internet Public IP Address 220 135 240 207 Private Subnet Sats Router IP Address 192 168 1 1 Public Subnet 2 A 192 168 1 22 192 168 1 11 a a 220 135 240 210 220 135 240 209 What is Routing Information Protocol RIP Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing This allows users to change the information of the router such as IP address and the routers will automatically inform for each other What is Static Route When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP Vigor2700Ge e User s Guide VVhat are Virtual LANs You can group local hosts by physical ports and create up to 4 virtual LANs To manage the communication between different groups please set up rules in Virtual LAN VLAN function and the rate of each internet To H Se ML AND 192 168 1 13 192 166 1 12 192 168 1 11 192 166 1 10 3 2 2 General Setup This page provides you the general settings for LAN Click LAN to open the LAN settings page and choose General Setup LAN gt gt Ethernet TCP IP and DHCP Setup LAN
77. of the sync field in an 802 1 I packet Most modern wireless network uses short preamble with 56 bit sync filed instead of long preamble with 128 bit sync field However some original I Ib wireless network device only support long preamble Check it to use Long Preamble if needed to communicate with this kind of devices This page allows you to set security with different modes After configuring the correct settings please click OK to save and invoke it Wireless LAN gt gt Security Settings Security Settings Mode WPA Type 8 63 ASCII character or 64 Hexadecimal digits leading by for example elil ul z hBahcd WEP Key Length key 1 key EG key GR 5565 For 64 hit WEP key EE FF 1 Type 5 ASCII character or 10 Hexadecimal digits leading by for example 4B312 or ula kl ci al s For 128 bit WEP key Type 13 ASCII character or 26 Hexadecimal digits leading by for example 0123456789abc or 0 230313233343536373839414243 Vigor2700Ge e User s Guide Mode VVPA VVEP 3 6 4 Access Control Disable Turn off the encryption mechanism For the security of your router please select any one of the encryption mode here VVEP Accepts only WEP clients and the encryption key should be entered in VVEP Key VVPA PSK Accepts only WPA clients and the encryption key should be entered in PSK WPA2 PSK Accepts only WPA2 clients and the encryption key should be entered
78. ormally it is the time for you to contact your dealer for advanced help 4 1 Checking f the Hardware Status Is OK or Not Follow the steps below to verify the hardware status 1 Check the power line and WLAN LAN cable connections Refer to 2 1 Hardware Installation for details 2 Turn on the router Make sure the ACT LED blink once per second and the correspondent LAN LED is bright ADSL2 2 Router 3 Dray Tek Vigor2700e 3 1 not it means that there is something wrong with the hardware status Simply back to 2 1 Hardware Installation to execute the hardware installation again And then try again 4 2 Checking If the Network Connection Settings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings After trying the above section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK 78 Vigor2700Ge e User s Guide For VVindovvs The example is based on Windows XP As to the examples for other operation systems please refer to the similar steps or find support notes in www draytek com 1 Goto Control Panel and then double click on Network Connections deb rerk Connections 2 Right click on Local Area Connection and click on Properties Disable Status Repair En Bridge Connections Create Shortcut Properties 3 Select Interne
79. our PC and type http 192 168 1 1 A pop up window will open to ask for username and password Please type default values both username and password are Null on the window for the first time accessing and click OK for next screen Connect to 192 168 1 1 E E 1 ibs F dr 1 Sie i yil HS gt S n di xb XALA Login ta the Router Web Configurator Liser name f Password Remember my password 3 Now the Main Screen will pop up Vigor2700Ge e User s Guide Vigorous Broadband Access Vigor2700 Series DrayTek ADSL2 2 Router www draytek com System Status Online Status ren eas Model Name Router Firmware Version v2 6 0RC3 Build Date Time Sep 20 2005 15 38 25 LAN WAN Firevvall MAC Address 00 50 7F 00 00 00 MAC Address 00 50 7F 00 00 01 Applications ist IP Address 192 168 1 1 Connection If Wireless LAN ist Subnet Mask 15255 255 255 0 IP Address i 555 DHCP Server Yes Default Gateway p System Maintenance DNS 194 109 6 66 Diagnostics Wireless LAN MAC Address 00 50 7f 00 00 00 Frequency Domain FCC Firmware version Copyright c 2004 DrayTek Corp All Rights Reserved Go to System Maintenance page and choose Administrator Password System Maintenance gt gt Administrator Password Setup Administrator Password Enter the login password the default is blank
80. owers performance Enable Wireless LAN Check the box to enable wireless function Mode Select an appropriate wireless mode Mixed 11b 11g The router communicates with standard 802 11b and standard 802 11g STAs simultaneously 11g only The router communicates with standard 802 11b STAs 11b only The router communicates with standard 802 11b STAs Mode hixedillb llg ze Mise 1 1 1n 11g Onl Scheduler 1 15 e Vigor2700Ge e User s Guide 57 58 Scheduler SSID and Channel Hide SSID Long Preamble 3 6 3 Security Set the wireless LAN to work at certain time interval only You may choose up to 4 schedules out of the 15 schedules pre defined in Applications gt gt Call Schedule setup The default setting of this filed is blank and the function will always work The default SSID is default We suggest you to change it SSID Means the identification of the wireless LAN SSID can be any text numbers or various special characters Channel Means the channel of frequency of the wireless LAN The default channel is 6 You may switch channel if the selected channel is under serious interference Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about Vigor wireless router while doing site survey This option is to define the length
81. re IPv4 0 80 Network e RA e g Show All Displays Sound Network Startup Disk Location Automatic Show Built in Ethernet PPPoE AppleTalk Proxies IP Address 192 168 1 10 Subnet Mask 255 255 255 0 Router 192 168 1 1 DNS Servers DHCP Client ID Ethernet Renew DHCP Lease If required Optional Search Domains IPv6 Address fe80 0000 0000 0000 020a 95ff fe8d 72e4 Configure IPv6 D ul Click the lock to prevent further changes Assist me Optional Apply Now 3 Vigor2700Ge e Users Guide 4 3 Pinging the Router from Your Computer The default gateway IP address of the router is 192 168 1 1 For some reason you might need to use ping command to check the link status of the router The most important thing is that the computer will receive a reply from 192 168 1 1 If not please check the IP address of your computer We suggest you setting the network connection as get IP automatically Please refer to the section 4 2 Please follow the steps below to ping the router correctly For Windows 1 2 4 Open the Command Prompt window from Start menu Run Type command for Windows 95 98 MB or cmd for Windows NT 2000 XP The DOS command dialog will appear Command Prompt Microsoft Windows AF Version 5 1 26881 CC Copyright 1985 2001 Microsoft Corp D Documents and Settings faetping 172 168 1 1 Pinging 172
82. t 3 L HTTP Part 0 Access List List IP Subnet Mask HTTPS Port 443 7 5 SNMP Setup E1 Enable SNMP Agent Manager Hast IP Trap Community public Notification Host IP Trap Timeout 10 seconds 3 3 2 DMZ Host As mentioned above Port Redirection can redirect incoming TCP UDP or other traffic on particular ports to the specific private IP address port of host in the LAN However other IP protocols for example Protocols 50 ESP and 51 AH do not travel on a fixed port Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be totally exposed to the Internet which usually helps some special applications such as Netmeeting or Internet Games etc Vigor2700Ge e Users Guide Destined to 220 135 240 207 nt e rnet Protocol ANY Port ANY ee 8 192 168 1 22 DMZ FTP server Web Server 192 168 1 11 192 168 1 12 192 168 1 13 Port 21 Port 80 The inherent security properties of NAT are somevvhat bypassed if you set up DMZ host We suggest you to add additional filter rules or a secondary firewall Click DMZ Host to open the follovving page NAT gt gt DMZ Host Setup DMZ Host Setup Enable Private IP OG If you previously have set up WAN A
83. t Protocol TCP IP and then click Properties ethO Properties General Authentication Advanced Connect using B ASUSTek Broadcom 4404 10100 Ir Eonfigure This connection uses the following items El Client for Microsoft Networks File and Printer Sharing for Microsoft Networks Ja 0605 Packet Scheduler Internet Protocol TOR AF Install Description Transmission Control Frotocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in notification area when connected Notify me when this connection haz limited or no connectivit Vigor2700Ge e User s Guide 79 80 4 Select Obtain an IP address automatically and Obtain DNS server address automatically Internet Protocol TCP IP Properties General Alternate Configuration Tou can get IP settings assigned automatically if your network supports this capability Othenwse you need to ask your network administrator for the appropriate IP settings Obtain an P address automatically O Use the following IP address P address Subnet mask Use the following DNS server addresses Prefered ONS server Alternate DNS server For MacOs 1 Double click on the current used MacOs on the desktop 2 Open the Application folder and get into Network 3 the Network screen select Using DHCP from the drop down list of Configu
84. t all PING packets from the Internet For security issue this function 1s enabled by default You could specify that the system administrator can only login from a specific host or network defined in the list A maximum of three IPs subnet masks is allowed List IP Indicate an IP address allowed to login to the router Subnet Mask Represent a subnet mask allowed to login to the router Check to use standard port numbers for the Telnet and HTTP servers Check to specify user defined port numbers for the Telnet and HTTP servers Check it to enable this function Set the name for getting community by typing a proper character The default setting is public Set community by typing a proper name The default setting is private Set one host as the manager to execute SNMP function Please type in IP address to specify certain host Vigor2700Ge e Users Guide Trap Community Set trap community by typing a proper name The default setting is public Notification Host IP Set the IP address of the host that will receive the trap community Trap Timeout The default setting 1s 10 seconds 3 7 7 Reboot System The VVeb Configurator may be used to restart your router Click Reboot System from System Maintenance to open the following page System Maintenance gt gt Reboot System Reboot System Do You want to reboot your router Using current configuration Using factory default configuration If you want to reboot t
85. t this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization 3 4 2 General Setup General Setup allows you to adjust settings of IP Filter and common options Here you can enable or disable the Call Filter or Data Filter Under some circumstance your filter set can be linked to work in a serial manner So here you assign the Start Filter Set only Also you can configure the Log Flag settings Enable Stateful packet inspection Drop non http connection on TCP port 80 and Accept incoming fragmented UDP packets Click Firewall and click General Setup to open the general setup page Vigor2700Ge e User s Guide 39 40 Firewall gt gt General Setup General Setup Call Filter Data Filter Log Flag Enable Start Filter Set Disable Enable Start Filter Set Disable JEnable stateful packet inspection LJ Apply IP filter to YPN incoming packets LTDrap non http connection on TCP port 80 w Accept incoming fragmented UDP packets for some games ex CS Firewall gt gt General Setup General Setup Call Filter Data Filter Log Flag Enable Start Filter Set Set l Y Disable 6 Enable Start Filter Set Set 2 e Disable None Enable stateful packet inspection LTDrop non http connection on TCP port 80 M Accept incoming fragmented UDP packets for some games ex CS Call Filter
86. tatus for Bridge Online Status System Status System Uptime 0 17 22 LAN Status Primary DNS 134 103 6 66 Secondary DNS 194 98 0 1 IP Address TX Packets RX Packets 192 168 1 1 1856 WAN Status GW IP Addr Mode IP Address TX Packets TX Rate RX Packets RX Rate Up Time e 0 0 0 0 00 00 00 ADSL Information ADSL Firmware Version 113111 A ATM Statistics TX Blocks RX Blocks Corrected Blocks Uncorrected Blocks ADSL Status Mode State Up Speed Down Speed SNR Margin Loop Att 255 READY 0 0 0 0 Online status for Routed IP Online Status System Status System Uptime 0 3 33 LAN Status Primary DNS 194 109 6 66 Secondary DNS 194 98 0 1 IP Address TX Packets RX Packets 192 168 1 1 1776 WAN Status GW IP Addr Mode IP Address TX Packets TX Rate RX Packets RX Rate Up Time gt 0 00 00 00 ADSL Information ADSL Firmware Version 113111 4 ATM Statistics TX Blocks RX Blocks Corrected Blocks Uncorrected Blocks 0 ADSL Status Mode State Up Speed Down Speed SNR Margin Loop Att RESET Primary DNS Displays the assigned IP address of the primary DNS Secondary DNS Displays the assigned IP address of the secondary DNS IP Address in LAN Displays the IP address of the LAN interface TX Packets Displays the total transmitted packets at the LAN interface RX Packets Displays the total number of received packets at the LAN interface GW IP Addr Displays the assigned IP address of the default
87. tect 1 SYN flood attack 9 Smurf attack 2 UDP flood attack 10 SYN fragment 3 ICMP flood attack 11 ICMP fragment 4 TCP Flag scan 12 Tear drop attack 5 Trace route 13 Fraggle attack 6 IP options 14 Ping of Death attack 7 Unknown protocol 15 TCP UDP port scan 8 Land attack Vigor2700Ge e User s Guide Content Filtering To provide an appropriate cyberspace to users Vigor router equips with URL Content Filter not only to limit illegal traffic from to the inappropriate web sites but also prohibit other web feature where malicious code may conceal Once a user type in or click on an URL with objectionable keywords URL keyword blocking facility will decline the HTTP request to that web page thus can limit user s access to the website You may imagine URL Content Filter as a well trained convenience store clerk who won t sell adult magazines to teenagers At office URL Content Filter can also provide a job related only environment hence to increase the employee work efficiency How can URL Content Filter work better than traditional firewall in the field of filtering Because it checks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can prevent user from accidentally downloading malicious codes from web pages It s very common that malicious codes conceal in the executable objects su
88. test Speed 100 0 Mbps i Network Troubleshooter A Disconnected Y 22 DrayTek ISDN PPP Activity Internet Internet Gateway Computer Other Places Internet Gateway a J Control Panel IP Broadband Connection on gt gt Rout My Network Places sawed Packets My Documents FJ Sent 404 734 Cemput Received 1 115 EEE 3 Sos LAN or High Speed Internet _ Properties Details CH Local Area Connection Enabled ull Realtek RTL6139 610x Family Close Network Connections System Folder The UPnP facility on the router enables UPnP aware applications such as MSN Messenger to discover what are behind a NAT router The application will also learn the external IP address and configure port mappings on the router Subsequently such a facility forwards packets from the external ports of the router to the internal ports used by the application Vigor2700Ge e User s Guide IP Broadband Connection on Router Properties Advanced Settings Bara General Services Select the services running on Hour network that Internet users can access LJ Ftp Example menmsar 192 168 29 11 13135 60654 UDP menmegr 192 166 29 11 7824 13251 UDP This connection allows you to connect to the Internet through msnmegr 1132 168 28 11 8783 63231 TCP shared connection on another computer Show icon in notification area when connected Add Edit Gs
89. the router enabled as a DHCP server if you do not have a DHCP server for your network If you want to use another DHCP server in the network other than Vigor Router s you can let Relay Agent help you to redirect the DHCP request to the specified location Vigor2700Ge e User s Guide Enable Server Let the router assign IP address to every host in the LAN Disable Server Let you manually assign P address to every host in the LAN Relay Agent 1 subnet 2 subnet Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to Start IP Address Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses If the Ist IP address of your router is 192 168 1 1 the starting IP address must be 192 168 1 2 or greater but smaller than 192 168 1 254 IP Pool Counts Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to The default is 50 and the maximum is 253 Gateway IP Address Enter a value of the gateway IP address for the DHCP server The value is usually as same as the Ist IP address of the router which means the router is the default gateway DHCP Server IP Address for Relay Agent Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server DNS Server DNS stands for Domain Name System Every Internet host must Configuration have a uniq
90. the scheduler predefined in Applications gt gt Call Schedule Firewall gt gt P2P Blocking Setup Peer to Peer file sharing Applications Blocking Setup JEnable P2P Blocking Protocol Applications Action Allow eDonkey eDonkey eMule Shareaza MLDonkey Disallow Disallaw upload Allow FastTrack KazaA iMesh MLDonkey l Disallow BearShare Gnucleus Limewire Phex Swapper Allow Gnutella olox Shareaza MLDonkey Hiss lace Allow BitTorrent Bit Torrent l Disallow Time Schedule JL L Scheduler defined In Call Schedule Setup 1 15 Note Action and Idle Timeout settings will be ignored Action Specify the action for each protocol Allow Allow the client to access into the application through the specified protocol Disallow Forbid the client to access into the application through the specified protocol Disallow upload Forbid the client to access into the application through the specified protocol for downloading Yet uploading is allowed Vigor2700Ge e User s Guide 45 46 3 4 6 DoS Defense As a sub functionality of IP Filter Firewall there are 15 types of detect defense function in the DoS Defense setup The DoS Defense functionality is disabled for default Click Firewall and click DoS Defense to open the setup page Firewall gt gt Do5 defense Setup Dos defense Setup Enable SYN flood defense Enable UDP flood defense Enable ICMP flood defense
91. tics and click DHCP Table to open the web page Vigor2700Ge e User s Guide 69 70 Hiaqnostics gt gt View DHCP Assiqned IP Addresses DHCP IP Assignment Table DHCP server Running Index IP Address MAC Address Leased Time 1 192 168 1 1 00 50 7F 00 00 00 ROUTER IF 2 192 168 1 11 00 0 24 5 1 0 00 08 110 Refresh Click it to reload the page 3 8 6 NAT Port Redirection Table Refresh HOST ID dravytek niki Click Diagnostics and click NAT Port Redirection Table to open the setup page Diagnostics gt gt View NAT Port Redirection Running Table MAT Port Redirection Running Table NAT Port Redirection Running Table rivate IF Private Port 0 0 0 Index Protocol Public Port 1 OO OO OO OO OO OO OO OO OO F OO OO OO OO OO 3 4 6 9 B 5 ooo oo OO ooo oO Oo h H Protocol O Disable 6 TCF 17 Refresh Click it to reload the page Refresh Vigor2700Ge e Users Guide 3 8 6 NAT Active Sessions Table Click Diagnostics and click NAT Active Sessions Table to open the setup page Diaqnostics gt gt View NAT Active Sessions Table NAT Active Sessions Table Refresh Private IP Port Pseudo Port Peer IP Purt Ifno Status Refresh Click it to reload the page Vigor2700Ge e User s Guide 71 72 Vigor2700Ge e User s Guide 4 Application and Examples 4 4 LAN Created by
92. tocol TCP or UDP Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host Private IP Specify the private IP address of the internal host providing the Service Vigor2700Ge e User s Guide 31 Private Port Specify the private port number of the service offered by the internal host Active Check this box to activate the port mapping entry you have defined Note that the router has its own built in services servers such as Telnet HTTP and FTP etc Since the common port numbers of these services servers are all the same you may need to reset the router s in order to avoid confliction For example the built in web configurator in the router is with default port 80 which may conflict with the web server in the local network http 192 168 1 13 80 Therefore you need to change the router s http port to any one other than the default port 80 to avoid conflict such as 8080 This can be set in the System Maintenance gt gt Management Setup You then will access the admin screen of by suffixing the IP address with 8080 e g http 192 168 1 1 8080 instead of port 80 System Maintenance gt gt Management Setup Management Setup Management Access Control Management Port Setup Default Ports Telnet 23 HTTP B HTTPS Enable remote firmware upgrade FTP 443 FTP 21 Tallaw management from the Internet User Define Ports I Disable PING from the Internet Telnet Por
93. ue IP address also they may have a human friendly easy to remember name such as www yahoo com The DNS server converts the user friendly name into its equivalent IP address Force DNS manual setting Primary IP Address You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the router will automatically apply default DNS Server IP address 194 109 6 66 to this field Secondary IP Address You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server If your ISP does not provide it the router will automatically apply default secondary DNS Server IP address 194 98 0 1 to this field The default DNS Server IP address can be found via Online Status LAN Status Primary DNS 134 109 6 66 IP Address TX Packets RX Packets 192 168 1 1 42035 0 If both the Primary IP and Secondary IP Address fields are left empty the router will assign its own IP address to local users as a DNS proxy server and maintain a DNS cache If the IP address of a domain name is already in the DNS cache the router will resolve the domain name immediately Otherwise the router forwards the DNS query packet to the external DNS server by establishing a WAN e g DSL Cable connection There are two common scenarios of LAN settings that stated in Chapter 4 For the configuration examples please refer to that Chapt
94. unction Any ActiveX object from the Internet will be refused Compressed file Check the box to activate the Block Compressed file function to prevent someone from downloading any compressed file The following list shows the types of compressed files that can be blocked by the Vigor router Zip rar arj ace cab sit Executable file Check the box to reject any downloading behavior of the executable file from the Internet exe com scr pif bas bat inf reg Cookie Check the box to filter out the cookie transmission from inside to outside world to protect the local user s privacy Proxy Check the box to reject any proxy transmission To control efficiently the limited bandwidth usage it will be of great value to provide the blocking mechanism that filters out the multimedia files downloading from web pages Accordingly files with the following extensions will be blocked by the Vigor router mov mp3 rm au VVmv wav as mpg mpeg avi ram Enable Excepting Four entries are available for users to specify some specific IP Subnets addresses or subnets so that they can be free from the URL Access Control To enable an entry click on the empty checkbox named as ACT in front of the appropriate entry Time Schedule Specify what time should perform the URL content filtering facility 3 4 8 Web Content Filter Click Firewall and click Web Content Filter to open the setup page For this section please refer to
95. ur router IP usually 192 168 1 1 13 Click the button to the right side of Firmware file typing box Locate the files that you download from the company web sites You will find out two files with different extension names xxxx all keep the old custom settings and xxxx rst reset all the custom settings to default settings Choose any one of them that you need 76 Vigor2700Ge e User s Guide mn DrayTek Firmware Upgrade Utility Salis Operation Mode Upgrade Backup Setting Time Out Sec Purt 14 Click Send Operation Mode Upgrade Backup Setting Time Out Sec Vigor2700Ge e User s Guide Router IP waist 2 Firmware File C Documents and Settings Carri lung Password Abort Firmware file C Documents and Settings Carri mnd Password 15 Now the firmware update is finished 7 9 Trouble Shooting This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration Please follow sections below to check your basic installation status stage by stage Checking if the hardware status 1s OK or not Checking if the network connection settings on your computer are OK or not Pinging the router from your computer Checking if the ISP settings are OK or not amp Backing to factory default setting if necessary If all above stages are done and the router still cannot run n
96. us Te Packets Rx Packets WAN IP Fixed Packets TX Rate 961 759 0 1770 Firewall Log VPN Los User Access Los Call Los WAN Los Network Infomation Met State Om Line Routers Host Name miki pe JP Address MAC NIC Description Realtek RTL6139 Family PCI Fast Ethemet NIC EI MAC Address E A6 24 D5 A1 Default Geteway 19216811 IP Address 192 168 1 10 DHCP Server 19216811 Subnet Mask 255 255 255 0 Lease Obtained Wed Apr 06 16 59 40 2005 DNS Servers 16895 1 1 192 168 1 1 Lease Expires Sat Apr 09 16 59 40 2005 ADSL Status Mode State Up Speed Down Speed SNR Margin Loop Att ua EAS Em Ema 3 7 5 Time and Date It allows you to specify where the time of the router should be inquired from System Maintenance gt gt Time and Date Time Information Current System Time 12000 Jan 1 5810 12 4 Time Setup Use Browser Time Time Protocol NTP RFC 1305 ze Time Zone SMT Greenwich Mean Time Dublin bd Automatically Update Interval Current System Time Click Inquire Time to get the current time Use Browser Time Select this option to use the browser time from the remote administrator PC host as router s system time Use Internet Time Select to inquire time information from Time Server on the Internet Client using assigned protocol Time Protocol Select a
97. vill be shovvn as belovv Vigor2700Ge e User s Guide 11 Online Status System Status System Uptime 0 3 33 LAN Status Primary DNS 194 109 6 66 Secondary DNS 194 98 0 1 IP Address TX Packets RX Packets 192 168 1 1 teil 0 WAN Status GW IP Addr Mode IP Address TX Packets TX Rate RX Packets RX Rate Up Time 00 00 00 ADSL Information ADSL Firmware Version 113111 4 ATM Statistics TX Blocks RX Blocks Corrected Blocks Uncorrected Blocks 0 0 0 0 ADSL Status Mode State Up Speed Down Speed SNR Margin Loop Att RESET 0 2 3 Online Status 12 The online status shows the system status WAN status ADSL Information and other status related to this router within one page If you select PPPoE or PPPoA as the protocol you will find out a button of Dial PPPoE or Dial PPPoE in the Online Status web page Online status for PPPoA PPPoE Online Status System Status System Uptime 0 13 15 LAN Status Primary DNS 104 100 6 66 Secondary DNS 194 98 0 1 IP Address TX Packets RX Packets 192 158 1 1 693 WAN Status GW IP Addr Dial PPPoE Mode IP Address TX Packets TX Rate RX Packets RX Rate Up Time ag 0 0 00 00 00 Message PPP Shutdown ADSL Information ADSL Firmware Version 113111 A ATM Statistics TX Blocks RX Blocks Corrected Blocks Uncorrected Blocks 0 0 0 0 ADSL Status Mode State Up Speed Down Speed SNR Margin Loop Att READY Vigor2700Ge e Users Guide Online s
98. when issuing IP addresses If the 2nd IP address of your router is 220 135 240 1 the starting IP address must be 220 135 240 2 or greater but smaller than 220 135 240 254 IP Pool Counts Enter the number of IP addresses in the pool The maximum is 10 For example if you type 3 and the 2nd IP address of your router is 220 135 240 1 the range of IP address by the DHCP server will be from 220 135 240 2 to 220 135 240 11 MAC Address Enter the MAC Address of the host one by one and click Add to create a list of hosts to be assigned deleted or edited IP address from above pool Set a list of MAC Address for 2 DHCP server will help router to assign the correct IP address of the correct subnet to the correct host So those hosts in 2 subnet won t get an IP address belonging to 1 subnet Disable deactivates the RIP protocol It will lead to a stoppage of the exchange of routing information between routers Default RIP Protocol Control Disable Tst Subnet 2nd Subnet 1st Subnet Select the router to change the RIP information of the st subnet with neighboring routers 2nd Subnet Select the router to change the RIP information of the 2nd subnet with neighboring routers DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client It is highly recommended that you leave

Draytek Vigor2700e ADSL2+ Wi-Fi Ethernet LAN Black, Blue

Contents

Download Pdf Manuals

Related Search

Related Contents