Home

Dodge 2011 Ram 1500 Automobile User Manual

1. 2 pete Show icon in notification area when connected hdd Edit Tielete L aa ee SA OS a a ee The reminder as regards concern about Firewall and UPnP Can t work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly This is because these applications will block the accessing ability of some network ports Security Considerations Activating the UPnP function on your network may incur some security threats You should consider carefully these risks before activating the UPnP function Vigor2130 Series User s Guide 69 Dray Te k gt Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches gt Non privileged users can control some router functions including removing and adding port mappings The UPnP function dynamically adds port mappings on behalf of some UPnP aware applications When the applications terminate abnormally these mappings may not be removed 3 6 Wireless LAN This function is used for n models 3 6 1 Basic Concepts Over recent years the market for wireless communications has enjoyed tremendous growth Wireless technology now reaches or is capable of reaching virtually every location on the surface of the earth Hundreds of millions of people exchange information every day via wireless communication products The Vigor
2. If you choose VLAN ID as QCE Type you have to type the ID number for it and specify traffic class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Configur QCE Type VLAN ID Traffic Class VLAN ID ha Normal Medium m Hi gh If you choose TCP UDP Port as QCE Type you have to type the port number for it and specify traffic class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type TCP UDP Fort TCP UDP Port TCP UDP Port Range Trafic Class TCP UDP Port Click Single or Range If you select Range you have to type in the starting port number and the end porting number on the boxes below TCP UDP Port Range Type in the starting port number and the end porting number here if you choose Range as the type Dray Te k 142 Vigor2130 Series User s Guide If you choose DSCP as QCE Type you have to type value for it and specify traffic class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Confis QCE Type DSCP Value Traffic Class uration If you choose ToS as QCE Type you have to specify priority class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type ToS Priority 0 Class ToS Priority 1 Class ToS Priority 2 Class ToS Priority 3 Class ToS Priority 4 Class ToS Priority 5 Class ToS
3. 7 L f F amp a Ee r Y h w g OF i i h a a p i ro E _ 2 i F Fre ai F o N E l E E i g 4 E k P j i e k i A k j A q 2 F X q j S J 7 ri S T ai aie High ree Gigabit o ute Fg S S L tt L L L Et i y fid rprEr Your reliable networking solutions partner User s Guide V 1 0 Vigor2130 Series High Speed Gigabit Router User s Guide Version 1 0 Date 31 08 2009 Dr ay Tek ii Vigor2130 Series User s Guide Copyright Information Copyright Declarations Trademarks Copyright 2009 All rights reserved This publication contains information that is protected by copyright No part may be reproduced transmitted transcribed stored in a retrieval system or translated into any language without written permission from the copyright holders The following trademarks are used in this document Microsoft is a registered trademark of Microsoft Corp e Windows Windows 95 98 Me NT 2000 XP Vista and Explorer are trademarks of Microsoft Corp Apple and Mac OS are registered trademarks of Apple Inc Other products may be trademarks or registered trademarks of their respective manufacturers Safety Instructions and Approval Safety Instructions Warranty Be a Registered Owner Firmware amp Tools Updates Vigor2130 Series User s Guide Read the installation guide thoroughly before you set up the router The router is a comp
4. Restart It determines whether the MAC retransmits frames after an excessive collision has occurred If set a frame is not dropped after excessive collisions but the backoff sequence is restarted This is a violation of IEEE Standard 802 3 but is useful in non dropping half duplex flow control operation The Configured column allows for changing the power savings mode parameters per port Enabled Disabled ActiPHY PerfectReach Disabled All power savings mechanisms disabled ActiPHY Link down power savings enabled PerfectReach Link up power savings enabled Enabled Both link up and link down power savings enabled Click this button to refresh the information for WAN port After finishing all the settings here please click OK to activate them 3 1 3 3G Backup This page is used to setup 3G backup function If you enable 3G backup make sure your WAN connection type is not in 3G mode When the WAN connection is broken router will try to keep the connection with 3G mode After WAN connection is recovered router will disconnect the 3G connection automatically WAN gt gt 3G backup 3G Backup Configuration C Enable 3G Backup SIM PIN code Modem Initial String1 Modem Initial String APN Name Modem Dial String PPP Username PPP Password SIM PIN code Dray Tek ATEOV14A1 amp D24C150 0 default ATEOV1X18D28 amp C150 0 internet default internet ATDT 99 default ATDT 9S Type PIN co
5. default AT amp F default ATEOV1X1 amp D2 amp C1S0 0 default internet default ATDT 99 O Doo O SIM PIN code Modem Initial String1 2 APN Name Modem Dial String PPP Username PPP Password Clone MAC Address Type PIN code of the SIM card that will be used to access Internet Such value is used to initialize USB modem Please use the default value If you have any question please contact to your ISP APN means Access Point Name which is provided and required by some ISPs Such value is used to dial through USB mode Please use the default value If you have any question please contact to your ISP Type the PPP username optional Type the PPP password optional It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 24 D5 A1 After finishing all the settings here please click OK to activate them Dray Tek 38 Vigor2130 Series User s Guide 3 1 2 Ports Ports page is used to change the setting for WAN port You can set or reset the following items All of them are described in detail below WAN gt gt Ports Port Configuration Speed Port Link Curent WAN gt 100fdx Gbps FDX Configured Flow Control Current Current Rx Tx v Excessive Maximum bag Collision Configured Frame Control 100Mbps FDX 100Mbps HDX 10Mb
6. 4 8 5 Access Point Discovery Vigor router can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Note During the scanning process about 5 seconds no client is allowed to connect to Vigor The table will list channel SSID BSSID Encryption type Authorization type and the Signal strength of working APs in the neighborhood Wireless LAN gt gt Access Point Discovery Access Point Discoven Channel SSID BSSID Enc Auth signal o Scan Note During the scanning process 5 seconds no station is allowed to connect with the router Channel Display the channel for the scanned AP SSID Display the SSID of the scanned AP BSSID Display the MAC address of the scanned AP Enc Display the encryption type of the scanned AP Auth Display the authentication method of the scanned AP Signal Display the strength in percentage of the signal of the scanned AP Scan It is used to discover all the connected AP The results will be shown on the box above this button 4 9 USB Application USB diskette can be regarded as an FTP server By way of Vigor router clients on LAN can access write and read data stored in USB diskette After setting the configuration in USB Application you can type the IP address of the Vigor router and username password created in USB Application gt gt FTP User Setting on the FTP client software Thus th
7. For MacOs Terminal 1 2 3 4 Dray Tek Double click on the current used MacOs on the desktop Open the Application folder and get into Utilities Double click Terminal The Terminal window will appear Type ping 192 168 1 1 and press Enter If the link is OK the line of 64 bytes from 192 168 1 1 icmp_seq 0 ttl 255 time xxxx ms will appear 196 Vigor2130 Series User s Guide ANRA Terminal bash Last logi s Sot don 3 B224118 on ttypi Welcome to Barwin Vigorla draytekd ping 192 165 1 1 PING 192 166 1 1 192 168 1 1 56 dota bytes 64 bytes from 192 165 1 1 icmp seg 8 trl 255 tinmesH 755 me 64 bytes from 192 166 1 1 icmp seg 1 ttl 755 timesB 697 me 64 bytes from 192 165 1 1 icmp_seg 2 ttl 255 timesh 716 m 64 bytes from 192 168 171 icmp seg 3 ttl 255 tinesh 7S1 ie 64 bytes from 192 165 1 1 icmp seget ttl 255 timesB 72 ME AC 197 165 1 1 ping statistics E pockets transmitted 5 packet received BM pocket loss round trip minfava may B 697 A 725 6 755 ME Vigoria draytekt f 5 4 Checking If the ISP Settings are OK or Not Open WAN gt gt lInternet Access page and then check whether the ISP settings are set correctly Use the Connection Type drop down list to choose Static IP DHCP PPPoE PPTP L2TP for reviewing the settings that you configured previously EWAN Internet Access Ports 3G Backup WAN gt gt Internet Access WAN IF Configuration Connection Type DHCP Sett
8. This page allows you to change user setting for USB storage disk Before modifying settings in this page please insert a USB diskette and configure settings in User gt gt User Configuration first Otherwise an error message will appear to warn you USB Application gt gt FTP User Management FTF User Management Click the name link under User Name to open the setting web page USB Application gt gt FTP User Setting FIP User Configuration User Name carie Volume USB2 0 Mobile Disk 1 1967M PORT 1 Home Folder Access Rule Read only User Name It displays the username that user uses to login to the FTP server Volume Select the proper volume for the connected USB diskette Home Folder It determines the range for the client to access into The user can enter a directory name 1n this field Then after clicking OK the router will create the specific new folder in the USB diskette In addition if the user types 7 Vigor2130 Series User s Guide 79 Dr ay Te k here he she can access into all of the disk folders and files in USB diskette Note When write protect status for the USB diskette is ON you cannot type any new folder name in this field Only can be used in such case Access Rule Select the access right for the USB diskette Read only Read write When you finish the settings simply click OK to save the configuration 3 7 3 Disk Status This page can display current using status o
9. WPA Wi Fi Protected Access the most dominating security mechanism in industry is separated into two categories WPA personal or called WPA Pre Share Key WPA PSK and WPA Enterprise or called WPA 802 1x In WPA Personal a pre defined key is used for encryption during data transmission WPA applies Temporal Key Integrity Protocol TKIP for data encryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the over the air data protection and or privacy on your wireless network The Vigor wireless router is very flexible and can support multiple secure connections with both WEP and WPA at the same time Below shows the menu items for Wireless LAN Wireless LAN General Setup Access Control Station List Access Point Discovery Dray Te k 162 Vigor2130 Series User s Guide 4 8 2 General Setup By clicking the General Setup a new web page will appear so that you could configure the SSID and the wireless channel Please refer to the following figure for more information Wireless LAN gt gt General Setup General Setting Enable Wireless LAN SSID Broadcast SSID Wireless Mode Country Region Code Channel Wireless Security Confi
10. select a configuration file ee w Click Restore to upload the file Restore 2 Click Backup button to get into the following dialog Click Save button to open another dialog for saving configuration as a file File Download E j You are downloading the File config chg From 192 168 1 1 Would you like to open the file or save it to your computer Always ask before opening this type of tile Vigor2130 Series User s Guide 177 Dr ay Te k 3 In Save As dialog the default filename is config cfg You could give it another name by yourself Save in E Desktop gt o El A Emy Documents Ei 4 Fi My Computer My Recent Emy Network Places Documents B RYS COM Lite gt 4nnex A 3 immm peskian CMwSnap300 O TeleDanmark My Documents or My Computer v2k2_232_config_1 v2k6_250_config_1 _ File name config w My Network Save as type Configuration file we 4 Click Save button the configuration will download automatically to your computer as a file named config cfg The above example is using Windows platform for demonstrating examples The Mac or Linux platform will appear different windows but the backup function is still available Note Backup for Certification must be done independently The Configuration Backup does not include information of Certificate Restore Configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows wi
11. 1 The device is properly configured 2 The address on the previous page is correct Either correct the address and perform another search on the network by returning to the previous wizard page or select the device type if you are sure the address is corect 8 Completing the Add Standard TCP IP Printer Port Wizard You have selected a port with the following charactenstics SNMP No Protocol RAW Pot 100 Device 192 168 1 1 Pot Name IP_192 168 1 1 Adapter Type Generic Network Card To complete this wizard click Finish j Cancel Dray Tek 12 Vigor2130 Series User s Guide 9 Now your system will ask you to choose right name of the printer that you installed onto the router Such step can make correct driver loaded onto your PC When you finish the selection click Next Add Printer Wizard Install Printer Software The manufacturer and model determine which printer software to use Select the manufacturer and model of your printer If your printer came with an installation disk click Have Disk If your printer is not listed consult your printer documentation for compatible printer software Manufacturer paves AST o a e v This driver is digitally signed Windows Update Tell me why driver signing is important 10 For the final stage you need to go back to Control Panel gt Printers and edit the property of the new printer you have added amp Brother HL
12. Display the number of 512 1023 byte frames in good and bad packets received Display the number of 1024 1522 byte frames in good and bad packets received Display the number of 1527 byte frames in good and bad packets received 63 Dray Tek Rx Low Rx Normal Rx Medium Rx High Rx Drops Rx CRC Alignment Rx Undersize Rx Oversize Rx Fragments Rx Jabber Rx Filtered Tx Packets Tx Octets Tx Unicast Tx Multicast Tx Broadcast Tx Pause Tx 64 Bytes Tx 65 127 Bytes Tx 128 255 Bytes Tx 256 511 Bytes Tx 512 1023 Bytes Tx 1024 1526 Bytes Tx 1527 Bytes Tx Low Tx Normal Tx Medium Dray Tek Display the low queue counter of the packet received Display the normal queue counter of the packet received Display the medium queue counter of the packet received Display the high queue counter of the packet received Display the number of frames dropped due to the lack of receiving buffer Display the number of Alignment errors packets received Display the number of short frames lt 64 Bytes with valid CRC Display the number of long frames according to max_length register with valid CRC Display the number of short frames lt 64 bytes with invalid CRC Display the number of long frames according tomax_length register with invalid CRC Display the filtered number of the packet received Display the counting number of the packet transmitted Display the total transmitted b
13. Wireless Security Configuration Encryption WPAPSK B o WPA PSK Configuration Type WPA Algorithm WPA Pre Shared Key WPA Mode Select WPA WPA2 or Auto as the type WPA WPA WPA Algorithm WPA Preshared Key Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde e WPA RADIUS The built in RADIUS client feature enables the router to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management Wireless Security Configuration Encryption WPA RADIUS WPA RADIUS Configuration Type WPA Algorithm server IP Address Destination Port shared Secret radius secret Type The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode Auto WPA or WPA2 Autol WPA or WPA j Vigor2130 Series User s Guide 165 Dr ay Te k WPA Algorithm Choose the WPA ale orithm TKIP AES or Auto TKIP Auto TKIP or AES Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The RADIUS server and client share a secret that is
14. DHCP Table DHCP Server Status Auto refresh L Computer Name IP Address MAC Address Expire Time WM Administrat3 192 168 1 127 00 18 41 e0 f9 e3 T Hours 9 Minutes user balel62ces 19 7 166 1 178 00 0e a6 2a d5 al 6 Hours 51 Minutes Computer Name It displays the name of the computer accepted the assigned IP address by this router IP Address It displays the IP address assigned by this router for specified PC MAC Address It displays the MAC address for the specified PC that DHCP assigned IP address for it Expire Time It displays the leased time of the specified PC Auto refresh Check it to enable auto refresh function Refresh Click it to reload the page Dr ay Tek 190 Vigor2130 Series User s Guide 4 12 8 Data Flow Monitor This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds The IP address listed here is configured in Bandwidth Management You have to enable IP bandwidth limit and IP session limit before invoke Data Flow Monitor If not a notification dialog box will appear to remind you enabling it Click Diagnostics and click Data Flow Monitor to open the web page You can click IP Address TX rate RX rate or Session link for arranging the data display Diagnostics gt gt Data Flow Monitor Page Auto refresh C IP Address TX rate Kbps RX rate Kbps Session 192 165 1 10 HNAT HNAT 1 h Note 1 Click Block to preve
15. F and C this will be either route cache misses F or hits C Display interface to which packets for this route will be sent Click it to reload the page 184 Vigor2130 Series User s Guide 4 12 3 System Log Click Diagnostics and click System Log to open the web page Diagnostics gt gt System Log System Log Information Auto refresh L Reverse Time Level Type Message 2009 05 07 07 58 15 server c 1256 NOTE a request for config_ip htm May T 07 56 15 info user iiname wan timed out after writing 144 bytes We waited 360 seconds If this a problem increase server max write idle dnsmasq 2538 DHCPACK br lan 192 168 1 178 00 0e a6 2a d5 a1 user balelo2ces May T 07 40 32 info daemon May T 07 40 32 info daemon dnsmasq 2536 DHCPINFORM br lan 192 166 1 176 00 0e a6 2a d5 a1 May 7 07 40 29 info daemon dnsmasq 2536 DHCPACK br lan 192 166 1 175 00 0e a6 2a d5 a1 user balelb2ces May T 07 40 29 info daemon dnsmasq 2536 DHCPINFORM br lan 192 166 1 176 00 0e a6 2a d5 a1 May 7 07 30 35 info daemon pe Sel DHCPACK br lan 192 166 1 176 00 0e a6 2a d5 a1 user balelo2ces May 7 07 30 35 info daemon dnsmasq 2536 DHCPINFORM br lan 192 166 1 176 00 0e a6 2a d5 a1 poe L EN dnsmasqg 2538 DHCPACK br lan 192 168 1 178 00 0e a6 7a d5 a1 user May T 07 30 32 info daemon Ga0e182ce8 May T 07 30 32 info daemon dnsmasqg 2538 DHCPINFORM br lan 192 166 1 176 00 0e a6 2a d5 a1 Ma tee Pee dnsmasq 2538 DHCP
16. Note that this example is running over Windows OS Operating System Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www draytek com or local DrayTek s web site and FTP site is ftp draytek com Click Maintenance gt gt Firmware Upgrade to launch the Firmware Upgrade Utility System Maintenance gt gt Firmware Upgrade Firmware Update Current Firmware Version v1 1 0 RCZ Select a firmware file es 2c Click Upgrade to upload the file Upgrade For the detailed information about firmware update please go to Chapter 5 Vigor2130 Series User s Guide 91 Dray Tek Dr ay Tek 92 Vigor2130 Series User s Guide Admin Mode Operation This chapter will guide users to execute advanced full configuration through admin mode operation 1 Open a web browser on your PC and type http 192 168 1 1 The window will ask for typing username and password 2 Please type admin admin on Username Password for administration operation Now the Main Screen will appear Be aware that Admin mode will be displayed on the bottom left side Vigor2 130 Series E Dray Tek High Speed Gig bit Router System Status Quick Start Wizard Auto refresh C Online Status Model Vigor2130 gt WAN Platform VSC7501 gt LAN Bootloader Version Dray Boot 1 0 0E gt NAT Firmware Version v1 1 0 _RC6 gt Firewall Build Date Time 1753 Tue Aug 25 1
17. Rx 256 511 Bytes Rx 512 1023 Bytes Rx 1024 1526 Bytes Rx 1527 Bytes Receive Queue Counters Rx Low Rx Normal Rx Medium Rx High Receive Error Counters Rx Drops Rx CRC Alignment Rx Undersize Rx Oversize Rx Fragments Rx Jabber Rx Filtered Rx Packets Rx Octets Rx Unicast Rx Broadcast Rx Pause RX 64 Bytes RX 65 127 Bytes RX 128 255 Bytes RX 256 511 Bytes RX 512 1023 Bytes RX 1024 1526 Bytes RX 1527 Bytes Vigor2130 Series User s Guide Auto refresh L Transmit Total 6320 Tx Packets 1729133 Tx Octets 3129 Tx Unicast 200 Tx Multicast 2991 Tx Broadcast Tx Pause Transmit Size Counters Tx 64 Bytes Tx 65 127 Bytes Tx 126 255 Bytes Tx 256 511 Bytes Tx 512 1023 Bytes Tx 1024 1526 Bytes Tx 1527 Bytes Transmit Queue Counters Tx Low Tx Normal Tx Medium Tx High Transmit Error Counters Tx Drops Tx Late Exc Coll Display the counting number of the packet received Display the total received bytes Display the counting number of the received unicast packet Display the counting number of the received broadcast packet Display the counting number of the received pause packet Display the number of 64 byte frames in good and bad packets received Display the number of 65 127 byte frames in good and bad packets received Display the number of 128 255 byte frames in good and bad packets received Display the number of 256 511 byte frames in good and bad packets received
18. VLAN Static Route FIP Bind Mac 3 2 1 General Setup This page provides you the general settings for LAN Click LAN to open the LAN settings page and choose General Setup LAN gt gt General Setup LAN IP Network Configuration IP Address 192 168 1 1 Subnet Mask 256 255 265 0 DHCP Server Configuration Enable DHCP Start IP Address 192 4681 ho IF Pool Counts Lease Time OK IP Address Type in private IP address for connecting to a local private network Default 192 168 1 1 Subnet Mask Type in an address code that determines the size of the network Default 255 255 255 0 24 Enable DHCP DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network You can configure the router to serve as a DHCP server for the 2nd subnet Check the box to enable DHCP server setting Start IP Address Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses If the 2nd IP address of your router is 220 135 240 1 the starting IP address must be 220 135 240 2 or greater but smaller than 220 135 240 254 IP Pool Counts Enter the number of IP addresses in the pool The maximum is 10 For example if you t
19. and data sending Display the number of the data lost in receiving and sending Display the number of received frames filtered by the forwarding process Check it to enable auto refresh function Click it to reload the page Click it to clear the counters for all ports This page display detailed statistics for WAN LAN interface Diagnostics gt gt Detailed Statistics Detailed Port Statistics WAN Receive Total Rx Packets Rx Octets Rx Unicast Rx Multicast Rx Broadcast Rx Pause Receive Size Counters Rx 64 Bytes Rx 65 127 Bytes Rx 126 255 Bytes Rx 256 511 Bytes Rx 512 1023 Bytes Rx 1024 1526 Bytes Rx 1527 Bytes Receive Queue Counters Rx Low Rx Normal Rx Medium Rx High Receive Error Counters Rx Drops Rx CRC Alignment Rx Undersize Rx Oversize Rx Fragments Rx Jabber Rx Filtered Rx Packets Rx Octets Dray Tek 15458804 Auto refresh L Transmit Total 30618 Tx Fackets Tx Octets Tx Unicast 5607 Tx Multicast 14542 Tx Broadcast 0 Tx Pause 16552 3133069 16369 16549 Transmit Size Counters Tx 64 Bytes Tx 65 127 Bytes Tx 126 255 Bytes Tx 256 511 Bytes Tx 512 1023 Bytes Tx 1024 1526 Bytes Tx 1527 Bytes Transmit Queue Counters 2035354 Tx Low 3931 Tx Normal 14353 Tx Medium 0 Tx High Transmit Error Counters Tx Drops Tx Late Exc Coll Display the counting number of the packet received Display the total received bytes 186 Vigor2130 Series User s Guide Rx Unicast
20. n model a k a Vigor wireless router is designed for maximum flexibility and efficiency of a small office home Any authorized staff can bring a built in WLAN client PDA or notebook into a meeting room for conference without laying a clot of LAN cable or drilling holes everywhere Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access The Vigor wireless routers are equipped with a wireless LAN interface compliant with the standard IEEE 802 11n draft 2 protocol To boost its performance further the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy stream music and video Note The actual data throughput will vary according to the network conditions and environmental factors including volume of network traffic network overhead and building materials In an Infrastructure Mode of wireless network Vigor wireless router plays a role as an Access Point AP connecting to lots of wireless clients or Stations STA All the STAs will share the same Internet connection via Vigor wireless router The General Settings will set up the information of this wireless network including its SSID as identification located channel etc Internet SSID Draytek Channel 6 Mode WEP only Dr ay Tek 70 Vigor2130 Series User s Guide Security Overview Real time Har
21. 1070 Properties General Sharing Ports Advanced Device Settings _ 8 Brother HL 1070 Print to the following ports Documents will print to the first free checked port Port Description Printer O 3 250 Standard TCP IP Port Epson Stylus COLOR 1160 O P_1 Standard TCP IP Port O IF_1 Standard TCP IP Port HP Laserdet 1300 O P_1 Standard TCP IP Port O P_1 Standard TCP IP Port M IP_1 Standard TCPAP Port Brother HL 1070 O PDF Local Port PDF995 Cw 11 Select LPR on Protocol type p1 number 1 as Queue Name Then click OK Next please refer to the red rectangle for choosing the correct protocol and UPR name Configure Standard CP IP Port Monitor Port Settings Port Name IP_192 168 1 1 Printer Name or IP Address 192 168 1 1 Protocol Baw LPR Raw Settings LPR Settings Queue Name CILPR Byte Counting Enabled C SNMP Status Enabled L i Vigor2130 Series User s Guide 13 Dr ay Te k The printer can be used for printing now Most of the printers with different manufacturers are compatible with vigor router Note 1 Some printers with the fax scanning or other additional functions are not supported If you do not know whether your printer is supported or not please visit www draytek com to find out the printer list Open Support gt FAQ find out the link of Printer Server and click it then click
22. 4 11 9 Firmware Upgrade Before upgrading your router firmware you need to install the Router Tools The Firmware Upgrade Utility is included in the tools The following web page will guide you to upgrade firmware by using an example Note that this example is running over Windows OS Operating System Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www draytek com or local DrayTek s web site and FTP site is ftp draytek com Click Maintenance gt gt Firmware Upgrade to launch the Firmware Upgrade Utility System Maintenance gt gt Firmware Upgrade Firmware Update Current Firmware Version v1 1 0 RC4 Select a firmware file Po Click Upgrade to upload the file For the detailed information about firmware update please go to Chapter 5 Dray Te k 182 Vigor2130 Series User s Guide 4 12 Diagnostics Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router Below shows the menu items for Diagnostics t Diagnostics Ping Routing Table System Log Traffic Overview Detailed Statistics MAC Address Table DHCP Table Data Flow Monitor Ports State 4 12 1 Ping Click Diagnostics and click Ping to open the web page It is used to troubleshoot IP connection for your router Diagnostics gt gt Ping ICMP Ping IP Address Ping Size IP Address Type in the IP address of the Host IP that you want to ping Pi
23. 8 19 31 53 CST 2009 Tue Jun 16 17 06 18 2009 Od 07 20 28 00 50 F C 8 31 IP Address 192 1686 5 30 IP Mask 255 255 255 0 Default Gateway 192 168 5 1 Primary DNS 168 95 1 1 Secondary DNS MAC Address Display the model name of the router Display the hardware type that this device is built upon Display the bootloader version of the router Display the firmware version of the router Display the date and time of the current firmware build Display the hardware acceleration NAT version Display current time and date for the system server Display the connection time for the system server Display the MAC address of the LAN Interface Display the IP address of the LAN interface Display the subnet mask address of the LAN interface Display the MAC address of the WAN Interface Display the IP address of the WAN interface Display the subnet mask address of the WAN interface Display the gateway address of the WAN interface Display the specified primary DNS setting Display the specified secondary DNS setting 84 Vigor2130 Series User s Guide MAC Address Display the MAC address of the wireless LAN Device Type Display the device type used for wireless LAN SSID Display the SSID of the router Channel Display the channel that wireless LAN used Manufacturer Display the manufacturer of the disk Model Display the model of the disk Size Display the storage size of the USB diskette Status Display cur
24. Address Filter Configuration Filter Type Delete MAC Address Add a New Entry Filter Type Choose the rule for the MAC addresses displayed in this page Allow List all the MAC address of wireless clients listed here are allowed to do wireless connection Deny List all the MAC address of wireless clients listed here will be blocked Add a New Entry Add a new MAC address into the list Delete Delete the selected MAC address in the list This button will appear only an entry of MAC Address has been typed Wireless LAN gt gt Access Control Wireless MAC Address Filter Configuration Filter Type Delete MAC Address 00 20 00 05 30 12 Cancel Give up the configuration OK Click it to save the configuration 4 8 4 Station List Station List provides the knowledge of connecting wireless clients now along with its status code Wireless LAN gt gt Station List Station List Auto refresh Refresh IP Address MAC Address Connected Time No Station Index Display the number of the connecting client IP Address Display the WAN IP address for the connecting client MAC Address Display the MAC Address for the connecting client Dray Tek 168 Vigor2130 Series User s Guide Connected Time Display the connection time for the connecting client Auto refresh Check this box to force the system refreshing the table automatically Refresh Click this button to refresh current page
25. But be sure that your PC has Giga Ethernet and connect with CAT6 Ethernet cable NAT gt gt Hardware NAT Hardware NAT Configuration Hardware NAT 3 3 2 Open Ports Open Ports allows you to open a range of ports for the traffic of special applications NAT gt gt Open Port Port Forwarding Name Protocol Start Port End Port Local Host Local Port No Port Forwarding Add New Entry Common application of Open Ports includes P2P application e g BT KaZaA Gnutella WinMX eMule and others Internet Camera etc Ensure that you keep the application involved up to date to avoid falling victim to any security exploits To add a new open port click Add new entry Vigor2130 Series User s Guide ot Dr ay Te k NAT gt gt Open Port Add Port Forwarding Entr Name Protocol TCP UDP start Port End Port optional Local Host Local Port optional OK Name Specify the name for the defined network service Protocol Specify the transport layer protocol It could be TCP UDP and TCP UDP TCP UDP 7 Start Port Specify the starting port number of the service offered by the local host End Port optional Specify the ending port number of the service offered by the local host Local Host Enter the private IP address of the local host Local Port optional If it is configured the forwarded traffic is mapped to this port on the local host Dr ay Tek 52 Vigor2130 Series User s Guide 3 3 3 D
26. Channel 11 2462MHz Wireless Security Configuration Encryption WEP Configuration Default Key Keyl Key2 Keys Key4 Authentication Mode OPEN Four keys can be entered here but only one key can be selected at a time The keys can be entered in ASCII or Hexadecimal Choose the key you wish to use by using the Default Key drop down list Vigor2130 Series User s Guide 25 Dr ay Te k WPA PSK If you choose WPA PSK as the security configuration you have to specify WPA mode algorithm and pre shared key Quick Start Wizard Wireless System Configuration Enable Wireless LAN SSID Broadcast SSID Wireless Mode Country Region Code Channel Wireless Security Configuration Encryption WPA PSK Configuration Type WPA Algorithm WPA Pre Shared Key Type The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode Auto WPA or WPA2 WPA WPA2 Auto WPA or WPA WPA Algorithm Choose the WPA algorithm TKIP AES or Auto AES Iv WPA Pre shared Key The keys can be entered in ASCII or Hexadecimal Check the key you wish to use Dr ay Tek 26 Vigor2130 Series User s Guide WPA RADIUS Remote Authentication Dial In User Service RADIUS is a security authentication client server protocol that supports authentication authorization
27. DNS Schedule IGMP Snooping IGMP Status UPnP Configuration 4 6 1 Dynamic DNS The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP It means that the public IP address assigned to your router changes each time you access the Internet The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address It allows the router to update its online WAN IP address mappings on the specified Dynamic DNS server Once the router is online you will be able to use the registered domain name to access the router or internal virtual servers from the Internet It is particularly helpful if you host a web server FTP server or other server behind the router Before you use the Dynamic DNS feature you have to apply for free DDNS service to the DDNS service providers The router provides up to three accounts from three different DDNS service providers Basically Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www dyndns org www no ip com www dtdns com www changeip com www dynamic nameserver com You should visit their websites to register your own domain name for the router Applications gt gt Dynamic DNS Dynamic DNS Configuration Enable Dynamic DNS DynDNS Service Hostname Username Password Check IP change every Force IP update every Enable Dynamic DNS Check this box to enable the current account DynD
28. Priority 3 Class ToS Priority 4 Class ToS Priority 5 Class ToS Priority 6 Class ToS Priority 7 Class If you choose Tag Priority as QCE Type you have to specify priority class from Low Normal Medium and High Dr ay Tek 60 Vigor2130 Series User s Guide Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type Tag Priority Tag Priority 0 Class Normal Tag Priority 1 Class Tag Priority 2 Class Tag Priority 3 Class Tag Priority 4 Class Tag Priority 5 Class Tag Priority 6 Class Tag Priority 7 Class Editing a QCE Click to modify the settings of an existing QCE on this page Moving Up Down a QCE Click Q and O to move a QCE up and down Deleting a QCE To delete a QCE in the list simply click G of that one It will be removed immediately 3 4 5 Ports Priority This page allows you to configure QoS settings for each port The classification is controlled by a QCL Quality Control List that is assigned to each port A QCL consists of an ordered list of up to 12 QCEs Quality Control Entry Each QCE can be used to classify certain frames to a specific QoS class This classification can be based on parameters such as VLAN ID UDP TCP port IPv4 IPv6 DSCP or Tag Priority Frames not matching any of the QCEs are classified to the default QoS class for the port Bandwidth Management gt gt Ports Priority Port Q05 Configuration Queue Weighted Low Normal Medium LA
29. Priority 6 Class ToS Priority 7 Class Medium If you choose Tag Priority as QCE Type you have to specify priority class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type Tag Priority 0 Class Tag Priority 1 Class Tag Priority 2 Class Low Tag Priority 3 Class Tag Priority 4 Class Tag Priority 5 Class Tag Priority 7 Class Low Normal Medium High Tag Priority Low wv Tag Priority 6 Class Editing a QCE Click to modify the settings of an existing QCE on this page Vigor2130 Series User s Guide Mi Dray Tek Moving Up Down a QCE Click Q and O to move a QCE up and down Deleting a QCE To delete a QCE in the list simply click G of that one It will be removed immediately 4 5 5 Ports Priority This page allows you to configure QoS settings for each port The classification is controlled by a QCL Quality Control List that is assigned to each port A QCL consists of an ordered list of up to 12 QCEs Quality Control Entry Each QCE can be used to classify certain frames to a specific QoS class This classification can be based on parameters such as VLAN ID UDP TCP port IPv4 IPv6 DSCP or Tag Priority Frames not matching any of the QCEs are Classified to the default QoS class for the port Bandwidth Management gt gt Ports Priority Port QoS Configuration Queue Weighted Port Default Class Queuing Mode Low Ho
30. Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy stream music and video Note The actual data throughput will vary according to the network conditions and environmental factors including volume of network traffic network overhead and building materials Vigor2130 Series User s Guide 161 Dr ay Tek In an Infrastructure Mode of wireless network Vigor wireless router plays a role as an Access Point AP connecting to lots of wireless clients or Stations STA All the STAs will share the same Internet connection via Vigor wireless router The General Settings will set up the information of this wireless network including its SSID as identification located channel etc Internet SSID Draytek Channel 6 a Mode WEP only 192 168 1 1 Security Overview Real time Hardware Encryption Vigor Router is equipped with a hardware AES encryption engine so it can apply the highest protection to your data without influencing user experience Complete Security Standard Selection To ensure the security and privacy of your wireless communication we provide several prevailing standards on market WEP Wired Equivalent Privacy is a legacy method to encrypt each frame transmitted via radio using either a 64 bit or 128 bit key Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys
31. Rx 126 255 Bytes Rx 256 511 Bytes Rx 512 1023 Bytes Rx 1024 1526 Bytes Rx 1527 Bytes Receive Queue Counters Rx Low Rx Normal Rx Medium Rx High Receive Error Counters Rx Drops Rx CRC Alignment Rx Undersize Rx Oversize Rx Fragments Rx Jabber Rx Filtered Rx Packets Rx Octets Rx Unicast Rx Broadcast Rx Pause RX 64 Bytes RX 65 127 Bytes RX 128 255 Bytes RX 256 511 Bytes RX 512 1023 Bytes RX 1024 1526 Bytes RX 1527 Bytes Dray Tek Auto refresh L Transmit Total 6320 Tx Packets 1729133 Tx Octets 3129 Tx Unicast 200 Tx Multicast 2991 Tx Broadcast Tx Pause Transmit Size Counters Tx 64 Bytes Tx 65 127 Bytes Tx 126 255 Bytes Tx 256 511 Bytes Tx 512 1023 Bytes Tx 1024 1526 Bytes Tx 1527 Bytes Transmit Queue Counters Tx Low Tx Normal Tx Medium Tx High Transmit Error Counters Tx Drops Tx Late Exc Coll Display the counting number of the packet received Display the total received bytes Display the counting number of the received unicast packet Display the counting number of the received broadcast packet Display the counting number of the received pause packet Display the number of 64 byte frames in good and bad packets received Display the number of 65 127 byte frames in good and bad packets received Display the number of 128 255 byte frames in good and bad packets received Display the number of 256 511 byte frames in good and bad packets received Display the
32. Rx Broadcast Rx Pause RX 64 Bytes RX 65 127 Bytes RX 128 255 Bytes RX 256 511 Bytes RX 512 1023 Bytes RX 1024 1526 Bytes RX 1527 Bytes Rx Low Rx Normal Rx Medium Rx High Rx Drops Rx CRC Alignment Rx Undersize Rx Oversize Rx Fragments Rx Jabber Rx Filtered Tx Packets Tx Octets Tx Unicast Tx Multicast Tx Broadcast Vigor2130 Series User s Guide Display the counting number of the received unicast packet Display the counting number of the received broadcast packet Display the counting number of the received pause packet Display the number of 64 byte frames in good and bad packets received Display the number of 65 127 byte frames in good and bad packets received Display the number of 128 255 byte frames in good and bad packets received Display the number of 256 511 byte frames in good and bad packets received Display the number of 512 1023 byte frames in good and bad packets received Display the number of 1024 1522 byte frames in good and bad packets received Display the number of 1527 byte frames in good and bad packets received Display the low queue counter of the packet received Display the normal queue counter of the packet received Display the medium queue counter of the packet received Display the high queue counter of the packet received Display the number of frames dropped due to the lack of receiving buffer Display the number of Al
33. The default channel is 11 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select Auto to let system determine for you Select an appropriate encryption mode to improve the security and privacy of your wireless data packets WPA RADIUS WPS Each encryption mode will bring out different web page and ask you to offer additional configuration Wireless Security Configuration For the security of your system choose the proper encryption for data transmission Different encryption mode will bring out different setting encryption ways None The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key Dray Tek 72 Vigor2130 Series User s Guide Default Key Key Key2 Key3 Key4 Authentication Mode OPEN ka OK Default Key All wireless devices must support the same WEP encryption bit size and have the same key Keyl1 Key4 Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Authentication Mode Choose OPEN or SHARED as the authentication mode OPEN Set wireless
34. Type in private IP address for connecting to a local private network Default 192 168 1 1 Subnet Mask Type in an address code that determines the size of the network Default 255 255 255 0 24 Enable DHCP DHCP stands for Dynamic Host Configuration Protocol The router by factory default acts a DHCP server for your network Dray Te k 104 Vigor2130 Series User s Guide Start IP Address IP Pool Counts Lease Time so it automatically dispatch related IP settings to any local user configured as a DHCP client It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network You can configure the router to serve as a DHCP server for the 2nd subnet Check the box to enable DHCP server setting Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses If the 2nd IP address of your router is 220 135 240 1 the starting IP address must be 220 135 240 2 or greater but smaller than 220 135 240 254 Enter the number of IP addresses in the pool The maximum is 10 For example if you type 3 and the 2nd IP address of your router is 220 135 240 1 the range of IP address by the DHCP server will be from 220 135 240 2 to 220 135 240 11 It allows you to set the leased time for the specified PC After finishing all the settings here please click OK to activate them 4 2 2 Ports Ports page is used to change the setting for LAN ports Y
35. Type the PPP username optional Type the PPP password optional It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 24 D5 A1 After finishing all the settings here please click OK to activate them Vigor2130 Series User s Guide 99 Dray Tek 4 1 2 Ports Ports page is used to change the setting for WAN port You can set or reset the following items All of them are described in detail below WAN gt gt Ports Port Configuration Speed Port Link Curent WAN gt 100fdx Gbps FDX Configured Flow Control Current Current Rx Tx v Excessive Maximum bag Collision Configured Frame Control 100Mbps FDX 100Mbps HDX 10Mbps FDX Port Link Current Speed Configured Flow Control Maximum Frame Excessive Collision Mode Dray Tek It displays current network interface It displays current connection status Green light means the WAN connection is successful It displays current speed that the router uses You can use the drop down list to choose the required speed for the router If you have no idea in configuring speed simple use the default setting Auto Disabled 1Gbps FDX 100Mbps FDX 100Mbps HDX 10Mbps FDX 10Mbps HDX If flow control is enabled by checking Configured box both parties can send PAUSE frame to the transmitting
36. You can choose Static IP or DHCP as WAN IP network setting Type the IP address if you choose Static IP as the WAN IP network setting Type the subnet mask if you chose Static IP as the WAN IP If you want to connect to Internet all the time you can choose Always On Otherwise choose Connect on Demand Connect on Demand Connect on Demand Set the timeout for breaking down the Internet after passing through the time without any action The unit is seconds The range is XX XX It means Max Transmit Unit for packet The default setting is 1442 The router will detect the MAC address automatically Or check the box to enable MAC address cloning 23 Dray Tek Clone MAC Address It is available when the box of Enable is checked Click Clone PC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 2A D5 A1 After finishing the settings here please click Next 2 4 4 Setting up the Wireless Connection Now you have to set up the wireless connection For the user of Vigor2130 please skip this Step Quick Start Wizard Wireless System Configuration Enable Wireless LAN SSID Broadcast SSID Wireless Mode Country Region Code Channel Channel 11 2462MHz Wireless Security Configuration Encryption Enable Wireless LAN Check the box to enable the wireless function SSID Broadcast Choose Show to make the SSID being seen by wireless clients Cho
37. aiming victims based on the IP address Since the attacker cannot be aware of any private IP addresses the NAT function can protect the internal network On NAT page you will see the private IP address defined in RFC 1918 Usually we use the 192 168 1 0 24 subnet for the router As stated before the NAT facility can map one or more IP addresses and or service ports into different specified services In other words the NAT function can be achieved by using port mapping methods Below shows the menu items for NAT NAT Hardware NAT Open Port DMZ Host 4 3 1 Hardware NAT Hardware base Acceleration Engine also named Protocol Processing Engine API is the function that Draytek provides to extremely speed up the NAT performance While the hardware acceleration mechanism is activated most of the bandwidth usage will be concentrated on the specific sessions which increase transmission speed to get ultimately accelerated With Hardware NAT LAN to WAN NAT throughput can be over 900M bps But be sure that your PC has Giga Ethernet and connect with CAT6 Ethernet cable NAT gt gt Hardware NAT Hardware NAT Configuration Hardware NAT 4 3 2 Open Ports Open Ports allows you to open a range of ports for the traffic of special applications NAT gt gt Open Port Port Forwarding Name Protocol Start Port End Port Local Host Local Port No Port Forwarding Add New Entry Common application of Open Ports includes P2
38. and accounting which is widely used by Internet service providers It is the most common method of authenticating and authorizing dial up and tunneled network users The built in RADIUS client feature enables the router to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management If you choose WPA Radius as the security configuration you have to specify WPA mode algorithm Radius server Radius server port and Radius server secret respectively Quick Start Wizard Wireless System Configuration Enable Wireless LAN SSID Broadcast SSID Wireless Mode Country Region Code Channel Wireless Security Configuration Encryption WPA RADIUS Configuration Type WPA Algorithm Server IP Address Destination Port Shared Secret Type WPA Algorithm Server IP Address Destination Port Vigor2130 Series User s Guide LI Mixed 11b 11g 11n w 0 channels 1 11 Channel 11 2462MHz WPA RADIUS radius_secret The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode Auto WPA or WPA2 Auto WPA or WPA Choose the WPA algorithm TKIP AES or Auto Enter the IP address of RADIUS server The UDP port nu
39. as an FTP server By way of Vigor router uses on LAN WAN can access write and read data stored in USB diskette After setting the configuration in USB Application you can type the IP address of the Vigor router and username password created in USB Application gt gt FTP User Management on the FTP client software Thus the client can use the FTP site USB diskette through Vigor router r USB Application USB General Settings FIP User Management Disk Status Disk Shares 3 7 1 USB General Settings At present the Vigor router can support USB diskette with versions of FAT16 and FAT32 only Therefore before connecting the USB diskette into the Vigor router please make sure Dr ay Tek 78 Vigor2130 Series User s Guide the memory format for the USB diskette is FAT16 or FAT32 It is recommended for you to use FAT32 for viewing the filename completely FAT16 cannot support long filename USB Application gt gt USB General Settings USB General Settings Enable FTP Enable Disk Sharing Workgroup Name OK Enable FTP Check this box to enable FTP connection Enable Disk Sharing Check this box to enable Samba file sharing Workgroup Name Type the name for FTP users for accessing into FTP server USB diskette Be aware that users cannot access into USB diskette in anonymity Later you can open FTP client software and type the username specified here for accessing into USB storage diskette 3 7 2 FTP User Management
40. at the same time Below shows the menu items for Wireless LAN Wireless LAN General Setup Access Control Station List Access Point Discovery 3 6 2 General Setup By clicking the General Setup a new web page will appear so that you could configure the SSID and the wireless channel Please refer to the following figure for more information Wireless LAN gt gt General Setup General Setting Enable Wireless LAN SSID Broadcast Wireless Mode Mixed 11b 11g 11n Country Region Code 0 channels 1 11 Channel Channel 11 2462MHz Wireless Security Configuration Encryption OK Enable Wireless LAN Check the box to enable the wireless function Vigor2130 Series User s Guide 71 Dr ay Tek SSID Broadcast SSID Wireless Mode Country Region Code Channel Encryption Choose Show to make the SSID being seen by wireless clients Choose Hide to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN It means the identification of the wireless LAN SSID can be any text numbers or various special characters The default SSID is DrayTek We suggest you to change it Choose the wireless mode for this router At present only 802 11B B N mix is available It represents different country region code Use the drop down list to choose the one that fit the usage of regulations locally It means the channel of frequency of the wireless LAN
41. be applied when the WAN connection has been built up Applications gt gt Schedule Status You can set up to 15 schedules To add a schedule profile please click Add Applications gt gt Schedule Add Schedule Enable Stat Date Year Month Date Hour Minute WAN UP w Once Monday Tuesday Wednesday Thursday Friday Saturday Sunday Enable Check to enable the schedule Start Date Specify the starting date of the schedule Start Time Specify the starting time of the schedule Action Specify which action Call Schedule should apply during the period of the schedule Force On Force the connection to be always on Force Down Force the connection to be always down Enable Dial On Demand Specify the connection to be dial on demand and the value of idle timeout should be Vigor2130 Series User s Guide 149 Dr ay Te k specified in Idle Timeout field Disable Dial On Demand Specify the connection to be up when it has traffic on the line Once there is no traffic over idle timeout the connection will be down and never up again during the schedule Acts Specify how often the schedule will be applied Once The schedule will be applied just once Routine Weekday Specify which days in one week should perform the schedule 4 6 3 IGMP Snooping IGMP snooping means multicast traffic will be forwarded to ports that have members of that group If you disable IGMP snooping the system will ma
42. client sending requests for connection about two minutes Interface Description _ disable WLAN LED off wireless connection WAN Connector for accessing the Internet LAN 1 4 Connectors for local networked devices USB Connector for USB storage Pen Driver Mobile HD or printer Dray Tek 4 Vigor2130 Series User s Guide Iu A mom Interface Description Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration PWR Connector for a power adapter ON OFF Power Switch Vigor2130 Series User s Guide 5 Dr ay Te k 1 2 3 For Vigor2130Vn LED Status Explanation ACT Blinking The router is powered on and running Activity normally HPA WAN O o The por 1S T ONZE USB1 2 LAN2 LAN3 LAN4 USB1 USB2 Phonet aanas Phone1 On The phone connected to this port is WLAN Phone2 off hook Off The phone connected to this port is on hook WLAN Wireless access Saini is ready ining It will blink while wireless traffic goes WPS Button Press this button for 2 seconds to wait for client device making network connection through WPS When the LED lights up the WPS connection will be on Off The WPS is off Blinking Waiting f
43. device may accept any interference received including interference that may cause undesired operation Please visit http www draytek com user AboutRegulatory php This product is designed for 2 4GHz WLAN network throughout the EC region and Switzerland with restrictions in France Please see the user manual for the applicable networks on your product Dray Tek iv Vigor2130 Series User s Guide Table of Contents 4 PR CTACC see ccecec rs cs secu E E E EEE 1 1 1 Web Configuration Buttons Explanation ccccccccccccccececeseeeeeeeeeeeseeeeeeeeeeeesseaeaseeeeeesssaaaaeees 1 1 2 LED Indicators and Connectors cccccceeecccceecceaeeeeeeeeeeeeeaeeseeceeeeeesseeeseeeeeessaeeseeeeeeeesssaanssses 2 T21 FOr Vig 2 ToO erea e E T E EESE E E SS 2 NG FOr VIgOr2 ToO es a E EEEE 4 Wee THOR VIgOr2 T00 Viher E a E T EEEE 6 1 3 Hardware Installation gc secazsassssavasaacccesacceeda soesaceascesceusncesaces cascencaceqecduc eseseucy sana cucarecaseeasassenssacte 8 stand VUNG Cet AU ON cages catc etn scape E E E 9 1 4 Printer Installation cccccccccseeseeeceeeeeeseeeeeeeeeeeeecsaeeeeaeeeeeeeeaeeeessaeeesseeeeesueeessageeesseneeesensess 10 Configuring Basic Settings nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn nnna 15 2 1 Two Level Managemen t ccccccccccsesececseeeeeeeeeeeeeceeseeeesaeeessaeeeeseaeeeessaeeeessageeeesegeeeesaeeeeeseas 15 2 2 FCC SS SIN Web Page erigani E aA a E E NA Eia 15 23
44. device s if the receiving port is too busy to handle If not there will be no flow control in the port It drops the packet if too much to handle Current Rx indicates whether pause frames on the port are obeyed Current Tx indicates whether pause frames on the port are transmitted This module offers 1518 9600 Bytes length to make the long packet for data transmission There are two modes for you to choose when excessive collision happened in half duplex condition 100 Vigor2130 Series User s Guide Restart Discard It determines whether the MAC drops frames after an excessive collision has occurred If yes a frame is dropped after excessive collision This is IEEE Standard 802 3 half duplex flow control operation Restart It determines whether the MAC retransmits frames after an excessive collision has occurred If set a frame is not dropped after excessive collisions but the backoff sequence is restarted This is a violation of IEEE Standard 802 3 but is useful in non dropping half duplex flow control operation Power Control The Configured column allows for changing the power savings mode parameters per port Enabled Disabled ActiPHY PerfectReach Disabled All power savings mechanisms disabled ActiPHY Link down power savings enabled PerfectReach Link up power savings enabled Enabled Both link up and link down power savings enabled Refresh Click this button to refresh the information f
45. filter a specific UDP destination range filter with this ACE you can enter a specific UDP destination range value A field for entering a UDP destination port range appears Type the value if you choose Specific as the Dest Port Filter The allowed range is 0 to 65535 A frame meeting this ACE matches this UDP source value Type the value if you choose Range as the Dest Port Filter The allowed range is 0 to 65535 A frame meeting this ACE matches this UDP source value Choose IPv4 as the Frame Type You will see IP Parameters on the bottom of the page If you choose TCP as IP Protocol Filter you will get the page as the following Dray Tek 130 Vigor2130 Series User s Guide IP Parameters IP Protocol Filter IP TTL IP Fragment IP Option SIP Filter SIP Address SIP Mask DIP Filter DIP Address DIP Mask IP TTL IP Fragment IP Option Vigor2130 Series User s Guide TCP Parameters Source Port Filter Source Port No Dest Port Filter Dest Port Range TCP FIN TCP SYN TCP RST TCP PSH TCP ACK TCP URG Specify the Time to Live settings for this ACE IP TTL Non zero v IP Fragment An IP Option Non zero Zero IPv4 frames with a Time to Live field greater than zero must not be able to match this entry Non zero IPv4 frames with a Time to Live field greater than zero must be able to match this entry Any Any value is allowed Specify the fragment offset settings for this ACE This involv
46. for using by more people Users can use four LAN ports on the router to access Internet Also they can access Internet via SuperG wireless function of Vigor router and enjoy the powerful firewall bandwidth management VPN VoIP features of Vigor router Mobile Coffee shop Internet VoIP Web surfing E Mail Instant messaging etc VPN 3 56 HSDPA USB After connecting into the router 3G USB Modem will be regarded as the second WAN port However the original Ethernet WAN still can be used and Load Balance can be done in the router Besides 3G USB Modem also can be used as backup device Therefore when WAN is not available the router will use 3 5G for supporting automatically The supported 3G USB Dray Tek 32 Vigor2130 Series User s Guide Modem will be listed on DrayTek web site Please visit www draytek com for more detailed information Below shows the menu items for WAN WAN internet Access Ports 3G Backup 3 1 1 Internet Access This page allows you to set WAN configuration with different modes Use the Connection Type drop down list to choose one of the WAN modes The corresponding page will be displayed WAN gt gt Internet Access WAN IP Configuration Connection Type DHCP Settings Router Name figor213 The same as syslog s router name Clone MAC Address Enable F Static For static IP mode you usually receive a fixed public IP address or a public subnet namely mul
47. free to send e mail to support draytek com Dr ay Tek 200 Vigor2130 Series User s Guide
48. from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be totally exposed to the Internet which usually helps some special applications such as Netmeeting or Internet Games etc Destined to Internet 220 135 240 207 Protocol Any Port Any The security properties of NAT are somewhat bypassed if you set up DMZ host We suggest you to add additional filter rules or a secondary firewall Click DMZ Host to open the following page NAT gt gt DMZ Host DMZ Host DM IP Enable Check to enable the DMZ Host function DMZ IP Enter the private IP address of the DMZ host or click Choose Vigor2130 Series User s Guide 115 Dr ay Te k 4 4 Firewall Basics for Firewall While the broadband users demand more bandwidth for multimedia interactive applications or distance learning security has been always the most concerned The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders It also restricts users in the local network from accessing the Internet Furthermore it can filter out specific packets that trigger the router to build an unwanted outgoing connection Denial of Service DoS Defense The DoS Defense functionality helps you to detect and mitigate the DoS attack The attacks are usually categorized into two types the flooding type attacks and the vulnerability attacks The flooding type attacks will atte
49. number of 512 1023 byte frames in good and bad packets received Display the number of 1024 1522 byte frames in good and bad packets received Display the number of 1527 byte frames in good and bad packets received 146 Vigor2130 Series User s Guide Rx Low Rx Normal Rx Medium Rx High Rx Drops Rx CRC Alignment Rx Undersize Rx Oversize Rx Fragments Rx Jabber Rx Filtered Tx Packets Tx Octets Tx Unicast Tx Multicast Tx Broadcast Tx Pause Tx 64 Bytes Tx 65 127 Bytes Tx 128 255 Bytes Tx 256 511 Bytes Tx 512 1023 Bytes Tx 1024 1526 Bytes Tx 1527 Bytes Tx Low Tx Normal Tx Medium Vigor2130 Series User s Guide Display the low queue counter of the packet received Display the normal queue counter of the packet received Display the medium queue counter of the packet received Display the high queue counter of the packet received Display the number of frames dropped due to the lack of receiving buffer Display the number of Alignment errors packets received Display the number of short frames lt 64 Bytes with valid CRC Display the number of long frames according to max_length register with valid CRC Display the number of short frames lt 64 bytes with invalid CRC Display the number of long frames according tomax_length register with invalid CRC Display the filtered number of the packet received Display the the counting number of the packet transmit
50. open the following page User Configuration Add User User Settings Username carie Full Name Password Confirm Password Allow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP Username Type a name for this user Full Name Type full name for this user Password Type the password for this user Password again Type the password again for confirmation Allow Disk Sharing Check this box to enable Samba file sharing Allow IPSEC L2TP Check this box to let the user connect via IPSEC L2TP Allow PPTP Check this box to let the user connect via PPTP Allow FTP Check this box to let the user connect to FTP server When you finish the settings simply click OK to save the configuration The new user will be created and displayed on the page Dr ay Tek 82 Vigor2130 Series User s Guide Users Users Username Full Name Allow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP carrie carrie ni yi y v v Add a New User Editing Deleting User Settings To edit a user click the name link under Username to open the following page Modify the settings except Username and then click OK to save and exit it If you want to remove such user settings simply click Delete User User Configuration Edit User User Settings Username Full Name Password Confirm Password Al Allow IPSEC L2TP Allow PPTP Allow FTP low Disk Sharing 3 9 System Maintenance For the system setup there are several items
51. priority QoS traffic throughout the whole network with merely Vigor router s effort In the Bandwidth Management menu click QoS Control List QCL to open the web page Bandwidth Management gt gt QoS Control List QoS Control List Configuration acl Mm QCE Type Type Value Traffic Class TCP UDP Port 22 23 High TCP UDP Port 5060 High TCP UDP Port 25 Medium TCP UDP Port a0 Medium TCP UDP Port Medium TCP UDP Port 14 Medium Low MODOM OM OOP OO OOO OOOO OO OOOOOOOO oe amp Note A QCL consists of an ordered list of up to 12 QCEs QCE Type Display the type of that QCE QoS Control Entries Type Value Display the value specified for the QCE Traffic Class Display the class of the data transmission for the QCE QoS Control List allows users to set up to five groups of QCL Each QCL group can contain 12 QCE settings Dray Tek 58 Vigor2130 Series User s Guide QoS Control List Configuration QCL QCE Type TCPYUDP Port 22 235 Adding a New QCE Click to add a new QCE onto this page Different QCE type will bring out different web settings If you choose Ethernet Type as QCE Type you have to type value for it and specify traffic class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type Ethernet Type Ethernet Type Value OxFFFF Trafic Class OK Ethernet Type Value Either 8 63 ASCII characters such as 01
52. table or the IP MAC address typed in Add and Edit to the table of IP Bind List Edit It allows you to edit and modify the selected IP address and MAC address that you create before Remove You can remove any item listed in IP Bind List Simply click and select the one and click Remove The selected item will be removed from the IP Bind List Note Before you select Strict Bind you have to bind one set of IP MAC address for one PC If not no one of the PCs can access into Internet And the web configurator of the router might not be accessed 3 3 NAT Usually the router serves as an NAT Network Address Translation router NAT is a mechanism that one or more private IP addresses can be mapped into a single public one Public IP address is usually assigned by your ISP for which you may get charged Private IP addresses are recognized only among internal hosts When the outgoing packets destined to some public server on the Internet reach the NAT router the router will change its source address into the public IP address of the router select the available public port and then forward it At the same time the router shall list an entry in a table to memorize this address port mapping relationship When the public server response the incoming traffic of course is destined to the router s public IP address and the router will do the inversion based on its table Therefore the internal host can communicate with external host sm
53. the What types of printers are compatible with Vigor router link About DrayTek Products Support Partners Contact Us Home gt Support gt FAQ FAQ Basic FAQ 01 What are the differences among these firmware file formats Basic How could get the telnet command for routers Advanced How can backup restore my configuration settings VPN DHCP How do reset clear the router s password How to bring back my router to its default value VETAS SE VoIP How do tell the type of my Vigor Router is AnnexA or AnnexB For ADSL model only QoS Ways for firmware upgrade ISDN Why is SNMP removed in firmware 2 3 6 and above for Vigor2200 Series routers Firewall IP Filter 09 failed to upgrade Vigor Router s firmware from my Mac machine constantly what should aes 7 do Printer Server 10 How to upgrade firmware of Vigor Router remotely Hee Ve Me 11cR FAQ Printer Server 01 How do configure LPR printing on Windows2000 AP 02 How do configure LPR printing on Windows96 Me 03 How do configure LPR printing on Linux boxes 04 Why there are some strange print out when try to print my documents through Vigor210 4P 2300 s print server 05 What types of printers are compatible with Vigor router 06 What are the limitations in the USB Printer Port of Vigor Router 7 O7 What is the printing buffer size of Vi
54. used for Dial in setting in the LAN to LAN Profile setup This item is optional and can be used only in IKE aggressive mode It can also be a DNS name or an email address Remote Identities Define the identities of allowed clients Phase 1 IKE Encryption Negotiation of IKE parameters including encryption hash Diffie Hellman parameter values and lifetime to protect the following IKE exchange authentication of both peers using either a Pre Shared Key or Digital Signature x 509 The peer that starts the negotiation proposes all its policies to the remote peer and then remote peer tries to find a highest priority match with its policies Phase 2 IPSec Encryption Negotiation IPSec security methods including Authentication Header AH or Encapsulating Security Payload ESP for the following IKE exchange and mutual examination of the secure tunnel 157 Dray Tek 4 7 4 Remote Dial in Status establishment aes 256 You can find the summary table of all dial in user status VPN and Remote Access gt gt Remote Dial in Status IPSec Site to Client Status Client No PSec Mobile Clients Auto refresh L IKE Endpoint Status Status PPTP Site to Client Status User Name Remote IP Login Time Rx bytes Tx bytes No PPTP Clients Client Identity Endpoint IKE Status IKE Alg ESP Status ESP Alg User Name TTY Remote IP Login Time Rx bytes Tx bytes Auto refresh Dray Tek Display the
55. 0 Series User s Guide IP Option SIP Filter SIP Address SIP Mask DIP Filter DIP Address DIP Mask Vigor2130 Series User s Guide Yes IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must be able to match this entry Any Any value is allowed Specify the options flag setting for this ACE IF Option No IPv4 frames where the options flag is set must not be able to match this entry Yes Pv4 frames where the options flag is set must be able to match this entry Any Any value is allowed Specify the source IP filter for this ACE SIP Filter Any No source IP filter is specified Host Source IP filter 1s set to Host Specify the source IP address in the SIP Address field that appears Network Source IP filter is set to Network Specify the source IP address and source IP mask in the SIP Address and SIP Mask fields that appear Type the SIP Address here This option is available when you choose Host or Network as source SIP Filter Type the SIP Mask here This option is available only when you choose Network as source SIP Filter Specify the destination IP filter for this ACE DIP Filter 3 Host Network Any No destination IP filter is specified Host Destination IP filter is set to Host Specify the destination IP address in the DIP Address field that appears Network Destination IP filter is set to Network Specify the destination IP address and de
56. 1 255 255 2 00 50 7F 54 6 hie ioe MAC Address 00 1 1 D8 E4 58 CE Default Geteway 192 168 1 1 IP Address 192 168 1 10 v DHCP Server 192 168 1 1 Subnet Mask 259 259 290 T Mon Jan 22 Lease Obtained 01 28 23 2007 a TT gt 168 95 1 1 DNS Servers Lease Expires Thu Jan 25 01 28 23 2007 LAN Status ADSL Status 4 11 6 Time and Date It allows you to specify where the time of the router should be inquired from System Maintenance gt gt Time and Date Time Configuration Time one NTP Servers 0_openwrt pool_ntp_org 1_openwrt pool_ntp arg 2 apenwit pool_ntp org 3 apenwrt pool_ntp org Time Zone Select the time zone where the router is located Add NTP server Click the button to add a new NTP server Dray Tek 180 Vigor2130 Series User s Guide Delete Click this button to remove an NTP server Click OK to save these settings 4 11 7 Management This page allows you to manage the settings for access control access list port setup and SMP setup For example as to management access control the port number is used to send receive SIP message for building a session The default value is 5060 and this must match with the peer Registrar when making VoIP calls System Maintenance gt gt Remote Management Management Access Control Enable HTTP 80 SNMP Setup Enable HTIPS 443 Enable SNMP C Enable SSH i Manager Host IF Oooo Enable ICMP Ping E
57. 2345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde If you choose VLAN ID as QCE Type you have to type the ID number for it and specify traffic class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type VLANID VLAN ID Trafic Class Cancel If you choose TCP UDP Port as QCE Type you have to type the port number for it and specify traffic class from Low Normal Medium and High Vigor2130 Series User s Guide 59 Dr ay Te k Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type TCP UDP Porn TCP UDP Port TCP UDP Port Range EESE Trafic Class TCP UDP Port Click Single or Range If you select Range you have to type in the starting port number and the end porting number on the boxes below TCP UDP Port Range Type in the starting port number and the end porting number here if you choose Range as the type If you choose DSCP as QCE Type you have to type value for it and specify traffic class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Config QCE Type DSCP Value Traffic Class uration Medium Hi gh If you choose ToS as QCE Type you have to specify priority class from Low Normal Medium and High Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type ToS Priority 0 Class ToS Priority 1 Class ToS Priority 2 Class ToS
58. 255 255 255 0 eS Mon Jan 22 Lease Obtained 01 28 23 2007 168 95 1 1 Lease Expires Thu Jan 25 01 26 23 2007 SHR Margir Li j Ip Att It allows you to specify where the time of the router should be inquired from System Maintenance gt gt Time and Date Time Configuration Time one Unknown NTP Servers 0 openwrt pool_ntp org 1 openwrt pool_ntp arg 2 apenwrt pool_ntp org 3 apenwrt pool_ntp org OK Time Zone Add NTP server Delete Click OK to save these settings Vigor2130 Series User s Guide 89 Select the time zone where the router is located Click the button to add a new NTP server Click this button to remove an NTP server Dray Tek 3 9 6 Management This page allows you to manage the settings for access control access list port setup and SMP setup For example as to management access control the port number is used to send receive SIP message for building a session The default value is 5060 and this must match with the peer Registrar when making VoIP calls System Maintenance gt gt Remote Management Management Access Control Enable HTTP a SNMP Setup Enable HTTPS 143 Enable SNMP so Enable SSH J Manager Host IF Oooo Enable ICMP Ping Enable FTP Access List List IP Subnet Mask 255 255 255 255 32 M 255 255 255 255 32 255 255 255 255 I 32 a Enable HTTP HAHTTPS SSH ICMP Ping FTP SNMP Enable the checkbox to allow system administrators to login from t
59. 255 0 Gateway IP Address 192 168 1 2 110 Vigor2130 Series User s Guide 2 Return to Static Route page Click Add again to add another static route as show below which regulates all packets destined to 211 100 88 0 will be forwarded to 192 168 1 3 LAN gt gt Static Route Add Static Route Enable Destination IP Address 211 100 58 0 Subnet Mask 255 255 255 0 Gateway IP Address 3 Verify current routing table LAN gt gt Static Route Destination Address Status 192 168 10 0 255 255 255 0 w 211 100 88 0 255 255 255_ 0 yi 4 2 6 Bind IP to MAC This function is used to bind the IP and MAC address in LAN to have a strengthening control in network When this function is enabled all the assigned IP and MAC address binding together cannot be changed If you modified the binding IP or MAC address it might cause you not access into the Internet Click LAN and click Bind IP to MAC to open the setup page LAN gt gt Bind IP to MAC Bind IP to MAC Note IP MAC binding presets DHCP Allocations If you select Strict Bind unspecified LAN clients cannot access the Internet Enable Disable Strict Bind ARP Table Select All Sort Refresh IP Bind List Select All Sort IF Address Mac Address Index IF Address Mac Address 1927 168 1 10 O0 0F A6 24 05 Al1 Add and Edit Address S Mac Address i _ Vigor2130 Series User s Guide 111 Dray Tek Enable Click this radio button to invo
60. 3G USB Modem also can be used as backup device Therefore when WAN is not available the router will use 3 5G for supporting automatically The supported 3G USB Modem will be listed on DrayTek web site Please visit www draytek com for more detailed information Below shows the menu items for WAN Dray Tek 94 Vigor2130 Series User s Guide EWAN internet Access Ports 3G Backup 4 1 1 Internet Access This page allows you to set WAN configuration with different modes Use the Connection Type drop down list to choose one of the WAN modes The corresponding page will be displayed WAN gt gt Internet Access WAN IP Configuration Connection Type DHCP DHCP Settings Router Name igor213 The same as syslog s router name Clone MAC Address Enable F OK Static For static IP mode you usually receive a fixed public IP address or a public subnet namely multiple public IP addresses from your DSL or Cable ISP service providers In most cases a Cable service provider will offer a fixed public IP while a DSL service provider will offer a public subnet If you have a public subnet you could assign an IP address or many IP address to the WAN interface To use Static as the accessing protocol of the internet please choose Static mode from Connection Type drop down menu The following web page will be shown WAN gt gt Internet Access WAN IP Configuration Connection Type Static IP hd Static IP Set
61. 6 11 42 CST 2009 i Hardware NAT Version 1 0 0 13 b Panaman Tanagana System Date Mon Aug 31 03 02 52 2009 Applications System Uptime 3d 10 39 36 gt VPN and Remote Access gt Wireless LAN gt USB Application gt User MAC Address 00 50 7F C7 7B 30 WAN MAC Address 00 50 7F C7 7B 31 gt System Maintenance IP Address 192 168 1 1 IP Address 192 168 5 21 gt Diagnostics IP Mask 255 255 255 0 IP Mask 255 255 255 0 Default Gateway 192 168 5 1 Primary DNS 168 95 1 1 All Rights Reserved Secondary DNS 4 1 WAN Quick Start Wizard offers user an easy method to quick setup the connection mode for the router Moreover if you want to adjust more settings for different WAN modes please go to Internet Access group Basics of Internet Protocol IP Network IP means Internet Protocol Every device in an IP based Network including routers print server and host PCs needs an IP address to identify its location on the network To avoid address conflicts IP addresses are publicly registered with the Network Information Centre NIC Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP IP local area networks LANs such as host PCs under the management of a router since they do not need to be accessed by the public Hence the NIC has reserved certain addresses that will never be registere
62. ACK br lan 192 168 1 178 00 0e a6 2a d5 a1 user Ga0e182ce8 May 707 18 37 info daemon dnsmasq 2538 DHCPINFORM br lan 192 168 1 178 00 0e a6 2a d5 a1 Ts Ae dnsmasol 6387 DHCPACK br lan 192 168 1 178 00 Ne aB 2a d6 a1 user Time Display the time of the system log entry Level Display the severity level of the system log entry Type Display the type or subsystem of the system log entry Message Display a short description of the system log entry Auto refresh Check it to enable auto refresh function Reverse Check it to have newest log entries presented first Refresh Click it to reload the page 4 12 4 Traffic Overview This page offers an overview of general traffic statistics for all connecting ports Diagnostics gt gt Traffic Overview Port Statistics Overview Auto refresh L Packets Bytes Errors Drops Filtered Receive Transmit Receive Transmit Receive Transmit Receive Transmit Receive WAN 36471 16525 16432151 31286250 0 Port LAN 0 0 0 0 0 LAN 18630 16062 3349573 13192564 0 LANS 0 LAN4 0 Vigor2130 Series User s Guide 185 Dr ay Te k Port Packets Bytes Errors Drops Filtered Auto refresh Refresh Clear 4 12 5 Detailed Statistics Display the interface that data transmission passing through Display the packet sizes for data transmission in receiving and sending Display the number of received and transmitted bytes per port Display the number of the error occurred in data receiving
63. C If not no one of the PCs can access into Internet And the web configurator of the router might not be accessed 4 3 NAT Usually the router serves as an NAT Network Address Translation router NAT is a mechanism that one or more private IP addresses can be mapped into a single public one Public IP address is usually assigned by your ISP for which you may get charged Private IP addresses are recognized only among internal hosts When the outgoing packets destined to some public server on the Internet reach the NAT router the router will change its source address into the public IP address of the router select the available public port and then forward it At the same time the router shall list an entry in a table to memorize this address port mapping relationship When the public server response the incoming traffic of course is destined to the router s public IP address and the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes Save cost on applying public IP address and apply efficient usage of IP address NAT allows the internal IP addresses of local hosts to be translated into one public IP address thus you can have only one IP address on behalf of the entire internal hosts Dray Tek 112 Vigor2130 Series User s Guide Enhance security of the internal network by obscuring the IP address There are many attacks
64. Changing cS WV ONO assoc gerne inciecateectincisseuintecoeenncdysocieatignanmticinceeaeeionecnati tace esate T ETE 16 PAOR VIZ a E E E A A 18 2 4 1 Setting up the PASSWOMKC cccccccccseeeeeeeceeeeeeeesaeeeeeeesseeseeeeessaaeeeeessaeeeessaaeeeessesageeees 18 2 4 2 Setting up the Time ZONE cccccccccsssseeccceesseceeccaeeeecececseuseeeesseaueeeeseaaueeeesssaaeeeesessaaaeees 19 2 4 3 Setting up the Internet CONNECTION cc ceeecccccceccceseeeeeeeeeeesseeeeeeeeeeessuaeeeeeeeeseessaaaeeeeeess 19 2 4 4 Setting up the Wireless CONNECTION cceecccccccceeeeaeeeeeeceeeeeesaaeeseeeeeeseeseeseeeeeeesssaeaesees 24 2 4 5 Save the Wizard Configuration cccccccsssccccceeccseesseeceeeeeeeeeeeeeeeceessueeeeeeeeeeessuaanseeeeees 29 ME VS oe UNS scan aera re trace spore ais aleve orate E re nice stad aa ns des danse EEEE meinem nese Soto 29 2 6 Saving CONPIQUIATION 0 c ccccesccceseseeececensccceeseeneceeescccesseeeeeeccccesseseeeeaececcceseeseesenseccossseeeeess 30 User Mode Operation x scisat asaccsssesunosnseswesansesnedtasenne dans agnasen sansa dabsenuadensauetenatesienaenedse 31 Sate ee eee E ee ee E RE 31 Si ded WRC FCCC SS wa nceonitentaunsunntaidzatentanandinsaspsaunlatcaaconntesvactinasdcatuaysnnasaneseatanazdeasaiarouetanasnetais 33 o RA ON Ee EE E A EE TE T EAEE EE EE TE seas tinge AE E TEE TEE 39 CO Mh 9 LU e a E cece E EEE EE A 40 PEAN e a E E 41 SEARE E eie Ee i A E E E E E I E E A 43 EPO a E E E E A A ga
65. IP Network IP means Internet Protocol Every device in an IP based Network including routers print server and host PCs needs an IP address to identify its location on the network To avoid address conflicts IP addresses are publicly registered with the Network Information Centre NIC Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP IP local area networks LANs such as host PCs under the management of a router since they do not need to be accessed by the public Hence the NIC has reserved certain addresses that will never be registered publicly These are known as private IP addresses and are listed in the following ranges Vigor2130 Series User s Guide 31 Dr ay Te k From 10 0 0 0 to 10 255 255 255 From 172 16 0 0 to 172 31 255 255 From 192 168 0 0 to 192 168 255 255 What are Public IP Address and Private IP Address As the router plays a role to manage and further protect its LAN it interconnects groups of host PCs Each of them has a private IP address assigned by the built in DHCP server of the Vigor router The router itself will also use the default private IP address 192 168 1 1 to communicate with the local hosts Meanwhile Vigor router will communicate with other network devices through a public IP address When the data flow passing through the Network Address Translation NAT function of the router will dedicate to translate public private addresses
66. IP Address filed Choose Network to filter the packets within the network defined in Target IP Address and Target IP Mask fields Type the Target IP Address here This option is available when you choose Host or Network as Target IP Filter Type the Target IP Mask here This option is available only when you choose Network as Target IP Filter Specify whether frames packets can meet the action according to the sender hardware address field SHA settings ARP SMAC Match 0 means sender hardware address is not equal to the SMAC address 1 means sender hardware address is equal to the SMAC address Any means any value is allowed Specify whether frames can hit the action according to their target hardware address field THA settings 124 Vigor2130 Series User s Guide IP Ethernet Length IP Ethernet Vigor2130 Series User s Guide RARP DMAC Match 0 means target hardware address is not equal to the SMAC address 1 means s target hardware address is equal to the SMAC address Any means any value is allowed Specify whether frames packets can meet the action according to the ARP RARP hardware address length HLN and protocol address length PLN settings IP Ethernet Length 0 means ARP RARP frames packets where the hardware address length is equal to Ethernet 0x06 and the protocol address length is equal to IPv4 0x04 must not match this entry 1 means ARP RARP frames packets where the h
67. IP Fragment IP Option Non zero Zero Pv4 frames with a Time to Live field greater than zero must not be able to match this entry Non zero IPv4 frames with a Time to Live field greater than zero must be able to match this entry Any Any value is allowed Specify the fragment offset settings for this ACE This involves the settings for the More Fragments MF bit and the Fragment Offset FRAG OFFSET field for an Pv4 frame IP Fragment OFFSET field is greater than zero must not be able to match this entry Yes IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must be able to match this entry Any Any value is allowed Specify the options flag setting for this ACE IP Option No IPv4 frames where the options flag is set must not be 139 Dray Tek SIP Filter SIP Address SIP Mask DIP Filter DIP Address DIP Mask 4 5 Bandwidth Management able to match this entry Yes IPv4 frames where the options flag is set must be able to match this entry Any Any value is allowed Specify the source IP filter for this ACE SIP Filter Network Any No source IP filter is specified Host Source IP filter is set to Host Specify the source IP address in the SIP Address field that appears Network Source IP filter is set to Network Specify the source IP address and source IP mask in the SIP Address and SIP Mask fields that appear Type the SIP Address here T
68. MZ Host Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN Regular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be totally exposed to the Internet which usually helps some special applications such as Netmeeting or Internet Games etc Destined to Internet 220 135 240 207 Protocol Any Port Any Note The security properties of NAT are somewhat bypassed if you set up DMZ host We suggest you to add additional filter rules or a secondary firewall Click DMZ Host to open the following page NAT gt gt DMZ Host DM Host Enable Enable Check to enable the DMZ Host function DMZ IP Enter the private IP address of the DMZ host or click Choose PC to select one Vigor2130 Series User s Guide 53 Dr ay Te k 3 4 Bandwidth Management Below shows the menu items for Bandwidth Management t Bandwidth Management Session Limit Bandwidth Limit Port Rate Control 205 Control List Ports Priority QoS Statistics 3 4 1 Session Limit A PC with private IP address can access to the Internet via NAT router The router will generate the records of NAT sessions for such connection The P2P Peer to Peer applications e g BitTorrent always need many sessions for procession and also they will occupy over resources which might resul
69. N Norma Weighted 2 LAN LANS LAN4 WiFi Queuing Mode Port Indicate the interface for the physical port WAN port LAN port and Wireless Port Vigor2130 Series User s Guide 61 Dr ay Te k Default Class QCL Queuing Mode Queue Weighted 3 4 6 QoS Statistics Use the drop down list to choose the priority for each port Default Class Normal Low Normal Medium High Use the drop down list to choose the QCL number defined in QoS Control List for the port QCL VissFast Use the drop down list to choose suitable mode Queuing Mode Weighted Strict Priority Use the drop down list to choose 1 2 4 or 8 as the queue weighted number This page displays statistics for QoS setting Click WAN LAN link to check detailed information for each interface Bandwidth Management gt gt Qo Statistics Queuing Counters Port LAN2 57361 LAN3 0 LANA 0 Low Queue Receive WAN 56350 Auto refresh LI Normal Queue Medium Queue High Queue Receive Transmit Receive Transmit Receive Transmit 69518 0 76195 63030 0 0 0 1953 61191 66042 Click WAN LAN link to check detailed information for each interface Dray Tek 62 Vigor2130 Series User s Guide Diagnostics gt gt Detailed Statistics Detailed Port Statistics WAN Receive Total Rx Packets Rx Octets Rx Unicast Rx Multicast Rx Broadcast Rx Pause Receive Size Counters Rx 64 Bytes Rx 65 127 Bytes Rx 126 255 Bytes
70. NS Service Select the service provider for the DDNS account Hostname Type in one domain name that you applied previously Use the drop down list to choose the desired domain Username Type in the login name that you set for applying domain Dr ay Tek 148 Vigor2130 Series User s Guide Password Type in the password that you set for applying domain Check IP change every Set the interval for checking the information Force IP update every Force the router updates its information to DDNS server with the interval set here Click OK button to activate the settings You will see your setting has been saved 4 6 2 Schedule The Vigor router has a built in real time clock which can update itself manually or automatically by means of Network Time Protocols NTP As a result you can not only schedule the router to dialup to the Internet at a specified time but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours say business hours The schedule is also applicable to other functions You have to set your time before set schedule In System Maintenance gt gt Time and Date menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is another way to set up time You can inquiry an NTP server a time server on the Internet to synchronize the router s clock This method can only
71. OM E E E E A E A E T 149 463 TOMP SOOO ING sicarios ieia aE a ae a ega aiaiai 150 Be AGIA a eer E E E 151 4 6 5 UPnP C niguraliON sssini oean oi E aa oiar nidi 151 Al NPN ana Romol ACCES Soe tesla iecaunstatentombebiriamsiunushaneihihwnnsie 153 4 1 Remote Access Control sseniissiricicisisiieiudiiini iiaiai a ia aN a 153 412 PPIP Remote Dial eee ee eee ee ee 154 A 7 3 IPSec Remote DIGI seasinceetacccicndaceceeusaeedenetethdcccedcecssseanns iE ERE 156 4 7 4 Remote Dial in Status ccccccccccccssseceecceesseeeecceeseeeecssauscecseeaseeecsseaseeeeessaaseesesseaaaes 158 ATS EAN DLAN ee deat deine eaceeciedanned eso dmeee eatin eeeesiaeddeoednetnneeenedectacecpesaneeueess 159 4 8 Wireless LAN cccccssccccseccceseeeceuseccanceceaseeceeeeseusessaaeessueecsaeeessaeeesaueessaueessuseesaeeessuseessags 161 AN ASIC OIC CII Se sii aad ondtoatesecu ine oa eaan ed EE E EER 161 4892 General SC WI sce ie E a E Aaa 163 AOSA CESS CONIO ere eE EEE EE EEE EEE 167 ONT ES a E E E E A EEEE 168 4 8 5 Access Point Discovery ccccccceeeeeecseeeecneeeeeeceeeeeesaaaeeesseaeeeesaueeeeseueeseseeeeenseneeesaaaees 169 49 USB APPICCIU serieren R a E E 169 4 9 1 USB General SENGS narena a E a 170 492 FTP US Managemen ais E suman 170 AT FOCK aU ae A E E sued ateasiacten Senan nscoswedsadetedesameaeeaaaee 171 494 DISK o NITOE ea R E E ene ee eee eee 171 AO USET o E een ee ee eee eee eae 173 4 10 1 User Configuration cccccccssssssccececcceees
72. P 0 MAC wccgsececcvctanasceiexasonctssase ausseencucdacainacsedanancuncsecteseeoxtaMaupiencsdeasdediecaestessesseas 111 Dray Tek vi Vigor2130 Series User s Guide AeA ANOVAS NAT oea E E nsanencueutenaienesere 113 7S oa OPEP of e r E A ee 113 BG SDN HO e ee E E A E A ee eee ee 115 ce NE WAIN EA E E A EE A EE E E A E E aches E 116 4A DOS CICS E eA E E 116 4 4 2 Pons Contigurati N icicsctesszcamanestscceudysdasnaansesupanetadnerasdturznacenoctecosonanaehedsewadavarniasiwoseuedee 117 4 4 3 Rate Control Object secwesnaccosncncordawtasanidewsenveunnacendneulecevovahasvudduusnvunoninabdissbacauniddesediinnnkaneds 119 4 4 4 Access Control IS sicsccncnseccmanenesodewadedeentsncewsnapncsadserasiusznadeatstecos cxnendcxnddewadeddenbadiwdsneedeess 120 4 5 Bandwidth Management cccceccceeeeeeeeeeeeeeeeeeeaeeeeeeeeeaeeeeeeesaaaeeeeessaaeeeseeseaeeeesessaneeeeenas 136 E ESSO a a a A E EE 137 4 5 2 Bandwidth Limit ncsesevdcacicsiuscenswardesteddenencaseddcwosandedesdaadedieedanaddaasiceenseciaueddasdendwencdeaksetastqundees 138 4 53 Pon Rae CONTO serana E NANSEN EEEE rsi 139 4 54 QoS Control LIS sesisarycsitontacenpuntshaswaqaastanciesraetannesassiaswnssua acer ENNAN NENNEN Eians 139 45 9 PONS IPO suiacasvavenscictustonensmonuininwenstinindennensiiasunatnntsuaibantriaaindiuevsiiceeimnssusbeeiamexteninios 144 456 O05 UL SS ses vars cla aghast Geren EEE EEn ENNE EN reas 145 AO FANG AN OUI eeren ani e E E E EE EA E E 148 AO TDG DON eraa r OO 148 O52 6 MO
73. P application e g BT KaZaA Gnutella WinMX eMule and others Internet Camera etc Ensure that you keep the application involved up to date to avoid falling victim to any security exploits To add a new open port click Add new entry Vigor2130 Series User s Guide 113 Dr ay Te k NAT gt gt Open Port Add Port Forwarding Entr Name Protocol TCP UDP start Port End Port optional Local Host Local Port optional OK Name Specify the name for the defined network service Protocol Specify the transport layer protocol It could be TCP UDP and TCP UDP TCP UDP 7 Start Port Specify the starting port number of the service offered by the local host End Port optional Specify the ending port number of the service offered by the local host Local Host Enter the private IP address of the local host Local Port optional If it is configured the forwarded traffic is mapped to this port on the local host Dray Te K 114 Vigor2130 Series User s Guide 4 3 3 DMZ Host As mentioned above Port Redirection can redirect incoming TCP UDP or other traffic on particular ports to the specific private IP address port of host in the LAN However other IP protocols for example Protocols 50 ESP and 51 AH do not travel on a fixed port Vigor router provides a facility DMZ Host that maps ALL unsolicited data on any protocol to a single host in the LAN Regular web surfing and other such Internet activities
74. PSEC L2TP A Allow PPTP Allow FTP Dray Te k 174 Vigor2130 Series User s Guide 4 11 System Maintenance For the system setup there are several items that you have to know the way of configuration Status User Password Configuration Backup Syslog Mail Alert Time and Date Management Reboot System and Firmware Upgrade Below shows the menu items for System Maintenance System Maintenance System Status System Password User Password Configuration Backup Syslog Mail Alen Time and Date Management Reboot System Firmware Upgrade 4 11 1 System Status The System Status provides basic network settings of Vigor router It includes LAN and WAN interface information Also you could get the current running firmware version or firmware related information from this presentation System Status Auto refresh L Model Vigor2130 Platform V5C7501 Bootloader Version Dray Boot 1 0 0E Firmware Version v1 1 0 RC6 Build Date Time 753 Tue Aug 25 16 11 42 CST 2009 Hardware NAT Version 1 0 0 13 System Date Mon Aug 31 03 02 52 2009 System Uptime 3d 10 39 36 MAC Address 00 S0 7F C 7 7B 30 MAC Address 00 SO0 7F C 7B 31 IP Address 197 168 1 1 IP Mask 255 255 255 0 IP Address 192 168 5 21 IP Mask 255 255 255 0 Default Gateway 192 168 5 1 Primary DNS 168 95 1 1 Model Name Platform Bootloader Version Firmware Version Build Date Time Hardware NAT
75. Rate Rx Unit Enabled Rate Tx Port WAN m oo kbps Note Shaper must be enabled for Weighted Queuing Mode QoS OK Port Represent LAN or WAN interface Policer Enabled Check this box to enable policer function Policer Rate Rx Type the number for policer function The default value is 500 It is restricted to 500 1000000 when the Policer Unit is set in kbps and it is restricted to 1 1000 when the Policer Unit is set in Mbps Policer Unit Determine the unit kbps Mbps for policer Shaper Enabled Check this box to enable shaper function Shaper Rate Tx Type the number for shaper function The default value is 500 It is restricted to 500 1000000 when the Shaper Unit is set in kbps and it is restricted to 1 1000 when the Shaper Unit is set in Mbps Shaper Unit Determine the unit kbps Mbps for shaper function 4 5 4 QoS Control List Deploying QoS Quality of Service management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise network One reason for QoS is that numerous TCP based applications tend to continually increase their transmission rate and consume all available bandwidth which is called TCP slow start If Vigor2130 Series User s Guide 139 Dr ay Te k other applications are not protected by QoS it will detract much from their performance in the overcrowded network This is espe
76. SB diskette later USB Application gt gt Disk Status Disk Status Safely Remove Disk Manufacturer Model Size Status d USB 0 Mobile Disk 1968M In use S Safely Remove Disk Check this box and then you can remove the USB diskette safely Manufacturer Display the manufacturer of the disk Model Display the type of the disk Size Display the storage space of the diskette s Status Display current usage status of the diskette s Update Click this button to refresh the disk status 4 9 4 Disk Shares This page can define the folder which will be shared while Samba File Sharing is enabled USB Application gt gt Disk Shares Disk Shares Add a New Entry Vigor2130 Series User s Guide 171 Dr ay Tek To add a new entry for disk sharing please click Add a New Entry to open the following page USB Application gt gt Disk Share Add Disk Share Identification Share Name Comment Settings Volume Path Visible Access Share Name Comment Volume Path Visible Access Rights Dray Tek USB2 0 Mobile Disk 1 1967M PORT1 w All Users Read only Type a name to be known by other computers in local network The name must not contain spaces or special characters Type the brief description for the disk sharing The words here will be seen in Network Neighborhood on Windows client computers Select the proper volume for the connected USB diskette It determines the range for the client to a
77. Setup the Internet connection WAN Step 4 Setup the Wireless Wi Fi Step 5 Save the configuration 2 4 1 Setting up the Password The first screen of Quick Start Wizard is entering login password After typing the password please click Next Quick Stan Wizard User Password Old Password New Password Confirm Password lt Back Next gt Cancel Dr ay Tek 18 Vigor2130 Series User s Guide 2 4 2 Setting up the Time Zone On the next page as shown below please select the Time Zone for the router installed and specify the NTP server s Then click Next for next step Quick Start Wizard Time Configuration Time Zone Unknown ka NTP Servers elete 0_openwrt_pool_ntp org elete 1 apenwrt pool ntp org lete 2 openwrt_pool ntp_org lete 3 openwrt_pool ntp org Add NTP server 2 4 3 Setting up the Internet Connection On the next page as shown below please select the appropriate connection type according to the information from your ISP There are five types offered in this page Each connection type will bring out different web page Quick Start Wizard WAN IP Configuration Connection Type Clone MAC Address Enable TI Vigor2130 Series User s Guide 19 Dr ay Te k Static IP You will receive a fixed public IP address or a public subnet namely multiple public IP addresses from your DSL or Cable ISP service prov
78. Unit for packet The default setting is 1442 Clone MAC Address It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Dr ay Tek 98 Vigor2130 Series User s Guide Enable Clone MAC Address MAC Address 00 0E A6 2A D5 A1 After finishing all the settings here please click OK to activate them 3G USB Modem If your router connects to a 3G modem and you want to access Internet via 3G modem choose 3G as connection type and type the required information in this web page WAN gt gt Internet Access WAN IP Configuration Connection Type 3G USB Modem Settings SIM PIN code Modem Initial String Modem Initial String APN Name Modem Dial String PPP Username PPP Password Clone MAC Address Enable default AT amp F default ATEOV1X1 amp D2 amp C1S0 0 default internet default ATDT 99 O Doo O SIM PIN code Modem Initial String1 2 APN Name Modem Dial String PPP Username PPP Password Clone MAC Address Type PIN code of the SIM card that will be used to access Internet Such value is used to initialize USB modem Please use the default value If you have any question please contact to your ISP APN means Access Point Name which is provided and required by some ISPs Such value is used to dial through USB mode Please use the default value If you have any question please contact to your ISP
79. Version v1 1 0_RC6 gt Firewall Build Date Time 1753 Tue Aug 25 16 11 42 CST 2009 Hardware NAT Version 1 0 0 13 b gt ewer cogs taal System Date Mon Aug 31 03 02 52 2009 Applications System Uptime 3d 10 39 36 gt VPN and Remote Access gt Wireless LAN gt USB Application a EE gt User MAC Address 00 50 7F C7 7B 30 MAC Address 00 50 7F C7 7B 31 gt Diagnostics IP Mask 255 255 255 0 IP Mask 255 255 255 0 Default Gateway 192 168 5 1 L t Primary DNS 168 95 1 1 ogoi Secondary DNS All Rights Reserved Main screen for admin mode operation full configuration High Speed Gig bit Router Vigor2130 Series j DrayTek System Status Quick Start Wizard Auto refresh C Online Status Model Vigor2130 gt WAN Platform VSC7501 gt LAN Bootloader Version Dray Boot 1 0 0E gt NAT Firmware Version v1 1 0_RC6 gt i Build Date Time r753 Tue Aug 25 16 11 42 CST 2009 gt P eP Hardware NAT Version 1 0 0 13 ine System Date Mon Aug 31 02 59 22 2009 Wireless LAN System Uptime 3d 10 36 05 gt USB Application gt User gt System Maintenance tn moe MAC Address 00 50 7F C7 7B 30 MAC Address 00 50 7F C7 7B 31 IP Address 192 168 1 1 IP Address 192 168 5 21 IP Mask 255 255 255 0 IP Mask 255 255 255 0 All Rights Reserved Default Gateway 192 168 5 1 Primary DNS 168 95 1 1 Secondary DNS Main screen for user mode operati
80. Version System Date System Uptime Vigor2130 Series User s Guide Secondary DNS Display the model name of the router Display the hardware type that this device is built upon Display the bootloader version of the router Display the firmware version of the router Display the date and time of the current firmware build Display the hardware acceleration NAT version Display current time and date for the system server Display the connection time for the system server 173 Dray Tek LAN MAC Address IP Address IP Mask WAN MAC Address IP Address IP Mask Default Gateway Primary DNS Secondary DNS Wireless LAN MAC Address Device Type SSID Channel Manufacturer Model Size Status 4 11 2 System Password Display the MAC address of the LAN Interface Display the IP address of the LAN interface Display the subnet mask address of the LAN interface Display the MAC address of the WAN Interface Display the IP address of the WAN interface Display the subnet mask address of the WAN interface Display the gateway address of the WAN interface Display the specified primary DNS setting Display the specified secondary DNS setting Display the MAC address of the wireless LAN Display the device type used for wireless LAN Display the SSID of the router Display the channel that wireless LAN used Display the manufacturer of the disk Display the type of the disk Display the storage s
81. Wireless Card Installed Connection via WPS y ae ap aca Station Set SSID and lt gt Encryption WPA WPA2 lt gt PIN Code Note Such function is available for the wireless station with WPS supported There are two methods to do network connection through WPS between AP and Stations pressing the Start PBC button or using PIN Code On the side of Vigor 2130 series which served as an AP press WPS button once on the front panel of the router or click Start PBC on web configuration interface On the side of a station with network card installed press Start PBC button of network card WLAN Card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the vigor router PIN Code WLAN Card ccl N M Definea PIN Code of Station y PIN Code 4 8 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Vigor2130 Series User s Guide 167 Dr ay Te k Wireless LAN gt gt Access Control Wireless MAC
82. a user to obtain an IP address automatically from a DHCP server on the Internet If you choose DHCP mode the DHCP server of your ISP will assign a dynamic IP address for your router automatically It is not necessary for you to assign any setting WAN gt gt Internet Access WAN IP Configuration Connection Type DHCP Settings Router Name igor 13 The same as syslog s router name Clone MAC Address Router Name Type in a name for the router It must be the same as the name used in Syslog Clone MAC Address It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 24 D5 A1 After finishing all the settings here please click OK to activate them PPPoE To choose PPPoE as the accessing protocol of the internet please select PPPoE from the Internet Access menu The following web page will be shown WAN gt gt Internet Access WAN IP Configuration Connection Type PPPoE Settings Username Password Redial Policy Idle Time out MTU Size Clone MAC Address Enable CI Username Type in the username provided by ISP in this field Vigor2130 Series User s Guide 25 Dr ay Te k Password Redial Policy Idle Time Out MTU Size Enable Disable Clone MAC Address Type in the password provided by ISP in this field If you want to connect to Internet all the t
83. able of remote user profile so that users can be authenticated to dial in via VPN connection The router provides access accounts for dial in users Users Users Username Full Name Allow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP No users defined Add a New User Adding a New User Click Add new user to open the following page User Configuration Add User User Settings Username Full Name Password Confirm Password Allow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP OK Delete User Username Type a name for this user Full Name Type full name for this user Password Type the password for this user Password again Type the password again for confirmation Allow Disk Sharing Check this box to have the remote user share the disk information Allow IPSEC L2TP Check this box to let the remote user connecting to this device through IPSEC L2TP Allow PPTP Check this box to let the remote user connecting to this device through PPTP Allow FTP Check this box to let the remote user connecting to FTP server via this router Delete User Remove settings on current page and delete the user This button is not available for new configuration by pressing Add a New User Dray Te k 154 Vigor2130 Series User s Guide When you finish the settings simply click OK to save the configuration The new user will be created and displayed on the page Users Users Username Full Name Allow Disk Sharing All
84. after two minutes You need to setup WPS within two minutes After finishing the settings here please click Next Dray Tek 28 Vigor2130 Series User s Guide 2 4 5 Save the Wizard Configuration Now you can see the following screen It indicates that the setup is complete Different types of connection modes will have different summary Click Finish and then restart the router Quick Start Wizard Vigor Wizard Setup is now finished Press Finish button to save and finish the wizard setup You will be prompted for the new password Note that the configuration process takes a few seconds to complete 2 5 Online Status seek ee rn Coa The online status shows the system status WAN status and other status related to this router within one page If you select PPPoE as the protocol you will find out a link of Dial PPPoE or Drop PPPoE in the Online Status web page Online status for DHCP Online Status System Status LAN Status Auto refresh L System Uptime Od 03 15 19 IP Address TX Packets RX Packets TX Bytes RX Bytes 192 168 1 1 10991 WAN Status IP GW IP 168 95 1 1 11895 10669316 1696736 gt gt Release Mode Up Time 192 168 5 21 192 168 5 1 DHCP Od 03 14 45 Primary DNS Secondary DNS TX Packets RX Packets TX Bytes RX Bytes 10253 2039 7 1640213 11506611 Detailed explanation is shown below LAN Status IP Address TX Packets RX Packets WAN Status Line Vigor2130 Series User s Gui
85. ailable authentication schemes and encryption algorithms to the VPN peers and get its feedback to find a match Automatic sides aes any aes 128 aes 192 aes 256 IKE Phase 2 proposal To propose the local available algorithms to the VPN peers and get its feedback to find a match Automatic ha Perfect Forward Secrecy The IKE Phase 1 key will be reused to avoid the computation complexity in phase 2 The default value is inactive this function 4 8 Wireless LAN This function is used for n models 4 8 1 Basic Concepts Over recent years the market for wireless communications has enjoyed tremendous growth Wireless technology now reaches or is capable of reaching virtually every location on the surface of the earth Hundreds of millions of people exchange information every day via wireless communication products The Vigor n model a k a Vigor wireless router is designed for maximum flexibility and efficiency of a small office home Any authorized staff can bring a built in WLAN client PDA or notebook into a meeting room for conference without laying a clot of LAN cable or drilling holes everywhere Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access The Vigor wireless routers are equipped with a wireless LAN interface compliant with the standard IEEE 802 1 1n draft 2 protocol To boost its performance further the Vigor
86. alue and will be offered solely at our discretion This warranty will not apply if the product is modified misused tampered with damaged by an act of God or subjected to abnormal working conditions The warranty does not cover the bundled or licensed software of other vendors Defects which do not significantly affect the usability of the product will not be covered by the warranty We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes Web registration is preferred You can register your Vigor router via http www draytek com Due to the continuous evolution of DrayTek technology all routers will be regularly upgraded Please consult the DrayTek web site for more information on newest firmware tools and documents http www draytek com i Dray Tek European Community Declarations Manufacturer DrayTek Corp Address No 26 Fu Shing Road HuKou County HsinChu Industrial Park Hsin Chu Taiwan 303 Product Vigor2130 Series Router DrayTek Corp declares that Vigor2130 Series of routers are in compliance with the following essential requirements and other relevant provisions of R amp TTE Directive 1999 5 EEC The product conforms to the requirements of Electro Magnetic Compatibility EMC Directive 2004 108 EC by complying with the requirements set forth in EN55022 Class B and EN55024 C
87. and Connection on Router Status AE Broadband Network Tasks d General ae a hinet E Create anew connection W ecdnnecded Z Set up a home or small WAN Miniport PPPOE Internet Gateway office network Status Connected _ Dial up Duration 00 19 06 See Also pe i f P test Speed 100 0 Mbps 4 Network Troubleshooter Ni SERIER e xa wayTek ISDN PPP A Ea gimat Internet Internet Gateway My Computer Other Places Internet Gateway w w 7 E Control Panel IP Broadband Connection on 43 Router 3 My Network Places lt i Backes Lj My Documents Sent 404 Fad My Computer Received 1115 BEE LAN or High Speed Internet on Local Area Connection Enabled a i Realtek RTLB139 810x Family Details Close Network Connections System Folder The UPnP facility on the router enables UPnP aware applications such as MSN Messenger to discover what are behind a NAT router The application will also learn the external IP address and configure port mappings on the router Subsequently such a facility forwards packets from the external ports of the router to the internal ports used by the application TIP Broadband Connection on Router Properties i Advanced Settings General Services Connect to the Internet using Select the services running on your network that Internet user can ACCESS J IF Broadband Connection on Router F
88. and the packets will be delivered to the correct host PC in the local area network Thus all the host PCs can share a common Internet connection Get Your Public IP Address from ISP In ADSL deployment the PPP Point to Point style authentication and authorization is required for bridging customer premises equipment CPE Point to Point Protocol over Ethernet PPPoE connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator This implementation provides users with significant ease of use Meanwhile it provides access control billing and type of service according to user requirement When a router begins to connect to your ISP a serial of discovery process will occur to ask for a connection Then a session will be created Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system And your IP address DNS server and other related information will usually be assigned by your ISP Network Connection by 3G USB Modem For 3G mobile communication through Access Point is popular more and more Vigor router adds the function of 3G network connection for such purpose By connecting 3G USB Modem to the USB port of Vigor router it can support HSDPA UMTS EDGE GPRS GSM and the future 3G standard HSUPA etc Vigor router with 3G USB Modem allows you to receive 3G signals at any place such as your car or certain location holding outdoor activity and share the bandwidth
89. ardware address length is equal to Ethernet 0x06 and the protocol address length is equal to IPv4 0x04 must match this entry Any Any value is allowed Specify whether frames packets can meet the action according to their ARP RARP hardware address space HRD settings IP 0 ARP RARP frames where the hardware address space is equal to Ethernet 1 must not match this entry 1 ARP RARP frames where the hardware address space is equal to Ethernet 1 must match this entry Any Any value is allowed Specify whether frames can hit the action according to their ARP RARP protocol address space PRO settings Ethernet 0 ARP RARP frames where the protocol address space is equal to IP 0x800 must not match this entry 1 ARP RARP frames where the protocol address space is equal to IP 0x800 must match this entry Any Any value is allowed 125 Dray Tek Choose IPv4 as the Frame Type You will see IP Parameters on the bottom of the page If you choose ICMP as IP Protocol Filter you will get the page as the following IP Parameters ICMP Parameters IP Protocol Filter ICMP Type Filter IP TTL Any ICMP Type Value IP Fragment Any ICMP Code Filter IP Option An ICMP Code Value SIP Filter Network SIP Address 192 168 1 1 SIP Mask 255 255 255 0 DIF Filter Network DIF Address 192 168 1 254 DIP Mask IP TTL Specify the Time to Live settings for this ACE IP TTL Non zero IP Fragment IP Option Zero Pv4 f
90. at assigns private IP address to each local host See the following diagram for a briefly understanding Internet Public IP Address Private Subnet Router IP Addre U gt 168 1 4 a PR li 0 Vigor2130 Series User s Guide 41 Dr ay Te k In some special case you may have a public IP subnet from your ISP such as 220 135 240 0 24 This means that you can set up a public subnet or call second subnet that each host is equipped with a public IP address As a part of the public subnet the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside Therefore the router should be set as the gateway for public hosts Internet Public IP Address 220 135 240 207 Private Subn Router IP What is Routing Information Protocol RIP Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing This allows users to change the information of the router such as IP address and the routers will automatically inform for each other What are Virtual LANs and Rate Control You can group local hosts by physical ports and create up to 4 virtual LANs To manage the communication between different groups please set up rules in Virtual LAN VLAN function and the rate of each Internet Dray Tek 42 Vigor2130 Series User s Guide Below shows the LAN menu FLAN General Setup Ports MAC Address Table
91. ation list When you finish adding a new session limit simply click OK The following page will appear for you to check 3 4 2 Bandwidth Limit The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Limit Bandwidth to make the bandwidth usage more efficient In the Bandwidth Management menu click Bandwidth Limit to open the web page Bandwidth Management gt gt Bandwidth Limit Bandwith Limit Configuration Enable Disable Default TX Limit 5000 Kbps Default RX Limit 5000 Kbps Limitation List Index Start IP TH limit FRE limit Specific Limitation Stat P o EndiP o TX Limit Kbps RX Limit Kbps 1 Bandwidth limit only works for NEW sessions Original sessions are controlled by HNAT 2 Ifthe IP is controlled by bandwidth limit throughput would be lower than 64Mbps OK To activate the function of limit bandwidth simply click Enable and set the default upstream and downstream limit Enable Click this button to activate the function of limit bandwidth Disable Click this button to close the function of limit bandwidth Default TX limit Define the default speed of the upstream for each computer in LAN Vigor2130 Series User s Guide oy Dr ay Te k Default RX limit Define the default speed of the downstream for each computer in LAN Limitation List Display a list of specific limitations tha
92. ation onto the list Firewall gt gt Access Control List ACE Configuration Ingress Port Action Frame Type Rate Limiter Port Copy Counter MAC Parameters VLAN Parameters DMAC Filter VLAN ID Filter Tag Priority Define which port the packet from Policy ID is defined in Ports Configuration Page which can group more than port ACE Configuration Ingress Port define which port the packet coming from The policy IDs are defined in Firewall gt gt Port Configuration Each Policy ID might have more than one port grouped Dray Tek 120 Vigor2130 Series User s Guide Vigor2130 Series User s Guide Ingress Port Policy 6 v Any Policy 1 Policy 2 Policy 3 Policy 4 Policy 5 Policy 6 Policy T Policy 6 Action it means the session limitation for this access control list will be applied to if matching with the rule defined in this page Action Rate Limiter Select a rate limiter to apply to this port Available settings include Disabled and to 10 The default value is Disabled Rate Limiter Port Copy Select which port the frames are copied to for the purpose of monitoring Available settings include Disabled and 1 to 10 The default value is Disabled Counter The counter indicates the number of times the ACE was hit by a frame Frame Type Such option differs according to the selection you choose we will explain it in detailed later z Dray Tek MAC Parameter Spe
93. ault Setting If Necessary Sometimes a wrong connection can be improved by returning to the default settings Try to reset the router by software or hardware Warning After pressing factory default setting you will loose all settings you did before Make sure you have recorded all useful settings before you pressing Software Reset You can reset the router to factory default via Web page Go to System Maintenance and choose Reboot System on the web page The following screen will appear Choose Using factory default configuration and click OK After few seconds the router will return all the settings to the factory settings Vigor2130 Series User s Guide 199 Dr ay Te k System Maintenance gt gt Reboot System Reboot System Do You want to reboot your router Using current configuration Using factory default configuration Hardware Reset While the router is running ACT LED blinking press the Factory Reset button and hold for more than 5 seconds When you see the ACT LED blinks rapidly please release the button Then the router will restart with the default configuration Factory Reset After restore the factory default setting you can configure the settings for the router again to fit your personal request 5 6 Contacting Your Dealer If the router still cannot work correctly after trying many efforts please contact your dealer for further help right away For any questions please feel
94. ay Te k 5 2 Checking If the Network Connection Settings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings After trying the above section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK For Windows The example is based on Windows XP As to the examples for other operation systems please refer to the similar steps or find support notes in www draytek com 1 Goto Control Panel and then double click on Network Connections Webatork Connections 2 Right click on Local Area Connection and click on Properties i Disable a Status ___J Repair Bridge Connections Create Shortcut Rename Properties E 3 Select Internet Protocol TCP IP and then click Properties ethO Properties General Authentication Advanced Dray Tek Connect using E9 ASUSTeK Broadcom 440k 10 100 Ir Configure This connection uses the following items iw el Client for Microsoft Networks w File and Printer Sharing tor Microsoft Networks w los Packet Scheduler ag ntemmet Protocol TCP YIP R Install Lliairretall Properties Description Transmission Control Protocolslnternet Protocol The default Wide area network protocol that provides communication across diverse interconnected networks Show i
95. ccess into The user can enter a directory name in this field Then after clicking OK the router will create the specific new folder in the USB diskette In addition if the user types 7 here he she can access into all of the disk folders and files in USB diskette Note When write protect status for the USB diskette is ON you cannot type any new folder name in this field Only can be used in such case Check this box to make this USB diskette to be seen in Network Neighborhood on Windows of clients in local network Specify the access right and apply to all the wireless clients that want to connect to the attached USB diskette All Users Read only ha All Users Read only All Users Read write specific Users All Users Read only everyone has read only access to the share disk All Users Read write everyone has read write access to the share disk Specific Users Only specific user s can access into the share disk 172 Vigor2130 Series User s Guide 4 10 User 4 10 1 User Configuration This page allows you to set user s setting that allowed to use PPTP FTP IPSEC L2TP connection Users Users Username Full Name No users defined Allow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP Add a New User Adding a New User Click Add new user to open the following page User Configuration Add User Username Full Name Password Confirm Password Allow Disk Sharing Al
96. ce IP mask in the SIP Address and SIP Mask fields that appear Type the SIP Address here This option is available when you choose Host or Network as source SIP Filter Type the SIP Mask here This option is available only when you choose Network as source SIP Filter Specify the destination IP filter for this ACE DIP Filter Network Any No destination IP filter is specified Host Destination IP filter is set to Host Specify the destination IP address in the DIP Address field that appears Network Destination IP filter is set to Network Specify the destination IP address and destination IP mask in the DIP Address and DIP Mask fields that appear Type the DIP Address here This option is available when you choose Host or Network as destination DIP Filter Type the DIP Mask here This option is available only when you choose Network as destination DIP Filter Specify the ICMP filter for this ACE Any No ICMP filter is specified Specific If you want to filter a specific ICMP filter with this ACE you can enter a specific ICMP value A field for entering an ICMP value appears If you choose Specific as ICMP Type Filter you have to type the ICMP Type Value manually The allowed range is 0 to 255 A frame meeting this ACE matches this ICMP value 127 Dray Tek Dray Tek ICMP Code Filter ICMP Code Value Specify the ICMP code filter for this ACE Any No ICMP code filter is specified ICMP code fil
97. cially essential to those are low tolerant of loss delay or jitter delay variation Another reason is due to congestions at network intersections where speeds of interconnected circuits mismatch or traffic aggregates packets will queue up and traffic can be throttled back to a lower speed If there s no defined priority to specify which packets should be discarded or in another term dropped from an overflowing queue packets of sensitive applications mentioned above might be the ones to drop off How this will affect application performance There are two components within Primary configuration of QoS deployment Classification Identifying low latency or crucial applications and marking them for high priority service level enforcement throughout the network Scheduling Based on classification of service level to assign packets to queues and associated service types The basic QoS implementation in Vigor routers is to classify and schedule packets based on the service type information in the IP header For instance to ensure the connection with the headquarter a teleworker may enforce an index of QoS Control to reserve bandwidth for HTTPS connection while using lots of application at the same time One more larger scale implementation of QoS network is to apply DSCP Differentiated Service Code Point and IP Precedence disciplines at Layer 3 Compared with legacy IP Precedence that uses Type of Service ToS field in th
98. cify the destination MAC filter for this ACE MAC Parameters DMAC Filter Any No DMAC filter is specified DMAC filter status is don t care MC Frame must be multicast BC Frame must be broadcast UC Frame must be unicast VLAN Parameter Specify the VLAN ID filter for this ACE VLAN Parameters VLAN ID Filter VLAN ID Tag Priority VLAN ID Filter Specify the VLAN ID filter for this ACE If you choose Any no VLAN ID filter is specified WLAN ID filter status is don t care If you want to filter a specific VLAN ID with this ACE choose Specific A field for entering a VLAN ID number appears VLAN ID If you choose Specific you have to type VLAN ID number manually The allowed range is 1 to 4095 Tag Priority Specify the tag priority for this ACE A frame that hits this ACE matches this tag priority The allowed number range is from 0 to 7 The value Any means that no tag priority is specified tag priority is don t care Tag Priority 1 Fi 3 4 5 E 7 An Dray Te k 122 Vigor2130 Series User s Guide Detailed Explanation for Frame Type Frame Type selection will lead different options for configuration Ingress Port Frame Type ARP Choose Ethernet Type as the Frame Type you will get Ethernet Type Parameters option as the following Ethernet Type Parameters Etherlype Filter Ethernet Type Filter Choose Any to set the parameter with any value set by the router auto
99. con in notification area when connected Motty me when this connection has limited or no connectivity 194 Vigor2130 Series User s Guide 4 Select Obtain an IP address automatically and Obtain DNS server address automatically Internet Protocol TCP IP Properties General _Altemate Configuration i You can get IF settings assigned automatically if your network supports this capability Othenvise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically O Use the following IP address For MacOs 1 Double click on the current used MacOs on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop down list of Configure IPv4 a0 Network s Eae a Show All Displays Sound Network Startup Disk Location Automatic Show Built in Ethernet TCP IP PPPoE AppleTalk Proxies Ethernet IP Address m Renew DHCP Lease Subnet Mask 255 255 255 0 DHCP Client ID If required Router 192 168 1 1 DNS Servers Optional Search Domains Optional IPv6 Address fe80 0000 0000 0000 020a 95ff fe8d 72e4 Configure IPv6 rr Click the lock to prevent further changes Assist me Apply Now Vigor2130 Series User s Guide 195 Dr ay Te k 5 3 Pinging the Router from Your Computer The default gateway IP addr
100. cuments j 4 My Computer My Recent Emy Network Places Documents BP Ry S COM Lite _9MWwSnapsoo C TeleDanmark i Tools config 2 v2k2_232_config_1 vek6_250_config_1 My Documents My Computer _ File name config ba My Network nave as type Configuration file wt 4 Click Save button the configuration will download automatically to your computer as a file named config cfg The above example is using Windows platform for demonstrating examples The Mac or Linux platform will appear different windows but the backup function is still available Note Backup for Certification must be done independently The Configuration Backup does not include information of Certificate Restore Configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below Dray Tek 86 Vigor2130 Series User s Guide System Maintenance gt gt Configuration Backup Configuration Backup Restoration Backup Click Backup to download current running configurations as a file select a configuration file ee w Click Restore to upload the file 2 Click Browse button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful 3 9 4 Syslog Mail Alert SysLog function is provided for users to monitor rout
101. d entry allowing for continuous refresh with the same start address The button gt gt will use the last entry of the currently displayed VLAN MAC address pairs as a basis for the next lookup When the end is reached the text no more entries is shown in the displayed table use the l lt lt button to start over Vigor2130 Series User s Guide Dray Tek 8 Diagnostics gt gt MAC Address Table MAC Address Table Auto reftesh C Start from VLAN and MAC address 00 00 00 00 00 00 with entries per page Port Members Type VLAN MAC Address CPU WAN LAN LAN2 LANS LAN4 Dynamic 1 O00 OE A6 2A D5 Al y Dynamic 00 50 7F 38 60 C5 Dynamic 00 06 1B D0 DF Ai Dynamic 00 0C 6E E7 79 99 Dynamic 00 O0E A6 16 08 24 Dynamic 00 1B FC F8 11 40 Dynamic 00 S0 7F 1A 56 71 Dynamic Z 00 SO 7F 38 60 C6 Type Indicate whether the entry is a static or dynamic entry VLAN Display the VLAN ID of that entry MAC Address Display the MAC address of that entry Port Members Display the port of that entry Auto refresh Check it to enable auto refresh function Refresh Click it to reload the page Clear Click it to clear the whole table Vigor2130 Series User s Guide 189 Dr ay Te k 4 12 7 DHCP Table The facility provides information on IP address assignments This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and click DHCP Table to open the web page Diagnostics gt gt
102. d publicly These are known as private IP addresses and are listed in the following ranges From 10 0 0 0 to 10 255 255 255 From 172 16 0 0 to 172 31 255 255 From 192 168 0 0 to 192 168 255 255 Vigor2130 Series User s Guide 93 Dr ay Te k What are Public IP Address and Private IP Address As the router plays a role to manage and further protect its LAN it interconnects groups of host PCs Each of them has a private IP address assigned by the built in DHCP server of the Vigor router The router itself will also use the default private IP address 192 168 1 1 to communicate with the local hosts Meanwhile Vigor router will communicate with other network devices through a public IP address When the data flow passing through the Network Address Translation NAT function of the router will dedicate to translate public private addresses and the packets will be delivered to the correct host PC in the local area network Thus all the host PCs can share a common Internet connection Get Your Public IP Address from ISP In ADSL deployment the PPP Point to Point style authentication and authorization is required for bridging customer premises equipment CPE Point to Point Protocol over Ethernet PPPoE connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator This implementation provides users with significant ease of use Meanwhile it provides access control billing and type of service acc
103. de Displays the IP address of the LAN interface Displays the total transmitted packets at the LAN interface Displays the total number of received packets at the LAN interface Displays the physical connection Ethernet of this interface 29 Dray Tek Name Mode Up Time IP GW IP TX Packets TX Rate RX Packets RX Rate Displays the name set in WANI1 WAN web page Displays the type of WAN connection e g PPPoE Displays the total uptime of the interface Displays the IP address of the WAN interface Displays the IP address of the default gateway Displays the total transmitted packets at the WAN interface Displays the speed of transmitted octets at the WAN interface Displays the total number of received packets at the WAN interface Displays the speed of received octets at the WAN interface Note The words in green mean that the WAN connection of that interface is ready for accessing Internet the words in red mean that the WAN connection of that interface is not ready for accessing Internet 2 6 Saving Configuration Each time you click OK on the web page for saving the configuration you can find messages showing the system interaction with you Ready indicates the system is ready for you to input settings Settings Saved means your settings are saved once you click Finish or OK button Dray Tek 30 Vigor2130 Series User s Guide 3 1 WAN User Mode Operation This chapter will guide users to
104. de of the SIM card that will be used to access Internet 40 Vigor2130 Series User s Guide 3 2 LAN Modem Initial String1 2 Such value is used to initialize USB modem Please use the default value If you have any question please contact to your ISP APN Name APN means Access Point Name which is provided and required by some ISPs Modem Dial String Such value is used to dial through USB mode Please use the default value If you have any question please contact to your ISP PPP Username Type the PPP username optional PPP Password Type the PPP password optional Clone MAC Address It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 24 D5 A1 Local Area Network LAN is a group of subnets regulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP Basics of LAN The most generic function of Vigor router is NAT It creates a private subnet of your own As mentioned previously the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address What NAT does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server th
105. dence that uses Type of Service ToS field in the IP header to define 8 service classes DSCP is a successor creating 64 classes possible with backward IP Precedence compatibility In a QoS enabled network or Differentiated Service DiffServ or DS framework a DS domain owner should sign a Service License Agreement SLA with other DS domain owners to define the service level provided toward traffic from different domains Then each DS node in these domains will perform the priority treatment This is called per hop behavior PHB The definition of PHB includes Expedited Forwarding EF Assured Forwarding AF and Best Effort BE AF defines the four classes of delivery or forwarding classes and three levels of drop precedence in each class Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic thus to allocate certain amount of resource execute appropriate policing classification or scheduling The core routers in the backbone will do the same checking before executing treatments in order to ensure service level consistency throughout the whole QoS enabled network Vigor2130 Series User s Guide 57 Dr ay Tek Private Network DS domain 1 DS domain 2 However each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners It s not easy to achieve deterministic and consistent high
106. destination filter with this ACE you can enter a specific TCP destination value A field for entering a TCP destination value appears Range If you want to filter a specific TCP destination range filter with this ACE you can enter a specific TCP destination range value A field for entering a TCP destination port range appears Type the value if you choose Specific as the Dest Port Filter The allowed range is 0 to 65535 A frame meeting this ACE matches this TCP source value Type the value if you choose Range as the Dest Port Filter The allowed range is O to 65535 A frame meeting this ACE matches this TCP source value Specify the TCP No more data from sender FIN value for this ACE 0 TCP frames where the FIN field is set must not be able to match this entry 1 TCP frames where the FIN field is set must be able to match this entry Any Any value is allowed Specify the TCP Synchronize sequence numbers SYN value for this ACE 0 TCP frames where the SYN field is set must not be able to match this entry 1 TCP frames where the SYN field is set must be able to match this entry Any Any value is allowed Specify the TCP RST value for this ACE 0 TCP frames where the RST field is set must not be able to match this entry 1 TCP frames where the RST field is set must be able to 13 Dray Tek match this entry Any Any value is allowed TCP PSH Specify the TCP Push Function PSH value for
107. dress Enable Clone MAC Address MAC Address 00 0E A6 2A D5 A1 After finishing all the settings here please click OK to activate them Vigor2130 Series User s Guide 97 Dr ay Te k PPTP L2TP To use PPTP L2TP as the accessing protocol of the internet please choose PPTP L2TP from Connection Type drop down menu The following web page will be shown WAN gt gt Internet Access WAN IP Configuration Connection Type PPTP Settings Username Password server Address WAN IP Network Settings Static IP IF Address Subnet Mask Redial Policy Connect on Demand Idle Time out MTU Size Clone MAC Address Enable F K Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this field Server Address Type in the IP address for PPTP L2TP server WAN IP Network Settings You can choose Static IP or DHCP as WAN IP network setting IP Address Type the IP address if you choose Static IP as the WAN IP network setting Subnet Mask Type the subnet mask 1f you chose Static IP as the WAN IP Redial Policy If you want to connect to Internet all the time you can choose Always On Otherwise choose Connect on Demand and Connect on Demand v Connect on Demand Idle Time Out Set the timeout for breaking down the Internet after passing through the time without any action When you choose Connect on Demand you have to type value here MTU Size It means Max Transmit
108. dware Encryption Vigor Router is equipped with a hardware AES encryption engine so it can apply the highest protection to your data without influencing user experience Complete Security Standard Selection To ensure the security and privacy of your wireless communication we provide several prevailing standards on market WEP Wired Equivalent Privacy is a legacy method to encrypt each frame transmitted via radio using either a 64 bit or 128 bit key Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys WPA Wi Fi Protected Access the most dominating security mechanism in industry is separated into two categories WPA personal or called WPA Pre Share Key WPA PSK and WPA Enterprise or called WPA 802 1x In WPA Personal a pre defined key is used for encryption during data transmission WPA applies Temporal Key Integrity Protocol TKIP for data encryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the over the air data protection and or privacy on your wireless network The Vigor wireless router is very flexible and can support multiple secure connections with both WEP and WPA
109. e IGMP Snooping IGMP Status UPnP Configuration 3 5 1 Dynamic DNS The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP It means that the public IP address assigned to your router changes each time you access the Internet The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address It allows the router to update its online WAN IP address mappings on the specified Dynamic DNS server Once the router is online you will be able to use the registered domain name to access the router or internal virtual servers from the Internet It is particularly helpful if you host a web server FTP server or other server behind the router Before you use the Dynamic DNS feature you have to apply for free DDNS service to the DDNS service providers The router provides up to three accounts from three different DDNS service providers Basically Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www dyndns org www no ip com www dtdns com www changeip com www dynamic nameserver com You should visit their websites to register your own domain name for the router Applications gt gt Dynamic DNS Dynamic DNS Configuration Enable Dynamic DNS DynDNS Service Hostname Username Password Check IP change every Force IP update every Enable Dynamic DNS Check this box to enable the current account DynDNS Service Selec
110. e Bandwidth Management menu click QoS Control List to open the web page Dray Tek 140 Vigor2130 Series User s Guide Bandwidth Management gt gt QoS Control List QoS Control List Configuration QCE Type Type Value Traffic Class TCP UDP Port 22 23 High TCP UDP Port 5060 High TCP UDP Port 25 Medium TCP UDP Port a0 Medium TCP UDP Port Medium TCP UDP Port 145 Medium DSCP Low MODOO OM OOP OO OOO OHOOOOOOOOOOOOO oe amp Note A QCL consists of an ordered list of up to 12 QCEs QCE Type Display the type of that QCE QoS Control Entries Type Value Display the value specified for the QCE Traffic Class Display the class of the data transmission for the QCE QoS Control List allows users to set up to five groups of QCL Each QCL group can contain 12 QCE settings QoS Control List Configuration QCE Type TCP UDP Port 22 235 Adding a New QCE Click to add a new QCE onto this page Different QCE type will bring out different web settings If you choose Ethernet Type as QCE Type you have to type value for it and specify traffic class from Low Normal Medium and High Vigor2130 Series User s Guide 141 Dray Tek Bandwidth Management gt gt QoS Control List QCE Configuration QCE Type Ethernet Type Ethernet Type Value Trafic Class Medium High Ethernet Type Value Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde
111. e IP header to define 8 service classes DSCP is a successor creating 64 classes possible with backward IP Precedence compatibility In a QoS enabled network or Differentiated Service DiffServ or DS framework a DS domain owner should sign a Service License Agreement SLA with other DS domain owners to define the service level provided toward traffic from different domains Then each DS node in these domains will perform the priority treatment This is called per hop behavior PHB The definition of PHB includes Expedited Forwarding EF Assured Forwarding AF and Best Effort BE AF defines the four classes of delivery or forwarding classes and three levels of drop precedence in each class Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic thus to allocate certain amount of resource execute appropriate policing classification or scheduling The core routers in the backbone will do the same checking before executing treatments in order to ensure service level consistency throughout the whole QoS enabled network Private Network DS domain 1 DS domain 2 However each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners It s not easy to achieve deterministic and consistent high priority QoS traffic throughout the whole network with merely Vigor router s effort In th
112. e Static Route LAN gt gt Static Route Destination Address Status Index The number 1 to 10 under Index displays current static router Destination Address Display the destination address of the static route Status Display the status of the static route Add To add a new static route Add Static Routes to Private and Public Networks Here is an example of setting Static Route in Main Router so that user A and B locating in different subnet can talk to each other via the router Assuming the Internet access has been configured and the router works properly use the Main Router to surf the Internet create a private subnet 192 168 10 0 using an internal Router A 192 168 1 2 create a public subnet 211 100 88 0 via an internal Router B 192 168 1 3 have set Main Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router Vigor2130 Series User s Guide 109 Dr ay Te k Dray Tek Internet Set Router C Static Route 192 168 1 1 ea Click the LAN Static Route and click Add Check the Enable box Please add a static route as shown below which regulates all packets destined to 192 168 10 0 will be forwarded to 192 168 1 2 Click OK LAN gt gt Static Route Add Static Route Enable Destination IP Address 192 168 10 0 Subnet Mask 255 255
113. e client can use the FTP site USB diskette through Vigor router r USB Application USB General Settings FTP User Management Disk Status Disk Shares Vigor2130 Series User s Guide 169 Dr ay Te k 4 9 1 USB General Settings This page will determine the number of concurrent FTP connection and default charset for FTP server At present the Vigor router can support USB diskette with versions of FAT16 and FAT32 only Therefore before connecting the USB diskette into the Vigor router please make sure the memory format for the USB diskette is FAT16 or FAT32 It is recommended for you to use FAT32 for viewing the filename completely FAT16 cannot support long filename USB Application gt gt USB General Settings USB General Settings Enable FTP Enable Disk Sharing Workgroup Name OK Enable FTP Check this box to enable FTP connection Enable Disk Sharing Check this box to share the information on USB disk Workgroup Name Type the name for FTP users for accessing into FTP server USB diskette Be aware that users cannot access into USB diskette in anonymity Later you can open FTP client software and type the username specified here for accessing into USB storage diskette 4 9 2 FTP User Management This page allows you to change user setting for USB storage disk Before modifying settings in this page please insert a USB diskette and configure settings in User gt gt User Configuration first Otherwise an e
114. e security of your system choose the proper encryption for data transmission Different encryption mode will bring out different setting encryption ways Dray Tek Wireless Securit Configuration Encryption WPA RADIUS WPS None The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key Wireless Security Configuration Encryption WEP Configuration Default Key Keyl Keyz Keys Key4 Authentication Mode Default Key All wireless devices must support the same WEP encryption bit size and have the same key Keyl1 Key4 Four Keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Authentication Mode Choose OPEN or SHARED as the authentication mode OPEN Set wireless to authentication open mode SHARED Set wireless to authentication shared mode WPA PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication 164 Vigor2130 Series User s Guide
115. ed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 2A D5 A1 4 2 LAN Local Area Network LAN is a group of subnets regulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP FLAN General Setup Ports MAC Address Table VLAN Static Route Bind IP to MAC Basics of LAN The most generic function of Vigor router is NAT It creates a private subnet of your own As mentioned previously the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address What NAT does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address to each local host See the following diagram for a briefly understanding Dray Te K 102 Vigor2130 Series User s Guide Internet DHCP Server Public IP Address Private Subnet Router IP Addres a t E k In some special case you may have a public IP subnet from your ISP such as 220 135 240 0 24 This means that you can set up a public subnet or call second subnet that each host is equipped with a public IP address As a part of the public subnet the Vigor router will serve for IP routing to help hosts in the public subnet to communicate w
116. ed to for the purpose of monitoring Available settings include Disabled and 1 to 10 The default value is Disabled Port Copy Counter Counts the number of frames that match this Access Control Entry ACE Refresh Click this button to refresh the number of the counter immediately Clear Click this button to clear the number of the counter on this page Dray Tek 118 Vigor2130 Series User s Guide 4 4 3 Rate Control Object Configure the rate limiter for the ACL Access Control List of the router Firewall gt gt Rate Control Object ACL Rate Limiter Configuration Rate Limiter ID elelelelsfs el eB x 4 Rate Limited ID Rate limiter ID will be applied to WAN port and LAN port Please specify a rate number for each ID The default setting is 1 packet per second Rate Define the rate by choosing from the following drop down list Vigor2130 Series User s Guide 119 Dr ay Te k 4 4 4 Access Control List This page can define which kind of packet can access the router The packet can be defined with input port Frame type Rate MAC type VLAN ID tag and etc For IPv4 we can also define the protocol type source IP and destination IP Firewall gt gt Access Control List Access Control List Configuration Auto efesh J Refresh Remove All Ingress Port Frame Type Action Rate Limiter Port Copy Counter Adding a New Access Control Profile Click to add a new specific session limit
117. ent Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN gt gt Access Control Wireless MAC Address Filter Configuration Filter Type Deny List Delete MAC Address Add a New Entry Filter Type Choose the rule for the MAC addresses displayed in this Dray Tek page Allow List all the MAC address of wireless clients listed here are allowed to do wireless connection 76 Vigor2130 Series User s Guide Deny List all the MAC address of wireless clients listed here will be blocked Add a New Entry Add a new MAC address into the list Delete Delete the selected MAC address in the list This button will appear only an entry of MAC Address has been typed Wireless LAN gt gt Access Control Wireless MAC Address Filter Configuration Filter Type Deny List v Delete MAC Address 00 20 00 05 30 12 Cancel Give up the configuration OK Click it to save the configuration 3 6 4 Station List Station List provides the knowledge of connecting wireless clients now along with its status code Wireless LAN gt gt Station List Station List Index Display the number of the connecting client IP Address Display the WAN IP address for the connecting clien
118. er There is no bother to directly get into the Web Configurator of the router or borrow debug equipments System Maintenance gt gt Syslog Mail Alert Setup Syslog Access Setup Enable Router Name server IP Address Destination Port Log Level Mail Alert Setup Enable SMTP Server Mail To Mail Fram User Name Password Enable E Mail Alert User Login Enable Syslog Access Check the box to activate function of syslog Router Name Type a name of this device Server IP Address The IP address of the Syslog server Destination Port Type a port for the Syslog protocol Vigor2130 Series User s Guide 87 Dr ay Te k Log Level Choose the severity level for the system log entry Enable Mail Alert Check the box to activate function of mail alert Send a test e mail Make a simple test for the e mail address specified in this page Please assign the mail address first and click this button to execute a test for verify the mail address is available or not SMTP Server The IP address of the SMTP server Mail To Assign a mail address for sending mails out Mail From Assign a path for receiving the mail from outside User Name Type the user name for authentication Password Type the password for authentication Enable E mail Alert Check the box of User Login to send alert message to the e mail box while the router detecting the item s you specify here Click OK to save these settings For viewing the S
119. eries User s Guide 137 Dr ay Tek 4 5 2 Bandwidth Limit The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Limit Bandwidth to make the bandwidth usage more efficient In the Bandwidth Management menu click Bandwidth Limit to open the web page Bandwidth Management gt gt Bandwidth Limit Bandwith Limit Configuration Enable Limitation List Index Start IF Specific Limitation Stat P o TX Limit Kbps Disable Default TX Limit 5000 Kbps Default RX Limit 5000 Kbps TH limit RA limit end oo RX Limit Kbps 1 Bandwidth limit only works for NEW sessions Original sessions are controlled by HNAT 2 Ifthe IP is controlled by bandwidth limit throughput would be lower than 64Mbps OK To activate the function of limit bandwidth simply click Enable and set the default upstream and downstream limit Enable Disable Default TX limit Default RX limit Limitation List Start IP End IP TX Limit Dray Tek Click this button to activate the function of limit bandwidth Click this button to close the function of limit bandwidth Define the default speed of the upstream for each computer in LAN Define the default speed of the downstream for each computer in LAN Display a list of specific limitations that you set on this web page Bandwidth limit can be applied on certain IP ran
120. ers the major feature of UPnP on the router is NAT Traversal This enables applications inside the firewall to automatically open the ports that they need to pass through a router It is more reliable than requiring a router to work out by itself which ports need to be opened Further the user does not have to manually set up port mappings or a DMZ UPnP is available on Windows XP and the router provide the associated support for MSN Messenger to allow full use of the voice video and messaging features Applications gt gt UPnP Configuration UPnP Configuration Enable UPnP Download Speed Upload Speed Enable UPNP Enable UPnP function You have to type the download and upload speed Dr ay Tek 68 Vigor2130 Series User s Guide After setting Enable UPNP Service setting an icon of IP Broadband Connection on Router on Windows XP Network Connections will appear The connection status and control status will be able to be activated The NAT Traversal of UPnP enables the multimedia features of your applications to operate This has to manually set up port mappings or use other similar methods The screenshots below show examples of this facility Address S Network Connections IP Broadband Connection on Router Status AE Broadband Network Tasks General e A hinet i Create anew connection el Disconnected Set up a home or small tC WAN Miniport PPPOE Internet Gateway
121. es the settings for the More Fragments MF bit and the Fragment Offset FRAG OFFSET field for an IPv4 frame IP Fragment No IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must not be able to match this entry Yes IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must be able to match this entry Any Any value is allowed No IPv4 frames where the options flag is set must not be able to match this entry Yes IPv4 frames where the options flag is set must be able to match this entry Any Any value is allowed 131 Dray Tek Dray Tek SIP Filter SIP Address SIP Mask DIP Filter DIP Address DIP Mask Source Port Filter Source Port No Source Port Range Specify the source IP filter for this ACE SIP Filter Any No source IP filter is specified Host Source IP filter is set to Host Specify the source IP address in the SIP Address field that appears Network Source IP filter is set to Network Specify the source IP address and source IP mask in the SIP Address and SIP Mask fields that appear Type the SIP Address here This option is available when you choose Host or Network as source SIP Filter Type the SIP Mask here This option is available only when you choose Network as source SIP Filter Specify the destination IP filter for this ACE DIP Filter Any No destination IP filter is specified Host Destinati
122. ess of the router is 192 168 1 1 For some reason you might need to use ping command to check the link status of the router The most important thing is that the computer will receive a reply from 192 168 1 1 If not please check the IP address of your computer We suggest you setting the network connection as get IP automatically Please refer to the section 4 2 Please follow the steps below to ping the router correctly For Windows L 2 4 Open the Command Prompt window from Start menu gt Run Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP The DOS command dialog will appear w Command Prompt Microsoft Windows HP Version 5 1 2688 CC Copyright 1985 2001 Microsoft Corp D Documents and Settings faerping 192 168 1 1 Pinging 192 168 1 1 with 32 bytes of data Reply from 192 168 1 1 bytes 32 time lt ims TTL 255 Reply from 192 168 1 1 bytes 32 time lt ims Reply from 192 168 1 1 bytes 32 time lt ims Reply from 192 168 1 1 bytes 32 time lt ims TTL 255 Ping statistics for 192 168 1 1 Packets Sent 4 Received 4 Lost A tz loss Approximate round trip times in milli seconds Minimum Hms Maximum ms Average Ams D Documents and Settings fae gt _ Type ping 192 168 1 1 and press Enter If the link is OK the line of Reply from 192 168 1 1 bytes 32 time lt Ims TTL 255 will appear If the line does not appear please check the IP address setting of your computer
123. ession procession for specified Hosts In the Bandwidth Management menu click Sessions Limit to open the web page Bandwidth Management gt gt Session Limit Session Limit Configuration Enable Disable Default Max Sessions Limitation List Index Start IP Max Sessions Specific Limitation Stat P o Erai Maximum Sessions To activate the function of limit session simply click Enable and set the default session limit Enable Click this button to activate the function of limit session Disable Click this button to close the function of limit session Default Max Sessions Defines the default session number used for each computer in LAN Limitation List Displays a list of specific limitations that you set on this web page Start IP Defines the start LAN IP address for limit session End IP Defines the end LAN IP address for limit session Maximum Sessions Defines the available session number for each host in the specific range of IP addresses If you do not set the session number in this field the system will use the default session limit for the specific limitation you set for each index Add Adds the specific session limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limitation list When you finish adding a new session limit simply click OK The following page will appear for you to check Vigor2130 S
124. execute simple configuration through user mode operation 1 Open a web browser on your PC and type http 192 168 1 1 The window will ask for typing username and password 2 Do not type any word both username and password are Null for user operation on the window and click Login on the window Now the Main Screen will appear Be aware that User mode will be displayed on the bottom left side Vigor2 1 30 Series Dray Tek High Speed Gig bit Router System Status Quick Start Wizard Auto refresh C Online Status Model Vigor2130 gt WAN Platform VSC7501 gt LAN Bootloader Version Dray Boot 1 0 0E gt NAT Firmware Version v1 1 0_RC6 gt i Build Date Time r753 Tue Aug 25 16 11 42 CST 2009 gt cine nila ely Hardware NAT Version 1 0 0 13 ee System Date Mon Aug 31 02 59 22 2009 Wireless LAN System Uptime 3d 10 36 05 gt USB Application gt User gt System Maintenance eee Se MAC Address 00 50 7F C7 7B 30 MAC Address 00 50 7F C7 7B 31 IP Address 192 168 1 1 IP Address 192 168 5 21 IP Mask 255 255 255 0 IP Mask 255 255 255 0 All Rights Reserved Default Gateway 192 168 5 1 Primary DNS 168 95 1 1 Secondary DNS Quick Start Wizard offers user an easy method to quick setup the connection mode for the router Moreover if you want to adjust more settings for different WAN modes please go to WAN group Basics of Internet Protocol
125. f 1024 1522 byt frames in good and bad packets transmitted Display the number of 1527 byte frames in good and bad packets transmitted Display the low queue counter of the packet transmitted Display the normal queue counter of the packet transmitted Display the medium queue counter of the packet received Display the high queue counter of the packet received Display the number of frames dropped due to excessive collision late collision or frame aging Display the number of Frames late collision or excessive collision Error which switch transmitted Check it to enable auto refresh function Click it to reload the page Click it to clear the counters for all ports 4 12 6 MAC Address Table The MAC Address Table contains up to 8192 entries and is sorted first by VLAN ID then by MAC address Each page shows up to 999 entries from the MAC table default being 20 selected through the entries per page input field When first visited the web page will show the first 20 entries from the beginning of the MAC Table The first displayed will be the one with the lowest VLAN ID and the lowest MAC address found in the MAC Table The Start from MAC address and VLAN input fields allow the user to select the starting point in the MAC Table Clicking the Refresh button will update the displayed table starting from that or the closest next MAC Table match In addition the two input fields will assume the value of the first displaye
126. f the USB diskette If you want to remove the diskette from USB port in router please check the box of Safely Remove Disk first And then click Update and remove the USB diskette later USB Application gt gt Disk Status Disk Status Safely Remove Disk Manufacturer Model Size Status d USB2 0 Mobile Disk 1968M In use Safely Remove Disk Check this box and then you can remove the USB diskette safely Manufacturer Display the manufacturer of the disk Model Display the model of the disk Size Display the storage space of the diskette s Status Display current usage status of the diskette s Update Click this button to refresh the disk status 3 7 4 Disk Shares This page can define the folder which will be shared while Samba File Sharing is enabled USB Application gt gt Disk Shares Disk Shares Add a New Entry To add a new entry for disk sharing please click Add a New Entry to open the following page Dr ay Tek 80 Vigor2130 Series User s Guide USB Application gt gt Disk Share Add Disk Share Identification Share Name Comment Settings Tr USB2 0 Mobile Disk 1 1967M PORT 1 Path Visible Access All Users Read only Share Name Type a name to be used as shared folder name in Samba service The name must not contain spaces or special characters Comment Type the brief description for the disk sharing The words here will be seen in Network Neighborhood on Windows client computers Vo
127. following figure shows the summary table VPN and Remote Access gt gt LAN to LAN VPN Site to Site Tunnels IPSec Add Tunnel Name Indicate the name of the LAN to LAN profile Endpoint Display the IP address of the VPN client IKE Status Display the status of the phase 1 ISAKMP key exchange IKE Alg Display the encryption and authentication algorithm used during phase 1 of the VPN connection Establishment The algorithm is used during exchange of key exchange ESP Status Display the status of the phase 2 IPSec ESP key exchange ESP Alg Display the encryption and authentication algorithm used during phase 2 of the VPN connection Establishment This algorithm is used for transporting data and the choice will affect the performance of the VPN tunnel Adding a VPN Tunnel Click Add Tunnel to open the following page Vigor2130 Series User s Guide 159 Dr ay Te k VPN and Remote Access gt gt LAN to LAN Add VPN Tunnel General Enabled Name Remote IP Authentication Type Pre Shared Key Confirm Pre Shared Key Local Identity Remote Identity Networks Local Network Mask Remote Network Mask Advanced Settings IKE phase 1 proposal IKE phase 2 proposal Perfect Forward Secrecy Enabled Name Remote IP Type Pre Shared Key Confirm Pre Shared key Local Certificate Local Identity Remote Identity Dray Tek Automatic 4 Automatic 4 OK Cancel Check here to activate t
128. ge That s only the PCs within the range will be influenced by the bandwidth limitation set here Please define the start IP address for the specific limitation Define the end IP address for the specific limitation Define the limitation for the speed of the upstream to be applied as specific limitation If you do not set the limit in this field the 138 Vigor2130 Series User s Guide system will use the default speed for the specific limitation you set for each index RX Limit Define the limitation for the speed of the downstream to be applied as specific limitation If you do not set the limit in this field the system will use the default speed for the specific limitation you set for each index Add Add the specific speed limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limitation list When you finish adding a new bandwidth limit simply click OK The following page will appear for you to check 4 5 3 Port Rate Control A policer can limit the bandwidth of received frames It is located in front of the ingress queue And a shaper can limit the bandwidth of transmitted frames It is located after the ingress queues This page allows you to configure the switch port rate limit for Policers and Shapers Bandwidth Management gt gt Port Rate Control Rate Limit Configuration Policer Policer Policer Shaper Shaper Enabled
129. gor Router 08 How do configure LPR printing on Mac OSX 09 How do configure LPR printing on My Windows Vista Note 2 Vigor router supports printing request from computers via LAN ports but not WAN port Dray Tek 14 Vigor2130 Series User s Guide 2 Configuring Basic Settings For using the router properly it is necessary for you to change the password of web configuration for security and adjust primary basic settings 2 1 Two Level Management This chapter explains how to setup a password for an administrator user and how to adjust basic advanced settings for accessing Internet successfully For user mode operation do not type any word on the window and click Login for the simple web pages for configuration Yet for admin mode operation please type admin admin on Username Password and click Login for full configuration 2 2 Accessing Web Page 1 Make sure your PC connects to the router correctly Q Notice You may either simply set up your computer to get IP dynamically c from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and type http 192 168 1 1 The following window will be open to ask for username and password Username Password Copyright DrayTek Corp All Rights Reser
130. guration Encryption Enable Wireless LAN SSID Broadcast SSID Wireless Mode Country Region Code Channel Encryption Vigor2130 Series User s Guide i Show v DrayTek Mixed 11b 11g 11n m E a U MM lt Le OK Cancel Check the box to enable the wireless function Choose Show to make the SSID being seen by wireless clients Choose Hide to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN It means the identification of the wireless LAN SSID can be any text numbers or various special characters The default SSID is DrayTek We suggest you to change it Choose the wireless mode for this router At present only 802 11B B N mix is available It represents different country region code Use the drop down list to choose the one that fit the usage of regulations locally It means the channel of frequency of the wireless LAN The default channel is 11 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select Auto to let system determine for you Select an appropriate encryption mode to improve the security and privacy of your wireless data packets WEP WPA PSK WPA RADIUS WPS le Dray Tek Each encryption mode will bring out different web page and ask you to offer additional configuration Wireless Security Configuration For th
131. gure settings for connected computers or wireless clients 1 Connect the printer with the router through USB parallel port 2 Open Start gt Settings gt Printer and Faxes da Documents ey E Settings l pe Search d Help and Support aj Run Log OFF coco lee _ Turn OFF Computer Start d fo o 4 Internet Explorer Mace 3 Open File gt Add a New Computer A welcome dialog will appear Please click Next Dray Tek 10 Vigor2130 Series User s Guide Add Printer Wizard Welcome to the Add Printer Wizard This wizard helps you install a printer or make printer connections e If you have a Plug and Play printer that connects LD through a USB port for any other hot pluggable port such as IEEE 1394 infrared and so on you do not need to use this wizard Click Cancel to close the wizard and then plug the printer s cable Printers and Faxes Edit View Favorites Tools into your computer or point the printer toward your computer s infrared port and turn the printer on Server Properties D 2 Sea Windows will automatically install the printer for you Set Up Faxing To continue click Next Create Shortcut Delete Rename EERE Cancel Close 4 Add Printer Wizard Local or Network Printer The wizard needs to know which type of printer to set up _ Automatically detect and install my Plug and Play printer O A network pr
132. handle If not there will be no flow control in the port It drops the packet if too much to handle Current Rx indicates whether pause frames on the port are obeyed Current Tx indicates whether pause frames on the port are transmitted This module offers 1518 9600 Bytes length to make the long packet for data transmission There are two modes for you to choose when excessive collision happened in half duplex condition Discard Discard Restart 44 Vigor2130 Series User s Guide Discard It determines whether the MAC drops frames after an excessive collision has occurred If yes a frame is dropped after excessive collision This is IEEE Standard 802 3 half duplex flow control operation Restart It determines whether the MAC retransmits frames after an excessive collision has occurred If set a frame is not dropped after excessive collisions but the backoff sequence is restarted This is a violation of IEEE Standard 802 3 but is useful in non dropping half duplex flow control operation Power Control The Configured column allows for changing the power savings mode parameters per port Enabled Disabled Disabled All power savings mechanisms disabled ActiPHY Link down power savings enabled PerfectReach Link up power savings enabled Enabled Both link up and link down power savings enabled Refresh Click this button to refresh the information for LAN ports After finishing all the settings
133. he Internet There are several servers provided by the system to allow you managing the router from Internet Check the box es to specify Manager Host IP Type the IP address for the host to perform the remote management Access List You could specify that the system administrator can only login from a specific host or network defined in the list A maximum of three IPs subnet masks is allowed List IP Indicate an IP address allowed to login to the router Subnet Mask Represent a subnet mask allowed to login to the router 3 9 7 Reboot System The Web Configurator may be used to restart your router for using current configuration Click Reboot System from System Maintenance to open the following page Dr ay Tek 90 Vigor2130 Series User s Guide System Maintenance gt gt Reboot System Reboot System Do You want to reboot your router Using current configuration Using factory default configuration Click OK The router will take 5 seconds to reboot the system Note When the system pops up Reboot System web page after you configure web settings please click OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future 3 9 8 Firmware Upgrade Before upgrading your router firmware you need to install the Router Tools The Firmware Upgrade Utility is included in the tools The following web page will guide you to upgrade firmware by using an example
134. he WAN connection has been built up Applications gt gt Schedule Status You can set up to 15 schedules To add a schedule profile please click Add Applications gt gt Schedule Add Schedule Enable Stat Date Year Month Date Hour Minute WAN UP w Once Monday Tuesday Wednesday Thursday Friday Saturday Sunday Enable Check to enable the schedule Start Date Specify the starting date of the schedule Start Time Specify the starting time of the schedule Action Specify which action Call Schedule should apply during the period of the schedule Force On Force the connection to be always on Force Down Force the connection to be always down Enable Dial On Demand Specify the connection to be dial on demand and the value of idle timeout should be Dray Tek 66 Vigor2130 Series User s Guide Acts 3 5 3 IGMP Snooping specified in Idle Timeout field Disable Dial On Demand Specify the connection to be up when it has traffic on the line Once there is no traffic over idle timeout the connection will be down and never up again during the schedule Specify how often the schedule will be applied Once The schedule will be applied just once Routine or Weekdays Specify which days in one week should perform the schedule IGMP snooping means multicast traffic will be forwarded to ports that have members of that group If you disable IGMP snooping the system will make multicast
135. he box to enable VLAN function you will check the table according to the needs as shown below LAN gt gt VLAN Private VLAN Membership Configuration Port Members LAN LANZ Add New Private VLAN Ganc 3 To remove VLAN click the Delete button for the one you want to remove and click OK to save the results 3 2 5 Static Route Go to LAN to open setting page and choose Static Route LAN gt gt Static Route Static Route Configuration Destination Address Status Index The number 1 to 10 under Index displays current static router Destination Address Display the destination address of the static route Status Display the status of the static route Add Add a new static route Vigor2130 Series User s Guide 47 Dr ay Te k Add Static Routes to Private and Public Networks Here is an example of setting Static Route in Main Router so that user A and B locating in different subnet can talk to each other via the router Assuming the Internet access has been configured and the router works properly use the Main Router to surf the Internet create a private subnet 192 168 10 0 using an internal Router A 192 168 1 2 create a public subnet 211 100 88 0 via an internal Router B 192 168 1 3 have set Main Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Mai
136. he simplest way to build connection between wireless network clients and vigor router Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time He she only needs to press a button on wireless client and WPS will connect for client and router automatically Wireless Card Installed Connection via WPS C station Set SSID and Encryption WPA WPA2 PIN Code Note Such function is available for the wireless station with WPS supported There are two methods to do network connection through WPS between AP and Stations pressing the Start PBC button or using PIN Code On the side of Vigor 2130 series which served as an AP press WPS button once on the front panel of the router or click Start PBC on web configuration interface On the side Vigor2130 Series User s Guide 75 Dr ay Te k of a station with network card installed press Start PBC button of network card WLAN Card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the vigor router PIN Code WLAN Card Definea PIN Code Ly Start PIN J M PIN Code of Station 3 6 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of cli
137. here please click OK to activate them 3 2 3 MAC Address Table This page allows you to set timeouts for entries in dynamic MAC Table and configure the static MAC table here LAN gt gt MAC Address Table MAC Address Table Configuration Aging Configuration Disable Automatic Aging F Age Time seconds MAC Table Learning Port Members Auto Disable Secure Static MAC Table Configuration Port Members Delete VLAN ID MAC Address LAN1 LAN LAN LANA Add New Static Entry Vigor2130 Series User s Guide 45 Dr ay Te k Disable Automatic Aging Stop the MAC table aging timer the learned MAC address will not age out automatically The default setting is enabled Check the box to disable this function if required Age Time Delete a MAC address idling for a period of time from the following MAC Table which will not affect static MAC address Range of MAC Address Aging Time is 10 1000000 seconds The default Aging Time is 300 seconds MAC Table Learning List the port members which apply dynamic learning mechanism or not Auto Enable this port MAC address dynamic learning mechanism Disable Disable this port MAC address dynamic learning mechanism only support static MAC address setting Secure Disable this port MAC address dynamic learning mechanism and copy the dynamic learning packets to CPU Static MAC Table Config Specify static MAC address with VLAN ID to apply aging configuration Delete Click the bu
138. hile transmitting data Blinking The data is cnet The QoS function is active The DoS DDoS function is active Blinking It will blink while detecting an attack Description Connector for accessing the Internet Connectors for local networked devices Connector for USB storage device Pen Driver Mobile HD or printer or 3G backup Vigor2130 Series User s Guide TUL a m Interface Description Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration PWR Connector for a power adapter ON OFF Power Switch Vigor2130 Series User s Guide 3 Dr ay Te k 1 2 2 For Vigor2130n LED Status Explanation ACT Blinking The router is powered on and running Activity ae Th oo Off The router is The router is powered off off HPA On Hava NAT sebei WAN o a PADLA USB1 2 VPN On The VPN tunnel is active QoS O The QoS function is active WLAN O o o Wireless access point is ready It will blink while wireless traffic goes WPS Button On Press this button for 2 seconds to wait for client device making network connection through WPS When the LED lights up the WPS connection will be on Off _ The WPS is off Blinking Waiting for wireless
139. his option is available when you choose Host or Network as source SIP Filter Type the SIP Mask here This option is available only when you choose Network as source SIP Filter Specify the destination IP filter for this ACE DIP Filter Host Network Any No destination IP filter is specified Host Destination IP filter is set to Host Specify the destination IP address in the DIP Address field that appears Network Destination IP filter is set to Network Specify the destination IP address and destination IP mask in the DIP Address and DIP Mask fields that appear Type the DIP Address here This option is available when you choose Host or Network as destination DIP Filter Type the DIP Mask here This option is available only when you choose Network as destination DIP Filter Below shows the menu items for Bandwidth Management t Bandwidth Management Session Limit Bandwidth Limit Port Rate Control QoS Control List Ports Priority QoS Statistics Dray Tek 136 Vigor2130 Series User s Guide 4 5 1 Session Limit A PC with private IP address can access to the Internet via NAT router The router will generate the records of NAT sessions for such connection The P2P Peer to Peer applications e g BitTorrent always need many sessions for procession and also they will occupy over resources which might result in important accesses impacted To solve the problem you can use limit session to limit the s
140. his tunnel Specify a name for this tunnel Enter the IP address of the remote host that located at the other end of the VPN tunnel This group of fields is applicable for IPSec Tunnels Different type will bring out different requirement of information Authentication Type Certificates v Preshared ke Local Certificate Certificates Local Identity Remote Identity Such field will be applicable when Preshared key is selected as the Type for the authentication Input 1 63 characters as pre shared key Such field will be applicable when Preshared key is selected as the Type for the authentication Input 1 63 characters as pre shared key again to confirm it Such field will be applicable when Certificates is selected as the Type for the authentication Local Identity is on behalf of the IP address while identity authenticating with remote VPN server The length of the ID is limited to 47 characters This field defines the identity of the remote end 160 Vigor2130 Series User s Guide Local Network Mask Traffic between this subnet and the subnet specified in Remote Network Mask will travel through the VPN tunnel Remote Network Mask Add a static route to direct all traffic destined to this Remote Network IP Address Remote Network Mask through the VPN connection For IPSec this is the destination clients IDs of phase 2 quick mode IKE Phase 1 proposal To propose the local av
141. iders In most cases a Cable service provider will offer a fixed public IP while a DSL service provider will offer a public subnet If you have a public subnet you could assign an IP address or many IP address to the WAN interface Quick Start Wizard WAN IP Configuration Connection Type Static IP IP Address 172 16 3 229 Subnet Mask 255 255 0 0 Gateway T2 16 3 4 Primary DNS Server 0 0 0 0 Secondary DNS Serwer 0 0 0 0 Clone MAC Address Enable IP Address Type the IP address Subnet Mask Type the subnet mask Gateway Type the gateway IP address Primary DNS Server Type in the primary IP address for the router Secondary DNS Server Type in secondary IP address for necessity in the future Enable The router will detect the MAC address automatically Or check the box to enable MAC address cloning Clone MAC Address It is available when the box of Enable is checked Click Clone PC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 24 D5 A1 After finishing the settings here please click Next Dr ay Tek 20 Vigor2130 Series User s Guide DHCP It is not necessary for you to type any IP address manually Simply choose this type and the system will obtain the IP address automatically from DHCP server Quick Start Wizard WAN IP Configuration Connection Type Clone MAC Address Enable The router will detect the MAC address auto
142. ignment errors packets received Display the number of short frames lt 64 Bytes with valid CRC Display the number of long frames according to max_length register with valid CRC Display the number of short frames lt 64 bytes with invalid CRC Display the number of long frames according tomax_length register with invalid CRC Display the filtered number of the packet received Display the counting number of the packet transmitted Display the total transmitted bytes Display the show the counting number of the transmitted unicast packet Display the show the counting number of the transmitted multicast packet Display the counting number of the transmitted broadcast packet 187 Dray Tek Tx Pause Tx 64 Bytes Tx 65 127 Bytes Tx 128 255 Bytes Tx 256 511 Bytes Tx 512 1023 Bytes Tx 1024 1526 Bytes Tx 1527 Bytes Tx Low Tx Normal Tx Medium Tx High Tx Drops Tx lat Exc Coll Auto refresh Refresh Clear Show the counting number of the transmitted pause packet Display the number of 64 byte frames in good and bad packets transmitted Display the number of 65 127 byte frames in good and bad packets transmitted Display the number of 128 255 byte frames in good and bad packets transmitted Display the number of 256 511 byte frames in good and bad packets transmitted Display the number of 512 1023 byte frames in good and bad packets transmitted Display the number o
143. ime you can choose Always On Otherwise choose Connect on Demand Connect on Demand ha Connect on Demand Set the timeout for breaking down the Internet after passing through the time without any action When you choose Connect on Demand you have to type value here It means Max Transmit Unit for packet The default setting 1s 1442 Leave blank for default value Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 24 D5 A1 After finishing all the settings here please click OK to activate them Dray Tek 36 Vigor2130 Series User s Guide PPTP L2TP To use PPTP L2TP as the accessing protocol of the internet please choose PPTP L2TP from Connection Type drop down menu The following web page will be shown WAN gt gt Internet Access WAN IP Configuration Connection Type PPTP Settings Username Password server Address WAN IP Network Settings IP Address Subnet Mask Redial Policy Idle Time out MTU Size Clone MAC Address Enable Cancel Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this field Server Address Type in the IP add
144. ings e PPPoE EPE DaN PPIP The same as syslog s router name L2TP Clone MAC Address 3G USB Modem Vigor2130 Series User s Guide 197 Dr ay Te k For Static Users 1 Choose Static IP as the connection type WAN gt gt Internet Access WAN IP Configuration Connection Type Static IP Settings IP Address 172 16 3 229 Subnet Mask 255 255 0 0 Gateway IP Address 172 16 3 4 Primary DNS Server 0 0 0 0 secondary DNS Server 0 0 0 0 Clone MAC Address 2 Check if IP Address IP Mask and IP Router are set correctly must identify with the values from your ISP For PPPoE Users 1 Choose PPPoE as the connection type WAN gt gt Internet Access WAN IP Configuration Connection Type PPPoE PPPoE Settings Username Idle Time out Default Route F Clone MAC Address Enable L 2 Check if Username and Password are set correctly must identify with the values from your ISP Dray Tek 198 Vigor2130 Series User s Guide For PPTP L2TP Users 1 Choose PPTP L2TP as the connection type WAN gt gt Internet Access WAN IP Configuration Connection Type PPTP Settings Username Password server Address WAN IP Network Settings IP Address Subnet Mask Redial Policy Idle Time out MTU size Default Route Clone MAC Address Enable 2 Check if Username Password IP address Subnet Mask are entered with correct values that you get from your ISP 5 5 Backing to Factory Def
145. inter or a printer attached to another computer e Tosetup a network printer that is not attached to a print server LD use the Local printer option 5 In this dialog choose Create a new port Type of port and use the drop down list to select Standard TCP IP Port Click Next Add Printer Wizard Select a Printer Port Computers communicate with printers through ports Select the port you want your printer to use If the port is not listed you can create a new port Use the following port LPT Recommended Punter Port Note Most computers use the LPT 1 port to communicate witha local printer g The connector for this port should look somethina like this Create a new port Type of port Standard TCP IP Port Vigor2130 Series User s Guide 11 Dr ay Te k 6 In the following dialog type 192 168 1 1 router s LAN IP in the field of Printer Name or IP Address and type IP_192 168 1 1 as the port name Then click Next Add Standard TCP IP Printer Port Wizard Add Port For which device do you want to add a port Enter the Printer Name or IP address and a port name for the desired device Printer Name or IP Address 192 168 1 1 Port Name IP_192 168 1 1 7 Click Standard and choose Generic Network Card Add Standard TCP IP Printer Port Wizard Additional Port Information Required The device could not be identified The detected device is of unknown type Be sure that
146. ith other public hosts or servers outside Therefore the router should be set as the gateway for public hosts Internet Public IP Address r N n 220 135 240 207 Private Subn Router IP What is Routing Information Protocol RIP Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing This allows users to change the information of the router such as IP address and the routers will automatically inform for each other What is Static Route Vigor2130 Series User s Guide 103 Dray Te k When you have several subnets in your LAN sometimes a more effective and quicker way for connection is the Static routes function rather than other method You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP What are Virtual LANs and Rate Control You can group local hosts by physical ports and create up to 4 virtual LANs To manage the communication between different groups please set up rules in Virtual LAN VLAN function and the rate of each Internet Ji P2 P3 P4 4 2 1 General Setup This page provides you the general settings for LAN Click LAN to open the LAN settings page and choose General Setup LAN gt gt General Setup LAN IP Network Configuration IP Address 192 168 1 1 Subnet Mask DHCP Server Configuration Enable DHCP Start IP Address IP Pool Counts Lease Time IP Address
147. ize of the USB diskette Display current status of the USB diskette This page allows you to set new password for admin operation System Maintenance gt gt System Password System Password New Password Confirm New Password Old Password New Password Confirm Password OK Type in the old password The factory default setting for password is blank Type in new password in this filed Type in the new password again When you click OK the login window will appear Please use the new password to access into the web configurator again 4 11 3 User Password This page allows you to set new password for user operation Dray Tek 176 Vigor2130 Series User s Guide System Maintenance gt gt User Password User Password New Password Confirm New Password Old Password Type in the old password The factory default setting for password is blank New Password Type in new password in this filed Confirm Password Type in the new password again When you click OK the login window will appear Please use the new password to access into the web configurator again 4 11 4 Configuration Backup Backup the Configuration Follow the steps below to backup your configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below System Maintenance gt gt Configuration Backup Click Backup to download current running configurations as a file
148. k it to enable auto refresh function Refresh Click it to reload the page if you change the LAN port connection Or you can check Auto refresh to reload the page by the system automatically Dray Te k 192 Vigor2130 Series User s Guide Trouble Shooting This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration Please follow sections below to check your basic installation status stage by stage Checking if the hardware status is OK or not Checking if the network connection settings on your computer are OK or not Pinging the router from your computer Checking if the ISP settings are OK or not Backing to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 1 Checking If the Hardware Status Is OK or Not Follow the steps below to verify the hardware status l 3 Check the power line and WLAN LAN cable connections Refer to 1 3 Hardware Installation for details Turn on the router Make sure the ACT LED blink once per second and the correspondent LAN LED is bright If not it means that there is something wrong with the hardware status Simply back to 1 3 Hardware Installation to execute the hardware installation again And then try again Vigor2130 Series User s Guide 193 Dr
149. ke multicast traffic treated in the same manner as broadcast traffic Applications gt gt IGMP Snooping IGMF Snooping Configuration General Configuration Snooping Enabled C Unregistered IPMC Flooding enabled F Fast Leave OK Snooping Enabled Check the box to enable this function Unregistered IPMC Check the box to enable unregistered IPMC traffic flooding Fast Leave Check the box to Fast Leave on the LAN port Dr ay Tek 150 Vigor2130 Series User s Guide 4 6 4 IGMP Status This page display current IGMP status Applications gt gt IGMP Status IGMP Snooping Status Auto refresh L Clear Statistics V1 Reports V2 Reports V3 Reports V2 Leave Receive Receive Receive Receive 0 0 0 IGMP Groups Port Members 2 3 V1 3 Reports Receive Display the number of Received V1 V3 Reports V2 Leave Receive Display the number of Received V2 Leave Groups Display current IGMP groups Maximum number of group for each VLAN can be set is 128 Port Members Display the LAN ports in this group Refresh Click this button to refresh the page immediately Clear Click this button to clear the settings on this page 4 6 5 UPnP Configuration The UPnP Universal Plug and Play protocol is supported to bring to network connected devices the ease of installation and configuration which is already available for directly connected PC peripherals with the existing Windows Plug and Play system For NAT routers the maj
150. ke this function However IP MAC which 1s not listed in IP Bind List also can connect to Internet Disable Click this radio button to disable this function All the settings on this page will be invalid Strict Bind Click this radio button to block the connection of the IPPMAC which is not listed in IP Bind List ARP Table This table is the LAN ARP table of this router The information for IP and MAC will be displayed in this field Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below Add and Edit IP Address Type the IP address that will be used for the specified MAC address Mac Address Type the MAC address that is used to bind with the assigned IP address Refresh It is used to refresh the ARP table When there is one new PC added to the LAN you can click this link to obtain the newly ARP table information IP Bind List It displays a list for the IP bind to MAC information Add It allows you to add the one you choose from the ARP table or the IP MAC address typed in Add and Edit to the table of IP Bind List Edit It allows you to edit and modify the selected IP address and MAC address that you create before Remove You can remove any item listed in IP Bind List Simply click and select the one and click Remove The selected item will be removed from the IP Bind List Note Before you select Strict Bind you have to bind one set of IP MAC address for one P
151. l be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E Ab 2A D5 A1 After finishing all the settings here please click OK to activate them PPPoE To choose PPPoE as the accessing protocol of the internet please select PPPoE from the Internet Access menu The following web page will be shown Dr ay Tek 96 Vigor2130 Series User s Guide WAN gt gt Internet Access WAN IP Configuration Connection Type PPPoE ha PPPoE Settings Username Password Redial Policy Idle Time out MTU Size Clone MAC Address Enable OK Cancel Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this field Redial Policy If you want to connect to Internet all the time you can choose Always On Otherwise choose Connect on Demand Connect on Demand ha Connect on Demand Idle Time Out Set the timeout for breaking down the Internet after passing through the time without any action When you choose Connect on Demand you have to type value here MTU Size It means Max Transmit Unit for packet The default setting is 1442 Enable Disable Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid Clone MAC Address It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Ad
152. lass B The product conforms to the requirements of Low Voltage LVD Directive 2006 95 EC by complying with the requirements set forth in EN60950 1 Regulatory Information Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the use is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different form that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 This
153. licated electronic unit that may be repaired only be authorized and qualified personnel Do not try to open or repair the router yourself Do not place the router in a damp or humid place e g a bathroom The router should be used in a sheltered area within a temperature range of 5 to 40 Celsius Do not expose the router to direct sunlight or other heat sources The housing and electronic components may be damaged by direct sunlight or heat sources Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards Keep the package out of reach of children When you want to dispose of the router please follow local regulations on conservation of the environment We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials we will at our discretion repair or replace the defective products or components without charge for either parts or labor to whatever extent we deem necessary tore store the product to proper operating condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal v
154. ll be popped up as shown below System Maintenance gt gt Configuration Backup Restoration select a configuration file w Click Restore to upload the file 2 Click Browse button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful 4 11 5 Syslog Mail Alert SysLog function is provided for users to monitor router There is no bother to directly get into the Web Configurator of the router or borrow debug equipments Dray Tek 178 Vigor2130 Series User s Guide Maintenance gt gt Syslog Mail Alert Setup Syslog Access Setup Enable Router Name server IP Address Destination Port Log Level Enable SMTP Server Mail To Mail From User Name Password Enable E Mail Alert User Login Enable Syslog Access Router Name Server IP Address Destination Port Log Level Enable Mail Alert SMTP Server Mail To Mail From User Name Password Enable E mail Alert Click OK to save these settings Check Enable to activate function of syslog Assign a name of this device The IP address of the Syslog server Assign a port for the Syslog protocol Choose the severity level for the system log entry Warning Error Check Enable to activate function of mail alert The IP address of the SMTP server Assign a mail addre
155. low IPSEC L2TP Allow PPTP Allow FTP Username Full Name Password Password again llow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP Delete User Vigor2130 Series User s Guide User Settings came Type a name for this user Type full name for this user Type the password for this user Type the password again for confirmation Check this box to have the remote user share the disk information Check this box to let the remote user connecting to this device through IPSEC L2TP Check this box to let the remote user connecting to this device through PPTP Check this box to let the remote user connecting to FTP server via this router Remove settings on current page and delete the user This button is not available for new configuration by pressing Add a New User 173 Dray Tek When you finish the settings simply click OK to save the configuration The new user will be created and displayed on the page Users Users Username Full Name Allow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP carrie carrie ni T y v v Add a New User Editing Deleting User Settings To edit a user click the name link under Username to open the following page Modify the settings except Username and then click OK to save and exit it If you want to remove such user settings simply click Delete User User Configuration Edit User User Settings Username Fi F d d Allow Disk Sharing low I
156. lume Select the proper volume for the connected USB diskette Path It determines the range for the client to access into The user can enter a directory name in this field Then after clicking OK the router will create the specific new folder in the USB diskette In addition if the user types 7 here he she can access into all of the disk folders and files in USB diskette Note When write protect status for the USB diskette is ON you cannot type any new folder name in this field Only can be used in such case Visible Check this box to make the shared folder to be seen in Network Neighborhood on Windows of clients in local network Access Rights Specify the access right and apply to all the wireless clients that want to connect to the attached USB diskette All Users Read only w All Users Read only __ All Users Read write specific Users All Users Read only everyone has read only access to the share disk All Users Read write everyone has read write access to the share disk Specific Users Only specific user s can access into the share disk Vigor2130 Series User s Guide 81 Dr ay Te k 3 8 User 3 8 1 User Configuration This page allows you to set user s setting that allowed to use PPTP FTP IPSEC L2TP connection Users Users Username Full Name Allow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP No users defined Add a New User Adding a New User Click Add a New User to
157. matically Or check the box to enable MAC address cloning Clone MAC Address It is available when the box of Enable is checked Click Clone PC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 2 4 D5 A1 After finishing the settings here please click Next PPPoE PPPoE stands for Point to Point Protocol over Ethernet It relies on two widely accepted standards PPP and Ethernet It connects users through an Ethernet to the Internet with a common broadband medium such as a single DSL line wireless device or cable modem All the users over the Ethernet can share a common connection PPPoE is used for most of DSL modem users All local users can share one PPPoE connection for accessing the Internet Your service provider will provide you information about user name password and authentication mode Vigor2130 Series User s Guide 21 Dr ay Te k If your ISP provides you the PPPoE connection please select PPPoE for this router The following page will be shown Quick Start Wizard WAN IP Configuration Connection Type PPPoE Username Password Redial Policy Idle Time out MTU Size Clone MAC Address Enable MAC Address User Name Assign a specific valid user name provided by the ISP Password Assign a valid password provided by the ISP Redial Policy If you want to connect to Internet all the time you can choose Always On Otherwise choose Co
158. matically or choose Specific to specify certain value the range is 0x0000 to OXFFFF Etherlype Filter Ethernet Type Value Choose ARP as the Frame Type you will get ARP Parameters option as the following ARP Parameters ARP RARP ARP SMAC Request Reply RARP DMAC Sender IP Filter Network Match sender IP EE IP Ethernet Any A Address aa Length Match Sender IP Mask 255 255 255 IP Target IP Filter Ethernet Target IP Address Target IP Mask ARP RARP ARP RARP Vigor2130 Series User s Guide 123 Dr ay Te k Dray Tek Request Reply Sender IP Filter Sender IP Address Sender IP Mask Target IP Filter Target IP Address Target IP Mask ARP SMAC Match RARP DMAC Match Choose the request or replay that you want to filter Choose Any to filter all of the packets Choose Host to filter the packets from the host with the address typed in Sender IP Address filed Choose Network to filter the packets within the network defined in Sender IP Address and Sender IP Mask fields Type the Sender IP Address here This option is available when you choose Host or Network as Sender IP Filter Type the Sender IP Mask here This option is available only when you choose Network as Sender IP Filter Specify the target IP filter for this specific ACE Target IP Filter Choose Any to filter all of the packets Choose Host to filter the packets from the host with the address typed in Target
159. mber that the RADIUS server is using The default value is 1812 based on RFC 2138 27 Dray Tek Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret WPS WPS Wi Fi Protected Setup provides easy procedure to make network connection between wireless station and wireless access point vigor router with the encryption of WPA and WPA2 If you choose WPS as the security configuration you can press Start WPS PIN and Start WPS PBC to complete the wireless connection Quick Start Wizard Wireless System Configuration Enable Wireless LAN SSID Broadcast SSID Wireless Mode Country Region Code Channel Wireless Security Configuration Encryption WPS Configuration Configure wia Push Button Stat PBC Configure via Client PinCode start PIN Nea gt Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure The router will wait for WPS requests from wireless clients about two minutes The WPS LED on the router will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Client PinCode Type the PIN code specified in wireless client you wish to connect and click Start PIN button The WLAN LED on the router will blink fast when WPS is in progress It will return to normal condition
160. mission The rate is 2 n where n is Dray Tek 116 Vigor2130 Series User s Guide equal to or less than 15 or No Limit The unit of the rate can be either pps packets per second or kpps kilopackets per second The configuration indicates the permitted packet rate for unicast multicast or broadcast traffic across the switch 4 4 2 Ports Configuration This page is used to configure the ACL Access Control List parameters for each port These parameters will affect data packets received on a port unless the data packets match a specific ACE Access Control Entry Firewall gt gt Ports Configuration ACL Ports Configuration Action Rate Limiter ID Port Copy Counter Permit Disabled Disabled 70125 0 41520 Disablec Port There is one WAN port and 4 LAN ports in Vigor2130 Here each port will be configured with different ID action rate limiter ID port copy and etc Policy ID Select a policy to apply to this port The range for values is from to 8 The default value is 1 Policy ID 1 o min amp w pee Action Select whether forwarding is permitted Permit or denied Deny The default value is Permit Action Permit ha Permit Vigor2130 Series User s Guide 117 Dr ay Te k Rate Limited ID Select a rate limiter to apply to this port Available settings include Disabled and 1 to 10 The default value is Disabled Rate Limiter ID Port Copy Select which port the frames are copi
161. modes for you to choose when excessive collision happened in half duplex condition Discard Restart Discard It determines whether the MAC drops frames after an excessive collision has occurred If yes a frame is dropped after excessive collision This is IEEE Standard 802 3 half duplex flow control operation Restart It determines whether the MAC retransmits frames after an excessive collision has occurred If set a frame is not dropped after excessive collisions but the backoff sequence is restarted This is a violation of IEEE Standard 802 3 but is useful in non dropping half duplex flow control operation The Configured column allows for changing the power savings mode parameters per port Disabled All power savings mechanisms disabled ActiPHY Link down power savings enabled PerfectReach Link up power savings enabled Enabled Both link up and link down power savings enabled Click this button to refresh the information for LAN ports After finishing all the settings here please click OK to activate them Dray Tek 106 Vigor2130 Series User s Guide 4 2 3 MAC Address Table This page allows you to set timeouts for entries in dynamic MAC Table and configure the static MAC table here LAN gt gt MAC Address Table MAC Address Table Configuration Aging Configuration Disable Automatic Aging MAC Table Learning Port Members LAN Auto Disable Secure Static MAC Table Configu
162. mpt to exhaust all your system s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables the Vigor router to inspect every incoming packet based on the attack signature database Any malicious packet that might duplicate itself to paralyze the host in the secure LAN will be strictly blocked and a Syslog message will be sent as warning if you set up Syslog server Also the Vigor router monitors the traffic Any abnormal traffic flow violating the pre defined parameter such as the number of thresholds is identified as an attack and the Vigor router will activate its defense mechanism to mitigate in a real time manner Below shows the menu items for Firewall Firewall DoS Defense Ports Configuration Rate Control Object Access Control List 4 4 1 DoS Defense Click Firewall and click DoS Defense to open the setup page Storm control for the switch is configured on this page Firewall gt gt DoS Defense Storm Control Configuration Frame Type Status Rate pps Unicast Multicast Broadcast OK Frame Type Set the Unicast storm rate control multicast storm rate control and a broadcast storm rate control for your router Status Check this box to enable storm control status for the frame type Rate The unit is packet per second pps Use the drop down list to set the rate for data trans
163. n Router Internet Set Router C 192 168 1 1 Static Route 1 Click the LAN Static Route and click Add Check the Enable box Please add a static route as shown below which regulates all packets destined to 192 168 10 0 will be forwarded to 192 168 1 2 Click OK LAN gt gt Static Route Add Static Route Enable Destination IP Address 192 168 10 0 Subnet Mask 255 255 255 0 Gateway IP Address 2 Return to Static Route page Click Add again to add another static route as show below which regulates all packets destined to 211 100 88 0 will be forwarded to 192 168 1 3 Dray Tek 48 Vigor2130 Series User s Guide LAN gt gt Static Route Add Static Route Enable Destination IP Address 211 100 58 0 Subnet Mask 255 255 255 0 Gateway IP Address 192 168 1 3 OK Cancel 3 Verify current routing table LAN gt gt Static Route Static Route Configuration Destination Address 197 166 10 0 255 255 255 0 211 100 88 0 255 255 2550 3 2 6 Bind IP to MAC This function is used to bind the IP and MAC address in LAN to have a strengthening control in network When this function is enabled all the assigned IP and MAC address binding together cannot be changed If you modified the binding IP or MAC address it might cause you not access into the Internet Click LAN and click Bind IP to MAC to open the setup page LAN gt gt Bind IP to MAC Bind IP to MAC Note IP MAC binding presets DHCP Allocation
164. n sencoeesm deeem 44 NAC FOC SS TADIG erii E E E E EE 45 eA VAN e E E A E A E 46 Teo IG R E E E E E 47 22 C BINA IF OMA O er N A E E E 49 S NA Te a E E E E saviaasnseuacenisecetaucecte 50 39 1 Hardware NA T peensoriessarrasnnni aeir ANE ENEE EE ENTS 51 S2 91219 PO ae en ee E E E E 51 Vigor2130 Series User s Guide v Dr ay Te k aS DKE HOS iaee ee a ne eee ee ee ee eee eee 53 3 4 Bandwidth Management ccccccssseecccssseeccesececeeuseeceeuseessageeecsaseeeseseeessageeeesegeeesssaseesees 54 AT OOS OI EI o E 54 SA e Ban E a E A E E 55 eG OLE RAS CONTO aeea E AT E 56 JAA O05 CONTOLLIS U seinninn a AAEN NA AATAS ARA ES 57 A POS PAON career EE E tend siaet ew trantie seas 61 JAG Q09 LAI SCS se vse teactessedeceatases naan nean Kaa ANa OTENE SE ENNEA Eaa aeria ii 62 Fore AONE aenea E EE EE seg A E EES 65 251 Dynami DON G eee ene eer ee enn e E nee eee EEEE 65 SREE 1e V E A E A E N N E E A ee O E 66 3 5 3 IOMP SNOODING scictadscioacciadetnistedenetionetadeemfecakaevesalseecadeceUeeeedeh cee yecaiccetedeantstes oleseeeuetetaes tice 67 394 OMP US cere tet erosion aea ti E E E oes augnganessatancetecaeats 68 920 0 UPAP GOmMMGUP ALON essesi pacie asia nalensjenia o adi Raa EEA E Ea a kaS a EA EA EA 68 BOO VI LAN soseen nnee E EE E E E EES 70 OW ASIC CONCEP are E EEEE E EE E 70 9 0 2 GE Al SOUND eE E EE E E E EE EAE E 71 OSACE SS CO O esan E AEE E EE EAE EE 76 PA On GS E 77 3 6 5 ACCESS FOIL DISCOV NY vansiniuniasdsiehtontuanwaisanin
165. nable FTP Access List List Subnet Mask 255 255 255 255 32 M 255 255 255 255 I 32 a 255 255 255 255 32 a Enable HTTP HAHTTPS SSH ICMP Ping FTP SNMP Enable the checkbox to allow system administrators to login from the Internet There are several servers provided by the system to allow you managing the router from Internet Check the box es to specify Manager Host IP Type the IP address for the host to perform the remote management Access List You could specify that the system administrator can only login from a specific host or network defined in the list A maximum of three IPs subnet masks is allowed List IP Indicate an IP address allowed to login to the router Subnet Mask Represent a subnet mask allowed to login to the router 4 11 8 Reboot System The Web Configurator may be used to restart your router for using current configuration Click Reboot System from System Maintenance to open the following page Vigor2130 Series User s Guide 181 Dray Tek System Maintenance gt gt Reboot System Reboot System Do You want to reboot your router Using current configuration Using factory default configuration Click OK The router will take 5 seconds to reboot the system Note When the system pops up Reboot System web page after you configure web settings please click OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future
166. name of the VPN IPSec Mobile client Display the remote ID of the VPN client Display the IP address of the VPN client Display the status of the phase 1 ISAKMP key exchange Display the encryption and authentication algorithm used during phase 1 of the VPN connection Establishment The algorithm is used during exchange of key exchange Display the status of the phase 2 IPSec ESP key exchange Display the encryption and authentication algorithm used during phase 2 of the VPN connection Establishment This algorithm is used for transporting data and the choice will affect the performance of the VPN tunnel Display the dial in user account Display the connection name assigned by the router Display IP address of remote client Display the system time that the user logs in Display the data total received for such client Display the data total transmitted for such client Check this box to make the system refresh this page automatically 158 Vigor2130 Series User s Guide Refresh Click this button to refresh the page immediately 4 7 5 LAN to LAN Here you can manage LAN to LAN connections by maintaining a table of connection profiles You may set parameters including specified connection direction dial in or dial out connection peer ID connection type VPN connection including PPTP IPSec Tunnel and corresponding security methods etc The router supports 2 VPN tunnels simultaneously and provides up to 2 profiles The
167. ng Size Type in the payload size of the ICMP packet Values range from 8 bytes to 1400 bytes Start Click this button to start the ping work The result will be displayed on the screen Vigor2130 Series User s Guide 183 Dr ay Te k 4 12 2 Routing Table Click Diagnostics and click Routing Table to open the web page Diagnostics gt gt Routing Table Routing Table Destination Gateway 192 168 5 0 0 0 0 0 192 168 1 0 0 0 0 0 211 100 68 0 192 168 1 3 192 168 10 0 192 168 1 2 0 0 0 0 192 168 5 1 Genmask 255 255 2560 0 255 255 255 0 255 255 255 0 255 255 255 0 0 0 0 0 Destination Gateway Genmask Flags Metric Ref Use Iface Refresh Dray Tek Display the IP address for destination network or destination host Display the gateway address or if none set Display the netmask for the destination net 255 255 255 255 is for a host destination and 0 0 0 0 is for the default route Different codes represent different routing status U route is up H target is a host G use gateway R reinstate route for dynamic routing D dynamically installed by daemon or redirect M modified from routing daemon or redirect A installed by addrconf C cache entry reject route Display the distance to the target usually counted in hops Display number of references to this route Not used in the Linux kernel Display count of lookups for the route Depending on the use of
168. nnect on Demand Connect on Demand Connect on Demand Idle Time Out Set the timeout for breaking down the Internet after passing through the time without any action The unit is seconds The range is XX XX MTU Size It means Max Transmit Unit for packet The default setting is 1442 Enable The router will detect the MAC address automatically Or check the box to enable MAC address cloning Clone MAC Address It is available when the box of Enable is checked Click Clone PC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 24 D5 A1 After finishing the settings here please click Next Dr ay Tek 22 Vigor2130 Series User s Guide PPTP L2TP if you click PPTP L2TP as the protocol please manually enter the Username Password provided by your ISP and all the required information Quick Start Wizard WAN IP Configuration Connection Type PPTP Settings Username Password Server Address WAN IP Network Settings IP Address Subnet Mask Redial Policy Idle Time out MTU Size Clone MAC Address Enable MAC Address User Name Password Server Address WAN IP Network Settings IP Address Subnet Mask Redial Policy Idle Time Out MTU Size Enable Vigor2130 Series User s Guide Assign a specific valid user name provided by the ISP Assign a valid password provided by the ISP Specify the IP address of the PPTP server
169. nnect the other end to the wall outlet of electricity Power on the router Check the ACT and WAN LAN LEDs to assure network connections I Land line jack POTS ADSL Splitter or Microfilter Analog Phone Power Switch For the detailed information of LED status please refer to section 1 1 Dray Tek Caution 1 Each of the Phone ports can be connected to an analog phone only Do not connect the phone ports to the land line jack Such connection might damage your router 2 When the power is shutdown VoIP phone will be disconnected However a phone set connected to Phone 2 port can be used as the traditional telephone for the line will be guided to land line jack via the router loop through 8 Vigor2130 Series User s Guide Stand Installation The Vigor2130 must be placed erectly Therefore you have to install a stand onto the router to make it standing firmly Please follow the figures listed below to finish the installation Vigor2130 Series User s Guide 9 Dr ay Tek 1 4 Printer Installation You can install a printer onto the router for sharing printing All the PCs connected this router can print documents via the router The example provided here is made based on Windows XP 2000 For Windows 98 SE Vista please visit www draytek com Printer Name 192 168 1 1 Port Name IP_192 168 1 1 Printer Before using it please follow the steps below to confi
170. nt specified PC from surfing Internet for 5 minutes 2 The IP blocked by the router will be shown in red Auto refresh Check it to enable auto refresh function Refresh Click this link to refresh this page manually Index Display the number of the data flow IP Address Display the IP address of the monitored device TX rate kbps Display the transmission speed of the monitored device If HNAT is shown that means the transmission is through Hardware NAT can t be computed RX rate kbps Display the receiving speed of the monitored device If HNAT is shown that means the transmission is through Hardware NAT can t be computed Sessions Display the session number that you specified in Limit Session web page Action Block can prevent specified PC accessing into Internet within 5 minutes Auto refresh L Session Action 1 Block Vigor2130 Series User s Guide 191 Dray Tek Unblock the device with the IP address will be blocked in five minutes The remaining time will be shown on the session column v Auto refresh LJ Session Action 5 Unblock 4 12 9 Ports State Click Diagnostics and click Ports State to open the list page There are for LAN ports and one WAN port in your router Through this page you can know which port is using and you can get the detailed statistics for each port by moving and clicking the mouse on the connected one Port State Overview Auto refresh Auto refresh Chec
171. office network G tatuz Connected _ Dial up Duration 00 13 06 See Also p i a test Speed 100 0 Mbp J Network Troubleshooter i pL saag E an rayTek ISDN PPP T i Activity Internet Internet Gateway My Computer Other Places Internet Gateway wi w i v iJ G Control Panel JS Ip Broadband Connection on My Network Places sari Bankai Enabled Lj My Documents Sent 404 rad My Computer Received 1115 BBE LAN or High Speed Internet Re Details _ g Local Area Connection Enabled C gp Realtek RTL8139 810 Family Network Connections System Folder Close The UPnP facility on the router enables UPnP aware applications such as MSN Messenger to discover what are behind a NAT router The application will also learn the external IP address and configure port mappings on the router Subsequently such a facility forwards packets from the external ports of the router to the internal ports used by the application TIP Broadband Connection on Router Properties EJ x Advanced Settings General Services Connect to the Internet using Select the services running on your network that Intemnet user can ACCESE l a IP Broadband E R on Aouter Ftp Example menmegr 192 168 29 11 13135 60654 UDP manm gr 192 168 29 11 7824 13251 UDP This connection allows you to connect to the Internet through a menmegr 192 168 29 11 8789 63231 TCP shared connection on another computer
172. on simple configuration Note The home page will change slightly in accordance with the type of the router you have Dray Tek 16 Vigor2130 Series User s Guide 4 Goto System Maintenance page and choose System Password User Password System Maintenance gt gt System Password System Password New Password Confirm New Password OK Or System Maintenance gt gt User Password User Password New Password i 3 Confirm New Password 5 Type New Password in New Password and Confirm New Password fields Then click OK to continue 6 Now the password has been changed Next time use the new password to access the Web Configurator for this router Username Password Copyright DrayTek Corp All Rights Reserved Dray Tek Vigor2130 Series User s Guide 17 Dr ay Te k 2 4 Quick Start Wizard Q Notice Quick Start Wizard for user mode operation is the same as for admin e mode operation If your router can be under an environment with high speed NAT the configuration provide here can help you to deploy and use the router quickly The first screen of Quick Start Wizard is welcome page please click Next Quick Start Wizard Welcome to the Quick Start Wizard The next steps will guide you through a basic setup of the device If you want more advanced setup you should consider setting the device up manually Step 1 Setup the Password Step 2 Setup the Timezone Step 3
173. on IP filter is set to Host Specify the destination IP address in the DIP Address field that appears Network Destination IP filter is set to Network Specify the destination IP address and destination IP mask in the DIP Address and DIP Mask fields that appear Type the DIP Address here This option is available when you choose Host or Network as destination DIP Filter Type the DIP Mask here This option is available only when you choose Network as destination DIP Filter Specify the TCP port source filter for this ACE Specific If you want to filter a specific TCP source filter with this ACE you can enter a specific TCP source value A field for entering a TCP source value appears Range If you want to filter a specific TCP source range filter with this ACE you can enter a specific TCP source range value A field for entering a TCP source port range appears Type the value if you choose Specific as the Source Port Filter The allowed range is 0 to 65535 A frame meeting this ACE matches this TCP source value Type the value if you choose Range as the Source Port Filter The allowed range is 0 to 65535 A frame meeting this ACE matches this TCP source value 132 Vigor2130 Series User s Guide Dest Port Filter Dest Port No Dest Port Range TCP FIN TCP SYN TCP RST Vigor2130 Series User s Guide Specify the TCP port destination filter for this ACE Specific If you want to filter a specific TCP
174. onfiguration Policer Policer Policer Shaper Shaper Shaper Enabled Rate Rx Enabled Rate Tx kbps Note Shaper must be enabled for Weighted Queuing Mode Qos OK Port Represent LAN or WAN interface Policer Enabled Check this box to enable policer function Policer Rate Rx Type the number for policer function The default value is 500 It is restricted to 500 1000000 when the Policer Unit is set in kbps and it is restricted to 1 1000 when the Policer Unit is set in Mbps Policer Unit Determine the unit kbps Mbps for policer Shaper Enabled Check this box to enable shaper function Dray Tek 56 Vigor2130 Series User s Guide Shaper Rate Tx Type the number for shaper function The default value is 500 It is restricted to 500 1000000 when the Shaper Unit is set in kbps and it is restricted to 1 1000 when the Shaper Unit is set in Mbps Shaper Unit Determine the unit kbps Mbps for shaper function 3 4 4 QoS Control List Deploying QoS Quality of Service management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise network One reason for QoS is that numerous TCP based applications tend to continually increase their transmission rate and consume all available bandwidth which is called TCP slow start If other applications are not protected by QoS it will detract much from their perf
175. oothly The benefit of the NAT includes Save cost on applying public IP address and apply efficient usage of IP address NAT allows the internal IP addresses of local hosts to be translated into one public IP address thus you can have only one IP address on behalf of the entire internal hosts D ra y Ti e k 50 Vigor2130 Series User s Guide Enhance security of the internal network by obscuring the IP address There are many attacks aiming victims based on the IP address Since the attacker cannot be aware of any private IP addresses the NAT function can protect the internal network On NAT page you will see the private IP address defined in RFC 1918 Usually we use the 192 168 1 0 24 subnet for the router As stated before the NAT facility can map one or more IP addresses and or service ports into different specified services In other words the NAT function can be achieved by using port mapping methods Below shows the menu items for NAT NAT Hardware NAT Open Port DMZ Host 3 3 1 Hardware NAT Hardware base Acceleration Engine also named Protocol Processing Engine API is the function that Draytek provides to extremely speed up the NAT performance While the hardware acceleration mechanism is activated most of the bandwidth usage will be concentrated on the specific sessions which increase transmission speed to get ultimately accelerated With Hardware NAT LAN to WAN NAT throughput can be over 900M bps
176. or WAN port After finishing all the settings here please click OK to activate them 4 1 3 3G Backup This page is used to setup 3G backup function If you enable 3G backup make sure your WAN connection type is not in 3G mode When the WAN connection is broken router will try to keep the connection with 3G mode After WAN connection is recovered router will disconnect the 3G connection automatically WAN gt gt 3G backup 3G Backup Configuration C Enable 3G Backup SIM PIN code Modem Initial String1 default AT amp F Modem Initial String2 ATEOV1X18D28 amp C130 0 default ATEOV1X18D028C150 0 APN Name default internet Modem Dial String ATDT 99 default ATDT 9S PPP Username PPP Password SIM PIN code Type PIN code of the SIM card that will be used to access Internet Vigor2130 Series User s Guide 101 Dr ay Tek Modem Initial String1 2 Such value is used to initialize USB modem Please use the default value If you have any question please contact to your ISP APN Name APN means Access Point Name which is provided and required by some ISPs Modem Dial String Such value is used to dial through USB mode Please use the default value If you have any question please contact to your ISP PPP Username Type the PPP username optional PPP Password Type the PPP password optional Clone MAC Address It is available when the box of Enable is checked Click Clone MAC Address The result will be display
177. or feature of UPnP on the router is NAT Traversal This enables applications inside the firewall to automatically open the ports that they need to pass through a router It is more reliable than requiring a router to work out by itself which ports need to be opened Further the user does not have to manually set up port mappings or a DMZ UPnP is available on Windows XP and the router provide the associated support for MSN Messenger to allow full use of the voice video and messaging features Applications gt gt UPnP Configuration UPnP Configuration Enable UPnP Download Speed Upload Speed Enable UPNP Enable UPnP function You have to type the download and upload speed Vigor2130 Series User s Guide 151 Dray Tek Download Speed Enter the maximum sustained WAN download speed in kilobits second Such information can be requested by UPnP clients Upload Speed Enter the maximum sustained WAN upload speed in kilobits second Such information can be requested by UPnP clients After setting Enable UPNP setting an icon of IP Broadband Connection on Router on Windows XP Network Connections will appear The connection status and control status will be able to be activated The NAT Traversal of UPnP enables the multimedia features of your applications to operate This has to manually set up port mappings or use other similar methods The screenshots below show examples of this facility Address Network Connections IP Broadb
178. or public networks like the Internet In short by VPN technology you can send data between two computers across a shared or public network in a manner that emulates the properties of a point to point private link Below shows the menu items for VPN and Remote Access VPN and Remote Access Remote Access Control PPTF Remote Dial in IPSec Remote Dial in Remote Dial in Status LAN to LAN Certificates 4 7 1 Remote Access Control Enable the necessary VPN service as you need If you intend to run a VPN server inside your LAN you should enable IPSec VPN Pass through and specify an IP address to allow VPN tunnel pass through VPN and Remote Access gt gt Remote Access Control Remote Access Control Setup WAN Services Enable IPSec VPN Service Enable IPSec VPN Pass through Enable PPTP VPN Serice Enable IPSec VPN Service If this checkbox is checked the system firewall will allow VPN IPSec remote access from WAN side to the router Enable IPSec VPN Pass through If this checkbox is checked the system f firewall will allow VPN IPSec remote access from WAN side to a VPN device on the LAN Type the IP address of the VPN device in the field next to the checkbox Vigor2130 Series User s Guide 153 Dr ay Te k Enable PPTP VPN Service If this checkbox is checked the system firewall will allow VPN PPTP remote access from WAN side to the router 4 7 2 PPTP Remote Dial in You can manage remote access by maintaining a t
179. or wireless client sending requests for connection about two minutes Interface Description WLAN Press the button once to enable WLAN LED on or disable WLAN LED off wireless connection WAN Connector for accessing the Internet LAN 1 4 Connectors for local networked devices USB Connector for USB storage Pen Driver Mobile HD or printer Dray Tek 6 Vigor2130 Series User s Guide Interface Description Phone2 Phonel Connector of analog phone for VoIP communication Factory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration PWR Connector for a power adapter ON OFF Power Switch Vigor2130 Series User s Guide 7 Dr ay Te k 1 3 Hardware Installation Before starting to configure the router you have to connect your devices correctly 1 2 3 Connect Line port to land line jack with a RJ 11 cable Vn model Connect this device to a modem with an Ethernet cable Connect one port of 4 port switch to your computer with a RJ 45 cable This device allows you to connect 4 PCs directly Connect Phone port to a conventional analog telephone Connect detachable antennas to the router for Vigor2130 series n model Connect one end of the power cord to the power port of this device Co
180. ording to user requirement When a router begins to connect to your ISP a serial of discovery process will occur to ask for a connection Then a session will be created Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system And your IP address DNS server and other related information will usually be assigned by your ISP Network Connection by 3G USB Modem For 3G mobile communication through Access Point is popular more and more Vigor router adds the function of 3G network connection for such purpose By connecting 3G USB Modem to the USB port of Vigor router it can support HSDPA UMTS EDGE GPRS GSM and the future 3G standard HSUPA etc Vigor router with 3G USB Modem allows you to receive 3G signals at any place such as your car or certain location holding outdoor activity and share the bandwidth for using by more people Users can use four LAN ports on the router to access Internet Also they can access Internet via SuperG wireless function of Vigor router and enjoy the powerful firewall bandwidth management VPN VoIP features of Vigor router Mobile Coffee shop AN ant pl Internet VoIP Web surfing E Mail ra Instant messaging etc age Nr A VPN 3 5G HSDPA USB Modem After connecting into the router 3G USB Modem will be regarded as the second WAN port However the original Ethernet WAN still can be used and Load Balance can be done in the router Besides
181. ormance in the overcrowded network This is especially essential to those are low tolerant of loss delay or jitter delay variation Another reason is due to congestions at network intersections where speeds of interconnected circuits mismatch or traffic aggregates packets will queue up and traffic can be throttled back to a lower speed If there s no defined priority to specify which packets should be discarded or in another term dropped from an overflowing queue packets of sensitive applications mentioned above might be the ones to drop off How this will affect application performance There are two components within Primary configuration of QoS deployment Classification Identifying low latency or crucial applications and marking them for high priority service level enforcement throughout the network Scheduling Based on classification of service level to assign packets to queues and associated service types The basic QoS implementation in Vigor routers is to classify and schedule packets based on the service type information in the IP header For instance to ensure the connection with the headquarter a teleworker may enforce an index of QoS Control to reserve bandwidth for HTTPS connection while using lots of application at the same time One more larger scale implementation of QoS network is to apply DSCP Differentiated Service Code Point and IP Precedence disciplines at Layer 3 Compared with legacy IP Prece
182. ose Hide to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN SSID It means the identification of the wireless LAN SSID can be any text numbers or various special characters The default SSID is DrayTek We suggest you to change it Wireless Mode Choose the wireless mode for this router At present only 802 11B B N mix is available Country Region Code Use the drop down list to choose the one that this router Supports Channel It means the channel of frequency of the wireless LAN The default channel is 11 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select Auto to let system determine for you Encryption Select an appropriate encryption mode to improve the security and privacy of your wireless data packets WPA RADIUS WPS Dray Tek 24 Vigor2130 Series User s Guide Each encryption mode will bring out different web page and ask you to offer additional configuration WEP If you choose WEP as the security configuration you have to specify encryption key Key 1 Key 4 and authentication mode open or shared All wireless devices must support the same WEP encryption bit size and have the same key Quick Start Wizard Wireless System Configuration Enable Wireless LAN ll SSID Broadcast Wireless Mode Mixed 11b 11g 11n Country Region Code 0 channels 1 11 Channel
183. ou can set or reset the following items All of them are described in detail below LAN gt gt Ports Port Configuration Port Current LAN Down 100fdx Down Down Port Link Current Speed Configured Vigor2130 Series User s Guide Speed Flow Control a ae Excessive Current Current Collision Rx Power Configured Frame Control Configured Auto x x 15 isca Disab ato M O x 1518 Disca Disab x OK It displays current network interface It displays current connection status Green light means the LAN connection is successful It displays current speed that the router uses It can set the speed and duplex of the port You can use the drop down list to choose the required speed for the router If you have no idea in configuring speed simple use the default setting 0 Dray Tek Flow Control Maximum Frame Excessive Collision Mode Power Control Refresh 10Mbps FDX 10Mbps HDX If flow control is enabled by checking Configured box both parties can send PAUSE frame to the transmitting device s if the receiving port is too busy to handle If not there will be no flow control in the port It drops the packet if too much to handle Current Rx indicates whether pause frames on the port are obeyed Current Tx indicates whether pause frames on the port are transmitted This module offers 1518 9600 Bytes length to make the long packet for data transmission There are two
184. ow IPSEC L2TP Allow PPTP Allow FTP carrie carrie ni y v v y Add a New User Editing Deleting User Settings To edit a user click the name link under Username to open the following page Modify the settings except Username and then click OK to save and exit it If you want to remove such user settings simply click Delete User User Configuration Edit User User Settings Username carrie Full Name carrie ni Password Confirm Passward Allow Disk Sharing Allow IPSEC L2TP Allow PPTP Allow FTP OK Delete User Vigor2130 Series User s Guide 155 Dr ay Te k 4 7 3 IPSec Remote Dial in This page allows you to configure PSec Site to Client settings VPN and Remote Access gt gt Remote Dial in Setup IPSec Site to Client Mobile VPN Mobile VPN Type Mobile VPN Type Disabled Authentication Type Preshared secret shared secret Shared secret again Identities Local Identity Advanced Settings Phase 17 IKE Encryption Phase 2 IPSec Encryption Automatic Mobile VPN Type This usually applies to those are remote dial in user or node LAN to LAN which uses dynamic IP address and IPSec related VPN connections such as L2TP over IPSec and IPSec tunnel L2TP lPsec Dynamic VPN IPsec L2TP IPsec Disabled Ignore the configurations set in this page Dynamic VPN IPSec Traffic between this subnet and the client will travel through the VPN tunnel If you choose this t
185. ps FDX Port Link Current Speed Configured Flow Control Maximum Frame Excessive Collision Mode Vigor2130 Series User s Guide It displays current network interface It displays current connection status Green light means the WAN connection is successful It displays current speed that the router uses It can set the speed and duplex of the port You can use the drop down list to choose the required speed for the router If you have no idea in configuring speed simple use the default setting Auto 1Gbps FDX 100Mbps FDX 100Mbps HDX 10Mbps FDX 10Mbps HDX If flow control is enabled by checking Configured box both parties can send PAUSE frame to the transmitting device s if the receiving port is too busy to handle If not there will be no flow control in the port It drops the packet if too much to handle Current Rx indicates whether pause frames on the port are obeyed Current Tx indicates whether pause frames on the port are transmitted This module offers 1518 9600 Bytes length to make the long packet for data transmission There are two modes for you to choose when excessive collision happened in half duplex condition 39 Dray Tek Power Control Refresh Restart Discard It determines whether the MAC drops frames after an excessive collision has occurred If yes a frame is dropped after excessive collision This is IEEE Standard 802 3 half duplex flow control operation
186. rames with a Time to Live field greater than zero must not be able to match this entry Non zero Pv4 frames with a Time to Live field greater than zero must be able to match this entry Any Any value is allowed IP Fragment Specify the fragment offset settings for this ACE This involves the settings for the More Fragments MF bit and the Fragment Offset FRAG OFFSET field for an Pv4 frame IP Fragment No Pv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must not be able to match this entry Yes IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must be able to match this entry Any Any value is allowed IP Option Specify the options flag setting for this ACE IP Option Yes No IPv4 frames where the options flag is set must not be able to match this entry Yes Pv4 frames where the options flag is set must be able Dr ay Tek 126 Vigor2130 Series User s Guide SIP Filter SIP Address SIP Mask DIP Filter DIP Address DIP Mask ICMP Type Filter ICMP Type Value Vigor2130 Series User s Guide to match this entry Any Any value is allowed Specify the source IP filter for this ACE SIP Filter Any No source IP filter is specified Host Source IP filter is set to Host Specify the source IP address in the SIP Address field that appears Network Source IP filter is set to Network Specify the source IP address and sour
187. ration Port Members VLAN ID MAC Address WAN LAN LAN LANS LAN4 Add New Static Entry Disable Automatic Aging Stop the MAC table aging timer the learned MAC address will not age out automatically The default setting is enabled Check the box to disable this function if required Age Time Delete a MAC address idling for a period of time from the following MAC Table which will not affect static MAC address Range of MAC Address Aging Time is 10 1000000 seconds The default Aging Time is 300 seconds MAC Table Learning List the port members which apply dynamic learning mechanism or not Auto Enable this port MAC address dynamic learning mechanism Disable Disable this port MAC address dynamic learning mechanism only support static MAC address setting Secure Disable this port MAC address dynamic learning mechanism and copy the dynamic learning packets to CPU Static MAC Table Config Specify static MAC address with VLAN ID to apply aging configuration Delete Click the button to remove the VLAN setting VLAN ID Specify the interface for the port members MAC Address It is a six byte long Ethernet hardware address and usually expressed by hex and separated by hyphens For example 00 40 C7 D6 00 02 WAN LAN1 4 Check the port to apply this VLAN setting To add a new static MAC entry click Add new static entry A new entry will be shown as follows Choose VLAN ID and type a new MAC address Next specif
188. rent status of the USB diskette 3 9 2 User Password This page allows you to set new password for user operation System Maintenance gt gt User Password User Password OK Old Password Type in the old password The factory default setting for password is blank New Password Type in new password in this filed Confirm Password Type in the new password again When you click OK the login window will appear Please use the new password to access into the web configurator again 3 9 3 Configuration Backup Backup the Configuration Follow the steps below to backup your configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below System Maintenance gt gt Configuration Backup Click Backup to download current running configurations as a file Restoration select a configuration file Click Restore to upload the file Restore Vigor2130 Series User s Guide 85 Dr ay Te k 2 Click Backup button to get into the following dialog Click Save button to open another dialog for saving configuration as a file File Dewnload P You are downloading the File config chg From 192 168 1 1 Would you like to open the tile or save it to your computer Always ask before opening this type of file 3 In Save As dialog the default filename is config cfg You could give it another name by yourself Save As Save In Ei Desktop v my Do
189. ress for PPTP L2TP server WAN IP Network Settings You can choose Static IP or DHCP as WAN IP network setting IP Address Type the IP address if you choose Static IP as the WAN IP network setting Subnet Mask Type the subnet mask 1f you chose Static IP as the WAN IP Redial Policy If you want to connect to Internet all the time you can choose Always On Otherwise choose Connect on Demand and Connect on Demand Connect on Demand Idle Time Out Set the timeout for breaking down the Internet after passing through the time without any action When you choose Connect on Demand you have to type value here MTU Size It means Max Transmit Unit for packet The default setting is 1442 Clone MAC Address It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Vigor2130 Series User s Guide 37 Dr ay Te k Enable Clone MAC Address MAC Address 00 0E A6 2A D5 A1 After finishing all the settings here please click OK to activate them 3G USB Modem If your router connects to a 3G modem and you want to access Internet via 3G modem choose 3G as connection type and type the required information in this web page WAN gt gt Internet Access WAN IP Configuration Connection Type 3G USB Modem Settings SIM PIN code Modem Initial String Modem Initial String APN Name Modem Dial String PPP Username PPP Password Clone MAC Address Enable
190. rformance and secured broadband connectivity provided by Vigor 2130 series you can simultaneously engage these bandwidth intensive applications such as high definition video streaming online gaming and Internet telephony access 1 1 Web Configuration Buttons Explanation Several main buttons appeared on the web pages are defined as the following ots Save and apply current settings Cancel Cancel current settings and recover to the previous saved settings Clear Clear all the selections and parameters settings including selection from drop down list All the values must be reset with factory default settings Add Add new settings for specified item Edit Edit the settings for the selected item Delete Delete the selected item with the corresponding settings Note For the other buttons shown on the web pages please refer to Chapter 4 for detailed explanation Vigor2130 Series User s Guide l Dr ay Te k 1 2 LED Indicators and Connectors Before you use the Vigor router please get acquainted with the LED indicators and connectors first 1 2 1 For Vigor2130 ACT Activity HPA WAN USB1 2 VPN QoS DoS Interface WAN LAN 1 4 USB Dray Tek Blinking The router is powered on and running normally The router is powered off O o o Hardware NAT is enabled LAN1 2 3 4 Status Explanation On Off Hardware NAT is disabled The WAN port is connected ne It will ous w
191. rnnal Medium WAN ma LAN fi LANZ LAN3 LAN4 WiFi1 Port Indicate the interface for the physical port WAN port LAN port and Wireless Port Default Class Use the drop down list to choose the priority for each port Default Class Normal v Medium High Dray Te K 144 Vigor2130 Series User s Guide QCL Use the drop down list to choose the QCL number defined in QoS Control List for the port QCL VitssFast Queuing Mode Use the drop down list to choose suitable mode Queuing Mode Weighted Strict Priority Queue Weighted Use the drop down list to choose 1 2 4 or 8 as the queue weighted number 4 5 6 QoS Statistics This page displays statistics for QoS setting Click WAN LAN link to check detailed information for each interface Bandwidth Management gt gt Qo Statistics Queuing Counters Auto refresh LI Low Queue Normal Queue Medium Queue High Queue Receive Transmit Receive Transmit Receive Transmit Receive Transmit WAN 56350 61645 69518 76195 63030 22 12 LAN1 0 0 0 0 0 0 0 Port LANZ 57361 T575 1953 61191 66042 T5655 LAN3 0 0 0 0 LAN4 0 0 Click WAN LAN link to check detailed information for each interface Vigor2130 Series User s Guide 145 Dr ay Te k Diagnostics gt gt Detailed Statistics Detailed Port Statistics WAN Receive Total Rx Packets Rx Octets Rx Unicast Rx Multicast Rx Broadcast Rx Pause Receive Size Counters Rx 64 Bytes Rx 65 127 Bytes
192. rror message will appear to warn you USB Application gt gt FTP User Management FTP User Management User Name Volume Access Rights carie Read only Click the name link under User Name to open the setting web page USB Application gt gt FTP User Setting FTP User Configuration User Name came Volume USB2 0 Mobile Disk 1 1967M PORT 1 Home Folder Access Rule User Name It displays the username that user uses to login to the FTP server Volume Select the proper volume for the connected USB diskette Dr ay Tek 170 Vigor2130 Series User s Guide Home Folder It determines the range for the client to access into The user can enter a directory name in this field Then after clicking OK the router will create the specific new folder in the USB diskette In addition if the user types 7 here he she can access into all of the disk folders and files in USB diskette Note When write protect status for the USB diskette is ON you cannot type any new folder name in this field Only can be used in such case Access Rule Select the access right for the USB diskette Read only Read only Read write When you finish the settings simply click OK to save the configuration 4 9 3 Disk Status This page can display current using status of the USB diskette If you want to remove the diskette from USB port in router please check the box of Safely Remove Disk first And then remove the U
193. s If you select Strict Bind unspecified LAN clients cannot access the Internet Enable Disable Strict Bind ARP Table Select All Sort Refresh IP Bind List Select All Sort IP Address Mac Address Index IF Address Mac Address 192 168 1 10 O00 0F A6 24 05 Al1 Add and Edit IP Address Ps Mac Address _ E OK Vigor2130 Series User s Guide 49 Dr ay Te k Enable Click this radio button to invoke this function However IP MAC which is not listed in IP Bind List also can connect to Internet Disable Click this radio button to disable this function All the settings on this page will be invalid Strict Bind Click this radio button to block the connection of the IP MAC which is not listed in IP Bind List ARP Table This table is the LAN ARP table of this router The information for IP and MAC will be displayed in this field Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below Add and Edit IP Address Type the IP address that will be used for the specified MAC address Mac Address Type the MAC address that is used to bind with the assigned IP address Refresh It is used to refresh the ARP table When there is one new PC added to the LAN you can click this link to obtain the newly ARP table information IP Bind List It displays a list for the IP bind to MAC information Add It allows you to add the one you choose from the ARP
194. saieinaiiideavhaswatdnninidaninmdvaisa veel daadbacwabinslntewnadiics 78 Ir USB DIC ANON sessen a stoee ag sedeackesnade docarae acts oreesauecemeedeaeest acest 78 3 1 1 USB General Sein gS sisisi iieiea a aE 78 3L FTP User Managemen asiaceaunetisiea nuse auc n N 79 S DEE TE e A E E E 80 SEED LS 4a 2 E E E et E E E eee 80 OU ET e E E E E ee eee ee eee 82 3 31 User Config rati N sisese mieunas ia i eiie 82 39 Syslem MAINO MANG Esseri ET E A aE E T TEn 83 WY SUNN AU A E E E A E AEN 83 LUP SWO eae E E capa 85 3 9 3 Configuration BACKUP sense nseacsenceceavssccecavaecedeszass Aura ES UEAN ERSE UERR NTAN iE 85 OV SOT Mal Alei asror erR Urn E Eae EEN ERT ERENT aR 87 nu IIS Gl 1 AUC nee a E E 89 29 6 VAM ADSM MMS sanonceysadosestseanseuantwausanvenad A RE O S E 90 FACOG Y E aa E R A EE 90 3 989 Firmwares Upgrade sesoses E a a E aa DE Eai 91 4A 1A memet A COSS esner eE EErEE E REEERE 95 A TEPO e EE 100 AT a BAe E E S 101 A CAN a E E E E E E 102 4 2 1 General SEUD sssrin naa er ao aee 104 Ba POS o be tomers onansund paiae vatesan tent ebometenctaa sve odueretemitaatetciedsnctuuets cian 105 4 2 3 MAC Address Tabla viseccde cet eve te cececeesccesrsiotesacsbecanceedecatedsebededacebecatacadodedeceussateredetegeueeeaced 107 BD Fe NIN r neo iat cmeevcuanaiees vce teen eustachian daeauaadadinetaa iets onan anuupaaesdudloaaeeial teas EE OES 108 AD SUAS ROUTE eaves suse czcon cana estsaasoucuueutianstaancodincs S A e A E ae N TSE 109 4 2 6 Bind I
195. ss for sending mails out Assign a path for receiving the mail from outside Type the user name for authentication Type the password for authentication Check the box of User Login to send alert message to the e mail box while the router detecting the item s you specify here For viewing the Syslog please do the following 4 Just set your monitor PC s IP address in the field of Server IP Address 5 Install the Router Tools in the Utility within provided CD After installation click on the Router Tools gt gt Syslog from program menu Vigor2130 Series User s Guide 179 Dray Tek fg Router Tools 3 5 1 G About Router Tools ER Firmware Upgrade Utility i gt Uninstall Router Tools 3 5 1 Visit DrayTek Web Site 6 From the Syslog screen select the router you want to monitor Be reminded that in Network Information select the network adapter used to connect to the router Otherwise you won t succeed in retrieving information from the router fit DrayTek Syslog 3 6 1 Controls 192 168 1 1 w lt WAN Status Gateway IP Fixed TX Packets vigor series 0 0 TX Packets RX Packets WAN IP Fixed RX Packets RX Rate p m o ee Cy 0 0 Firewall Log FPN Log User Access Log Call Log WAN Log Others Network Information Net State On Line Routers Host Name vivian eS IP Address Mask MAC NIC Description SiS 900 Based PCI Fast Ethernet Adapter Packet Se 192 168 1
196. sseeceeeccceeeasseeeeeseeeeaasseeeeeeesesaaasseeeeeesssesaageees 173 4 11 System Maintenance ccccsesscceccceeseececcceessecececeaeeeeeeseueeeesseusececsseaaeeeeeessagseeessssageeeeees 175 GW Vat yy SUC MM SL US E E acai sun ssadnene N E A E A E E AT 175 4112 oyVStem ASS VOLO isernia ana erel aa e alai 176 411 3 User PassWord inintindi ised ode essai adua riai TRE 176 4 1144 Contigu tration BackUp crassis iia anani aiia 177 A Tho OY SIOG Mal AlE serongan aa iei oa a e E S E a a 178 AAO MMe AIGA GS oireeni ronnan EE a a O a a ENE 180 AEE Nane N ee e E E AE E E T E R E A E EER 181 A lS RODOOL 9 SIM anspssescadeenvenagaatn sania E E E a aa 181 A119 Firmware LI GAC sastareernewcecteerscenisecuiteacotseanen onativcanasus E a E E 182 Vigor2130 Series User s Guide vii Dr ay Tek EN WO FAQ IO GIG anena r textarea E E AE S E E 183 7 ad 99 ee E AE E E eee EAA E E E A EET 183 A122 Roung WANG psss R EE EE a E E A 184 A T2 yS eN EO R E E A EAEE E 185 4124 ratie OU SWIG ucraniana a iei aa a a a i a da 185 4129 TS TANEOUS OS niae AE EE EEEE EEA EE 186 4 12 60 MAG Address Table eios aE REAA aaa 188 A2 os aa Vc 16 e eee A E E E E eee eee 190 e220 Bala FION MONIO erain e E E E E AR 191 AOF Ue e A E E E E E 192 POUDIE SROOUNG canin oe cetieestcateensteutnene 193 5 1 Checking If the Hardware Status Is OK or NoOt c ssseeeeeeeeeeeeeeeeeeeeeeeeeaaaasseeeeeeeeeeeeeeees 193 5 2 Checking If the Network Connection Settings on Yo
197. stination IP mask in the DIP Address and DIP Mask fields that appear Type the DIP Address here This option is available when you choose Host or Network as destination DIP Filter Type the DIP Mask here This option is available only when you choose Network as destination DIP Filter 19 Dray Tek Source Port Filter Source Port No Source Port Range Dest Port Filter Dest Port No Dest Port Range Specify the UDP port source filter for this ACE Specific If you want to filter a specific UDP source filter with this ACE you can enter a specific UDP source value A field for entering a UDP source value appears Range If you want to filter a specific UDP source range filter with this ACE you can enter a specific UDP source range value A field for entering a UDP source port range appears Type the value if you choose Specific as the Source Port Filter The allowed range is 0 to 65535 A frame meeting this ACE matches this UDP source value Type the value if you choose Range as the Source Port Filter The allowed range is 0 to 65535 A frame meeting this ACE matches this UDP source value Specify the UDP port destination filter for this ACE Dest Port Filter Any No UDP destination filter is specified Specific If you want to filter a specific UDP destination filter with this ACE you can enter a specific UDP destination value A field for entering a UDP destination value appears Range If you want to
198. t MAC Address Display the MAC Address for the connecting client Connected Time Display the connection time for the connecting client Auto refresh Check this box to force the system refreshing the table automatically Refresh Click this button to refresh current page Vigor2130 Series User s Guide 77 Dr ay Te k 3 6 5 Access Point Discovery Vigor router can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Note During the scanning process about 5 seconds no client is allowed to connect to Vigor The table will list channel SSID BSSID Encryption type Authorization type and the Signal strength of working APs in the neighborhood Wireless LAN gt gt Access Point Discovery Access Point Discove Channel SSID BSSD Enc Signal Scan Note During the scanning process 5 seconds no station is allowed to connect with the router Channel Display the channel for the scanned AP SSID Display the SSID of the scanned AP BSSID Display the MAC address of the scanned AP Enc Display the encryption type of the scanned AP Auth Display the authentication method of the scanned AP Signal Display the strength in percentage of the signal of the scanned AP Scan It is used to discover all the connected AP The results will be shown on the box above this button 3 7 USB Application USB diskette can be regarded
199. t in important accesses impacted To solve the problem you can use limit session to limit the session procession for specified Hosts In the Bandwidth Management menu click Sessions Limit to open the web page Bandwidth Management gt gt Session Limit Session Limit Configuration Enable Disable Default Max Sessions Limitation List Index Start IP Max Sessions Specific Limitation Stat P End o Maximum Sessions To activate the function of limit session simply click Enable and set the default session limit Enable Click this button to activate the function of limit session Disable Click this button to close the function of limit session Default Max Sessions Defines the default session number used for each computer in LAN Limitation List Displays a list of specific limitations that you set on this web page Start IP Defines the start LAN IP address for limit session Dr ay Tek 54 Vigor2130 Series User s Guide End IP Defines the end LAN IP address for limit session Maximum Sessions Defines the available session number for each host in the specific range of IP addresses If you do not set the session number in this field the system will use the default session limit for the specific limitation you set for each index Add Adds the specific session limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limit
200. t the service provider for the DDNS account Hostname Type in one domain name that you applied previously Use the drop down list to choose the desired domain Username Type in the login name that you set for applying domain Vigor2130 Series User s Guide 65 Dr ay Te k Password Type in the password that you set for applying domain Check IP change every Set the interval for checking the information Force IP update every Force the router updates its information to DDNS server with the interval set here Click OK button to activate the settings You will see your setting has been saved 3 5 2 Schedule The Vigor router has a built in real time clock which can update itself manually or automatically by means of Network Time Protocols NTP As a result you can not only schedule the router to dialup to the Internet at a specified time but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours say business hours The schedule is also applicable to other functions You have to set your time before set schedule In System Maintenance gt gt Time and Date menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is another way to set up time You can inquiry an NTP server a time server on the Internet to synchronize the router s clock This method can only be applied when t
201. t you set on this web page Start IP Bandwidth limit can be applied on certain IP range That s only the PCs within the range will be influenced by the bandwidth limitation set here Please define the start IP address for the specific limitation End IP Define the end IP address for the specific limitation TX Limit Define the limitation for the speed of the upstream to be applied as specific limitation If you do not set the limit in this field the system will use the default speed for the specific limitation you set for each index RX Limit Define the limitation for the speed of the downstream to be applied as specific limitation If you do not set the limit in this field the system will use the default speed for the specific limitation you set for each index Add Add the specific speed limitation onto the list above Edit Allows you to edit the settings for the selected limitation Delete Remove the selected settings existing on the limitation list When you finish adding a new bandwidth limit simply click OK The following page will appear for you to check 3 4 3 Port Rate Control A policer can limit the bandwidth of received frames It is located in front of the ingress queue And a shaper can limit the bandwidth of transmitted frames It is located after the ingress queues This page allows you to configure the switch port rate limit for Policers and Shapers Bandwidth Management gt gt Port Rate Control Rate Limit C
202. ted Display the total transmitted bytes Display the show the counting number of the transmitted unicast packet Display the show the counting number of the transmitted multicast packet Display the counting number of the transmitted broadcast packet Show the counting number of the transmitted pause packet Display the number of 64 byte frames in good and bad packets transmitted Display the number of 65 127 byte frames in good and bad packets transmitted Display the number of 128 255 byte frames in good and bad packets transmitted Display the number of 256 511 byte frames in good and bad packets transmitted Display the number of 512 1023 byte frames in good and bad packets transmitted Display the number of 1024 1522 byt frames in good and bad packets transmitted Display the number of 1527 byte frames in good and bad packets transmitted Display the low queue counter of the packet transmitted Display the normal queue counter of the packet transmitted Display the medium queue counter of the packet received 147 Dray Tek Tx High Display the high queue counter of the packet received Tx Drops Display the number of frames dropped due to excessive collision late collision or frame aging Tx lat Exc Coll Display the number of Frames late collision or excessive collision Error which switch transmitted 4 6 Applications Below shows the menu items for Applications r Applications Dynamic
203. ter status is don t care Specific If you want to filter a specific ICMP code filter with this ACE you can enter a specific ICMP code value A field for entering an ICMP code value appears If you choose Specific as ICMP Code Filter you have to type the ICMP Type Value manually The allowed range is 0 to 255 A frame meeting this ACE matches this ICMP value Choose IPv4 as the Frame Type You will see IP Parameters on the bottom of the page If you choose UDP as IP Protocol Filter you will get the page as the following IP Parameters IP Protocol Filter P TIL IF Fragment IF Option SIP Filter SIF Address SIF Mask DIF Filter DIF Address DIP Mask IP TTL IP Fragment UDF Farameters Source Fort Filter Source Fort Mo Dest Port Filter Dest Pot Range Specify the Time to Live settings for this ACE IPF TTL Non zero IF Fragment IP Option Zero IPv4 frames with a Time to Live field greater than zero must not be able to match this entry Non zero IPv4 frames with a Time to Live field greater than zero must be able to match this entry Any Any value is allowed Specify the fragment offset settings for this ACE This involves the settings for the More Fragments MF bit and the Fragment Offset FRAG OFFSET field for an IPv4 frame IP Fragment No No IPv4 frames where the MF bit is set or the FRAG OFFSET field is greater than zero must not be able to match this entry 128 Vigor213
204. that you have to know the way of configuration Status User Password Configuration Backup Syslog Mail Alert Time and Date Management Reboot System and Firmware Upgrade Below shows the menu items for System Maintenance System Maintenance System Status User Password Configuration Backup Syslog Mail Alert Time and Date Management Reboot System Firmware Upgrade 3 9 1 System Status The System Status provides basic network settings of Vigor router It includes LAN and WAN interface information Also you could get the current running firmware version or firmware related information from this presentation Vigor2130 Series User s Guide 83 Dr ay Te k System Status Model Platform Bootloader Version Firmware Version Build Date Time Hardware NAT Version System Date System Uptime Vigor2130 V5C7501 1 0 0 13 MAC Address 00 50 7F C 7 7B 30 IP Address 197 1698 1 1 IP Mask 255 255 255 0 MAC Address 00 21 85 F7 44 D1 rt2880 DrayTek Device Type SSID Channel 1i1 Manufacturer USB2 0 Model Mobile Disk Model Name Platform Bootloader Version Firmware Version Build Date Time Hardware NAT Version System Date System Uptime LAN MAC Address IP Address IP Mask WAN MAC Address IP Address IP Mask Default Gateway Primary DNS Secondary DNS Wireless LAN Dray Tek Auto refresh _Refresh Dray Boot 1 0 0E v1 1 0 RC2 r527 Mon Jun
205. this 0 TCP frames where the PSH field is set must not be able to match this entry 1 TCP frames where the PSH field is set must be able to match this entry Any Any value is allowed TCP ACK Specify the TCP Acknowledgment field significant ACK value for this ACE 0 TCP frames where the ACK field is set must not be able to match this entry 1 TCP frames where the ACK field is set must be able to match this entry Any Any value is allowed TCP URG Specify the TCP Urgent Pointer field significant URG value for this ACE 0 TCP frames where the URG field is set must not be able to match this entry 1 TCP frames where the URG field is set must be able to match this entry Any Any value is allowed Choose IPv4 as the Frame Type You will see IP Parameters on the bottom of the page If you choose Other as IP Protocol Filter you will get the page as the following Dray Te k 134 Vigor2130 Series User s Guide IP Parameters IP TTL IP Fragment IP Option SIP Filter SIP Address SIP Mask DIP Filter DIP Address DIP Mask IP Protocol Value IP TTL IP Fragment IP Option Vigor2130 Series User s Guide 255 255 255 0 When Other is selected for the IP protocol filter you can enter a specific value here The range is 0 to 255 The default value is 255 A frame meeting this ACE matches this IP protocol value Specify the Time to Live settings for this ACE IP TTL
206. tings IF Address Subnet Mask Gateway IP Address 2 16 3 Primary DNS Server 0 0 0 0 Secondary DNS Server 0 0 0 0 Clone MAC Address IP Address Type the IP address Subnet Mask Type the subnet mask Vigor2130 Series User s Guide 95 Dr ay Te k Gateway IP Address Type the gateway IP address Primary DNS Server Type in the primary IP address for the router if you want to use Static IP mode Secondary DNS Server Type in secondary IP address for using in the future if necessary Clone MAC Address It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 2 A D5 A1 After finishing all the settings here please click OK to activate them DHCP DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet If you choose DHCP mode the DHCP server of your ISP will assign a dynamic IP address for your router automatically It is not necessary for you to assign any setting WAN gt gt Internet Access WAN IP Configuration Connection Type DHCP Settings Router Name Vigor 130 The same as syslog s router name Clone MAC Address Enable OK Cancel Router Name Type in a name for the router It must be the same as the name used in Syslog Clone MAC Address It is available when the box of Enable is checked Click Clone MAC Address The result wil
207. tiple public IP addresses from your DSL or Cable ISP service providers In most cases a Cable service provider will offer a fixed public IP while a DSL service provider will offer a public subnet If you have a public subnet you could assign an IP address or many IP address to the WAN interface To use Static as the accessing protocol of the internet please choose Static mode from Connection Type drop down menu The following web page will be shown Vigor2130 Series User s Guide oe Dr ay Te k WAN gt gt Internet Access WAN IP Configuration Connection Type Static IP Settings IP Address Subnet Mask Gateway IP Address Primary DNS Server secondary DNS Server Clone MAC Address Static IP k 255 255 0 0 T2 16 3 4 0 0 0 0 0 0 0 0 Enable C IP Address Subnet Mask Gateway IP Address Primary DNS Server Secondary DNS Server Clone MAC Address Type the IP address Type the subnet mask Type the gateway IP address Type in the primary IP address for the router if you want to use Static IP mode Type in secondary IP address for using in the future if necessary It is available when the box of Enable is checked Click Clone MAC Address The result will be displayed in the field of MAC Address Enable Clone MAC Address MAC Address 00 0E A6 24 D5 A1 After finishing all the settings here please click OK to activate them Dray Tek 34 Vigor2130 Series User s Guide DHCP DHCP allows
208. to authentication open mode SHARED Set wireless to authentication shared mode WPA PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Wireless Security Configuration Encryption WPA PSK Configuration Type WPA Algorithm WPA Pre Shared Key WPA Mode Select WPA WPA2 or Auto as the type ito WPA or WPA Vigor2130 Series User s Guide 73 Dr ay Te k Dray Tek WPA Algorithm Select TKIP AES or auto as the algorithm for WPA TKIP to TKIP or AES WPA Pre Shared Key Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde WPA RADIUS The built in RADIUS client feature enables the router to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management Wireless Security Configuration crypt WPA RADIUS Encryption WPA RADIUS Configuration WPA Algorithm Server IP Address Destination Port Shared Secret OK Type The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated
209. tp Exanple menmegr 192 169 29 11 131 35 60654 UDP mermegr 192 168 29 11 7824 13251 UDP This connection allows you to connect to the Internet through a menmegr 192 168 29 11 8789 63231 TCP shared connection on another computer i Show icon in notification area when connected Pa Edt HAE i i gt Lati E The reminder as regards concern about Firewall and UPnP Can t work with Firewall Software Dray Te K 152 Vigor2130 Series User s Guide Enabling firewall applications on your PC may cause the UPnP function not working properly This is because these applications will block the accessing ability of some network ports Security Considerations Activating the UPnP function on your network may incur some security threats You should consider carefully these risks before activating the UPnP function gt Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches gt Non privileged users can control some router functions including removing and adding port mappings The UPnP function dynamically adds port mappings on behalf of some UPnP aware applications When the applications terminate abnormally these mappings may not be removed 4 7 VPN and Remote Access A Virtual Private Network VPN is the extension of a private network that encompasses links across shared
210. traffic treated in the same manner as broadcast traffic Applications gt gt IGMP Snooping IGMF Snooping Configuration snooping Enabled Unregistered IPMC Flooding enabled Snooping Enabled Unregistered IPMC Fast Leave Vigor2130 Series User s Guide General Configuration d d Fast Leave OK Check the box to enable this function Check the box to enable unregistered IPMC traffic flooding Check the box to Fast Leave on the LAN port 67 Dray Tek 3 5 4 IGMP Status This page display current IGMP snooping status Applications gt gt IGMP Status IGMP Snooping Status Auto refresh L Clear Statistics V1 Reports V2 Reports V3 Reports V2 Leave Receive Receive Receive Receive 0 0 0 IGMP Groups Port Members 2 3 V1 3 Reports Receive Display the number of Received V1 V3 Reports V2 Leave Receive Display the number of Received V2 Leave Groups Display current IGMP groups Maximum number of group for each VLAN can be set is 128 Port Members Display the LAN ports in this group Refresh Click this button to refresh the page immediately Clear Click this button to clear the settings on this page 3 5 5 UPnP Configuration The UPnP Universal Plug and Play protocol is supported to bring to network connected devices the ease of installation and configuration which is already available for directly connected PC peripherals with the existing Windows Plug and Play system For NAT rout
211. tton to remove the VLAN setting VLAN ID Specify the interface for the port members MAC Address It is a six byte long Ethernet hardware address and usually expressed by hex and separated by hyphens For example 00 40 C7 D6 00 02 WAN LAN1 4 Check the port to apply this VLAN setting To add a new static MAC entry click Add new static entry A new entry will be shown as follows Choose VLAN ID and type a new MAC address Next specify port member for this table Finally click OK to save the changes Static MAC Table Configuration Port Members Delete VLAN ID MAC Address WAN LAN LAN LAN LANA 00 00 00 00 00 00 Oo O oO Oo Add new static entry 3 2 4 VLAN Virtual LAN function provides you a very convenient way to manage hosts by grouping them based on the physical port You can also manage the in out rate of each port Go to LAN page and select VLAN The following page will appear VLAN function is enabled in default LAN gt gt VLAN Private VLAN Membership Configuration Port Members Delete PVLAN ID LAN LAN OK Add New Private VLAN Click this button to add a new private VLAN The router allows you to add up to 4 VLAN Dray Tek 46 Vigor2130 Series User s Guide LAN gt gt VLAN Private VLAN Membership Configuration Port Members LAN LAN3 To add or remove a VLAN please refer to the following example 1 VLAN 1 is consisted of hosts linked to P1 P4 2 After checking t
212. ur Computer Is OK or Not 0 194 5 3 Pinging the Router from Your Computer ccccccccccccsssssesssesseeeeeeeeeeeeeessaaaeeesseeseeeeeeseeeeeees 196 5 4 Checking If the ISP Settings are OK or NoOt cc cccceceeeeeeeeeeeeeeeeeeeeeeeseeeaaaaaaaaaaeeeeeeeeeeeeees 197 5 5 Backing to Factory Default Setting If Necessary eenen ennenen 199 5 6 Contacting Your Dealer cccccccseseeccceecceeesseeeceeeeeeaeeaseeeeeeeeesaeeeeeeeeessaaeaeeeeeeeessaaaeeeeeeeeees 200 D ray Tek viii Vigor2130 Series User s Guide L Preface The Vigor2130 series are the routers with high speed in data transmission through WAN port and LAN ports With hardware NAT acceleration the rate of Vigor2130 series can be greater than 900Mbps almost With the development of NGN Next Generation Network you may recently hear the news about FTTx deployment in your local area or even have already subscribed the unbundling last mile service e g VDSL2 from local ITSP for FTTx As adopting FTTx the main question for end users is whether your legacy router could fully utilize its bandwidth or not For example you purchase a 120 Mbps Internet connection from your ISP but your existing router cannot support 90 Mbps throughput That s why DrayTek launches Vigor 2130 series High speed Gigabit router perfectly complied with VDSL2 environment including Vigor2130 Vigor2130n and Vigor2130Vn for speed wanted customers With high throughput pe
213. used to authenticate the messages sent between them Both sides must be configured to use the same shared secret WPS WPS Wi Fi Protected Setup provides easy procedure to make network connection between wireless station and wireless access point vigor router with the encryption of WPA and WPA2 Wireless Security Configuration Encryption WPS Configuration Configure via Push Button Configure via Client PinCode start PIN OK Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure The router will wait for WPS requests from wireless clients about two minutes The WPS LED on the router will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Client PinCode Type the PIN code specified in wireless client you wish to connect and click Start PIN button The WLAN LED on the router will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes It is the simplest way to build connection between wireless network clients and vigor router Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time He she only needs to press a button on wireless client and WPS will connect for client and router automatically Dray Tek 166 Vigor2130 Series User s Guide
214. ved Dray Tek 3 For user mode operation do not type any word on the window and click Login for the simple web pages for configuration Yet for admin mode operation please type admin admin on Username Password and click Login for full configuration Q Notice If you fail to access to the web configuration please go to Trouble u Shooting for detecting and solving your problem 4 The web page can be logged out according to the chosen condition The default setting is Auto Logout which means the web configuration system will logout after 5 minutes without any operation Change the setting for your necessity Off Vigor2130 Series User s Guide 15 Dr ay Te k 2 3 Changing Password No matter user mode operation or admin mode operation please change the password for the original security of the router 1 Open a web browser on your PC and type http 192 168 1 1 A pop up window will open to ask for username and password 2 Please type admin admin on Username Password for admin mode Otherwise do not type any word both username and password are Null for user mode on the window and click Login on the window 3 Now the Main Screen will appear Vigor2 130 Seres l Dray Tek n 2 High Speed Gigabit Router System Status Quick Start Wizard Auto refresh C Online Status Model Vigor2130 gt WAN Platform VSC7501 gt LAN Bootloader Version Dray Boot 1 0 0E gt NAT Firmware
215. via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA Algorithm Auto TKIP or AES Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret WPS WPS Wi Fi Protected Setup provides easy procedure to make network connection between wireless station and wireless access point vigor router with the encryption of WPA and WPA2 74 Vigor2130 Series User s Guide Wireless Security Configuration Encryption WPS Configuration Configure via Push Button Start PBC Start PIN Configure via Client PinCode Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure The router will wait for WPS requests from wireless clients about two minutes The WPS LED on the router will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Client PmCode Type the PIN code specified in wireless client you wish to connect and click Start PIN button The WLAN LED on the router will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes It is t
216. y port member for this table Finally click OK to save the changes Vigor2130 Series User s Guide 107 Dr ay Te k Static MAC Table Configuration Port Members Delete VLAN ID MAC Address WAN LAN1 LAN LANS LAN4 1 LAN ol 00 00 00 00 00 00 C F F C 4 2 4 VLAN Virtual LAN function provides you a very convenient way to manage hosts by grouping them based on the physical port You can also manage the in out rate of each port Go to LAN page and select VLAN The following page will appear VLAN function is enabled in default LAN gt gt VLAN Private VLAN Membership Configuration Port Members Delete PVLAN ID LAN LAN Add New Private VLAN 1 Add New Private VLAN Click this button to add a new private VLAN The router allows you to add up to 4 VLAN LAN gt gt VLAN Private VLAN Membership Configuration Porn Members LAN LAN3 To add or remove a VLAN please refer to the following example 1 VLAN 1 is consisted of hosts linked to P1 P4 2 After checking the box to enable VLAN function you will check the table according to the needs as shown below Dray Tek 108 Vigor2130 Series User s Guide LAN gt gt VLAN Private VLAN Membership Configuration Port Members Delete LAN LANS CI LAN4 d a C m OK 3 To remove VLAN click the Delete button for the one you want to remove and click OK to save the results 4 2 5 Static Route Go to LAN to open setting page and choos
217. ype please specify the IP address and subnet mask for local network Mobile VPN Type Mobile VPN Type Dynamic VPN IPsec Local Network Mask 0 0 0 0 0 0 0 0 L2TP IPSec The range must not overlap the DHCP address range if enabled and must allow for at least one IP address Example 10 10 137 240 10 10 137 245 If you choose this type please specify the IP address range for L2TP IPSec mode Mobile VPN Type Mobile VPN Type L2TP IPsec TIE O E DHCP IP Address range 192 166 1 10 192 165 1 60 Dray Tek 156 Vigor2130 Series User s Guide Authentication Identities Advanced Settings Vigor2130 Series User s Guide Type Determine the authentication method for remote dial in user Authentication Type Preshared secret Authentication Type Preshared secret If you choose this one you have to type the shared secret manually and specify local identity When using Preshared secret all clients share the same secret Certificates If you choose this one you have to choose local certificate from the Local Certificate drop down list and type in local identity Then use Add Identity to specify remote identity for this service Identities Local Certificate Local Identity Remote Identities Add Identity Local Certificate Used to authenticate the local part of the VPN tunnel while using certificate based authentication Local Identity Specify a local ID to be
218. ype 3 and the 2nd IP address of your router is 220 135 240 1 the range of IP address by the DHCP server will be from 220 135 240 2 to 220 135 240 11 Lease Time It allows you to set the leased time for the specified PC After finishing all the settings here please click OK to activate them Vigor2130 Series User s Guide 43 Dr ay Te k 3 2 2 Ports Ports page is used to change the setting for LAN ports You can set or reset the following items All of them are described in detail below LAN gt gt Ports Port Configuration Speed Port Link LANZ LAN4 Port Link Current Speed Configured Flow Control Maximum Frame Excessive Collision Mode Dray Tek Lat down x x en os EE Flow Control Excessive Current Current a Collision Current Configured Rx g Configured Frame OK It displays current network interface It displays current connection status Green light means the LAN connection is successful It displays current speed that the router uses It can set the speed and duplex of the port You can use the drop down list to choose the required speed for the router If you have no idea in configuring speed simple use the default setting Auto Auto Disabled 1Gbps FDX 100Mbps FDX 100Mbps HDX 10Mbps FDX 10Mbps HDX If flow control is enabled by checking Configured box both parties can send PAUSE frame to the transmitting device s if the receiving port is too busy to
219. yslog please do the following 1 Just set your monitor PC s IP address in the field of Server IP Address 2 Install the Router Tools in the Utility within provided CD After installation click on the Router Tools gt gt Syslog from program menu fy Router Tools 2 5 1 2 About Router Tools ba Firmware Uperade Utility i gt Uninstall Router Tools 3 5 1 Visit DrayTek Web Site 3 From the Syslog screen select the router you want to monitor Be reminded that in Network Information select the network adapter used to connect to the router Otherwise you won t succeed in retrieving information from the router Dr ay Tek 88 Vigor2130 Series User s Guide tif DrayTek Syslog 3 6 1 Controls Hee LAN Status vigor series TX Packets RX Packets 1693 1470 Firewall Log VPN Log User AccessLog Call Log WAN Log Others On Line Routers Host Name Mask 255 255 2 IP Address 192 168 1 1 MAC 00 50 7F 54 6 NIC Information MAC Address IP Address Subnet Mask DNS Servers ADSL Status Mode State Up Speed Down Speed 3 9 5 Time and Date NIC Description 192 168 1 1 v WAN Status Gateway IP Fixed TX Packets TX Rate 0 RX Rate a WAN IP Fixed RX Packets Network Information Net State vivian SiS 900 Based PCI Fast Ethernet Adapter Packet Sc 00 1 1 D8 E4 58 CE Default Geteway 192 168 1 1 192 168 1 10 DHCP Server 192 168 1 1
220. ytes Display the show the counting number of the transmitted unicast packet Display the show the counting number of the transmitted multicast packet Display the counting number of the transmitted broadcast packet Show the counting number of the transmitted pause packet Display the number of 64 byte frames in good and bad packets transmitted Display the number of 65 127 byte frames in good and bad packets transmitted Display the number of 128 255 byte frames in good and bad packets transmitted Display the number of 256 511 byte frames in good and bad packets transmitted Display the number of 512 1023 byte frames in good and bad packets transmitted Display the number of 1024 1522 byt frames in good and bad packets transmitted Display the number of 1527 byte frames in good and bad packets transmitted Display the low queue counter of the packet transmitted Display the normal queue counter of the packet transmitted Display the medium queue counter of the packet received 64 Vigor2130 Series User s Guide Tx High Display the high queue counter of the packet received Tx Drops Display the number of frames dropped due to excessive collision late collision or frame aging Tx lat Exc Coll Display the number of Frames late collision or excessive collision Error which switch transmitted 3 5 Applications Below shows the menu items for Applications r Applications Dynamic DNS Schedul

Dodge 2011 Ram 1500 Automobile User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents