680257

Draytek Vigor 2100VG series Handleiding

128
Verklein
Vergroot
Pagina terug
1/134
Pagina verder
1
Preamble of DrayTek Vigor2100V series All Rights Reserved
Preamble of Vigor2100V/VG series residential broadband Router
Introduction
Easy Internet-Sharing of your broadband* connection
Robust firewall to help protect your network from external attacks
Built-in VoIP facilities enable to deploy cost-effective IP telephone
infrastructure
Plug in a telephone to use your broadband line for regular phone calls
Integration with your existing phone line (POTS) with automatic failover
during power cuts
QoS assured priority for VoIP Internet traffic
802.11g Compliant Wireless LAN access with security features
( Vigor2100VG only)
Compatible with Windows & MacOS
2
Preamble of DrayTek Vigor2100V series All Rights Reserved
Brief Overview
Vigor2100V
Vigor2100VG
Broadband
Router
* *
802.11g WLAN
AP
- *
VoIP port
One FXS One FXS
Life Line port
one one
The Vigor2100VG is a user-friendly broadband router with a built-in VoIP
(Voice over IP) telephone port and 802.11g Wireless LAN access point. The
visual design, with its stylish pleasing lines and brushed silver finish provide
looks good enough to fit into any environment.
The Vigor2100VG's VoIP facilities can provide a cost-saving alternative to
having an additional fixed line. By using the DrayTEL PSTN gateway (ITSP)
you can also make calls to any regular phone line too, including mobiles, as
well as receive calls from anyone - the call is carried to your phone via your
internet connection so your regular phone line remains free for other people or
calls.
The POTS life-line facility provides for automatic failover to your regular phone
line in the event of power or Internet failure, as well as letting you use the
same phone to access either your regular phone line or VoIP facility when
required.
3
Preamble of DrayTek Vigor2100V series All Rights Reserved
Highlights
VoIP (Voice over IP)
Connect a regular telephone to make and
receive voice
calls using your existing broadband
connection, leaving your regular line free
Make and receive calls using your regular
phone line (POTS) or via VoIP using the
same telephone handset
Auto-Fallback - Phone switches to PSTN
during power cut SIP, RTP/RTCP protocols
compliance
WAN/Internet
One 10/100M Base-TX port with a RJ-45
connector
Quick Start Wizard for Internet access
DHCP client for cable service
Static IP address assignment for fixed IP
networks
PPPoE client
Firewall Facilities
SPI (Stateful Packet Inspection)
tracks packets and denies unsolicited
incoming data
Selectable DoS/DDoS protection
Flexible URL content filtering
User-configurable packet filtering
NAT/PAT
Virtual server via port redirection or open
ports
DMZ host
Supports ALGs (Application Layer
Gateways)
for applications
E-mail Detection
LED flashes to indicate E-mail is waiting on
your mail server (POP3)
LAN
4-port 10/100M Base-TX Ethernet switch
DHCP server for IP assignment (up to 253
users)
DNS cache and proxy
Wireless Access Point (Vigor2100VG only)
Supports 802.11g (54Mbps data rate)
Backward compatible with 802.11b
Station List
Wireless security:
64/128 bits WEP wireless encryption
WPA/PSK encryption
Client MAC-address locking
SSID stealth
Application Support
Supports VPN pass-through
MSN Messenger V6.2, online gaming, and
other multimedia applications
UPnP protocol enables router control and
enhances access for UPnP -ready
multimedia applications
Router Management
Web-based User Interface
Command Line Interface (Telnet)
Telnet Remote Access Support
Built-in Diagnostic Function
Syslog Monitoring
4
Preamble of DrayTek Vigor2100V series All Rights Reserved
Hardware Connection
Vigor2100V/VG Series of Residential Broadband Routers
i
About This User’s Guide
This manual is designed to assist users in using one of the Vigor2100V/VG
series residential broadband router with VoIP. Information in this document
has been carefully checked for accuracy and, however, no guarantee is given
as to the correctness of the contents. The information contained in this
document is subject to change without notice. Should you have any inquiries,
please feel free to contact our support via E-mail, Fax or phone. For the
latest product information and features, please visit our website at
www.draytek.com.
We apply the sunshine-smile face of VigorBoy to some chapters in
order to remind you of your special attention! Should you have any queries
and suggestions, please do not hesitate to contact your local dealer or us via
support@draytek.com or info@draytek.com!
The version of this User’s Guide is version No.1.
Vigor2100V/VG Series of Residential Broadband Routers
ii
Copyright
Copyright
2004 by DrayTek Corporation
All rights reserved. The information of this publication is protected by
copyright. No part of this publication may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language
without written permission from the copyright holders.
Trademark
Microsoft is a registered trademark of Microsoft Corp. Windows and
Windows 95/98/98SE/Me/NT/XP/2000 are trademarks of Microsoft Corp.
Other trademarks and registered trademarks of products mentioned in this
manual may be the properties of their respective owners and are only used for
identification purposes.
Vigor2100V/VG Series of Residential Broadband Routers
iii
DrayTek Limited Warranty
We warrant to the original end user (purchaser) that the routers will be free
from any defects in workmanship or materials for a period of three (3) years
from the date of purchase from the dealer. Please keep your purchase
receipt in a safe place as it serves as proof of date of purchase.
During the warranty period, and upon proof of purchase, should the product
have indications of failure due to faulty workmanship and/or materials, we will,
at our discretion, repair or replace the defective products or components,
without charge for either parts or labor, to whatever extent we deem necessary
to restore the product to proper operating condition. Any replacement will
consist of a new or remanufactured functionally equivalent product of equal
value, and will be offered solely at our discretion. This warranty will not apply
if the product is modified, misused, tampered with, damaged by an act of God,
or subjected to abnormal working conditions.
The warranty does not cover the bundled or licensed software of other vendors.
Defects which do not significantly affect the usability of the product will not be
covered by the warranty.
We reserve the right to revise the manual and online documentation and to
make changes from time to time in the contents hereof without obligation to
notify any person of such revision or changes.
Vigor2100V/VG Series of Residential Broadband Routers
iv
Be a Registered Owner
Online web registration at www.draytek.com is preferred. Alternatively, fill in
the registration card and mail it to the address found on the reverse side of the
card. Registered owners will receive future product and update information.
Vigor2100V/VG Series of Residential Broadband Routers
v
Safety Instructions
Please read the installation guide thoroughly before you set up the router.
The router is a complicated electronic device that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the
router yourself.
Do not place the router in a damp or humid place, e.g. a bathroom.
The router should be used in a sheltered area, within a temperature range
from +5 to +40 Celsius.
Do not expose the router to direct sunlight or other heat sources. The
housing and electronic components may be damaged by direct sunlight or
heat sources.
Keep the package out of reach of children.
When you would like to dispose of the router, please follow the local
regulations on conservation of the environment.
Vigor2100V/VG Series of Residential Broadband Routers
vi
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou County, HsinChu
Industrial Park, Hsin-Chu, Taiwan 303
Product: Vigor2100V/VG Series Residential Broadband Routers
DrayTek Corp. declares that Vigor2100V/VG series of routers are
in compliance with the following essential requirements and other
relevant provisions of R&TTE Directive 1999/5/EEC.
The product conforms to the requirements of Electro-Magnetic
Compatibility (EMC) Directive 89/336/EEC by complying with the
requirements set forth in EN55022/Class B and EN55024/Class B.
The product conforms to the requirements of Low Voltage (LVD)
Directive 73/23/EEC by complying with the requirements set forth in
EN60950.
The Vigor2100VG is designed for the WLAN 2.4GHz network
throughput EC region, Switzerland, and the restrictions of France.
Vigor2100V/VG Series of Residential Broadband Routers
vii
Commission (FCC) Interference
Statement
The Vigor2100V and Vigor2100VG have been tested and found to
comply with the limits for a Class B digital device, pursuant to part
15 of the FCC Rules. Operation is subject to the following two
conditions:
(1) this device may not cause harmful interference, and (2) this
device must accept any interference received, including
interference that may cause undesired operation. Class B limits
are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment
generates, uses, and can radiate radio frequency energy, and,
if not installed and used in accordance with the instructions,
may cause harmful interference to radio communications.
However, there is not guarantee that interference will not occur
in a particular installation. If this equipment does cause harmful
interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of
the following measures:
• Reorient the receiving antenna.
• Increase the separate between the equipment and the
receiver.
• Connect the equipment into an outlet on a circuit
different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician
for help.
Vigor2100V/VG Series of Residential Broadband Routers
viii
Customer Support
Please prepare the following information as you contact your customer
support.
Product model and serial number.
Warranty information.
Date that you received your router.
Brief description of your problem.
Steps that you may take to solve it and their associated SysLog
messages.
The information of customer support and sales representatives are
support@draytek.com and sales@draytek.com, respectively.
Vigor2100V/VG Series of Residential Broadband Routers
ix
Table of Contents
CHAPTER 1. Quick Start Wizard
1.1. Introduction........................................................................................ 1-1
1.2. Settings for different-type Internet access......................................... 1-3
CHAPTER 2. On Line Status
2.1. Introduction........................................................................................ 2-1
2.2.1. System status ................................................................................... 2-1
2.2.2. LAN status....................................................................................... 2-2
2.2.3. WAN status ...................................................................................... 2-3
CHAPTER 3. Internet Access Setup
3.1. Introduction........................................................................................ 3-1
3.2.1. PPPoE / DSL Configuration ........................................................... 3-3
3.2.2. Static IP /DSL&cable Configuration .............................................. 3-5
3.2.3. Dynamic IP / DSL&cable Configuration........................................ 3-8
3.2.4. PPTP / DSL Configuration.............................................................. 3-9
CHAPTER 4. LAN TCP/IP and DHCP Setup
4.1. Introduction........................................................................................ 4-1
4.2. LAN IP Network Configuration ........................................................ 4-1
4.3. DHCP Server Configuration.............................................................. 4-2
CHAPTER 5. NAT Setup
5.1. Introduction........................................................................................ 5-1
5.2. NAT Setup .......................................................................................... 5-1
5.3. Configure Port Redirection Table...................................................... 5-3
Vigor2100V/VG Series of Residential Broadband Routers
x
5.4. DMZ Host Setup ................................................................................ 5-5
5.5. Open Port Setup................................................................................. 5-7
5.6. Well-known Port Number List .......................................................... 5-9
CHAPTER 6. Protect Your Network
6.1. Introduction........................................................................................ 6-1
6.2. An Overview of the IP Filter/Firewall ............................................... 6-1
6.3. General Setup..................................................................................... 6-5
6.4. Editing the Filter Sets ........................................................................ 6-7
6.5. Editing the Filter Rules...................................................................... 6-7
6.6. An Example of Restricting Unauthorized Internet Services............6-11
Chapter 6-A. Prevention of Denial of Service Attacks
6.A.1. Introduction.................................................................................. 6-13
An Overview of DoS Defense Functionality......................................... 6-13
6.A.2. Configuration ............................................................................... 6-14
6.A.3. Warning Message ......................................................................... 6-19
Chapter 6-B. URL Content Filtering
6.B.1. Introduction .................................................................................. 6-21
6.B.2. An Overview of URL Content Filtering....................................... 6-22
6.B.3. Configuration................................................................................ 6-22
6.B.4. Warning Message.......................................................................... 6-29
CHAPTER 7. Dynamic DNS Setup
7.1. Introduction........................................................................................ 7-1
7.2. Configuration ..................................................................................... 7-2
7.3. Validation and Troubleshooting......................................................... 7-3
Vigor2100V/VG Series of Residential Broadband Routers
xi
CHAPTER 8. Call Schedule Setup
8.1. Introduction........................................................................................ 8-1
Time-Setup ................................................................................................ 8-1
8.2. Configuration of Call Schedule ......................................................... 8-2
8.3. An Example................................................................................................ 8-6
CHAPTER 9. UPnP Service Setup
9.1. Introduction........................................................................................ 9-1
9.2. Configuration ..................................................................................... 9-2
CHAPTER 10. E-mail detection
10.1. Introduction/Settings...................................................................... 10-1
CHAPTER 11. VoIP and Lifeline Setup
11.1. Introduction.....................................................................................11-1
11-2-1. DialPlan Configuration................................................................11-3
Example of DialPlan Configuration .................................................. 11-5&6
11-2-2. SIP-related Function Setup .........................................................11-6
VoIP call status of DialPlan Configuration..................................11-7
CODEC/RTP/DTMF Configuration............................................11-8
11-3. Calling Scenario ............................................................................11-10
Peer-to-Peer ................................................................................11-10
Calling via SIP............................................................................ 11-11
11-4. Voice Call Status.....................................................................11-12&13
Vigor2100V/VG Series of Residential Broadband Routers
xii
11-5. QoS for Voice Call .........................................................................11-14
CHAPTER 12. Wireless LAN Setup
12.1. Introduction.................................................................................... 12-1
12.2. Configuration ................................................................................. 12-2
12.3. Configuring the WEP Security ...................................................... 12-4
12.4. Configuring the Access Control ..................................................... 12-5
12.5. Configuring the Station List .......................................................... 12-7
CHAPTER 13. System Status
13.1. Introduction.................................................................................... 13-1
13.2. Detailed Description....................................................................... 13-1
CHAPTER 14. Configuration Backup/Restoration
14.1. Introduction.................................................................................... 14-1
14.2. Usage............................................................................................... 14-1
CHAPTER 15. Management Setup
15.1. Introduction.................................................................................... 15-1
15.2. Configuration ................................................................................. 15-1
CHAPTER 16. Reboot Setup
16.1. Introduction of Reboot................................................................... 16-1
16.2. Firmware Upgrade......................................................................... 16-1
CHAPTER 17. Diagnostic Tools
17-1. Introduction ................................................................................... 17-1
17-2-1. Diagnostic tool of PPPoE/PPTP ............................................... 17-1
17-2-2. View ARP Cache Table ............................................................. 17-2
17-2-3. View DHCP Assigned IP Addresses .......................................... 17-3
Vigor2100V series
1-1
Chapter 1
Quick Start Wizard
Introduction
The Quick Start Wizard is designed for you to easily set up your broadband
Internet access. We already integrated Quick Start Wizard into the Web
Configurator of Vigor2100V/VG series. You can directly access the Quick Start
Wizard via Web Configurator.
You can also find the Ez Configurator from the router tool of firmware CD
enclosed with the package. As considering the convenience, we suggest you to
set up the Internet access via Quick Start Wizard built-in within the web
configurator.
Configure Your Router via Quick Start Wizard
Step 1. Open the web browser on a PC which is connected to the router and then
link to the gateway IP address of the router (the default setting is
192.168.1.1). Once your link (http://192.168.1.1) is successful, a pop-up
window will open to ask for username and password. Leave the default null
value and press OK to continue.
If you fail to access to the web configuration, please refer to “Trouble
Shooting” guide.
Vigor2100V series
1-2
Step 2. The Main Menu will pop out after completing previous step.
Step 3. Now Quick Start Wizard is switched on. Enter login password. Then
click Next to continue.
Step 4. Select the appropriate TIME ZONE for your location.
Vigor2100V series
1-3
Step 5
Select the appropriate Internet connection type to your ISP.
In terms of several Internet connection type, please follow procedures as below:
PPPoE
users
Enter your user name and password provided by your ISP.
Dial on Demand : The router will ONLY connect to your ISP on demand.
By “on demand”, it means when any LAN user attempt to send data onto the
Internet. When there is no data traffic, the router will close the connection to
the ISP because there is no demand.
Vigor2100V series
1-4
Idle timeout: This is the time setting If there being no Internet traffic for a
period, for example 10 minutes.
Always On: The router will keep a permanent connection to the ISP
automatically.
PPTP
users
Enter your user name and password provided by your ISP.
Obtain an IP address automatically: Set the WAN interface as a DHCP client
that will ask for the IP network settings from the DHCP server or
PPTP-enabled DSL modem.
Specify an IP address: If you are not sure whether there are any DHCP
services on the WAN interface, you can manually assign an IP address to the
interface. Note that the IP Address and Subnet Mask should be assigned
within the same network as the PPTP-enabled DSL modem.
Static
IP
Enter the static (fixed or permanent) IP address that your ISP offers to you.
Vigor2100V series
1-5
WAN IP address: this is the IP address assigned by your ISP for your router.
You shall specify the IP address of the router here. e.g. 172.16.2.84
Subnet Mask: an address code that determines the size of the network; this is
the subnet mask of the router, when seen by external users on the Internet
(including your ISP). The subnet mask is provided by your ISP. e.g.
255.255.255.0
Gateway IP Address: an IP address forwards Internet traffic from your local
area network (LAN) . e.g. 172.16.2.5
DNS Server IP address: you must specify DNS server IP address here if your
ISP has the said address. If you do not specify it, the router will automatically
apply default DNS Server IP address: 194.109.6.66 to this field.
DHCP
Some Cable ISPs require user to provide or specify MAC address for access
authentication purpose. Your can either manually enter the MAC address in
the MAC Address fields or clone from your network adapter.
Vigor2100V series
1-6
Step 6 Review the summary of settings.
We also have the Ez Configurator in the product CD. Once if you already
followed the previous sections to configure your router via Quick Start Wizard and
were able to access the Internet successfully, you will NOT need to use Ez
Configurator from the CD configure your Vigor Router again.
Vigor2100V/VG series apply efficient codecs designed to make the best use of
available bandwidth. Vigor2100V/VG also equips with automatic QoS
assurance. QoS Assurance assists to assign higher priority to voice traffic via
Internet for better talking/hearing enjoyment. To achieve that, you will always
have the required inbound and outbound bandwidth that is prioritized exclusively
for Voice traffic over Internet. Your data will arrive a little bit later in a tolerable
manner.
Vigor2100V series
1-7
On the bottom of Web Configurator window, you can find messages showing the
system interaction with you.
“Ready” indicates the system is ready for you to input settings.
“Settings Saved” means your settings are saved once you click “Finish” or
“OK” button.
Vigor2100V series
2-1
Chapter 2
Online Status
2.1 Introduction
The Online Status provides some useful information about the Vigor
router, LAN and WAN interface. Also, you could use the status page to
know the Internet access status.
2.2 Online Status Descriptions
Click Online Status to open the Online Status page. Here in, we use an example
to explain the Online Status. In the example, as shown in the following picture,
the router is working on Dynamic IP mode to access the Internet.
2.2.1 System Status
System Uptime: This represents the router’s running time. The format
is HH:MM:SS, where HH, MM, and SS, indicate hours, minutes, and
seconds, respectively.
Online Status
2-2
2.2.2 LAN Status
IP Address IP address of the LAN interface.
TX Packets Total number of transmitted IP packets since the router
was powered on.
RX Packets Total number of received IP packets since the router was
powered on.
Primary
DNS
You must specify DNS server IP address here if your ISP
has the said address. If you do not specify it, the router
will automatically apply default DNS Server IP address:
194.109.6.66 to this field.
Secondary
DNS
You must specify secondary DNS server IP address here if
your ISP has the said address. If you do not specify it, the
router will automatically apply default secondary DNS
Server IP address: 194.98.0.1 to this field.
Online Status
2-3
2.2.3 WAN Status
Mode Indicate which broadband access mode is active.
Depending upon the access mode, you may see PPPoE,
PPTP, PPPoA, or Static IP or DHCP.
GW IP Addr
The gateway IP address.
IP Address IP address of the WAN interface.
TX Packets Total number of transmitted IP packets during this
connection session.
TX Rate Transmission rate in characters per second (cps) for
outgoing data.
RX Packets
Total number of received IP packets during this connection
session.
RX Rate
Reception rate in characters per second (cps) for incoming
data.
Up Time
Connection time. The format is HH:MM:SS, where HH,
MM, and SS, indicate hours, minutes, and seconds,
respectively.
Drop/Dial
PPPoE or
PPTP
Click the link to dial/or disconnect the PPPoE or PPTP
connection.
Vigor2100V series
3-1
Chapter 3
Internet Access Setup
3.1 Introduction
The router connects the group of PCs in your home or office to the Internet.
The data that travels between two networks is regulated by the router.
The Network Address Translation (NAT) of the router translates a public IP
address for the Internet to several private IP addresses of a local area
network.
IP means Internet Protocol. Every device in an IP-based Network,
including routers, print server, and PCs needs an IP address to identify its
location on the network. The PPPoE, Dynamic/Static IP and PPTP are
three major ways of assigning IP addresses for the Internet to your router.
Setup screen and available features differ relying on what kind of
connection type your ISP offers.
The router supports the Ethernet WAN interface for Internet access. The
following sections will explain more details of various broadband access
setup.
Once you already access Internet via the procedure of “Chapter 1 Quick Start
Wizard”, you do not need to re-set your settings for Internet connection unless
you would like to change your configuration.
Internet Access Setup
3-2
PPPoE Some DSL-based ISPs use PPPoE (Point-to-Point
Protocol over Ethernet) to let users establish Internet
access. All local users can share one PPPoE connection
to access the Internet.
Static IP It means a fixed or permanent IP address. Choose Static
IP if your ISP provides you with a permanent IP address.
Dynamic IP It means that “Obtain an IP automatically”. In most
circumstances, the cable modem which you are
connect
ing shall obtain a dynamic IP address from the ISP.
PPTP Some DSL-based ISPs use PPTP (Point-to-Point
Tunneling Protocol) to establish Internet connection for
users. The PPTP is available in Europe and Israel. As a
result, your DSL modem only supports the PPTP tunnel to
access the Internet. You shall create a PPTP tunnel that
carries a PPP session and terminates on the DSL modem.
Once the tunnel has been established, this kind of DSL
modem will forward the PPP session to the ISP. As long as
the PPP session is connected, all the local users will be
able to share this PPP session to access to the Internet.
For broadband access, you need to know what kind of Internet access is
provided by your ISP.
The following sections deal with four widely-used broadband access
services. They are PPPoE Client, PPTP Client, Static IP for DSL, and
Dynamic IP (DHCP Client) for Cable. In most cases, you will get a DSL
or Cable modem from the broadband access service provider.
Internet Access Setup
3-3
The router is connected behind the broadband device (i.e. DSL/Cable
modem) and works as a NAT or IP router for broadband connections.
3.2 Configuration
3.2.1 Using PPPoE with a DSL modem
Click Internet Access Setup > PPPoE to enter the setup page.
PPPoE Setup
PPPoE Link: Check Enable to enable the PPPoE client protocol on the
WAN interface.
Please remember to remove PPPoE applications which are already installed on
your PCs if you need to enable PPPoE and you are DSL users.
Internet Access Setup
3-4
ISP Access Setup
ISP Name: Enter the service name if provided by your ISP.
Username/Password: Enter the username and password supplied by
your ISP
Scheduler (1-15): Enter the index of schedule profile to control the
Internet access by time plan.
PPP/MP Setup
PPP Authentication: Select PAP or CHAP for widest compatibility.
Always On: Check to force the Internet access is always online, and you
will see the Idle Timeout field will be blocked for input.
Idle Timeout: Idle timeout means the router will disconnect after being
idle for a preset amount of time. The default is 180 seconds. If you set
the time to 0, the PPP session will not terminate itself.
IP Address Assignment Method (IPCP)
Fixed IP: Check No (Dynamic IP) unless your ISP has provided you
with a static IP address.
Fixed IP Address: If your ISP has provided you with a static IP address
enter it here.
Click OK.
Internet Access Setup
3-5
3.2.2 Using a Static IP with a DSL/Cable Modem
You can receive a fixed public IP address or a public subnet (i.e. Multiple
public IP addresses) from your DSL or Cable ISP. Because of NAT
(Network Address Translation) function, you just need to assign a fixed
public IP address to assign to the WAN interface of your router. Your
router will let your every PC share the broadband access as NAT
transform the said fixed IP address to several private IP address. Click
Internet Access Setup > Static or Dynamic IP to enter the setup page,
which is depicted as follows:
Access Control
Broadband Access: Select Enable to turn on the broadband access
capability.
Keep WAN Connection
Enable PING to keep alive: If you specify “Enable PING to keep alive”
function, the router will periodically check your Internet connection. The
router will automatically re-establish the connection if the connection is
down. Normally, this function is used for Dynamic IP environment.
Here will ignore the settings.
Internet Access Setup
3-6
WAN IP Network Settings
Specify an IP address
If your ISP offers you a static (fixed or
permanent) IP address, you have to enable
“Specify an IP address”.
IP address This is the IP address assigned by your ISP for
your router. You shall specify the IP address of
the router here. e.g. 172.16.2.84.
Subnet Mask An address code that determines the size of the
network; this is the subnet mask of the router,
when seen by external users on the Internet
(including your ISP).
(Default: 255.255.255.0/ 24)
Internet Access Setup
3-7
Gateway IP Address An IP address forwards Internet traffic from your
local area network (LAN) . e.g. 172.16.2.5.
DNS Server IP
address
You must specify a DNS server IP address here
because your ISP will at least provide you with
at least one DNS Server IP address. If you do
not specify it, the router will automatically apply
default DNS Server IP address: 194.109.6.66 to
this field.
The Domain Name System (DNS) functions how the
Internet translates domain or website names into
Internet addresses or URLs.
Secondary DNS
Server IP address
You must specify secondary DNS server IP
address here because your ISP often can let
you have at least one DNS Server IP address. If
you do not specify it, the router will automatically
apply default secondary DNS Server IP
address: 194.98.0.1 to this field.
The default DNS Server IP address can be found via Online Status:
Internet Access Setup
3-8
3.2.3 Using a Dynamic IP (DHCP Client) with a DSL/Cable
Modem
This application is mostly used by Cable ISPs. Click Internet Access
Setup > Static or Dynamic IP to enter the setup page.
Access Control
Broadband Access: Select Enable to turn on the broadband access
capability.
Keep WAN Connection
Enable PING to keep alive: Check to enable PING to keep alive
function. Normally, this function is for Dynamic IP environment. If you
need to enable the function, assign a public IP address in the PING to
the IP and a timer in the PING Interval.
Internet Access Setup
3-9
WAN IP Network Settings
Obtain an IP address
automatically
The option must be enabled.
Router Name Depending on your Cable ISP, this option may
or may not be left blank. Some ISPs require
this name for access authentication.
Domain Name Depending on your Cable ISP this field may or
may not be left blank.
Default MAC Address
& Specify a MAC
Address
These two options are mutually exclusive.
Some Cable ISPs use a specific MAC address
for access authentication. In such cases you
need to check the Specify a MAC Address
box and enter the MAC address in the MAC
Address fields. Click OK and restart the router
to allow the settings to take affect.
3.2.4 Using PPTP with a DSL Modem
Click Internet Access Setup > PPTP to enter the setup page, as shown
below. Herein, we use an example to explain the corresponding setting.
The exact settings should be provided by your DSL service provider.
Internet Access Setup
3-10
PPTP Setup
PPTP Link Check Enable to enable a PPTP client to
establish a tunnel to a DSL modem on the WAN
interface.
PPTP Server IP
Address
Specify the IP address of the PPTP-enabled
DSL modem. Refer to the user manual of the
PPTP-enabled DSL modem.
Internet Access Setup
3-11
ISP Access Setup
ISP Name: Enter the service name if provided by your ISP.
Username/Password: Enter the username and password supplied by
your ISP.
Scheduler (1-15): Enter the index of schedule profile to control the
Internet access by time plan.
PPP/MP Setup
PPP Authentication Select PAP or CHAP for widest compatibility.
Always On Check to force the Internet access is always
online, and you will see the Idle Timeout field
will be blocked for input.
Idle Timeout Idle timeout means the router will disconnect
after being idle for a preset amount of time. The
default is 180 seconds. If you set the time to 0,
the PPP session will not terminate itself.
IP Address
Assignment Method
(IPCP)
Fixed IP: Check No (Dynamic IP) unless your
ISP has provided you with a static IP address.
Fixed IP Address: If your ISP has provided you
with a fixed IP address enter it here.
Internet Access Setup
3-12
WAN IP Network Settings
Obtain an IP address
automatically
Set the WAN interface as a DHCP client that will
ask for the IP network settings from the DHCP
server or PPTP-enabled DSL modem.
Specify an IP address
If you are not sure whether there are any DHCP
services on the WAN interface, you can
manually assign an IP address to the interface.
Note that the IP Address and Subnet Mask
should be assigned within the same network as
the PPTP-enabled DSL modem.
.
Vigor2100V series
4
-
1
Chapter 4
LAN TCP/IP and DHCP Setup
4.1 Introduction
In this chapter, we will explain in detail about the LAN TCP/IP and DHCP
Setup.
4.2 LAN IP Network Configuration
The IP address/subnet mask is for grouping users on your LAN. For
example, you can let the computer of your kids be connected together with
your own computer to share the broadband access and to share files.
For NAT Usage: (Default: Always Enable)
LAN TCP/IP and DHCP Setup
4
-
2
IP Address: Private IP address for connecting to a local private network
(Default: 192.168.1.1).
Subnet Mask: An address code that determines the size of the network;
this is the subnet mask of the router, when seen by external users on the
Internet (including your ISP).
(Default: 255.255.255.0/ 24)
4.3 DHCP Server Configuration
DHCP stands for Dynamic Host Configuration Protocol. The router by
factory default acts a DHCP server for your network. The router can hence
automatically dispatch related IP settings to any local user configured as a
DHCP client.
It is highly recommended that you leave the router enabled as a DHCP
server if you do not have a DHCP server for your network.
Please refer to the following picture for DHCP Server Configuration.
LAN TCP/IP and DHCP Setup
4
-
3
Enable Server Let the router automatically assign IP address to every
PC on the LAN
Disable Server You manually assign IP address from the router to
every PC on the LAN
Relay Agent Allows PCs on the LAN to request IP address from
other DHCP server. e.g. You shall get IP from the
DHCP server located at your office.
Start IP Address
Set the start IP address of the IP address pool.
IP Pool Counts Set the number of IP address pool.
Gateway IP
Address
Sets the gateway IP address for the DHCP server.
Usually, it should be the same as the said IP address
when the router works as a default gateway.
Start IP Address
Set the start IP address of the IP address pool.
DNS Server IP
Address
(Default: None)
DNS stands for Domain Name System. Every Internet
host must have an unique IP address, also they may
have a human-friendly, easy to remember name such
as www.yahoo.com. The DNS server converts the user
friendly name into its equivalent IP address.
LAN TCP/IP and DHCP Setup
4
-
4
Primary IP
Address
You must specify a DNS server IP address here
because your ISP will at least provide you with at least
one DNS Server IP address. If you do not specify it, the
router will automatically apply default DNS Server IP
address: 194.109.6.66 to this field.
Secondary IP
Address
You must specify secondary DNS server IP address
here because your ISP often can let you have at least
one DNS Server IP address. If you do not specify it, the
router will automatically apply default secondary DNS
Server IP address: 194.98.0.1 to this field.
The default DNS Server IP address can be found via Online Status:
If both the Primary IP and Secondary IP Address fields are left empty,
the router will assign its own IP address to local users as a DNS proxy server
and maintain a DNS cache. If the IP address of a domain name is already in
the DNS cache, the router will resolve the domain name immediately.
Otherwise, the router forwards the DNS query packet to the external DNS
server by establishing a WAN (e.g. DSL/Cable) connection.
Vigor2100V series
5-1
1
Chapter 5
NAT Setup
5.1 Introduction
NAT is a method of mapping one or more IP addresses and/or service ports
into different specified services, where NAT stands for Network Address
Translation. It allows the internal IP addresses of many computers on a
Local Area Network (LAN) to be translated to one public address, saving
users’ cost. It also plays a security role by obscuring the true IP addresses
of important machines from potential hackers on the Internet. For
convenience, we called a router having the NAT facility as a NAT-enabled
router.
Usually you will use your Vigor router as a NAT-enabled router. The
NAT-enabled router gets one globally re-routable IP address from the ISP and
assigns private network IP addresses defined by RFC-1918 to local hosts.
The NAT-enable router translates the private network IP addresses to such a
globally routable IP address so that local hosts can communicate with the
router and access the Internet.
5.2 NAT Setup
Click NAT Setup to open the setup page. On the page, you will see the
private IP address defined in RFC-1918. Usually we use the 192.168.1.0/24
subnet for the router. Also, as stated before, the NAT facility can map one or
more IP addresses and/or service ports into different specified services. In
other words, the NAT function can be achieved by using port mapping
method.
NAT Setup
5-2
2
In the Vigor routers, we support three variants of port mapping methods: Port
Redirection, Open Ports, and DMZ host.
The following is the setting path for this function.
NAT > Port Redirection
> DMZ Host
> Open Ports
> Well-Known Ports List
Port Redirection
The packet is forwarded to a specific local host if the port number
matches that defined in the table. A user can also translate the port to
another port locally.
Open Ports
Similar to the Port Redirection, the Open Ports facility also supports
users to define a range of ports.
DMZ host
This opens up a single host completely. All incoming packets will be
forwarded to the host with the local IP address you designated. The
only exception is packets received in response to outgoing requests
from other local computers or incoming packets which match rules in
the other two methods.
It should be noticed that, while you are using combinations of these three
systems, there is a priority structure. That is, if a rule in one method
conflicts with a rule in another method, then there is strict precedence. This
leads to a predictable result and resolution of rule-conflict. The precedence is
defined as follows.
Port Redirection > Open Ports > DMZ host
Example: If the port number of an incoming packet matches a rule
specified in both Port
Redirection and Open Ports, then the packet will be
forwarded to the local address designated in Port Redirection.
NAT Setup
5-3
3
Now, let us move on individual setting of these three port-mapping methods.
5.3 Configure Port Redirection Table
The Port Redirection is for you to expose internal servers to the public
domain. For example, you run a web server and some users want to access
this web server. You also run an internal SMTP mail server for your home
office and you shall allow your ISP to send whole E-mail to your SMTP mail
server. Consequently, you assign different port number on the Port
Redirection Table to different services such as http, smtp, ftp etc. External
users, i.e. people elsewhere on the Internet can then access your web server
via your public IP address. Even if your public IP address is a dynamic IP
address, you can apply the Dynamic DNS service to obtain an online WAN IP
address (such as hostnmae.dyndns.org) where is able to be mapped to your
current dynamic IP address. Any external user can visit your web server
simply via your online WAN IP address.
The following example shows how an internal FTP server is exposed to the
public domain. The internal FTP server is running on the local host addressed
as 192.168.1.10.
NAT Setup
5-4
4
As shown above, the Port Redirection Table provides10 port-mapping
entries for internal hosts.
Service Name
Specify the name for the specific network service.
Protocol
Specify the transport layer protocol (TCP or UDP).
Public Port
Specify which port should be redirected to the internal host.
Private IP
Specify the private IP address of the internal host offering the
service.
Private Port
Specify the private port number of the service offered by the internal
host.
Active
Check here to activate the port-mapping entry.
Because the router has its own built-in web server for the configuration, if
you want to access to the web configurator remotely and to a web server
behind the router, you need to change the router’s http “port” to something
NAT Setup
5-5
5
other than the default port 80. You shall change the admin port from the
Management Setup menu and you then access the admin screen by
suffixing the normal IP address of Vigor router’s web configurator with 8080.
e.g. http://192.168.1.1:8080
The port redirection can only be applied to external users only - i.e. the
incoming traffic. The Internet users behind your LAN can not access your
external public IP address and come back in; the internal users shall
access the server on its local private IP address, or you can set up an alias
in a Windows hosts file. Please only redirect the ports you know you have
to forward rather than forward all ports. Otherwise, you will compromise the
firewall-type security initially deployed by the NAT facility.
5.4 DMZ Host Setup
The Port Redirection can direct UDP/TCP traffic on particular ports to
specified internal clients on the LAN. However, other IP protocols, for
example Protocols 50 (ESP) and 51 (AH) do not have port numbers so you
can not decide which local client to forward the data to. Vigor router has a
facility called DMZ host which you can specify a single local client (with
private IP address) to which ALL unsolicited data on all protocols shall be
forwarded. Regular web surfing and other such Internet activities from other
NAT Setup
5-6
6
clients will continue to work without inappropriate interruption.
The inherent security properties of NAT are somewhat bypassed if you set
up DMZ host. You can consider adding additional filter rules or a
secondary firewall.
Click DMZ Host Setup to open the setup page, as shown below. The DMZ
Host setting allows a defined internal user to be exposed to the Internet in
order to use some special purpose applications such as Netmeeting or
Internet Games etc. Each item in the setup page is described below.
Enable
Check to enable the DMZ Host function.
Private IP
Enter the private IP address of the DMZ host.
Choose PC
Click this button and then a window will automatically pop up, as
depicted below. The window consists of a list of private IP
addresses of all hosts in your LAN network. Select one private IP
address in the list to be the DMZ host.
NAT Setup
5-7
7
5.5 Open Port Setup
As Port Redirection (above) but allows you to define a range of ports.
The following screen shows the Open Ports Setup. In the Vigor router, the
Open Ports facility provides 10 entries for internal hosts.
Index
Indicate the relative number for the particular entry that you want to
offer service in a local host. You should click the appropriate index
number to edit or clear the corresponding entry.
Comment
Specify the name for the defined network service.
Local IP Address
Display the private IP address of the local host offering the service.
Status
Display the state for the corresponding entry. We use X or V to
represent the Inactive or Active state.
NAT Setup
5-8
8
As stated above, after you click one index number, say index No. 1, in the
above figure, you will see the following setup page for the entry with index No.
1. Further, each entry (local host) can specify 10 port-ranges for diverse
services. More details for individual items in the setup page are described
below.
Enable Open Ports
Check to enable the Open Port function for this entry.
Comment
Specify the name for the defined network service.
Local Computer
Enter the private IP address of the local host.
Choose PC
Click this button and, subsequently, a window having a list of private IP
addresses of local hosts will automatically pop up. Select one
appropriate IP address of the local host in the list.
Protocol
Specify the transport layer protocol. It could be TCP, UDP, or NONE for
selection.
Start Port
Specify the starting port number of the service offered by the local host.
NAT Setup
5-9
9
End Port
Specify the ending port number of the service offered by the local host.
5.6 Well-known Port Number List
This page provides some well-known port numbers for your reference.
Vigor2100V series
6-1
Chapter 6
Protect Your Network
6.1 Introduction
Security is top priority to be took into consideration as the users of
broadband line demands more bandwidth for multimedia, interactive
applications, or distance learning. The Firewall function helps protect
your local network against attack from unauthorized outsiders. It also
provides a way of restricting users on the local network from accessing
the Internet. Additionally, it can filter out specific packets to trigger the
router to place an outgoing connection.
Basic security is that you are recommended to set user name and
password to your router when you install your router. The administrator
login will prevent unauthorized access to the router configuration from
your router.
Protect Your Network
6-2
Even your installation is not set with password, you can still enter system
maintenance to set up your password.
The users on the LAN are provided with secured protection by means of
following firewall facilities:
IP Filter
Stateful Packet Inspection: tracks packets and denies unsolicited
incoming data
Selectable DoS/DDoS protection
User-configurable packet filter
Note: When you would like to activate SPI (Stateful Packet
Inspection), please follow the path: Firewall>Edit Filter
Rule>Keep State
6.2 An Overview of the IP Filter/Firewall
The IP Filter/Firewall Setup in the Vigor routers mainly consists of the
packet filtering, Denial of Service (DoS) defense, and URL (Universal
Resource Locator) content filtering facilities. In this chapter, we focus on
the introduction of the packet filtering function. In the Chapter 8-A and 8-B
chapters, we will explain more about DoS defense and URL content
filtering facilities.
Protect Your Network
6-3
The packet filtering function contains, by default, two types of filter sets: Call
Filter set and Data Filter set. The Call Filter is used for users that attempt
to establish a connection from LAN side to the Internet. The Data Filter set
is used to determine what kind of IP packets is allowed to pass through the
router when the WAN connection has been established.
Conceptually, when an outgoing packet is to be routed to the WAN, the IP
Filter will decide if the packet should be forwarded to the Call Filter or Data
Filter. If the WAN link is down, the packet will enter the Call Filter. If the
packet is not allowed to trigger router dialing, it will be dropped. Otherwise,
it will initiate a call to establish the WAN connection.
If the WAN link of the router is up, the packet will pass through the Data
Filter. If the packet type is set to be blocked, it will be dropped. Otherwise,
it will be sent to the WAN interface. Alternatively, if an incoming packet
enters from the WAN interface, it will pass through the Data Filter directly.
If the packet type is set to be blocked, it will be dropped. Otherwise, it will
be sent to the internal LAN. The filter architecture is shown below.
Protect Your Network
6-4
The following sections will explain more about the General Setup and
Filter Setup in the IP Filter/Firewall Setup section using the Web
Configurator. The Vigor router provides 12 filter sets with 7 filter rules for
each set. As a result, there are a total of 84 filter rules for the Filter Setup.
By default, the Call Filter rules are defined in Filter Set 1 and the Data Filter
rules are defined in Filter Set 2.
General Setup: Some general settings of Call Filter and Data Filter are
available from this link.
Protect Your Network
6-5
DoS defense: Click it to set up the DoS defense facility for detecting and
mitigating the DoS attacks. The more details can be found in Chapter 6-A.
URL Content Filter: Here provides the capability of blocking inappropriate
web sites to protect child in school or at home. The more details can be
found in Chapter 6-B.
Filter Setup: Here are 12 filter sets for IP Filter configurations.
Set to Factory Default: Click here to restore the filter rules to default
values.
6.3 General Setup
In the General Setup page you can enable/disable the Call Filter or Data
Filter and assign a Start Filter Set for each, configure the log settings, and
set a MAC address for the logged packets to be duplicated to.
Protect Your Network
6-6
Some on-line games (for example: Half Life) will use UDP packets with
large length to transfer data. These large UDP packets need to be
fragmented. As secure firewall, Vigor router will reject these kinds of
packets to avoid to be attacked by outside hackers if you do not enable
“Accept Incoming Fragmented UDP Packets”. You can enable "Accept
Incoming fragmented UDP Packet" function to accept these kinds of
packets. Then you can play these kinds of on-line games. If you take
security concern as high priority, you shall disable “Accept Incoming
Fragmented UDP Packets”.
Call Filter: Check Enable to activate the Call Filter function. Assign a
start filter set for the Call Filter.
Data Filter: Check Enable to activate the Data Filter function. Assign a
start filter set for the Data Filter.
Log Flag: For troubleshooting needs you can specify the filter log here.
None The log function is inactive.
Block All blocked packets will be logged.
Pass All passed packets will be logged.
No Match The log function will record all packets which are matched.
The filter log will be displayed on the Telnet terminal when you type the
“log -f” command.
MAC Address for Packet Duplication: Logged packets may also be
logged to another location via Ethernet. If you want to duplicate
logged packets from the router to another network device, you must
enter the other devices’ MAC Address (HEX Format). Type “0” to
disable the feature. The feature will be helpful under Ethernet
environments.
Protect Your Network
6-7
6.4 Editing the Filter Sets
Comments: Enter filter set comments/description. Maximum length is
23 characters.
Filter Rule: Click a button numbered 1 ~ 7 to edit the filter rule.
Active: Enable or disable the filter rule.
Next Filter Set: Specifies the next filter set to be linked behind the current
filter set. The filters cannot be looped.
6.5 Editing the Filter Rules
Click the Filter Rule index button to enter the Filter Rule setup page for each
filter. The following explains each configurable item in detail.
Protect Your Network
6-8
Comments
Enter filter set comments/description. Maximum length is
14 characters.
Check to
enable the
Filter Rule
Enables the filter rule.
Pass or Block: Specifies the action to be taken when packets match the
rule.
Block
Immediately
Packets matching the rule will be dropped immediately.
Pass
Immediately
Packets matching the rule will be passed immediately.
Block If No
Further
Match
A packet matching the rule, and that does not match further rules,
will be dropped.
Protect Your Network
6-9
Pass If No
Further
Match
A packet matching the rule, and that does not match further rules,
will be passed through.
Branch to
Other Filter
Set
If the packet matches the filter rule, the next filter rule will
branch to the specified filter set.
Duplicate to
LAN
If you want to log the matched packets to another network
device, check this box to enable it.
The MAC Address of the specified network device or PC is
defined in Firewall >>general Setup >> MAC Address for
Logged Packets Duplication.
Log
Check this box to enable the log function. Use the Telnet
command log-f to view the logs.
Direction
Sets the direction of packet flow. For the Call Filter, this
setting is irrelevant.
For the Data Filter:
IN: Specify the rule for filtering incoming packets.
OUT: Specify the rule for filtering outgoing packets.
Protocol: Specify the protocol(s) this filter rule will apply to.
Protect Your Network
6-10
IP Address: Specify a source and destination IP address for this filter rule
to apply to. Place the symbol ! before a particular IP Address will
prevent this rule from being applied to that IP address. It is equal to
the logical NOT operator.
Subnet Mask: Specify the Subnet Mask for the IP Address column for
this filter rule to apply to.
Operator: The operator column specifies the port number settings. If
the Start Port is empty, the Start Port and the End Port column will be
ignored. The filter rule will filter out any port number.
= : If the End Port is empty, the filter rule will set the port number to be
the value of the Start Port. Otherwise, the port number ranges
between the Start Port and the End Port (including the Start Port
and the End Port).
!= : If the End Port is empty, the port number is not equal to the value
of the Start Port. Otherwise, this port number is not between the
Start Port and the End Port (including the Start Port and End
Port).
> : Specify the port number is larger than the Start Port (includes the
Start Port).
< : Specify the port number is less than the Start Port (includes the
Start Port).
Keep State: i.e. Stateful Packet Inspection. It tracks packets and
denies unsolicited incoming data. On the protocol entry, you can
choose TCP or UDP or TCP/UDP or ICMP.
Protect Your Network
6-11
Fragments: Specify a fragmented packets action.
Don’t care Specify no fragment options in the filter rule.
Unfragmented
Apply the rule to unfragmented packets.
Fragmented Apply the rule to fragmented packets.
Too Short Apply the rule only to packets which are too short to contain a
complete header.
6.6 An Example of Restricting Unauthorized Internet
Services
This section will show a simple example to restrict someone from accessing
Protect Your Network
6-12
WWW services. In this example, we assume the IP address of the
access-restricted user is 192.168.1.10. The filter rule is created in the Data
Filter set and is shown as below. Port 80 is the HTTP protocol port number for
WWW services.
Protect Your Network
6-13
Chapter 6-A
Prevention of Denial of Service
Attacks
6-A.1 Introduction
The DoS Defense functionality helps you to detect and mitigate the DoS
attacks. Those attacks include the flooding-type attacks and the vulnerability
attacks. The flooding-type attacks attempt to use up all your system's
resource while the vulnerability attacks try to paralyze the system by offending
the vulnerabilities of the protocol or operation system.
The DoS Defense Engine inspects each incoming packet against the attack
signature database. Any packet that may paralyze the host in the security
zone is blocked and a syslog message is sent to the client. Also the DoS
Defense Engine monitors the traffic behavior. Any odd situation violating the
administrator's configuration is reported and the corresponding defense
function is performed in order to mitigate the attack.
The DoS/DDoS defense function can detect and protect the following attacks:
1. SYN flood attack
2. UDP flood attack
3. ICMP flood attack
4. TCP Flag scan
5. Trace route
6. IP options
7. Unknown protocol
8. Land attack
9. Smurf attack
10. SYN fragment
11. ICMP fragment
12. Tear drop attack
13. Fraggle attack
14. Ping of Death attack
15. TCP/UDP port scan
Protect Your Network
6-14
6-A.2 Configuration
The following sections will explain in more detail about DoS Defense Setup by
using the Web Configurator. It is a sub-functionality of IP Filter/Firewall.
There are a total of 15 kinds of defense function for the DoS Defense Setup.
By default, the DoS Defense functionality is disabled. Further, once the DoS
Defense functionality is enabled, the default values for the threshold and
timeout values existing in some functions are set to 300 packets per second
and 10 seconds, respectively. A brief description for each item in the DoS
defense function is shown below.
Enable DoS Defense Click the checkbox to activate the DoS Defense
Functionality.
Protect Your Network
6-15
Enable SYN flood
defense
Click the checkbox to activate the SYN flood defense
function. If the amount of the TCP SYN packets
from the Internet exceeds the user-defined threshold
value, the Vigor router will be forced to discard
randomly the sequent TCP SYN packets in the
user-defined timeout period. The main goal is to
protect the Vigor router against the TCP SYN packets
that intend to use up the router's limited-
resource.
By default, the threshold and timeout values are set to
300 packets per second and 10 seconds,
respectively.
Enable UDP flood
defense
Click the checkbox to activate the UDP flood defense
function. Once the UDP packets from the Internet
exceed the user-defined threshold value, the router will
be forced to discard all sequent UDP packets in the
user-defined timeout period. The default setting for
threshold and timeout are 300 packets per second and
10 seconds, respectively.
Protect Your Network
6-16
Enable ICMP flood
defense
Click the checkbox to activate the ICMP flood defense
function. Similar to the UDP flood defense function,
the router will discard the ICMP echo requests coming
from the Internet, once they exceed the user-defined
threshold (by default, 300 packets per second) in a
period of time (by default, 10 second for timeout).
Enable Port Scan
detection
Port scan attacks occur by sending packets with
different port numbers in an attempt to scanning the
available services that one port will respond. To
examine such exploration behavior, please click the
checkbox to activate the Port Scan detection function in
your Vigor router. The Vigor router will identify it and
report a warning message if the port-scanning rate in
packets per second exceeds the user-defined threshold
value. By default, the Vigor router sets the threshold as
300 packets per second to detect such a scanning
activity.
Enable Block IP
options
Click it to activate the Block IP options function. The
Vigor router will ignore any IP packets with IP option
field appeared in the datagram header. The IP option
provides a way for hosts to send some significant
information, such as security, compartmentation, TCC
(closed user group) parameters, a series of Internet
addresses, routing messages...etc., which an outsider
can analyze to learn details about your private
networks.
Protect Your Network
6-17
Enable Block Land Click the associated checkbox and then enforce the
Vigor router to defense the Land attacks. The LAN
attack combines the SYN attack technology with IP
spoofing. A Land attack occurs when an attacker
sends spoofed SYN packets having the identical source
and destination addresses, as well as the port number,
with those of the victim.
Enable Block Smurf Click the checkbox to act
ivate the Block Smurf function.
The Vigor router will reject any ICMP echo request
destined to the broadcast address.
Enable Block trace
route
Click the checkbox to activate this function. The Vigor
router will not forward any trace route packets.
Enable Block SYN
fragment
Click the checkbox to activate the Block SYN fragment
function. Any packets having SYN flag and more
fragment bit set will be dropped.
Enable Block fraggle
Attack
Click the checkbox to activate the Block fraggle Attack
function. Any broadcast UDP packets received from
the Internet is blocked.
Note that Activating the DoS/DDoS defense functionality might
block some legal packets. For example, when you activate the
fraggle attack defense, all broadcst UDP packets coming from the
Internet are blocked. Therefore, the RIP packets from the Internet
might be dropped.
Protect Your Network
6-18
Enable TCP flag scan
Click the checkbox to activate the Block TCP flag scan
function. Any TCP packet with anomaly flag setting is
dropped. Those scanning activities include no flag
scan, FIN without ACK scan, SYN FINscan, Xmas
scan and full Xmas scan.
Enable Tear Drop Click the checkbox to activate the Block Ping of Death
function. This attack involves the perpetrator sending
overlapping packets to the target hosts so that those
target hosts will hang once they re-construct the
packets. Any packets realizing this attacking activity
will be blocked by the Vigor routers.
Enable Ping of Death Click the checkbox to activate the Block Tear Drop
function. Many machines may crash when receiving
ICMP datagrams (packets) that exceed the maximum
length. To avoid this type of attack, the Vigor router is
designed to be capable of discarding any fragmented
ICMP packets with a length greater than 1024 octets.
Protect Your Network
6-19
Enable Block ICMP
fragment
Click the checkbox to activate the Block ICMP fragment
function. Any ICMP packets with more fragment bit set
are dropped.
Enable Block
Unknown Protocol
Click the checkbox to activate the Block Unknown
Protocol function. Individual IP packet has a protocol
field in the datagram header to indicate the protocol
type running over the upper layer. However, the
protocol types greater than 100 are reserved and
undefined at this time. Therefore, the router should
have ability to detect and reject this kind of packets.
6-A.3 Warning Message
All the warning messages will be sent to syslog client after you enable the
syslog function. The administrator can setup the syslog client in the
Syslog Setup by using Web Configurator. Thus, the administrator can
look at the warning messages from DoS Defense functionality through the
DrayTek Sylsog daemon. The format for this kind of the warning messages
is similar to those in IP Filter/Firewall except for the preamble keyword
“DoS”, followed by a name to indicate what kind of attacks is detected.
Protect Your Network
6-20
Protect Your Network
6-21
Chapter 6- B
URL Content Filtering
6-B.1 Introduction
The Internet contains a wide range of materials, some of which may be
offensive or even illegal in many countries. Unlike traditional media, the
Internet does not have any obvious tools to segregate materials based on
URL strings or content. URL content filtering systems are seen as tools that
would provide the cyberspace equivalent of the physical separations that
are used to limit access to some particular materials. In rating a site as
objectionable, and refusing to display it on the user's computer screen, URL
content filtering facilities can be used to prevent children from seeing
material that their parents find objectionable. In preventing access, the
URL content filtering facility acts as an automated version of the
convenience-store clerk who refuses to sell adult magazines to high-school
students. The URL content filtering facilities are also used by businesses
to prevent employees from accessing Internet resources that are either not
work related or otherwise deemed inappropriate.
The name of the URL content filtering comes from checking the content of
the URL strings. Traditional firewall inspects packets based on the fields of
TCP/IP headers, while the URL content filtering checks the URL strings or
the payload of TCP/IP packets. In the Vigor routers, the URL content
filtering facility inspects the URL string and some of HTTP data hiding in the
payload of TCP packets.
Protect Your Network
6-22
6-B.2 An Overview of URL Content Filtering
The URL content filtering facility in Vigor routers inspects every URL string
in the HTTP request initiated inside against the keyword list. If the entire or
part of the URL string (for instance, http://www.ssex.com as shown above)
matches any activated keyword, the Vigor router will block its associated
HTTP request and a syslog message will be automatically sent to the syslog
client. Also any request that tries to retrieve the malicious code will be
discarded by the Vigor router. Similarly, a syslog message will be sent to
the syslog client.
The URL content filtering facility prevents users from accessing
inappropriate websites whose URL strings are identified as prohibition.
Note that you must clear your browser cache first so that the URL content
filtering facility operates properly on a web page that you visited before.
6-B.3 Configuration
The following sections describe the web configuration for setting up the
URL content filtering facility, including specific configuration information
and any limitation they have. One can find the entrance of this setting, as
depicted in the following figure, after clicking the IP Filter/Firewall in the
main menu.
Protect Your Network
6-23
The URL content filtering facility supported in the Vigor router consists of
the URL Access Control, Prevent web access from IP address,
Restrict Web Feature control, Exceptional Subnet handling, and
Time schedule functions. The URL Access Control aims at controlling
the access right of web sites by inspecting the URL string against
user-defined keywords. The Restrict Web Feature control intends to
block the malicious codes hidden in Web pages, such as Java Applet,
Active X, Cookies, Proxy, compressed files, and executable files. Also, it
is able to block all downloads of multimedia files from Web pages in order
to control the bandwidth usage.
The function of Prevent web access from IP address is used to avoid that
inappropriate web sites can be accessed through directly using IP
address in the URL locator, even though their URL strings match the
user-defined keywords. The function of Exceptional Subnet handling
allows the administrator to specify a group of hosts that are free from the
URL Access Control. This group of hosts could be defined as a set of IP
addresses or subnets. Finally, the Vigor router supports the Time
schedule function to control what time should perform the URL content
filtering facility. Now, let us move on the description of each item’s
usage in more detail.
Protect Your Network
6-24
B.3.1. Enable URL Access Control
One checkbox appears giving the choice to activate the URL Access Control
or not. To enable it, click on the empty box image and, subsequently, the
hook image ( ) will appear.
Block Keyword List: The Vigor router provides 8 frames for users to
define keywords and each frame supports multiple keywords. The
keyword could be a noun, a partial noun, or a complete URL string.
Multiple keywords within a frame are separated by space, comma, or
semicolon. In addition, the maximal length of each frame is 32
characters. After specifying keywords, the Vigor router will reject the
access right of any website whose whole or partial URL string
matched any user-defined keyword. It should be noticed that the
more simplified the blocking keyword list, the more efficiently the
Vigor router perform.
Example: If you want to filter any website whose URL string contains
“sex”, “fuck”, “gun”, or “drug”, you should add these words into the
frames. Thus, your Vigor router will automatically deny any web
surfing that its associated URL string contains any one of the list’s
keywords. Considering that the user tries to access
www.backdoor.net/images/sex /p_386.html, the Vigor router will cut
Protect Your Network
6-25
the connection because this website is prohibited. However, the
user is able to access the website
www.backdoor.net/firewall/forum/d_123.html. Further, the URL content
filtering facility also allows you to specify either a complete URL string
(e.g., “www.whitehouse.com” and “www.hotmail.com”) or a partial
URL string (e.g., “yahoo.com”) in the blocking keyword list.
Accordingly, the Vigor router will identify the forbidden URL and
perform the blocking action for these websites by cutting the
associated connections.
Prevent Web Access by IP Address: One checkbox is available to
activate this function that will deny any web surfing activity by directly
using IP address. To enable it, click on the empty box image and,
subsequently, the hook image ( ) will appear.
B.3.2. Enable Restrict Web Feature
It will be of great value to provide the protection mechanism that prohibits
the malicious codes from downloading from web pages. The malicious
codes may embed in some executable objects, such as ActiveX, Java
Applet, compressed files, and executable files, and, if they have been
Protect Your Network
6-26
downloaded from websites, would bring a threat of the user’s system.
For example, an ActiveX object can be downloaded and run from the web
page. If the ActiveX object has some malicious code in it, it may own
unlimited access to the user’s system.
Java Click the checkbox to activate the Block Java object function. The Vigor
router will discard the Java objects from the Internet.
ActiveX Click the checkbox to activate the Block ActiveX object function. Any
ActiveX object from the Internet will be refused.
Compressed
file
One checkbox appears giving the choice to activate the Block Compressed
file function to prevent someone from downloading any compressed file.
The following list shows the types of compressed files that can be blocked
by the Vigor router.
.zip .rar .arj
.ace .cab .sit
To enable it, click on the empty box image and, subsequently, the hook
image ( ) will appear. 
Executable
file
Similar to the above function, click the checkbox to enable the Block
Executable file function to reject any downloading behavior of the
executable file from the Internet. To enable it, click on the empty box image
and, subsequently, the hook image ( ) will appear. Accordingly, files 
with the following extensions will be blocked by the Vigor router.
.exe .com .scr .pif .bas .bat .inf .reg
Protect Your Network
6-27
A so-called cookie feature introduced by Netscape allows you to
keep a close watch on the activities of HTTP request and responses
of individual sessions. Many websites use them to create stateful
sessions for tracking Internet users, which will violate the users’
privacy. Thus, the Vigor router provides the Cookies filtering facility
that allows you to filter cookie transmission from inside to outside
world. Furthermore, the Vigor router also allows you to filter out all
proxy-related transmission in order to support stronger security.
Cookie
Click the checkbox to activate the Block Cookie transmission. The
Vigor router will filter out the cookie transmission from inside to
outside world in order to protect the local user's privacy.
Proxy
One checkbox appears giving the choice to activate this function to
reject any proxy transmission. To enable it, click on the empty box
image and, subsequently, the hook image ( ) will appear.
To control efficiently the limited-bandwidth usage, it will be of great
value to provide the blocking mechanism that filters out the
multimedia files downloading from web pages. To enable it, click on
the empty box image and, subsequently, the hook image () will
appear. Accordingly, files with the following extensions will be
blocked by the Vigor router.
.mov .mp3 .rm .ra .au .wmv
.wav .asf .mpg .mpeg .avi .ram
B.3.3. Enable Excepting Subnets
4 entries are available for users to specify some specific IP addresses or
subnets so that they can be free from the URL Access Control. To
enable an entry, click on the empty checkbox, named as “ACT”, in front of
the appropriate entry. The hook image ( ) appears to indicate the 
entry is active. To disable an entry, click on the hook image ( ).
Protect Your Network
6-28
B.3.4. Time Schedule
Specify what time should perform the URL content filtering facility.
Example: If you want your kids not to be addicted to on-line gaming,
you apply the URL content filtering facility to your router
and you set time schedule for school days in order to let
your kids have good sleep.
Always Block Click it so that the URL content filtering facility can be executed on
the Vigor router anytime.
Block from H1:M1 To
H2:M2
Specify the appropriate time duration from H1:M1 to H2:M2 in one
day, where H1 and H2 indicate the hours. M1 and M2 represent
the minutes.
Days of Week Specify which days in one week should apply the URL content
filtering facility. The Vigor router supports two exclusive options
for users, i.e. everyday or some days in one week. If you expect
that the URL content filtering facility is active for whole week, you
Protect Your Network
6-29
should click the checkbox “Everyday”. Otherwise, you should
point clearly out the days in one week. For example, if you want
the URL content filtering facility to work from Monday to
Wednesday, then you should click the appropriate checkboxes
(Monday, Tuesday, and Wednesday). Other days the URL
content filtering facility will be silent.
6-B.4 Warning Message
When a HTTP request is denied, an alert page will appear in your browser, as
shown in the following figure.
Also, the warning message will be automatically sent to the syslog client after you
enable the syslog function. The administrator can setup the syslog client in the
Syslog Setup by using Web Configurator. Thus, the administrator can view the
Protect Your Network
6-30
warning messages from the URL Content Filtering functionality through the
DrayTek Sylsog daemon. The format for this kind of the warning messages is
similar to those in the IP Filter/Firewall except for the preamble keyword “CF”,
followed by a name to indicate what kind of the HTTP request is blocked.
Vigor2100V series
7
-
1
Chapter 7
Dynamic DNS Setup
7.1 Introduction
Before you set up the Dynamic DNS (Domain Name Server) function, you
have to subscribe free domain names from the Dynamic DNS service
providers. The Vigor router provides up to three accounts for the function
and supports the following providers: www.dynsns.org,
www.dynamic-nameserver.com, www.no-ip.com, www.dtdns.com,
www.changeip.com. You should visit their websites to register your own
domain name for the router.
The Dynamic DNS function allows the router to update its online WAN IP
address which assigned by ISP to the specified Dynamic DNS server. Once
the router is online, you will be able to use the registered domain name to
access the router or internal virtual servers from the Internet. Use the
following setup link on the Setup Main Menu to configure the Dynamic DNS
Setup function.
Applications > Dynamic DNS Setup
7.2 Configuration
Enable the Function and Add a Dynamic DNS Account
1. Assume you have a registered domain name from the DDNS provider,
say hostname.dyndns.org, and an account with username: test and
password: test.
Dynamic DNS Setup
7
-
2
2. Applications>> Dynamic DNS Setup and then you will see the
following web page.
3. Check Enable Dynamic DNS Setup and Index number 1 to add an
account for the router. And now, you will see the following web page.
4. Check Enable Dynamic DNS Account, and choose correct Service
Provider: dyndns.org , type the registered hostname: hostname and
domain name suffix: dyndns.org in the Domain Name block. The
following two blocks should be typed your account Login Name: test
and Password: test.
5. Push OK button to activate the settings.
Dynamic DNS Setup
7
-
3
The Wildcard and Backup MX features are not supported for all Dynamic DNS
providers. You could get more detailed information from their websites.
Disable the Function and Clear all Dynamic DNS Accounts
1. Login Main Menu > Dynamic DNS Setup.
2. Uncheck Enable Dynamic DNS Setup, and push Clear All button to
disable the function and clear all accounts from the router.
Delete a Dynamic DNS Account
1. Login Main Menu > Dynamic DNS Setup.
2. Click the Index number you want to delete and then push Clear All
button to delete the account.
7.3 Validation and Troubleshooting
Ping the Registered Domain Name
1. After router is online, use PING utility to probe your registered domain
name in order to verify if it works.
2. Login Main Menu > Online Status to make sure the responded IP
address from the Dynamic DNS server should be the same as router’s
WAN IP address.
Dynamic DNS Setup
7
-
4
View the DDNS Logs
1. Applications >> Dynamic DNS Setup.
2. Push View Log button. The logs of DDNS updates will be shown as
follows.
Where A : Login Name
H : Domain Name without suffix.
Return Code= good 61.230.170.145
If you have any DDNS update issues, the logs are useful to find where the
problem is.
3. Click Online Status to know what the current WAN IP address is.
You will see the IP address in the circle, which is the same as the Return
Code in the DDNS logs. This indicates that the update is successful.
Vigor2100V series
8
-
1
Chapter 8
Call Schedule Setup
8.1 Introduction
The Vigor router has built a real time clock which can update itself from your
browser manually or automatically from an Internet time server (NTP). As a
result, you can schedule the router to dial to Internet at a pre-set time, but
also to restrict Internet access to certain hours so that the router will only let
users of LAN to access Internet at certain times (e.g. business hours).
On the Time Setup menu, you can firstly ensure your router time to be
correct before you would like to enforce Call Scheduling.
Call Schedule Setup
8
-
2
Call Schedule facility is used to control the router's dialer or connection
manager what time should be up or down according to the pre-defined call
schedule profiles. Before configuring the Call Schedule function, you have
to set up time function properly and arrange schedules for specified Internet
access profile or LAN-to-LAN profile.
On the Time Setup menu, if you press Inquire Time button, the router’s
clock will be set to current time of your PC. The clock will reset if you power
down or reset the router so you may prefer to use an NTP server on the
Internet (a time server) to update the clock automatically. NTP updates only
occur when the router is online to the Internet; they will not trigger calls
themselves.
You can have up to 15 entries of different schedules and you must then apply
the required schedule(s) to the appropriate ISP by entering the schedule
number into the ISP setup:
Applications >>Call Schedule Setup
Call Schedule Setup
8
-
3
Click Clear All button to remove all schedules in the router.
Click Cancel button to give up the current editing-operation and then return
back to the Main Setup menu.
8.2 Configuration
Add a Call Schedule
1. Click any index, say Index No. 1. The detailed settings of the call
schedule with index 1 are shown as follows.
Call Schedule Setup
8
-
4
2. The detailed descriptions for each setting are:
Enable Schedule Setup: Check to enable the schedule.
Start Date (yyyy-mm-dd): Specify the starting date of the schedule.
Start Time (hh:mm): Specify the starting time of the schedule.
Duration Time (hh:mm): Specify the duration (or period) for the
schedule.
Action: Specify which action should be applied by Call Schedule during
the time period of the schedule.
Force On: Force the connection to be always-on.
Force Down: Force the connection to be always-down.
Enable Dial-On-Demand: Specify the connection to be
dial-on-demand and the value of idle timeout should be
specified as following Idle Timeout field.
Call Schedule Setup
8
-
5
Disable Dial-On-Demand: Specify the connection to be up when it
has traffic on the line. Once there is no traffic over idle timeout,
the connection will be down and never up again during the
schedule.
How Often: Specify how often the schedule will be applied.
Once: The schedule will be applied just once.
Weekdays: Specify which days in one week should perform the
schedule.
3. Specify appropriate time duration and action to the profile and then click
OK button to apply.
4. Specify the call schedule to specific Internet access profile or
LAN-to-LAN profile.
Specify appropriate time duration and action to the profile and then click
OK button to apply.
Specify the call schedule to specific Internet access profile.
Call Schedule Setup
8
-
6
Delete a Call Schedule
1. Click Call Schedule Setup and the Index number which you want to
remove.
2. Click Clear button to remove that profile.
8.3 An Example
If you want to control the PPPoE Internet access connection to be always-on
(Force On) from 9:00 to 18:00 for whole week. Other time the Internet
access connection should be disconnected (Force Down).
1. Make sure the PPPoE connection and Time Setup is working properly.
2. Configure the PPPoE always-on from 9:00 to 18:00 for whole week.
Call Schedule Setup
8
-
7
3. Configure the Force Down from 18:00 to next day 9:00 for whole week.
4. Assign these two profiles to the PPPoE Internet access profile. Now,
the PPPoE Internet connection will follow the schedule order to perform
“Force On” or “Force Down” action according to the time plan which has
been pre-defined in the schedule profiles.
Vigor2100V series
9-1
Chapter 9
UPnP Service Setup
9.1 Introduction
The UPnP (Universal Plug and Play) protocol is supported to bring to
network connected devices the ease of installation and configuration
which is already available for directly connected PC peripherals with the
existing Windows 'Plug and Play' system.
For NAT routers, the major feature of UPnP on the router is “NAT
Traversal”. This enables applications inside the firewall to automatically
open the ports that they need to pass through a router. It is more
reliable than requiring a router to work out by itself which ports need to be
opened. Further, the user does not have to manually set up port
mappings or a DMZ.
UPnP is available on Windows XP and the router provides the associated
support for MSN Messenger to allow full use of the voice, video and
messaging features.
UPnP service Setup
9-2
9.2 Configuration
You can enter the UPNP Setup via Advanced Setup > UPNP Service
Setup on the Web Configurator in your router.
Enable UPNP Service. Accordingly, you can enable either the
Connection Control Service or Connection Status Service.
Click the IP Broadband Connection on DrayTek Router on Windows
XP/Network Connections, as shown below. The connection status and
control status will be able to be activated.
UPnP service Setup
9-3
The NAT Traversal of UPnP enables the
multimedia features of your applications to
operate. This has to manually set up port
mappings or use other similar methods. The
screenshots above show examples of this facility.
The UPnP facility on the router enables UPnP
aware applications such as MSN Messenger to
discover what are behind a NAT router, learn the
external IP address and configure port mappings
on the router. Subsequently, such a facility
forwards packets from the external ports of the
router to the internal ports used by the application.
UPnP service Setup
9-4
The reminder as regards concern about Firewall and UPnP
Can't work with Firewall Software
Enabling firewall applications on your PC may cause the UPnP function not
working properly. This is because these applications will block the accessing
ability of some network ports.
Security Considerations
Activating the UPnP function on your network may incur some security threats.
You should consider carefully these risks before activating the UPnP function.
1.Some Microsoft operating systems have found out the UPnP weaknesses and
hence you need to ensure that you have applied the latest service packs and
patches.
2.Non-
privileged users can control some router functions, including removing and
adding port mappings.
3.The UPnP function dynamically adds port mappings on behalf of some
UPnP-aware applications. When the applications terminate abnormally, these
mappings may not be removed.
Vigor2100V series
10-1
Chapter 10
E-mail Detection
10.1 Introduction
The Vigor2100V/VG series router has E-mail detection mechanism for
notifying users that the POP3-mail server is holding E-mail. There is an
LED marked “e-mail”. You can set your router to periodically check for
whether there are E-mail at POP3-protocol mail server of your ISP or other
E-mail provider. The E-mail LED will light if there is E-mail waiting for you
to retrieve them. You have up to five different POP3 accounts checked.
The E-mail detection lets you see whether you have E-mail waiting without
turning on or log into your PC.
Be sure that your E-mail software can receive E-mail using the POP3
protocol. The POP3 protocol is the world most common method.
However, the web-based services such as Hotmail (unless they provide an
interface too). You have to check the POP3 server address, your E-mail
user name and password. The setting procedure is exactly the same as
you set up your regular E-mail software.
The E-mail LED on the router will notify you by flashing.
Email Detection
10-2
You can enter up to five profiles for different mail servers. If there are
E-mail waiting, the Mail Number waiting will be shown as well as the total
size of mail box.
By default, the E-mail will be checked every 3 minutes. You can change
the default frequency as shown on the screenshot.
Vigor2100V series
11-1
Chapter 11
VoIP
11.1 Introduction
Voice over IP network (VoIP) enables you to use your broadband Internet
connection to make toll quality voice calls over the Internet.
There are many different call signaling protocols; methods by which VoIP
devices can talk to each other. The most popular protocols are SIP, MGCP,
Megaco and the older H.323. These protocols are not all compatible with
each other (except via a soft-switch server).
The Vigor2100V/VG series support the SIP protocol as this is an ideal and
convenient deployment for the ITSP (Internet Telephony Service Provider)
and softphone and is widely supported. SIP supports peer-to-peer direct
calling and also calling via a SIP proxy server (a role similar to the
gatekeeper in H.323 networks). The MGCP protocol uses a client-server
architecture, the calling scenario being very similar to the current PSTN
network.
After a call is setup, the voice streams transmit via RTP (Real-Time
Transport Protocol). Different CODECs (methods to compress and encodec
the voice) can be embedded into RTP packets. Vigor2100V/VG series
provide various CODECs, including G.711 A/-law, G.723, G.726 and
G.729 A & B. Each CODEC uses a different bandwidth and hence provides
different levels of voice quality. The more bandwidth a CODEC uses the
better the voice quality, however the CODEC used must be appropriate for
your Internet bandwidth.
VoIP
11-2
The VoIP facilities of Vigor2100V/VG series can provide a cost-saving
alternative to having an additional fixed-line. By using the ITSP (e.g.
DrayTEL, www.draytel.org) you can also make calls to any regular phone
line too, including mobiles, as well as receive calls from anyone - the call is
carried to your phone via your internet connection so your regular phone
line remains free for other people/calls.
There are two ways for you to make a call to other Vigor VoIP router users;
by dialling their IP address directly on the phone handset or using a SIP
registrar. A SIP server on the Internet enables your router to log its current
location (IP Address) and availability so that other users can call you on
your SIP address (e.g. 98141@draytel.org)
Before you can set up the router for SIP you need to open an
account with a SIP registrar [e.g. IPTEL, DrayTEL
(www.draytel.org)].
Our Vigor2100V/VG series firstly apply efficient codecs designed to make
the best use of available bandwidth, but Vigor2100V/VG series also equip
with automatic QoS assurance!! QoS Assurance assists to
assign high priority to voice traffic via Internet. You will always have the
required inbound and outbound bandwidth which is prioritized exclusively
for Voice traffic over Internet but you just get your data a little slower and it
is tolerable for data traffic.
VoIP
11-3
11.2 VoIP Settings
The following is the setting path for this function.
11.2.1 DialPlan Setup
The Vigor2100V/VG series have one FXS port ( the “Phone” port on the
rear panel) to which you connect a conventional (analogue) phone, either
corded or wireless (DECT). You can set the registered SIP address of
your VoIP contacts into the DialPlan of the Vigor2100V/VG series to make
calling them quick and easy. There are 60 entries in the DialPlan for you
to store all your friends and family members SIP address.
VoIP
11-4
Enable
Tick this to enable this entry.
Phone Number
The number you want to dial from your handset to call this
contact. This can be any number you choose, using digits
0-9 and*
Display Name
This field contains a name or a number which easily let you
identify the person who you wan to call. It can also be the
name for SIP display.
SIP URL Address
Enter the SIP address of your contact
(e.g. 393910@draytel.org)
Loop Through
The Vigor2100V/VG series have a “Line” port on the rear
panel for connecting to a PSTN (regular analogue) line.
The Loop Through option can be used to set an alternate
telephone number for your contact on the PSTN, which the
Vigor2100V/VG series will dial instead of the SIP account if
you lose broadband access or power to the Vigor2100V/VG
series.
Hence, the PSTN line can act as a lifeline (backup
mechanism) for VoIP calls. The default is VoIP mode. The
lifeline mechanism is activated automatically if you specify
“PSTN” as Loop Through and enter Backup Phone
Number.
VoIP
11-5
Example 1:
If Dolly gives you her SIP URL as sip:63065@fwd.pulver.com, then you can
enter the number just as the previous figure. You can apply easy-to-search
Display Name and Phone Number to settings.
The hardware connection of Vigor2100V series:
Backup Phone Number: The alternate PSTN number to dial if “PSTN” is set in
Loop Through entry.
Example 2:
If Kelly gives you her SIP URL as sip:kelly@203.69.175.19 and PSTN
number is 5972727 then you can enter the DialPlan as:
Phone Number: 1234 (any number you like)
Display Name: Kelly
SIP URL: Kelly@203.69.175.19
Loop through: PSTN
Backup phone
number:
5972727
VoIP
11-6
Example 3:
If Kelly gives you her IP address 203.69.175.19 only, and it is not in your
DialPlan, you still can press keypad on the phone to dial as #203*69*175*19#
To manually dial the backup number
via PSTN enter “#0”
on your
telephone handset, and then dial a PSTN phone number. If you are
worried that the automatic loop through might over charge your PSTN
phone number, we recommend you not to enter your PSTN phone
number into the “Backup Phone Number” entry. That way you can only
run loop through by manually dialing a PSTN number.
11.2.2 SIP Related Function Setup
Once you are registered with a SIP Server (e.g. DrayTEL) set your SIP
username and password in the appropriate boxes (detailed explanation below).
In the Registrar box enter the entire domain of the SIP server – everything after
the @ sign of your SIP address. Click OK and your router will log onto the SIP
server. In the “VoIP Call Status” you will find an “R” indicating you have
registered with your SIP server.
VoIP
11-7
SIP Port
The port number used to send/receive SIP message for building
a session. The default value is 5060 and this must match with the
peer Registrar when making VoIP calls.
Registrar
Enter the domain name (or IP address) of your registered SIP
Registrar server.
Proxy
You can enter domain name or IP address of SIP proxy server. If
this setting value is the same as Registrar, please press
“Duplicate”.
Domain/Realm
You can enter domain name or IP address of SIP URL. e.g., if
SIP URL is sip:63065@fwd.pulver.com, then this field contains
fwd.pulver.com. If this setting value is the same as Registrar,
please press “Duplicate”.
Stun Server
This setting defines whether the Vigor2100V/VG NAT traversal
mechanism is enabled (by checking checkbox) or not. If
activated, please also specify IP address of STUN server. Under
this mode, VoIP communication from Vigor2100V/VG can pass
through with the specified STUN server behind firewall/NAT.
Use Registrar
With the Registrar domain entered above, check this box to let
the Vigor2100V/VG use the SIP Registrar.
Display Name
This field contains a name or a number which easily let you
identify the person who you wan to call. It can also be the name
for SIP display.
VoIP
11-8
Account
Name
Enter your SIP username (the first part of your SIP address
before the @ sign)
Authorization
User
This field contains a name or a number. It is also the name for
SIP Authorization. If this setting value is the same as Display
Name, please press “Duplicate”.
Password
Your SIP URL address as provided when you registered with a
SIP service.
Expire Time
The time duration that your SIP registrar server keeps your
registration record. Before the time expires the Vigor will issue
another register message to registrar server again.
CODEC/RTP/DTMF Setup
Default Codec: Select one of five CODECs as the default for your VoIP calls.
The CODEC used for each call will be negotiate with the peer party before
each session, and so many not be your default choice. The default CODEC is
G.729A/B; it occupies little bandwidth while maintaining good voice quality.
If your upstream speed is only 64Kbps, do not use G.711 CODEC. It is
better for you to have at least 256Kbps upstream if you would like to use
G.711
VoIP
11-9
Packet Size
The amount of data contained in a single packet. The default
value is 20 ms, which means the data packet will contain 20 ms
voice information.
DTMF InBand
With this selected the Vigor will send DTMF tones as audio
directly in the Voice stream when you press a key on the
keypad.
DTMF
OutBand
With OutBand selected the Vigor will capture the keypad
number pressed, transform it to a digital form and send to the
other side outside of the Voice stream; the receiver will generate
the tone according to the digital form it receives. This function is
very useful when network traffic congestion occurs to maintain
the accuracy of DTMF tones.
DTMF Payload
Type
The default value is 101, but can be anything from 96 to 127.
SIP INFO
Enable this option to let the SIP proxy send DTMF tones to the
dialed peer.
RTP
Specifies the start and end port for RTP stream. The default
values are 10050 and 15000
.
VoIP
11-10
11.3 Calling Scenario
11.3.1 Peer-to-Peer Calling example
Arnor and Paulin each have a Vigor2500V router, here are their settings in order
to call each other.
Arnor’s IP address: 214.61.172.53
Paulin’s IP address: 203.69.175.24
A. Arnor’s settings
A-1. DialPlan index 1
Phone Number: 1234
(any number you like)
Name: paulin
IP Address / Domain: 203.69.175.24
A-2. SIP Related Function
SIP Port: 5060(default)
Registrar: (leave blank)
Port 1:
Use Registrar: (leave blank)
Name: arnor
Password: (leave blank)
Expiry Time: (use default value)
A-3. CODEC/RTP/DTMF
(use default value)
B. Paulin’s settings
B-1. DialPlan index 1
Phone Number: 123
(any number you like)
Name: arnor
IP Address / Domain: 214.61.172.53
B-2. SIP Related Function
SIP Port: 5060(default)
Registrar: (leave blank)
Port 1:
Use Registrar: (leave blank)
Name: paulin
Password: (leave blank)
Expiry Time: (use default value)
B-3. CODEC/RTP/DTMF
(use default value)
C. Now, when Arnor wants to call Paulin, he picks up the phone and dials 1234#.
D. When Paulin wants to call Arnor, she picks up the phone and dials 123#
VoIP
11-11
11.3.2 Calling via SIP Sever
Below are the settings for John and David to call each other using their DrayTEL
registered SIP accounts, as neither Vigor user have a fixed public IP address.
John’s SIP url: john@draytel.org
David’s SIP url: david@draytel.org
A. John’s settings
A-1. DialPlan index 1
Phone Number: 2536
(any number you like)
Name: david
IP Address / Domain: draytel.org
A-2. SIP Related Function
SIP Port: 5060
Registrar:draytel.org
Port 1:
Use Registrar: (checked)
Name: john
Password: ********
(enter John’s registrar password)
Expiry Time: (use default value)
A-3. CODEC/RTP/DTMF
(use default value)
B. David’s settings
B-1. DialPlan index 1
Phone Number: 8989
(any number you like)
Name: john
IP Address / Domain: draytel.org
B-2. SIP Related Function
SIP Port: 5090
Registrar: draytel.org
Port 1:
Use Registrar: (checked)
Name: david
Password: ********
(enter David’s registrar password)
Expiry Time: (use default value)
B-3. CODEC/RTP/DTMF
(use default value)
C. Now, when John wants to call David, he picks up the phone and dials 2536#.
D. When David wants to call John, he picks up the phone and dials 8989#
VoIP
11-12
11.4 Voice Call Status
On VoIP call status, you can find the registered registrar, codec, connection and
other important call status. Because Vigor2100V/VG only has one VoIP port for
regular analogue phone set, there is only one VoIP channel.
On System Status, you can find the registered registrar and Codec. for Inbound
calls and Outbound calls. The said status easily let you check whether your
registration of SIP server is successful or not.
VoIP
11-13
Channel Volume
To adjust the volume of your VoIP calls. Use these two
buttons to obtain appropriate Volume Gain.
Refresh Seconds
Specify the interval of refresh time to obtain the latest VoIP
calling information. The information will update immediately
when the Refresh button is clicked.
Status: To show the VoIP connection status.
IDLE
: Indicates that the VoIP function is idle.
HANG_UP
: Indicates that the connection is not established (busy
tone).
COLLECTING
: Indicates that the user is calling out.
WAIT_ANS
: Indicates that a connection is launched and waiting for
remote user’s answer.
ALERTING
: Indicates that a call is coming.
ACTIVE
: Indicates that the VoIP connection is launched.
CODEC
The voice CODEC employed by present channel.
PeerID
The present in-call or out-call peer ID (the format may be IP
or Domain).
Connect Time
The format is represented as seconds.
Tx Pkts
Total number of transmitted voice packets during this
connection session.
Rx Pkts
Total number of received voice packets during this
connection session.
Rx Loss
Total number of lost packets during this connection session.
Rx Jitter
The jitter of received voice packets.
In Calls
The accumulating in-call times.
VoIP
11-14
Out Calls
The accumulating out-call times.
Volume Gain
The volume of present call.
View Log
To show the logs of VoIP calls as below.
11.5 QoS for Voice Call
Enter upstream speed to let Vigor2100V/VG assure high priority for VoIP call.
Vigor2100V series
12
-
1
Chapter 12
Wireless LAN Setup
12.1 Introduction
Over recent years, the market for wireless communications has enjoyed
tremendous growth. Wireless technology now reaches or is capable of
reaching virtually every location on the face of the earth. Hundreds of
millions of people exchange information every day using wireless
communication products. Therefore, the Vigor2100VG series residential
broadband routers are designed for increasing flexibility and efficiency of a
small office/a home by deploying the WLAN network.
To elaborate one example, any authorized staff can bring a built-in WLAN
client PDA or notebook into a meeting room for conference without laying a
clot of LAN cable.
One more example, parents can write E-mail at their studyoom and kids are
also able to surf Internet at their bedrooms as the Vigor2100VG is set up in
some corner of a home. Parents do not need to drill any hole for installing
LAN cable everywhere in the house.
The Vigor2100VG series are equipped with a wireless LAN interface
compliant with the IEEE 802.11g protocol supporting data rate of 54Mbps.
The wireless LAN capability enables high mobility of several users so that
they can simultaneously access all LAN facilities just like on a wired LAN as
well as Internet and WAN access.
Wireless LAN Setup
12
-
2
In this chapter, we explain the capabilities of the wireless LAN and its
associated web configurations. Use the following setup path on the Setup
Main Menu to configure the wireless LAN function.
12.2 Configuration
After clicking the “System maintenance
Sytem status”, you will see the
following information:
This web page will show the wireless LAN information including MAC
address and Frequency domain and Firmware Version. For example, in this
figure, the Frequency Domain can be Europe (13 usable channels), or the
USA (11 usable channels) and the MAC address is set as 00-0a-e9-01-4b-do.
The Firmware Version is the WLAN miniPCi.
The available channels supported by the wireless products in
different countries are various.
By clicking the General Settings, a new web page will appear so that you
could configure the SSID and the wireless channel. Please refer to the
following figure for more information.
Wireless LAN Setup
12
-
3
1. Enable Wireless LAN: Check the box to enable wireless function.
2. Mode: Select an appropriate wireless mode.
- Mixed (11b+11g): The radio can support both IEEE802.11b and
IEEE802.11g protocols simultaneously.
- 11g-only: The radio only supports IEEE802.11g protocol.
- 11b-only: The radio only supports IEEE802.11b protocol.
3. Scheduler: Set the wireless LAN to work at some time interval only. You may
choose up to 4 schedules from the 15 schedules which are defined under
Advanced Setup > Call Schedule Setup. Please refer to the detailed
manual on the attached CD. The default setting is always working.
4. SSID and Channel: The default SSID is "default". We suggest you change it
to a particular name. In this case, SSID was changed to “DrayTek”.
- SSID (Service Set Identifier): It is used to name the wireless LAN, and
must have the same content in client PC/notebook wireless card(s). SSID
can be any text numbers or various special characters.
- Channel: A wireless channel for the router. The default channel is 6. You
can change it to more appropriate one if the selected channel is under
serious interference.
5. Hide SSID: Check it to prevent from wireless sniffing and make it harder for
unauthorized clients to join your wireless LAN.
6. Click OK to save settings.
Wireless LAN Setup
12
-
4
12.3 Configuring the WEP Security
To improve the security and privacy of your wireless data packets, the WEP
and WPA encryption feature can be employed, where WEP stands for
Wireless Equivalent Privacy. The WEP facility that uses a set of four default
keys encrypts each frame transmitted from the radio using only one of the
given keys. Default keys are shared between the Vigor wireless router and
WEP station in a service set. Once a station has obtained the default keys for
its service set, it may communicate using WEP. WPA (Wi-Fi Protected Access)
uses the Temporal Key Integrity Protocol (TKIP) for encryption. It greatly
enhances the over-the-air data protection and access control on existing
Wi-Fi networks. It addresses the weaknesses of WEP. By clicking the
Security Settings, a new web page will appear so that you could configure
the settings of WEP and WPA.
1. Mode: Select an appropriate encryption to improve the security and privacy
of your wireless data packets.
Wireless LAN Setup
12
-
5
- Disable: Turn off the encryption mechanism.
- WEP Only: Accepts only WEP clients and the encryption key should be
entered in WEP Key.
- WEP or WPA/PSK: Accepts WEP and WPA clients simultaneously and the
encryption key should be entered in WEP Key and PSK respectively.
- WPA/PSK Only: Accepts only WPA clients and the encryption key should
be entered in PSK.
2. WPA Encryption:
The WPA encrypts each frame transmitted from the radio using the
pre-shared key (PSK) which entered from this panel.
Pre-Shared Key (PSK): Either 8~63 ASCII characters or 64 Hexadecimal
digits leading by 0x can be entered. For example "0123456789ABCD...." or
"0x321253abcde.....".
3. WEP Encryption:
- 64-Bit: For 64bits WEP key, either 5 ASCII characters or 10 hexadecimal
digitals leading by 0x can be entered. For example, ABCDE or
0x4142434445.
- 128-Bit: For 128bits WEP key, either 13 ASCII characters or 26
hexadecimal digits leading by 0x can be entered. For example,
ABCDEFGHIJKLM or 0x4142434445464748494A4B4C4D.
NOTE: 128 bits WEP is most secure, but has more encryption/decryption
overhead. Note that all wireless devices must support the same WEP
encryption bit size and have the same key. Four keys can be entered here,
but only one key can be selected at a time. The keys can be entered in
ASCII or Hexadecimal. Click the circle under Use next to the key you wish to
use.
4. Click OK to save settings.
12.4 Configuring the Access Control
For additional security of wireless access, the Access Control facility allows
you to restrict the network access right by controlling the wireless LAN MAC
address of client. Only the valid MAC address which has been configured
can access the wireless LAN interface. By clicking the Access Control, a
new web page will appear, as depicted below, so that you could edit the
clients' MAC addresses to control their access rights.
Wireless LAN Setup
12
-
6
Enable Access Control: To check the Enable Access Control to enable the
MAC Address access control feature.
MAC Address: Display all MAC addresses that are edited before. Four
buttons (Add, Remove, Edit, and Cancel) are provided to edit a MAC
address.
ADD: Add a new MAC address into the list.
Remove: Delete the selected MAC address in the list.
Edit: Edit the selected MAC address in the list.
Cancel: Give up the access control set up.
Clean All Clean all entries in the MAC address list.
OK Click it to save the access control list.
Wireless LAN Setup
12
-
7
12.5 Configuring the Station List
The Vigor router offers you a convenient Station List facility to scan the
running WLAN clients being near the router. If neighbors or other WLAN
clients are active, you can press "Refresh" to get available WLAN stations’
information including its status and MAC address. You can select the wish
WLAN station from Station List to add it to Access Control list by clicking
highlight, then press “Add”. Or editing a station’s MAC address manually is
another option. After the these operations, you go to Access Control and the
listed WLAN stations which are allowed to access network resources via the
Vigor router.
Vigor2100V series
13-1
Chapter 13
System Status
13.1 Introduction
The System Status provides basic network settings of Vigor router It
includes LAN and WAN interface information. Also, you could get the
current running firmware version or firmware related information from this
presentation.
13.2 Descriptions of System Status
Go to the System Maintenance > System Status and you will see the
result shown on the right frame. The below figure is a demoed by Vigor
2100V.
Online Status
13-2
In order to let you know the settings result, we design the Status bar on
Set-up Menu. You can find the “Ready” indicates that you can enter
settings. “Settings Saved” means your settings are saved once you click
“Finish” or “OK” button. If the settings are wrong or get problematic, you
can find fail message on Status bar.
Vigor2100V series
14-1
Chapter 14
Configuration Backup
14.1 Introduction
Sometimes you want to keep running configurations of your current
router as a file or restore the configurations with the file. The router
provides an web-based way to let you backup or restore the configuration
very simple.
14.2 Usage
14.2.1 Backup the Running Configuration
1. Go to System Maintenance > Configuration Backup. The
following windows will be popped-up, as shown below.
Configuration Backup
14-2
2. Click Backup button to get configurations.
3. Click OK button to save configuration as a file. The default
filename is config.cfg. You could give it another name by
yourself.
4. Click Save button, the configuration will download automatically
to your computer as a file named config.cfg.
The above example is using Windows platform for demonstrating
examples. The Mac or Linux platform will appear different windows, but
the backup function is still available.
Configuration Backup
14-3
14.2.2 Restore the Configuration with a Configuration File
1. Go to System Maintenance > Configuration Backup. The
following windows will be popped-up, as shown below.
2. Click Browse button to choose the correct configuration file for
uploading to the router.
3. Click Restore button and wait for few seconds, the following
picture will tell you that the restoration procedure is successful.
Configuration Backup
14-4
4. Click Restart button and wait for few seconds, the router will
restart by using the updated configurations.
Vigor2100V series
15-1
Chapter 15
Management Setup
15.1 Introduction
By default, the router may be configured and managed through any Telnet
client or Web browser running on any operating system. There is no
requirement for additional software or utilities. However, for some specific
environments, you may want to change the server port numbers for the
built-in Telnet or HTTP server, create access control lists to protect the
router, or reject the system administrator to login from the Internet.
15.2 Configuration
Click Management Setup. The following setup page will appear on your
computer screen.
Management Setup
15-2
15.2.1 Management Access Control
Enable remote firmware update
(FTP)
Chick the checkbox to allow remote
firmware upgrade through FTP (File
Transfer Protocol).
Allow management from the Internet
Enable the checkbox to allow system
administrators to login from the
Internet. By default, it is not allowed.
Disable PING from the Internet Check the checkbox to reject all PING
packets from the Internet. For security
issue, this function is enabled by
default.
15.2.2 Access List
You could specify that the system administrator can only login
from a specific host or network defined in the list. A maximum of
three IPs/subnet masks is allowed.
IP: Indicate an IP address allowed to login to the router.
Subnet Mask: Represent a subnet mask allowed to login to the
router.
15.2.3 Management Port Setup
Default Ports: Check to use standard port numbers for the Telnet
and HTTP servers.
User Defined Ports: Check to specify user-defined port numbers
for the Telnet and HTTP servers.
Management Setup
15-3
15.2.4 SNMP Setup
Enable SNMP Agent: Chick the checkbox to enable built-in
SNMP agent.
Get Community: Specify a string to identify the management
communities for the SNMP GET command.
Set Community: Specify a string to identify the management
communities for the SNMP SET command.
Manager Host IP: Specify the IP address of the SNMP manager
station.
Trap Community: Specify a string to identify the management
communities for the SNMP TRAP notifications.
Notification Host IP: Specify the IP address of the station that
wants to receive the TRAP notifications.
Vigor2100V series
16-1
Chapter 16
Reboot System and
Firmware Upgrade TFTP Server
16.1 Reboot System
The Web Configurator may be used to restart your router. Click Reboot
System in the main menu to open the following page.
There are two reboot options: Using current configuration and Using
factory default configuration. If you want to reboot the router using the
current configuration, check Using current configuration and click OK. To
reset the router settings to default values, check Using factory default
configuration and click OK. The router will take 3 to 5 seconds to reboot the
system.
16.2 Firmware Upgrade (TFTP Server)
Before upgrading your router firmware, you need to install the Router Tools.
The Firmware Upgrade Utility is included in the tools. The following steps will
guide you to upgrade firmware. In the following, we use an example to explain
Reboot System / Firmware Upgrade TFTP Server
16-2
the firmware upgrade. Note that this example is running over Windows OS
(Operating System).
1. Download the newest firmware from DrayTek's web site or FTP site. The
DrayTek web site is www.draytek.com (or local DrayTek's web site) and
FTP site is ftp.draytek.com
2. Click System Maintenance>> Router Firmware Upgrade Utility to
launch the Firmware Upgrade Utility.
Click the Browse button to locate the new firmware file. The program will look for
any Vigor routers on your LAN and display them by IP address. Select the ‘IP
address’ of the appropriate router to upgrade, then press Upgrade. Enter the
router’s password when asked (or press OK if there is no password). The upgrade
action will start and the status will be shown on the progress bar. Once the
upgrade operation has completed, wait approximately 30 seconds and the router
will be ready (ACT light in the front panel of your router will resume flashing
normally).
Vigor2100V series
17-1
Chapter 17
Diagnostic Tools
17.1 Introduction
Diagnostic Tools provide a useful way to view or diagnose the status of you
Vigor router. More details for each tool will be explained below.
Diagnostics >>
PPPoE/PPTP Diagnostics
ARP Cache Table
DHCP Table
17.2 Descriptions
17.2.1 PPPoE / PPTP Diagnostics
Click here to open the following page. The page shown here is for
reference only and individual networks will show different results.
Refresh To obtain the latest information, click here to reload the page.
Broadband
Access
Mode/Status
Display the broadband access mode and status. If the
broadband connection is active, it will show PPPoE, PPTP,
Static IP, or DHCP Client depending on which access mode
is enabled. If the connection is idle, it will show “---”.
WAN IP
Address
The WAN IP address for the active connection.
Diagnostic Tools
17-2
Dial PPPoE
or PPTP
Click it to force the router to establish a PPPoE or PPTP
connection.
Dial PPPoE
or PPTP
Click it to force the router to establish a PPPoE or PPTP
connection.
17.2.2 View ARP Cache Table
Click View ARP Cache Table to view the content of the ARP (Address
Resolution Protocol) cache held in the router. The table shows a mapping
between an Ethernet hardware address (MAC Address) and an IP address.
Refresh: Click it to reload the page.
Diagnostic Tools
17-3
17.2.3 View DHCP Assigned IP Addresses
The facility of View DHCP Assigned IP Addresses provides information
on IP address assignments. This information is helpful in diagnosing
network problems, such as IP address conflicts, etc.
… 128 …

Hulp nodig? Stel uw vraag in het forum

Spelregels

Misbruik melden

Gebruikershandleiding.com neemt misbruik van zijn services uitermate serieus. U kunt hieronder aangeven waarom deze vraag ongepast is. Wij controleren de vraag en zonodig wordt deze verwijderd.

Product:

Bijvoorbeeld antisemitische inhoud, racistische inhoud, of materiaal dat gewelddadige fysieke handelingen tot gevolg kan hebben.

Bijvoorbeeld een creditcardnummer, een persoonlijk identificatienummer, of een geheim adres. E-mailadressen en volledige namen worden niet als privégegevens beschouwd.

Spelregels forum

Om tot zinvolle vragen te komen hanteren wij de volgende spelregels:

Belangrijk! Als er een antwoord wordt gegeven op uw vraag, dan is het voor de gever van het antwoord nuttig om te weten als u er wel (of niet) mee geholpen bent! Wij vragen u dus ook te reageren op een antwoord.

Belangrijk! Antwoorden worden ook per e-mail naar abonnees gestuurd. Laat uw emailadres achter op deze site, zodat u op de hoogte blijft. U krijgt dan ook andere vragen en antwoorden te zien.

Abonneren

Abonneer u voor het ontvangen van emails voor uw Draytek Vigor 2100VG series bij:


U ontvangt een email met instructies om u voor één of beide opties in te schrijven.


Ontvang uw handleiding per email

Vul uw emailadres in en ontvang de handleiding van Draytek Vigor 2100VG series in de taal/talen: Engels als bijlage per email.

De handleiding is 3,06 mb groot.

 

U ontvangt de handleiding per email binnen enkele minuten. Als u geen email heeft ontvangen, dan heeft u waarschijnlijk een verkeerd emailadres ingevuld of is uw mailbox te vol. Daarnaast kan het zijn dat uw internetprovider een maximum heeft aan de grootte per email. Omdat hier een handleiding wordt meegestuurd, kan het voorkomen dat de email groter is dan toegestaan bij uw provider.

Stel vragen via chat aan uw handleiding

Stel uw vraag over deze PDF

Uw handleiding is per email verstuurd. Controleer uw email

Als u niet binnen een kwartier uw email met handleiding ontvangen heeft, kan het zijn dat u een verkeerd emailadres heeft ingevuld of dat uw emailprovider een maximum grootte per email heeft ingesteld die kleiner is dan de grootte van de handleiding.

Er is een email naar u verstuurd om uw inschrijving definitief te maken.

Controleer uw email en volg de aanwijzingen op om uw inschrijving definitief te maken

U heeft geen emailadres opgegeven

Als u de handleiding per email wilt ontvangen, vul dan een geldig emailadres in.

Uw vraag is op deze pagina toegevoegd

Wilt u een email ontvangen bij een antwoord en/of nieuwe vragen? Vul dan hier uw emailadres in.



Info