Draytek Vigor 110 User manual

Vigor 110
ADSL2/2+ Firewall Router
User’s Guide
Version: 1.0
Date: 2007/11/01
Copyright 2007 All rights reserved.
This publication contains information that is protected by copyright. No part may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright
holders. The scope of delivery and other details are subject to change without prior notice.
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.

Vigor110 User’s Guide
ii

Vigor110 User’s Guide iii
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1
Preface ...............................................................................................................1
1.1 Panel Explanation................................................................................................................... 1
1.2 Hardware Installation .............................................................................................................. 2
2
Configuring Basic Settings ..............................................................................3
2.1 Changing Password................................................................................................................ 3
2.2 Quick Start Wizard .................................................................................................................. 5
2.2.1 Adjusting Protocol/Encapsulation..................................................................................... 5
2.2.2 PPPoE/PPPoA.................................................................................................................. 6
2.2.3 Bridged IP......................................................................................................................... 8
2.2.4 Routed IP.......................................................................................................................... 9
2.3 Online Status......................................................................................................................... 10
2.4 Saving Configuration............................................................................................................. 10
3
AdvancedWebConfiguration..................................................................................11
3.1 Internet Access.......................................................................................................................11
3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 11
3.1.2 PPPoE/PPPoA................................................................................................................ 12
3.1.3 MPoA.............................................................................................................................. 14
3.2 LAN ....................................................................................................................................... 16
3.2.1 Basics of LAN................................................................................................................. 16
3.2.2 General Setup................................................................................................................. 17
3.2.3 Static Route.................................................................................................................... 18
3.3 NAT ....................................................................................................................................... 22
3.3.1 Port Redirection.............................................................................................................. 22
3.3.2 DMZ Host........................................................................................................................ 24
3.3.3 Open Ports...................................................................................................................... 26
3.3.4 Well-Known Ports List.....................................................................................................28
3.4 Firewall.................................................................................................................................. 29
3.4.1 Basics for Firewall........................................................................................................... 29
3.4.2 General Setup................................................................................................................. 32
3.4.3 Filter Setup ..................................................................................................................... 33
3.4.4 IM Blocking ..................................................................................................................... 37
3.4.5 P2P Blocking .................................................................................................................. 37
3.4.6 DoS Defense .................................................................................................................. 38
3.4.7 URL Content Filter.......................................................................................................... 41
3.5 Applications........................................................................................................................... 43
3.5.1 Dynamic DNS................................................................................................................. 43
3.5.2 Schedule......................................................................................................................... 45

Vigor110 User’s Guide
iv
3.5.3 UPnP............................................................................................................................... 47
3.5.4 IGMP............................................................................................................................... 48
3.5.5 Wake on LAN.................................................................................................................. 49
3.6 System Maintenance............................................................................................................. 49
3.6.1 System Status................................................................................................................. 49
3.6.2 Administrator Password.................................................................................................. 50
3.6.3 Configuration Backup ..................................................................................................... 50
3.6.4 Syslog/Mail Alert............................................................................................................. 52
3.6.5 Time and Date................................................................................................................ 54
3.6.6 Management................................................................................................................... 55
3.6.7 Reboot System............................................................................................................... 56
3.6.8 Firmware Upgrade..........................................................................................................56
3.7 Diagnostics............................................................................................................................ 57
3.7.1 WAN Connection............................................................................................................57
3.7.2 Dial-out Trigger............................................................................................................... 58
3.7.3 Routing Table ................................................................................................................. 58
3.7.4 ARP Cache Table...........................................................................................................59
3.7.5 DHCP Table.................................................................................................................... 59
3.7.6 NAT Sessions Table....................................................................................................... 60
3.7.7 Ping Diagnosis................................................................................................................ 60
3.7.8 Data Flow Monitor........................................................................................................... 61
3.7.9 Trace Route.................................................................................................................... 62
4
Application and Examples..............................................................................65
4.1 LAN – Created by Using NAT ............................................................................................... 65
4.2 Upgrade Firmware for Your Router....................................................................................... 66
5
Trouble Shooting.............................................................................................69
5.1 Checking If the Hardware Status Is OK or Not...................................................................... 69
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................... 69
5.3 Pinging the Router from Your Computer............................................................................... 72
5.4 Checking If the ISP Settings are OK or Not.......................................................................... 73
5.5 Backing to Factory Default Setting If Necessary .................................................................. 74
5.6 Contacting Your Dealer......................................................................................................... 75

Vigor110 User’s Guide 1
1
P Pr re ef fa ac ce e
Targeting requirement for residential users, Vigor110 is an ADSL2/2+ enabled integrated
access device. With downstream speed up to 12Mbps (ADSL2) or 24Mbps (ADSL2+),
Vigor110 provides exceptional bandwidth for Internet access.
To secure your network, the Vigor110 provides an advanced firewall with advanced features,
such as Stateful Packet Inspection (SPI) to offer network reliability by detecting and
prohibiting malicious penetrating packets or DoS attacks, user-configurable web filtering for
parental control against network abuse etc.
1
1. .1 1 P Pa an ne el l E Ex xp pl la an na at ti io on n
LED Status Explanation
INTERNET/PPP On PPPoE connection is established.
On WAN connection is established.WAN Blinking Data is transmitting (sending/receiving).
On A normal connection is through its corresponding
port.
LAN
Blinking Data is transmitting (sending/receiving).
On The router is powered on.Power Off The router is powered off.
Interface Description
ADSL Connecter for accessing the Internet through ADSL 2+.
Reset Restore the default settings.
Usage: Turn on the router. Press the button and keep for more than 10
seconds. Then the router will restart with the factory default
configuration.
LAN Connecter for local networked devices.
Power Connecter for a power adapter.

Vigor110 User’s Guide
2
1
1. .2 2 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
Before starting to configure the router, you have to connect your devices correctly.
1. Connect the DSL interface to the external ADSL splitter with an ADSL line cable.
2. Connect LAN port to your computer with a RJ-45 cable.
3. Connect one end of the power cord to the power port of this device. Connect the other
end to the wall outlet of electricity.
4. Power on the router.
5. Check the POWER, LAN, WAN and INTERNET/PPP LEDs to assure network
connections.

Vigor110 User’s Guide 3
2
C Co on nf fi ig gu ur ri in ng g B Ba as si ic c S Se et tt ti in ng gs s
For use the router properly, it is necessary for you to change the password of web
configuration for security and adjust primary basic settings.
This chapter explains how to setup a password for an administrator and how to adjust basic
settings for accessing Internet successfully. Be aware that only the administrator can change
the router configuration.
2
2. .1 1 C Ch ha an ng gi in ng g P Pa as ss sw wo or rd d
To change the password for this device, you have to access into the web browse with default
password first.
1. Make sure your computer connects to the router correctly.
Notice: You may either simply set up your computer to get IP dynamically
from the router or set up the IP address of the computer to be the same
subnet as the default IP address of Vigor router 192.168.1.1. For the
detailed information, please refer to the later section - Trouble Shooting of
this guide.
2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password. Please type default values (both username and
password are Null) on the window for the first time accessing and click OK for next
screen.

Vigor110 User’s Guide
4
3. Now, the Main Screen will pop up.
4. Go to System Maintenance page and choose Administrator Password.
5. Enter the login password (the default is blank) on the field of Old Password. Type a new
one in the field of New Password and retype it on the field of Retype New Password.
Then click OK to continue.
6. Now, the password has been changed. Next time, use the new password to access the
Web Configurator for this router.

Vigor110 User’s Guide 5
2
2. .2 2 Q Qu ui ic ck k S St ta ar rt t W Wi iz za ar rd d
If your router can be under an environment with high speed NAT, the configuration provide
here can help you to deploy and use the router quickly. The first screen of Quick Start
Wizard is entering login password. After typing the password, please click Next.
2
2. .2 2. .1 1 A Ad dj ju us st ti in ng g P Pr ro ot to oc co ol l/ /E En nc ca ap ps su ul la at ti io on n
In the Quick Start Wizard, you can configure the router to access the Internet with different
protocol/modes such as PPPoE, PPPoA, Bridged IP, or Routed IP. The router supports the
Ethernet WAN interface for Internet access.
Now, you have to select an appropriate WAN connection type for connecting to the Internet
through this router according to the settings that your ISP provided.
VPI Stands for Virtual Path Identifier. It is an 8-bit header inside each
ATM cell that indicates where the cell should be routed. ATM is a
method of sending data in small packets of fixed sizes. It is used
for transferring data to client computers.

Vigor110 User’s Guide
6
VCI Stands for Virtual Channel Identifier. It is a 16-bit field inside
ATM cell’s header that indicates the cell’s next destination as it
travels through the network. A virtual channel is a logical
connection between two end devices on the network.
Protocol/Encapsulation Select an IP mode for this WAN interface. There are several
available modes for Internet access such as PPPoE, PPPoA,
Bridged IP and Routed IP.
Fixed IP Click Yes to specify a fixed IP for the router. Otherwise, click No
(Dynamic IP) to allow the router choosing a dynamic IP. If you
choose No, the following IP Address, Subnet Mask and Default
Gateway will not be changed.
IP Address Assign a private IP address for the protocol that you select.
Subnet Mask Assign a subnet mask value for the protocol of Routed IP and
Bridged IP.
Default Gateway Assign a private IP address to the gateway for the protocol of
Routed IP and Bridged IP.
Primary DNS Assign a private IP address to the primary DNS.
Second DNS Assign a private IP address to the secondary DNS.
2
2. .2 2. .2 2 P PP PP Po oE E/ /P PP PP Po oA A
PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted
standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a
common broadband medium, such as a single DSL line, wireless device or cable modem. All
the users over the Ethernet can share a common connection. And the PPPoA stands for
Point-to-Point Protocol over ATM. PPPoA uses the PPP dial-up protocol with ATM as the
transport.
PPPoE or PPPoA is used for most of DSL modem users. All local users can share one PPPoE
or PPPoA connection for accessing the Internet. Your service provider will provide you
information about user name, password, and authentication mode.
If your ISP provides you the PPPoE or PPPoA connection, please select PPPoE or PPPoA
for this router. The following page will be shown:

Vigor110 User’s Guide 7
ISP Name Assign a specific name for ISP requirement.
User Name Assign a specific valid user name provided by the ISP.
Password Assign a valid password provided by the ISP.
Confirm Password Retype the password.
Always On Check this box to allow the router connecting to Internet forever.
Idle Timeout Type in the value (unit is second) as the idle timeout of the
connection.
Click Next for viewing summary of such connection.
Click Finish.

Vigor110 User’s Guide
8
2
2. .2 2. .3 3 B Br ri id dg ge ed d I IP P
Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for
this protocol.
After finishing the settings in this page, click Next to see the following page.
Click Finish.

Vigor110 User’s Guide 9
2
2. .2 2. .4 4 R Ro ou ut te ed d I IP P
Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for
this protocol.
After finishing the settings in this page, click Next to see the following page.
Click Finish.

Vigor110 User’s Guide
10
2
2. .3 3 O On nl li in ne e S St ta at tu us s
The online status shows the system status, WAN status, ADSL Information and other status
related to this router within one page. If you select PPPoE or PPPoA as the protocol, you will
find out a button of Dial PPPoE or Dial PPPoE in the Online Status web page.
Primary DNS Displays the assigned IP address of the primary DNS.
Secondary DNS Displays the assigned IP address of the secondary DNS.
IP Address (in LAN) Displays the IP address of the LAN interface.
TX Packets Displays the total transmitted packets at the LAN interface.
RX Packets Displays the total number of received packets at the LAN interface.
GW IP Addr: Displays the assigned IP address of the default gateway.
IP Address (in WAN) Displays the IP address of the WAN interface.
TX Rate Displays the speed of transmitted packets at the WAN interface.
RX Rate Displays the speed of received packets at the WAN interface.
Up Time Displays the total system uptime of the interface.
ADSL Information Displays the firmware version of this router.
2
2. .4 4 S Sa av vi in ng g C Co on nf fi ig gu ur ra at ti io on n
Each time you click OK on the web page for saving the configuration, you can find messages
showing the system interaction with you.
Ready indicates the system is ready for you to input settings.
Settings Saved means your settings are saved once you click Finish or OK button.

Vigor110 User’s Guide 11
3
A
Ad dv va an nc ce ed d W We eb b C Co on nf fi ig gu ur ra at ti io on n
After finished basic configuration of the router, you can access Internet with ease. For the
people who want to adjust more settings for suiting his/her request, please refer to this chapter
for getting detailed information about the advanced configuration of this router. As for other
examples of application, please refer to Chapter 4.
3
3. .1 1 I In nt te er rn ne et t A Ac cc ce es ss s
3
3. .1 1. .1 1 B Ba as si ic cs s o of f I In nt te er rn ne et t P Pr ro ot to oc co ol l ( (I IP P) ) N Ne et tw wo or rk k
IP means Internet Protocol. Every device in an IP-based Network including routers, print
server, and host PCs, needs an IP address to identify its location on the network. To avoid
address conflicts, IP addresses are publicly registered with the Network Information Centre
(NIC). Having a unique IP address is mandatory for those devices participated in the public
network but not in the private TCP/IP local area networks (LANs), such as host PCs under the
management of a router since they do not need to be accessed by the public. Hence, the NIC
has reserved certain addresses that will never be registered publicly. These are known as
private IP addresses, and are listed in the following ranges:
From 10.0.0.0 to 10.255.255.255
From 172.16.0.0 to 172.31.255.255
From 192.168.0.0 to 192.168.255.255
W
Wh ha at t a ar re e P Pu ub bl li ic c I IP P A Ad dd dr re es ss s a an nd d P Pr ri iv va at te e I IP P A Ad dd dr re es ss s
As the router plays a role to manage and further protect its LAN, it interconnects groups of
host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the
Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to
communicate with the local hosts. Meanwhile, Vigor router will communicate with other
network devices through a public IP address. When the data flow passing through, the
Network Address Translation (NAT) function of the router will dedicate to translate
public/private addresses, and the packets will be delivered to the correct host PC in the local
area network. Thus, all of the host PCs can share a common Internet connection.
G
Ge et t Y Yo ou ur r P Pu ub bl li ic c I IP P A Ad dd dr re es ss s f fr ro om m I IS SP P
To acquire a public IP address from your ISP for Vigor router as a customer premises
equipment, there are three common protocols: Point to Point Protocol over Ethernet (PPPoE),
PPPoA and MPoA. Multi-PVC is provided for more advanced setup of the above.
In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is
required for bridging customer premises equipment (CPE). Point to Point Protocol over
Ethernet (PPPoE) connects a network of hosts via an access device to a remote access
concentrator or aggregation concentrator. This implementation provides users with significant
ease of use. Meanwhile it provides access control, billing, and type of service according to
user requirement.
When a router begins to connect to your ISP, a serial of discovery process will occur to ask for
a connection. Then a session will be created. Your user ID and password is authenticated via
PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and
other related information will usually be assigned by your ISP.

Vigor110 User’s Guide
12
Below shows menu items for Internet Access:
3
3. .1 1. .2 2 P PP PP Po oE E/ /P PP PP Po oA A
PPPoA, included in RFC1483, can be operated in either Logical Link Control-Subnetwork
Access Protocol or VC-Mux mode. As a CPE device, Vigor router encapsulates the PPP
session based for transport across the ADSL loop and your ISP’s Digital Subscriber Line
Access Pultiplexer (SDLAM).
To choose PPPoE or PPPoA as the accessing protocol of the internet, please select
PPPoE/PPPoA from the Internet Access menu. The following web page will be shown.
PPPoE/PPPoA Client Click Enable for activating this function. If you click Disable, this
function will be closed and all the settings that you adjusted in this
page will be invalid.
DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for
building DSL connection to your ISP.
VPI - Type in the value provided by ISP.
VCI - Type in the value provided by ISP.
Encapsulating Type - Drop down the list to choose the type
provided by ISP.
Protocol - Drop down the list to choose the one provided by ISP.
If you have already used Quick Start Wizard to set the protocol,
then it is not necessary for you to change any settings in this group.
PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also can
establish the PPPoE connection directly from local clients to your

Vigor110 User’s Guide 13
ISP via the Vigor router.
For Wired LAN – If you check this box, PCs on the same network
can use another set of PPPoE session (different with the Host PC) to
access into Internet.
ISP Access Setup Enter your allocated username, password and authentication
parameters according to the information provided by your ISP. If
you want to connect to Internet all the time, you can check Always
On.
ISP Name – Type in the ISP Name provided by ISP in this field.
Username – Type in the username provided by ISP in this field.
Password – Type in the password provided by ISP in this field.
PPP Authentication – Select PAP only or PAP or CHAP for PPP.
Always On – Check this box if you want the router keeping
connecting to Internet forever.
Idle Timeout – Set the timeout for breaking down the Internet after
passing through the time without any action.
IP Address From ISP Usually ISP dynamically assigns IP address to you each time you
connect to it and request. In some case, your ISP provides service to
assign you the same IP address whenever you request. In this case,
you can fill in this IP address in the Fixed IP field. Please contact
your ISP before you want to use this function.
Fixed IP – Click Yes to use this function and type in a fixed IP
address in the box.
WAN IP Alias - If you have multiple public IP addresses and would
like to utilize them on the WAN interface, please use WAN IP Alias.
You can set up to 8 public IP addresses other than the current one
you are using.
By checking the checkbox Join NAT IP Pool, data from NAT hosts
will be round-robin forwarded on a session basis.

Vigor110 User’s Guide
14
If you do not check Join NAT IP Pool, you can still use these public
IP addresses for other purpose, such as DMZ host, Open Ports.
Default MAC Address Type in MAC address for the router. You can use Default MAC
Address or specify another MAC address for your necessity.
MAC Address – Type in the MAC address for the router manually.
Index (1-15) in
Schedule Setup You can type in four sets of time schedule for your request. All the
schedules can be set previously in Application – Schedule web
page and you can use the number that you have set in that web
page.
After finishing all the settings here, please click OK to activate them.
3
3. .1 1. .3 3 M MP Po oA A
MPoA is a specification that enables ATM services to be integrated with existing LANs,
which use either Ethernet, token-ring or TCP/IP protocols. The goal of MPoA is to allow
different LANs to send packets to each other via an ATM backbone.
To choose MPoA as the accessing protocol of the internet, please select MPoA from the
Internet Access menu. The following web page will be shown.

Vigor110 User’s Guide 15
MPoA (RFC1483/2684) Click Enable for activating this function. If you click Disable, this
function will be closed and all the settings that you adjusted in this
page will be invalid.
DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for
building DSL connection to your ISP.
Encapsulating Type - Drop down the list to choose the type
provided by ISP.
VPI - Type in the value provided by ISP.
VCI - Type in the value provided by ISP.
Bridge Mode If you choose Bridged IP as the protocol, you can check this box to
invoke the function.
WAN IP Network
Settings This group allows you to obtain an IP address automatically and
allows you type in IP address manually.
Obtain an IP address automatically – Click this button to obtain
the IP address automatically.
Router Name – Type in the router name provided by ISP.
Domain Name – Type in the domain name that you have assigned.
WAN IP Alias - If you have multiple public IP addresses and would
like to utilize them on the WAN interface, please use WAN IP Alias.
You can set up to 8 public IP addresses other than the current one
you are using.

Vigor110 User’s Guide
16
Specify an IP address – Click this radio button to specify some data.
IP Address – Type in the private IP address.
Subnet Mask – Type in the subnet mask.
Gateway IP Address – Type in gateway IP address.
Default MAC Address Type in MAC address for the router. You can use Default MAC
Address or specify another MAC address for your necessity.
MAC Address – Type in the MAC address for the router manually.
DNS Server IP
Address Type in the primary IP address for the router. If necessary, type in
secondary IP address for necessity in the future.
After finishing all the settings here, please click OK to activate them.
3
3. .2 2 L LA AN N
Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of
network structure is related to what type of public IP addresses coming from your ISP.
Below shows menu items for LAN:
3
3. .2 2. .1 1 B Ba as si ic cs s o of f L LA AN N
The most generic function of Vigor router is NAT. It creates a private subnet of your own. As
mentioned previously, the router will talk to other public hosts on the Internet by using public
IP address and talking to local hosts by using its private IP address. What NAT does is to
translate the packets from public IP address to private IP address to forward the right packets
to the right host and vice versa. Besides, Vigor router has a built-in DHCP server that assigns
private IP address to each local host. See the following diagram for a briefly understanding.