Draytek Vigor 2925 Series User manual

Vigor2925 Series User’s Guide ii

Vigor2925 Series User’s Guide
iii
Vigor2925 Series
Dual-WAN Security Router
User’s Guide
Version: 1.2
Firmware Version: V3.7.2.1
(For future update, please visit DrayTek web site)
Date: 28/08/2013

Vigor2925 Series User’s Guide iv
Copyright Information
Copyright
Declarations
Copyright 2013 All rights reserved. This publication contains information that is
protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a
retrieval system, or translated into any language without written permission from the
copyright holders.
Trademarks
The following trademarks are used in this document:
zMicrosoft is a registered trademark of Microsoft Corp.
zWindows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are
trademarks of Microsoft Corp.
zApple and Mac OS are registered trademarks of Apple Inc.
zOther products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
zRead the installation guide thoroughly before you set up the router.
zThe router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
zDo not place the router in a damp or humid place, e.g. a bathroom.
zThe router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
zDo not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
zDo not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
zKeep the package out of reach of children.
zWhen you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner Web registration is preferred. You can register your Vigor router via
http://www.dayTek.com.
Firmware & Tools
Updates Due to the continuous evolution of DrayTek technology, all routers will be regularly
upgraded. Please consult the DrayTek web site for more information on newest
firmware, tools and documents.
http://www.drayTek.com

Vigor2925 Series User’s Guide
v
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, Hukou Township, Hsinchu Industrial Park, Hsinchu County, Taiwan 303
Product: Vigor2925 Series Router
DrayTek Corp. declares that Vigor2925 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the equipment off and
on, the user is encouraged to try to correct the interference by one of the following measures:
zReorient or relocate the receiving antenna.
zIncrease the separation between the equipment and receiver.
zConnect the equipment into an outlet on a circuit different from that to which the receiver is connected.
zConsult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
Please visit http://www.draytek.com/user/SupportDLRTTECE.php
This product is designed for 2.4GHz WLAN network throughout the EC region.

Vigor2925 Series User’s Guide vi

Vigor2925 Series User’s Guide
vii
T
Ta ab bl le e o of f C Co on nt te en nt ts s
Introduction...................................................................................................1
1.1 Web Configuration Buttons Explanation................................................................................. 2
1.2 LED Indicators and Connectors.............................................................................................. 3
1.2.1 For Vigor2925................................................................................................................... 3
1.2.2 For Vigor2925n................................................................................................................. 5
1.3 Hardware Installation .............................................................................................................. 7
1.4 Printer Installation ................................................................................................................... 8
Basic Settings.............................................................................................13
2.1 Accessing Web Page............................................................................................................ 13
2.2 Changing Password.............................................................................................................. 15
2.3 Quick Start Wizard ................................................................................................................ 16
2.3.1 For WAN1/WAN2 (Ethernet) .......................................................................................... 17
2.3.2 For WAN3 (USB)............................................................................................................25
2.4 Service Activation Wizard...................................................................................................... 27
2.5 Wireless Wizard.................................................................................................................... 31
2.6 Introducing Dashboard.......................................................................................................... 34
2.6.1 Virtual Panel ................................................................................................................... 35
2.6.2 Name with a Link............................................................................................................ 35
2.6.3 Quick Access for Common Used Menu.......................................................................... 36
2.6.4 GUI Map ......................................................................................................................... 37
2.6.5 Web Console .................................................................................................................. 38
2.6.6 Config Backup ................................................................................................................ 39
2.7 Online Status......................................................................................................................... 40
2.7.1 Physical Connection.......................................................................................................40
2.7.2 Virtual WAN.................................................................................................................... 42
2.8 Saving Configuration............................................................................................................. 42
2.9 Registering Vigor Router....................................................................................................... 43
Tutorials and Applications.........................................................................47
3.1 How to configure settings for IPv6 Service in Vigor2925...................................................... 47
3.2 How to establish OpenVPN - host to LAN tunnels(authenticated without CA) via SmartVPN
Client?......................................................................................................................................... 57
3.3 How can I get the files from USB storage device connecting to Vigor router?..................... 61
3.4 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPSec Tunnel
(Main Mode)................................................................................................................................ 64

Vigor2925 Series User’s Guide viii
3.5 How to Optimize the Bandwidth through QoS Technology................................................... 68
3.6 QoS Setting Example............................................................................................................ 72
3.7 How to use Landing Page Feature ....................................................................................... 76
3.8 How to Send a Notification to Specified Phone Number via SMS Service in WAN
Disconnection.............................................................................................................................. 80
3.9 How to Create an Account for MyVigor................................................................................. 84
3.9.1 Create an Account via Vigor Router............................................................................... 84
3.9.2 Create an Account via MyVigor Web Site ...................................................................... 88
3.10 How to Configure Certain Computers Accessing to Internet.............................................. 92
3.11 How to Block Facebook Service Accessed by the Users via Web Content Filter / URL
Content Filter............................................................................................................................... 96
3.12 How to Setup Address Mapping........................................................................................ 102
3.13 How to Setup Load Balance for Packets? ........................................................................ 106
3.14 How to Authenticate Clients via User Management.......................................................... 108
Advanced Configuration..........................................................................119
4.1 WAN.....................................................................................................................................119
4.1.1 Basics of Internet Protocol (IP) Network....................................................................... 119
4.1.2 General Setup............................................................................................................... 121
4.1.3 Internet Access............................................................................................................. 125
4.1.4 Multi-VLAN.................................................................................................................... 140
4.2 LAN ..................................................................................................................................... 144
4.2.1 Basics of LAN............................................................................................................... 144
4.2.2 General Setup............................................................................................................... 146
4.2.3 Static Route.................................................................................................................. 156
4.2.4 VLAN............................................................................................................................. 161
4.2.5 Bind IP to MAC............................................................................................................. 165
4.2.6 LAN Port Mirror............................................................................................................. 167
4.2.7 Web Portal Setup.......................................................................................................... 168
4.3 Load-Balance /Route Policy................................................................................................ 169
4.4 NAT ..................................................................................................................................... 173
4.4.1 Port Redirection............................................................................................................ 174
4.4.2 DMZ Host...................................................................................................................... 177
4.4.3 Open Ports.................................................................................................................... 181
4.4.4 Port Triggering.............................................................................................................. 183
4.5 Hardware Acceleration........................................................................................................ 186
4.5.1 Setup............................................................................................................................. 186
4.6 Firewall................................................................................................................................ 188
4.6.1 Basics for Firewall......................................................................................................... 188
4.6.2 General Setup............................................................................................................... 190
4.6.3 Filter Setup ................................................................................................................... 195
4.6.4 DoS Defense ................................................................................................................ 203
4.7 User Management............................................................................................................... 207
4.7.1 General Setup............................................................................................................... 208
4.7.2 User Profile................................................................................................................... 209

Vigor2925 Series User’s Guide
ix
4.7.3 User Group................................................................................................................... 213
4.7.4 User Online Status........................................................................................................ 214
4.8 Objects Settings.................................................................................................................. 215
4.8.1 IP Object....................................................................................................................... 215
4.8.2 IP Group ....................................................................................................................... 218
4.8.3 IPv6 Object................................................................................................................... 219
4.8.4 IPv6 Group.................................................................................................................... 221
4.8.5 Service Type Object ..................................................................................................... 222
4.8.6 Service Type Group...................................................................................................... 224
4.8.7 Keyword Object ............................................................................................................ 225
4.8.8 Keyword Group............................................................................................................. 227
4.8.9 File Extension Object.................................................................................................... 228
4.8.10 SMS/Mail Service Object............................................................................................ 230
4.8.11 Notification Object....................................................................................................... 235
4.9 CSM Profile......................................................................................................................... 237
4.9.1 APP Enforcement Profile.............................................................................................. 238
4.9.2 URL Content Filter Profile............................................................................................. 241
4.9.3 Web Content Filter Profile............................................................................................. 245
4.9.4 APPE Support List........................................................................................................ 249
4.10 Bandwidth Management ................................................................................................... 250
4.10.1 Sessions Limit............................................................................................................. 250
4.10.2 Bandwidth Limit .......................................................................................................... 252
4.10.3 Quality of Service........................................................................................................ 253
4.11 Applications ....................................................................................................................... 262
4.11.1 Dynamic DNS............................................................................................................. 262
4.11.2 LAN DNS.................................................................................................................... 265
4.11.3 Schedule..................................................................................................................... 267
4.11.4 RADIUS...................................................................................................................... 270
4.11.5 Active Directory/ LDAP............................................................................................... 270
4.11.6 UPnP........................................................................................................................... 273
4.11.7 IGMP........................................................................................................................... 275
4.11.8 Wake on LAN.............................................................................................................. 276
4.11.9 SMS / Mail Alert Service............................................................................................. 277
4.11.10 Bonjour ..................................................................................................................... 279
4.12 VPN and Remote Access.................................................................................................. 282
4.12.1 VPN Client Wizard...................................................................................................... 282
4.12.2 VPN Server Wizard..................................................................................................... 289
4.12.3 Remote Access Control.............................................................................................. 294
4.12.4 PPP General Setup .................................................................................................... 294
4.12.5 IPSec General Setup.................................................................................................. 296
4.12.6 IPSec Peer Identity..................................................................................................... 298
4.12.7 OpenVPN General Setup ........................................................................................... 300
4.12.8 Remote Dial-in User ................................................................................................... 301
4.12.9 LAN to LAN................................................................................................................. 304
4.12.10 VPN TRUNK Management....................................................................................... 315
4.12.11 Connection Management ......................................................................................... 324
4.13 Certificate Management.................................................................................................... 325
4.13.1 Local Certificate.......................................................................................................... 325
4.13.2 Trusted CA Certificate ................................................................................................ 329
4.13.3 Certificate Backup....................................................................................................... 330
4.14 Wireless LAN .................................................................................................................... 330
4.14.1 Basic Concepts........................................................................................................... 330
4.13.2 General Setup............................................................................................................. 333

Vigor2925 Series User’s Guide x
4.14.3 Security....................................................................................................................... 336
4.14.4 Access Control............................................................................................................ 338
4.14.5 WPS............................................................................................................................ 339
4.14.6 WDS............................................................................................................................ 342
4.14.7 Advanced Setting........................................................................................................ 345
4.14.8 WMM Configuration.................................................................................................... 346
4.14.9 AP Discovery.............................................................................................................. 348
4.14.10 Station List................................................................................................................ 349
4.15 SSL VPN........................................................................................................................... 350
4.15.1 General Setup............................................................................................................. 350
4.15.2 SSL Web Proxy .......................................................................................................... 351
4.15.3 SSL Application .......................................................................................................... 352
4.15.4 User Account.............................................................................................................. 355
4.15.5 User Group................................................................................................................. 359
4.15.6 Online User Status...................................................................................................... 361
4.16 USB Application ................................................................................................................ 362
4.16.1 USB General Settings................................................................................................. 362
4.16.2 USB User Management.............................................................................................. 363
4.16.3 File Explorer................................................................................................................ 366
4.16.4 USB Disk Status......................................................................................................... 366
4.16.5 Syslog Explorer........................................................................................................... 367
4.16.6 Temperature Sensor................................................................................................... 369
4.16.7 Modem Support List.................................................................................................... 370
4.17 System Maintenance......................................................................................................... 371
4.17.1 System Status............................................................................................................. 371
4.17.2 TR-069........................................................................................................................ 373
4.17.3 Administrator Password.............................................................................................. 374
4.17.4 User Password ........................................................................................................... 375
4.17.5 Login Page Greeting................................................................................................... 378
4.17.6 Configuration Backup ................................................................................................. 380
4.17.7 Syslog/Mail Alert......................................................................................................... 382
4.17.8 Time and Date............................................................................................................ 385
4.17.9 SNMP.......................................................................................................................... 386
4.17.10 Management............................................................................................................. 388
4.17.11 Reboot System......................................................................................................... 390
4.17.12 Firmware Upgrade.................................................................................................... 391
4.17.13 Activation.................................................................................................................. 392
4.18 Diagnostics........................................................................................................................ 393
4.18.1 Dial-out Triggering...................................................................................................... 394
4.18.2 Routing Table ............................................................................................................. 395
4.18.3 ARP Cache Table....................................................................................................... 396
4.18.4 IPv6 Neighbour Table................................................................................................. 396
4.18.5 DHCP Table................................................................................................................ 397
4.18.6 NAT Sessions Table................................................................................................... 398
4.18.7 Ping Diagnosis............................................................................................................ 399
4.18.8 Data Flow Monitor....................................................................................................... 400
4.18.9 Traffic Graph............................................................................................................... 402
4.18.10 Trace Route.............................................................................................................. 403
4.18.11 Web Firewall Syslog................................................................................................. 404
4.18.12 IPv6 TSPC Status..................................................................................................... 405
4.19 External Devices............................................................................................................... 406

Vigor2925 Series User’s Guide
xi
Trouble Shooting......................................................................................407
5.1 Checking If the Hardware Status Is OK or Not.................................................................... 407
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not................. 408
5.3 Pinging the Router from Your Computer............................................................................. 410
5.4 Checking If the ISP Settings are OK or Not.........................................................................411
5.5 Problems for 3G Network Connection .................................................................................411
5.6 Backing to Factory Default Setting If Necessary ................................................................ 412
5.7 Contacting Your Dealer....................................................................................................... 413

Vigor2925 Series User’s Guide
1
I In nt tr ro od du uc ct ti io on n
Vigor2925 series is a VDSL2 router. It integrates IP layer QoS, NAT session/bandwidth
management to help users control works well with large bandwidth.
By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the
router increases the performance of VPN greatly, and offers several protocols (such as
IPSec/PPTP/L2TP) with up to 32 VPN tunnels.
The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set
firewall policy with ease. CSM (Content Security Management) provides users control and
management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before.
By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security
outside and control inside. Object-based firewall is flexible and allows your network be safe.
In addition, Vigor2925 series supports USB interface for connecting USB printer to share
printing function or 3G USB modem for network connection.
Vigor2925 series provides two-level management to simplify the configuration of network
connection. The user mode allows user accessing into WEB interface via simple configuration.
However, if users want to have advanced configurations, they can access into WEB interface
through admin mode.

Vigor2925 Series User’s Guide 2
1
1. .1 1 W We eb b C Co on nf fi ig gu ur ra at ti io on n B Bu ut tt to on ns s E Ex xp pl la an na at ti io on n
Several main buttons appeared on the web pages are defined as the following:
Save and apply current settings.
Cancel current settings and recover to the previous saved settings.
Clear all the selections and parameters settings, including selection from
drop-down list. All the values must be reset with factory default settings.
Add new settings for specified item.
Edit the settings for the selected item.
Delete the selected item with the corresponding settings.
Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed
explanation.

Vigor2925 Series User’s Guide
3
1
1. .2 2 L LE ED D I In nd di ic ca at to or rs s a an nd d C Co on nn ne ec ct to or rs s
Before you use the Vigor router, please get acquainted with the LED indicators and connectors
first.
1
1. .2 2. .1 1 F Fo or r V Vi ig go or r2 29 92 25 5
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
On USB device is connected and ready for use.USB1~USB2 Blinking The data is transmitting.
On Internet connection is ready.
Off Internet connection is not ready.
WAN1~WAN2
Blinking The data is transmitting.
VPN On The VPN tunnel is active.
QoS On The QoS function is active.
WCF On The Web Content Filter is active. (It is enabled from
Firewall >> General Setup).
On The DMZ function is enabled.
Off The DMZ function is disabled.
DMZ
Blinking The data is transmitting.
LED on Connector On The port is connected.
Off The port is disconnected.
Left
LED
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
WAN1~
WAN2
Right
LED Off The port is connected with 10/100Mbps
On The port is connected.
Off The port is disconnected.
Left
LED
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
LAN1~
LAN5
Right
LED Off The port is connected with 10/100Mbps

Vigor2925 Series User’s Guide 4
Interface Description
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you
see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration.
USB1~USB2 Connecter for a USB device (for 3G USB Modem or printer).
WAN1~WAN2 Connecter for local network devices or modem for accessing Internet.
LAN1~LAN5 Connecters for local network devices.
PWR Connecter for a power adapter.
ON/OFF Power Switch.

Vigor2925 Series User’s Guide
5
1
1. .2 2. .2 2 F Fo or r V Vi ig go or r2 29 92 25 5n n
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
On USB device is connected and ready for use.USB Blinking The data is transmitting.
On Wireless access point is ready. WLAN Blinking It will blink slowly while wireless traffic goes through.
ACT and WLAN LEDs blink quickly and
simultaneously when WPS is working, and will return
to normal condition after two minutes. (You need to
setup WPS within 2 minutes.)
On Internet connection is ready.
Off Internet connection is not ready.
WAN1~WAN2
Blinking The data is transmitting.
VPN On The VPN tunnel is active.
QoS On The QoS function is active.
WCF On The Web Content Filter is active. (It is enabled from
Firewall >> General Setup).
On The DMZ function is enabled.
Off The DMZ function is disabled.
DMZ
Blinking The data is transmitting.
LED on Connector On The port is connected.
Off The port is disconnected.
Left
LED
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
WAN1~
WAN2
Right
LED Off The port is connected with 10/100Mbps
On The port is connected.
Off The port is disconnected.
Left
LED
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
LAN1~
LAN5
Right
LED Off The port is connected with 10/100Mbps

Vigor2925 Series User’s Guide 6
Interface Description
Wireless LAN
ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" button once to wait for client device making network connection through WPS.
Press "Wireless LAN ON/OFF/WPS" button twice to enable (WLAN
LED on) or disable (WLAN LED off) wireless connection.
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you
see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration.
USB1~USB2 Connecter for a USB device (for 3G USB Modem or printer).
WAN1~WAN2 Connecter for local network devices or modem for accessing Internet.
LAN1~LAN5 Connecters for local network devices.
PWR Connecter for a power adapter.
ON/OFF Power Switch.

Vigor2925 Series User’s Guide
7
1
1. .3 3 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
Before starting to configure the router, you have to connect your devices correctly.
1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router
with Ethernet cable (RJ-45).
2. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and
the other end of the cable (RJ-45) into the Ethernet port on your computer.
3. Connect one end of the power adapter to the router’s power port on the rear panel, and
the other side into a wall outlet.
4. Power on the device by pressing down the power switch on the rear panel.
5. The system starts to initiate. After completing the system test, the ACT LED will light
up and start blinking.
(For the hardware connection, we take “n” model as an example.)

Vigor2925 Series User’s Guide 8
1
1. .4 4 P Pr ri in nt te er r I In ns st ta al ll la at ti io on n
You can install a printer onto the router for sharing printing. All the PCs connected this router
can print documents via the router. The example provided here is made based on Windows
XP/2000. For Windows 98/SE/Vista, please visit www.DrayTek.com.
Before using it, please follow the steps below to configure settings for connected computers
(or wireless clients).
1. Connect the printer with the router through USB/parallel port.
2. Open Start->Settings-> Printer and Faxes.