Draytek Vigor 2950 User manual

i
Vigor2950 Series
Security VPN Router
Quick Start Guide
Version: 1.0
Date: 2006/7/10

i
Copyright Information
Copyright
Declarations
Copyright 2006 All rights reserved. This publication contains information that is
protected by copyright. No part may be reproduced, transmitted, transcribed,
stored in a retrieval system, or translated into any language without written
permission from the copyright holders.
Trademarks
The following trademarks are used in this document:
zMicrosoft is a registered trademark of Microsoft Corp.
zWindows, Windows 95, 98, Me, NT, 2000, XP and Explorer are
trademarks of Microsoft Corp.
zApple and Mac OS are registered trademarks of Apple Computer Inc.
zOther products may be trademarks or registered trademarks of their
respective manufacturers.
Safety Instructions and Approval
Safety
Instructions
zRead the installation guide thoroughly before you set up the router.
zThe router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
zDo not place the router in a damp or humid place, e.g. a bathroom.
zThe router should be used in a sheltered area, within a temperature range
of +5 to +40 Celsius.
zDo not expose the router to direct sunlight or other heat sources. The
housing and electronic components may be damaged by direct sunlight or
heat sources.
zDo not deploy the cable for LAN connection outdoor to prevent electronic
shock hazards.
zKeep the package out of reach of children.
zWhen you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from
any defects in workmanship or materials for a period of two (2) years from the
date of purchase from the dealer. Please keep your purchase receipt in a safe
place as it serves as proof of date of purchase. During the warranty period, and
upon proof of purchase, should the product have indications of failure due to
faulty workmanship and/or materials, we will, at our discretion, repair or replace
the defective products or components, without charge for either parts or labor, to
whatever extent we deem necessary tore-store the product to proper operating
condition. Any replacement will consist of a new or re-manufactured
functionally equivalent product of equal value, and will be offered solely at our
discretion. This warranty will not apply if the product is modified, misused,
tampered with, damaged by an act of God, or subjected to abnormal working
conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the
product will not be covered by the warranty. We reserve the right to revise the
manual and online documentation and to make changes from time to time in the
contents hereof without obligation to notify any person of such revision or
changes.
Be a Registered
Owner Web registration is preferred. You can register your Vigor router via
http://www.draytek.com. Alternatively, fill in the registration card and mail it to
the address found on the reverse side of the card.
Firmware & Tools
Updates Due to the continuous evolution of DrayTek technology, all routers will be
regularly upgraded. Please consult the DrayTek web site for more information on
newest firmware, tools and documents.
http://www.draytek.com

ii
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou County, HsinChu Industrial Park, Hsin-Chu, Taiwan 303
Product: Vigor2950 Series Router
DrayTek Corp. declares that Vigor2950 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE Directive 1999/5/EEC.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive
89/336/EEC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
The product conforms to the requirements of Low Voltage (LVD) Directive 73/23/EEC by complying with
the requirements set forth in EN60950.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant
to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may cause harmful interference to
radio communications. However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or television reception, which can
be determined by turning the equipment off and on, the use is encouraged to try to correct the interference
by one of the following measures:
zReorient or relocate the receiving antenna.
zIncrease the separation between the equipment and receiver.
zConnect the equipment into an outlet on a circuit different form that to which the receiver is
connected.
zConsult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired
operation.
Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning:
Warning: This device might cause interference of radio frequency under the environment of dwelling. In
such condition, the users might be asked to adopt some proper strategies.
Please visit www.draytek.com/about_us/Regulatory.php.

iii
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1. Introduction........................................................................................................... 1
1.1 Panel Explanation ...................................................................................................................... 2
1.1.1 For Vigor2950 ............................................................................................................... 2
1.1.2 For Vigor2950G............................................................................................................. 3
1.1.3 For Vigor2950i............................................................................................................... 4
1.1.4 For Vigor2950Gi............................................................................................................ 5
1.2 Package Content........................................................................................................................ 6
2. Installing Your Router........................................................................................... 7
2.1 Hardware Installation.................................................................................................................. 7
3. Configuring Web Pages ....................................................................................... 9
3.1 Basic Configuration.................................................................................................................... 9
3.2 Wireless LAN Settings (for G Series Model Only) ................................................................... 13
3.2.1 Basic Wireless LAN Concept...................................................................................... 13
3.2.2 General Settings ......................................................................................................... 13
3.2.3 Security Settings.........................................................................................................15
4. Trouble Shooting................................................................................................ 17
4.1 Checking If the Hardware Status Is OK or Not......................................................................... 17
4.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ...................... 17
4.3 Pinging the Router from Your Computer.................................................................................. 20
4.4 Checking If the ISP Settings are OK or Not............................................................................. 21
4.5 Backing to Factory Default Setting If Necessary...................................................................... 23
4.6 Contacting Your Dealer ............................................................................................................ 24

1
1
1. . I In nt tr ro od du uc ct ti io on n
Vigor2950 is a broadband router with dual-WAN interface. It provides policy-based
load-balance, fail-over and BoD (Bandwidth on Demand), also it integrates IP layer QoS,
NAT session/bandwidth management to help users control works well with large
bandwidth.
By adopting hardware-based VPN platform, hardware encryption of AES/DES/3DS and
hardware key hash of SHA-1/MD5, the router increases the performance of VPN greatly,
and offers several protocols (such as IPSec/PPTP/L2TP) with up to 200 VPN tunnels.
The object-originated design used in SPI (Stateful Packet Inspection) firewall allows
users to set firewall policy with ease. CSM (Content Security Management) provides
users control and management in IM (Instant Messenger) and P2P (Peer to Peer) more
efficiency than before. By the way, DoS/DDoS prevention and URL/Web content filter
strengthen the secuirty outside and control inside.
With the high performance of SuperGTM in wireless, the router allows the connection rate
up to 108Mbps. Except the encryption methods of WEP/WPA/WPA2 and MAC address
control, it also offers wireless LAN isolation, Wireless VLAN and 802.1x authentication.
WDS (Wireless Distribution System) can help users to expand wireless coverage easily.
Moreover, the wireless rate control can manage the connection rate of wireless station. In
addition, ISDN function provides users a flexible network backup and remote control
ability in a secure way.
F
Fe ea at tu ur re es s f fo or r V Vi ig go or r2 29 95 50 0
zDual WAN: Support policy-based load-balance, bandwidth on demand and internet
connection failover
zGigabit Ethernet LAN: 1000Mbps fast LAN traffic switching
zObject-originated Firewall: Provide SPI, DoS/DDoS prevention, CSM(Content Security
Management)
zContent Filter: URL and Web (powered by SurfControl Contrnt filtering)
zVPN: Hardware-based VPN support up to 200 VPN Tunnels
zBandwidth Management: IP layer QoS and NAT session/bandwidth management
zWireless: 108Mbps SuperGTM supports WEP/WPA/WPA2 and MAC address
control, wireless LAN isolation, Wireless VLAN and 802.1x authentication
zISDN: Internet access backup and remote dial-in

2
1
1. .1 1 P Pa an ne el l E Ex xp pl la an na at ti io on n
1
1. .1 1. .1 1 F Fo or r V Vi ig go or r2 29 95 50 0
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
DMZ On DMZ Host is specified in certain site.
Monitor On LAN traffic monitor is active.
On The VPN tunnel is launched.VPN Off The VPN tunnel is closed.
QoS On The QoS function is active.
LED on Connector
On The port is connected with 10Mbps.
Off The port is disconnected.
10
(left LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
WAN
100
(right LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
100
(left LED)
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
Off The port is disconnected.
LAN/Monitor
LAN
1000
(right LED)
Blinking The data is transmitting.
Interface Description
RST
(Factory Reset) Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for
more than 5 seconds. When you see the ACT LED begins to blink rapidly than
usual, release the button. Then the router will restart with the factory default
configuration.
WAN(1/2) Connecter for remote networked devices.
LAN/Monitor Connecter for local networked devices.
LAN (1-4) Connecter for local networked devices.
Connecter for a power cord with 100-240VAC (inlet).
Power Switch. “1” is ON; “0” is OFF.

3
1
1. .1 1. .2 2 F Fo or r V Vi ig go or r2 29 95 50 0G G
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
DMZ On DMZ Host is specified in certain site.
Monitor On LAN traffic monitor is active.
On The VPN tunnel is launched.VPN Off The VPN tunnel is closed.
QoS On The QoS function is active.
On Wireless access point is ready.
Blinking Ethernet packets are transmitting over wireless LAN.
WLAN
Off The WLAN function is inactive.
LED on Connector
On The port is connected with 10Mbps.
Off The port is disconnected.
10
(left LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
WAN
100
(right LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
100
(left LED)
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
Off The port is disconnected.
LAN/Monitor
LAN
1000
(right LED)
Blinking The data is transmitting.
Interface Description
RST
(Factory Reset) Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for
more than 5 seconds. When you see the ACT LED begins to blink rapidly than
usual, release the button. Then the router will restart with the factory default
configuration.
WAN(1/2) Connecter for remote networked devices.
LAN/Monitor Connecter for local networked devices.
LAN (1-4) Connecter for local networked devices.
Connecter for a power cord with 100-240VAC (inlet).
Power Switch. “1” is ON; “0” is OFF.

4
1
1. .1 1. .3 3 F Fo or r V Vi ig go or r2 29 95 50 0i i
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
DMZ On DMZ Host is specified in certain site.
Monitor On LAN traffic monitor is active.
On The VPN tunnel is launched.VPN Off The VPN tunnel is closed.
QoS On The QoS function is active.
On The ISDN service function is active.
ISDN Blinking A successful connection on the ISDN BRI B1/B2
channel.
LED on Connector
On The port is connected with 10Mbps.
Off The port is disconnected.
10
(left LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
WAN
100
(right LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
100
(left LED)
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
Off The port is disconnected.
LAN/Monitor
LAN
1000
(right LED)
Blinking The data is transmitting.
Interface Description
RST
(Factory Reset) Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for
more than 5 seconds. When you see the ACT LED begins to blink rapidly than
usual, release the button. Then the router will restart with the factory default
configuration.
ISDN Connect for NT1 (or NT1+) box provided by ISDN service provider.
WAN(1/2) Connecter for remote networked devices.
LAN/Monitor Connecter for local networked devices.
LAN (1- 4) Connecter for local networked devices.
Connecter for a power cord with 100-240VAC (inlet).
Power Switch. “1” is ON; “0” is OFF.

5
1
1. .1 1. .4 4 F Fo or r V Vi ig go or r2 29 95 50 0G Gi i
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
DMZ On DMZ Host is specified in certain site.
Monitor On LAN traffic monitor is active.
On The VPN tunnel is launched.VPN Off The VPN tunnel is closed.
QoS On The QoS function is active.
On Wireless access point is ready.
Blinking Ethernet packets are transmitting over wireless LAN.
WLAN
Off The WLAN function is inactive.
On The ISDN service function is active.
ISDN Blinking A successful connection on the ISDN BRI B1/B2
channel.
LED on Connector
On The port is connected with 10Mbps.
Off The port is disconnected.
10
(left LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
WAN
100
(right LED)
Blinking The data is transmitting.
On The port is connected with 100Mbps.
Off The port is disconnected.
100
(left LED)
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
Off The port is disconnected.
LAN/Monitor
LAN
1000
(right LED)
Blinking The data is transmitting.
Interface Description
RST
(Factory Reset) Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for
more than 5 seconds. When you see the ACT LED begins to blink rapidly than
usual, release the button. Then the router will restart with the factory default
configuration.
ISDN Connect for NT1 (or NT1+) box provided by ISDN service provider.
WAN(1/2) Connecter for remote networked devices.
LAN/Monitor Connecter for local networked devices.
LAN (1- 4) Connecter for local networked devices.
Connecter for a power cord with 100-240VAC (inlet).
Power Switch. “1” is ON; “0” is OFF.

6
1
1. .2 2 P Pa ac ck ka ag ge e C Co on nt te en nt t
nQuick Start Guide oCD
pAntenna for Gmodels qRJ-45 Cable (Ethernet)
rRJ-45 to RJ-45 Cable for imodels
sThe type of the power adapter depends on the country that the router will be installed:
UK-type power cord EU-type power cord
USA/Taiwan-type power cord AU/NZ-type power cord
* The maximum power consumption is 17 Watt.

7
2
2. . I In ns st ta al ll li in ng g Y Yo ou ur r R Ro ou ut te er r
This section will guide you to install the router through hardware connection and
configure the router’s settings through web browser.
2
2. .1 1 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
Before starting to configure the router, you have to connect your devices correctly.
1. Connect the power cord to the router’s power port on the rear panel, and the other
side into a wall outlet.
2. Power on the device by pressing down the power switch on the rear panel.
3. The system starts to initiate. After completing the system test, the ACT LED will
light up and start blinking.
4. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router
and the other end of the cable (RJ-45) into the Ethernet port on your computer (that
device also can connect to other computers to form a small area network). The LAN
LED (Left or Right) will light up according to the network card feature (1000 or 100)
of the device that it connected.
5. Connect a cable Modem/DSL Modem/Media Converter (depends on your
requirement) to any WAN port of router with Ethernet cable (RJ-45). The
WAN1/WAN2 LED (Left or Right) will light up according to the network card
feature (100 or 10) of the device that it connected.
(For the detailed information of LED status, please refer to section 1.1.)

8
This page is left blank.

9
3
3. . C Co on nf fi ig gu ur ri in ng g W We eb b P Pa ag ge es s
3
3. .1 1 B Ba as si ic c C Co on nf fi ig gu ur ra at ti io on n
The Quick Start Wizard is designed for you to easily set up your router for Internet
access. You can directly access the Quick Start Wizard via Web Configurator.
1. Make sure your PC connects to the router correctly.
Notice: You may either simply set up your computer to get IP dynamically
from the router or set up the IP address of the computer to be the same
subnet as the default IP address of Vigor router 192.168.1.1. For the
detailed information, please refer to the later section - Trouble Shooting of
the guide.
2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password. Do not type any word on the window and
click OK for next screen.
Notice: If you fail to access to the web configuration, please go to “Trouble
Shooting” for detecting and solving your problem.
3. Now, the Main Screen will pop up. Click Quick Start Wizard.

10
4. Enter the login password on the field of New Password and retype it on the field of
Retype New Password. Then click Next to continue.
5. On the next page as shown below, please select the WAN interface that you use.
Choose Auto negotiation as the physical type for your router. Then click Next for
next step.
6. On the next page as shown below, please select the appropriate Internet access type
according to the information from your ISP. For example, you should select PPPoE
mode if the ISP provides you PPPoE interface. Then click Next for next step.

11
PPPoE: if you click PPPoE or PPPoA as the protocol, please manually enter the
Username/Password provided by your ISP. Then click Next.
PPTP: if you click PPTP, you will get the following page. Please type in all the
information originally provided by your ISP. Then click Next for next step.
Static IP: if you click Static IP, you will get the following page. Please type in the IP
address information originally provided by your ISP. Then click Next for next step.

12
DHCP: if you click DHCP, you will get the following page. Simply click Next to
continue.
7. Now you can see the following screen. It indicates that the setup is complete.
Different types of connection modes will have different summary. Click Finish and
then restart the router. Afterward, you will enjoy surfing on the Internet.

13
3
3. .2 2 W Wi ir re el le es ss s L LA AN N S Se et tt ti in ng gs s ( (f fo or r G G S Se er ri ie es s M Mo od de el l O On nl ly y)
)
For operating G Series well, it is necessary for you to set the wireless LAN settings for
using wireless function. Please read the following section carefully for configuring the
settings for this router.
(The default value of Frequency Domain was set by factory depends on the reselling
region.)
3
3. .2 2. .1 1 B Ba as si ic c W Wi ir re el le es ss s L LA AN N C Co on nc ce ep pt t
In an Infrastructure Mode of wireless network, Vigor wireless router plays a role as an
Access Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs
will share the same Internet connection with other wired hosts via Vigor wireless router.
Internet
ADSL2+
Client
AP
WPA/WPA2
Client
3
3. .2 2. .2 2 G Ge en ne er ra al l S Se et tt ti in ng gs s
1. On the Wireless LAN group, select General Settings. The following page will be
shown.

14
2. Check the box Enable Wireless LAN to enable the wireless function.
3. Select an appropriate wireless mode.
Mixed
(11b+11g+SuperG) The router can connect to IEEE802.11b, IEEE802.11g and
SuperG stations simultaneously. Please choose this mode if
your WLAN clients have such features.
Mixed (11b+11g) The router can connect to IEEE802.11b and IEEE802.11g
stations simultaneously. This is default settings. Choose this
mode if you have no idea to change the mode.
SuperG only The router can connect to SuperG stations only.
11g-only The router can connect to IEE802.11g stations only.
11b-only The router can connect to IEE802.11b stations only.
4. Type in the name of the SSID and Channel. The default name for SSID is default.
We suggest you change it to a particular name for your necessity.
SSID (service set
identifier) It is used to name the wireless LAN for this router, and it must
have the same content in client PC/notebook wireless card(s).
SSID can be any text numbers or various special characters.
Channel It is a wireless channel for the router. The default channel is 6.
You can change it to an appropriate one if the selected
channel is under serious interference.

15
3
3. .2 2. .3 3 S Se ec cu ur ri it ty y S Se et tt ti in ng gs s
1. On the Wireless LAN group, select Security Settings.
2. Select an appropriate encryption mode to improve the security and privacy of your
wireless data packets.
Disable Turn off the encryption mechanism. For the security of
your network, please select any one of the encryption mode
here.
WEP Only Accepts only WEP clients and the encryption key should be
entered in WEP Key.
WEP/802.1x Only Accept WEP clients with 802.1x authentication. Since the
key will be auto-negotiated during authentication, the field
of key setting below will be not available for input.
WEP or WPA/PSK Accepts WEP and WPA clients with legal key accordingly.
Remember to select WPA type to define either Mixed or
WPA2 only in the field below.

16
WEP/802.1x or
WPA/802.1x Accept WEP or WPA clients with 802.1x authentication.
Remember to select WPA type to define either Mixed or
WPA2 only in the field below. Since the key will be
auto-negotiated during authentication, the field of key
setting below will be not available for input.
WPA/PSK Only Accepts WPA clients and the encryption key should be
entered in PSK. Remember to select WPA type to define
either Mixed or WPA2 only in the field below.
WPA/802.1x Only Accept WPA clients with 802.1x authentication. Remember
to select WPA type to define either Mixed or WPA2 only in
the field below. Since the key will be auto-negotiated
during authentication, the field of key setting below will be
not available for input.
3. For WPA encryption, type in 8~63 ASCII characters or 64 Hexadecimal digits
leading by 0x, for example "0123456789ABCD...." or "0x321253abcde....." on the
field of Pre-Shared Key (PSK). WPA encrypts each frame transmitted from the
radio using the Pre-Shared Key (PSK) which entered from this panel.
4. As to WEP encryption, select 64-bit or 128-bit as the encryption mode. For 64bits
WEP key, type in 5 ASCII characters or 10 hexadecimal digitals leading by 0x, for
example, ABCDE or 0x4142434445. And for 128bits WEP key, type in 13 ASCII
characters or 26 hexadecimal digits leading by 0x, for example, ABCDEFGHIJKLM
or 0x4142434445464748494A4B4C4D. Only one WEP key can be selected and
allows user to type in the characters.
5. Click OK to save settings.
Be aware that for the communication, all wireless devices must support the same
encryption bit length and share the same key. If WEP mode is selected, only one of four
preset keys can be selected at one time.