Draytek Vigor2710 Series User manual

Vigor2710 Series
ADSL2/2+ Firewall Router
User’s Guide
Version: 1.0
Date: 2008/09/12

Vigor2710 Series User’s Guide
ii
Copyright Information
Copyright
Declarations
Copyright 2008 All rights reserved. This publication contains information that is
protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a
retrieval system, or translated into any language without written permission from the
copyright holders.
Trademarks
The following trademarks are used in this document:
zMicrosoft is a registered trademark of Microsoft Corp.
zWindows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are
trademarks of Microsoft Corp.
zApple and Mac OS are registered trademarks of Apple Inc.
zOther products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
zRead the installation guide thoroughly before you set up the router.
zThe router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
zDo not place the router in a damp or humid place, e.g. a bathroom.
zThe router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
zDo not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
zDo not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
zKeep the package out of reach of children.
zWhen you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner Web registration is preferred. You can register your Vigor router via
http://www.draytek.com.
Firmware & Tools
Updates Due to the continuous evolution of DrayTek technology, all routers will be regularly
upgraded. Please consult the DrayTek web site for more information on newest
firmware, tools and documents.
http://www.draytek.com

Vigor2710 Series User’s Guide iii
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou County, HsinChu Industrial Park, Hsin-Chu, Taiwan 303
Product: Vigor2710 Series Router
DrayTek Corp. declares that Vigor2820 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE Directive 1999/5/EEC.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the equipment off and
on, the use is encouraged to try to correct the interference by one of the following measures:
zReorient or relocate the receiving antenna.
zIncrease the separation between the equipment and receiver.
zConnect the equipment into an outlet on a circuit different form that to which the receiver is connected.
zConsult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
.
Please visit http://www.draytek.com/about_us/R_TTE_Certification.php.
This product is designed for DSL, POTS and 2.4GHz WLAN network throughout the EC region and Switzerland
with restrictions in France. Please see the user manual for the applicable networks on your product.

Vigor2710 Series User’s Guide
iv
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1
Preface ...............................................................................................................1
1.1 Web Configuration Buttons Explanation................................................................................. 1
1.2 LED Indicators and Connectors.............................................................................................. 2
1.2.1 For Vigor2710................................................................................................................... 2
1.2.2 For Vigor2710n................................................................................................................. 4
1.2.3 For Vigor2710Vn............................................................................................................... 6
1.3 Hardware Installation .............................................................................................................. 8
1.4 Printer Installation ................................................................................................................... 9
2
Configuring Basic Settings ............................................................................15
2.1 Two-Level Management........................................................................................................15
2.2 Accessing Web Page............................................................................................................ 15
2.3 Changing Password.............................................................................................................. 16
2.4 Quick Start Wizard ................................................................................................................ 18
2.4.1 Adjusting Protocol/Encapsulation................................................................................... 19
2.4.2 PPPoE/PPPoA................................................................................................................ 20
2.4.3 1483 Bridged IP.............................................................................................................. 21
2.4.4 1483 Routed IP............................................................................................................... 22
2.5 Online Status......................................................................................................................... 23
2.6 Saving Configuration............................................................................................................. 25
3
UserModeOperation............................................................................................27
3.1 Internet Access...................................................................................................................... 27
3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 27
3.1.2 PPPoE/PPPoA................................................................................................................ 28
3.2 LAN ....................................................................................................................................... 33
3.2.1 Basics of LAN................................................................................................................. 33
3.2.2 General Setup................................................................................................................. 34
3.3 NAT ....................................................................................................................................... 37
3.3.1 Port Redirection.............................................................................................................. 37
3.3.2 DMZ Host........................................................................................................................ 39
3.3.3 Open Ports...................................................................................................................... 42
3.4 Applications........................................................................................................................... 43
3.4.1 Dynamic DNS................................................................................................................. 43
3.4.2 UPnP............................................................................................................................... 45
3.5 Wireless LAN ........................................................................................................................ 47

Vigor2710 Series User’s Guide v
3.5.1 Basic Concepts............................................................................................................... 47
3.5.2 General Setup................................................................................................................. 49
3.5.3 Security........................................................................................................................... 52
3.5.4 Access Control................................................................................................................ 53
3.5.5 Station List...................................................................................................................... 54
3.6 System Maintenance............................................................................................................. 55
3.6.1 System Status................................................................................................................. 55
3.6.2 User Password ............................................................................................................... 56
3.6.3 Time and Date................................................................................................................ 56
3.6.4 Reboot System............................................................................................................... 57
3.7 Diagnostics............................................................................................................................ 58
3.7.1 DHCP Table.................................................................................................................... 58
3.7.2 Ping Diagnosis................................................................................................................ 59
3.7.3 Trace Route.................................................................................................................... 59
4
AdminModeOperation.........................................................................................61
4.1 Internet Access...................................................................................................................... 61
4.1.1 Basics of Internet Protocol (IP) Network......................................................................... 61
4.1.2 PPPoE/PPPoA................................................................................................................ 62
4.1.3 Multi-PVCs...................................................................................................................... 67
4.2 LAN ....................................................................................................................................... 71
4.2.1 Basics of LAN................................................................................................................. 71
4.2.2 General Setup................................................................................................................. 73
4.2.3 Static Route.................................................................................................................... 76
4.2.4 VLAN............................................................................................................................... 79
4.2.5 Bind IP to MAC............................................................................................................... 80
4.3 NAT ....................................................................................................................................... 81
4.3.1 Port Redirection.............................................................................................................. 81
4.3.2 DMZ Host........................................................................................................................ 84
4.3.3 Open Ports...................................................................................................................... 86
4.4 Firewall.................................................................................................................................. 88
4.4.1 Basics for Firewall........................................................................................................... 88
4.4.2 General Setup................................................................................................................. 90
4.4.3 Filter Setup ..................................................................................................................... 92
4.4.4 DoS Defense .................................................................................................................. 97
4.5 Objects Settings.................................................................................................................. 100
4.5.1 IP Object....................................................................................................................... 100
4.5.2 IP Group ....................................................................................................................... 102
4.5.3 Service Type Object ..................................................................................................... 104
4.5.4 Service Type Group...................................................................................................... 105
4.5.5 Keyword Object ............................................................................................................ 106
4.5.6 Keyword Group............................................................................................................. 107
4.5.7 File Extension Object.................................................................................................... 108
4.5.8 IM Object ...................................................................................................................... 110
4.5.9 P2P Object.................................................................................................................... 111
4.5.9 P2P Object.................................................................................................................... 111
4.5.10 Misc Object................................................................................................................. 112
4.6 CSM Profile..........................................................................................................................113
4.6.1 IM/P2P Filter Profile...................................................................................................... 114

Vigor2710 Series User’s Guide
vi
4.6.2 URL Content Filter Profile............................................................................................. 115
4.6.3 Web Content Filter Profile............................................................................................. 119
4.7 Bandwidth Management ..................................................................................................... 121
4.7.1 Sessions Limit............................................................................................................... 121
4.7.2 Bandwidth Limit ............................................................................................................ 123
4.7.3 Quality of Service.......................................................................................................... 124
4.8 Applications......................................................................................................................... 131
4.8.1 Dynamic DNS............................................................................................................... 131
4.8.2 Schedule....................................................................................................................... 133
4.8.3 RADIUS ........................................................................................................................ 134
4.8.4 UPnP............................................................................................................................. 136
4.8.5 IGMP............................................................................................................................. 138
4.8.6 Wake on LAN................................................................................................................ 138
4.9 VPN and Remote Access.................................................................................................... 140
4.9.1 Remote Access Control................................................................................................ 140
4.9.2 PPP General Setup ...................................................................................................... 140
4.9.3 IPSec General Setup.................................................................................................... 141
4.9.4 IPSec Peer Identity....................................................................................................... 142
4.9.5 Remote Dial-in User ..................................................................................................... 145
4.9.6 LAN to LAN................................................................................................................... 147
4.9.7 Connection Management.............................................................................................. 154
4.10 Certificate Management.................................................................................................... 155
4.10.1 Local Certificate.......................................................................................................... 155
4.10.2 Trusted CA Certificate ................................................................................................ 157
4.10.3 Certificate Backup....................................................................................................... 158
4.11 Wireless LAN..................................................................................................................... 158
4.11.1 Basic Concepts........................................................................................................... 158
4.11.2 General Setup............................................................................................................. 160
4.11.3 Security....................................................................................................................... 163
4.11.4 Access Control............................................................................................................ 164
4.11.5 WPS............................................................................................................................ 165
4.11.6 WDS............................................................................................................................ 167
4.11.7 AP Discovery.............................................................................................................. 170
4.11.8 Station List.................................................................................................................. 171
4.12 System Maintenance......................................................................................................... 173
4.12.1 System Status............................................................................................................. 173
4.12.2 TR-069........................................................................................................................ 174
4.12.3 Administrator Password.............................................................................................. 175
4.12.4 Configuration Backup ................................................................................................. 175
4.12.5 Syslog/Mail Alert......................................................................................................... 177
4.12.6 Time and Date............................................................................................................ 179
4.12.7 Management............................................................................................................... 180
4.12.8 Reboot System........................................................................................................... 181
4.12.9 Firmware Upgrade...................................................................................................... 182
4.13 Diagnostics........................................................................................................................ 183
4.13.1 Dial-out Trigger........................................................................................................... 183
4.13.2 Routing Table ............................................................................................................. 184
4.13.3 ARP Cache Table....................................................................................................... 184
4.13.4 DHCP Table................................................................................................................ 185
4.13.5 NAT Sessions Table................................................................................................... 185
4.13.6 Data Flow Monitor....................................................................................................... 186
4.13.7 Traffic Graph............................................................................................................... 187
4.13.8 Ping Diagnosis............................................................................................................ 188

Vigor2710 Series User’s Guide vii
4.13.9 Trace Route................................................................................................................ 189
5
Application and Examples............................................................................191
5.1 Create a LAN-to-LAN Connection Between Remote Office and Headquarter................... 191
5.2 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter...... 198
5.3 QoS Setting Example.......................................................................................................... 202
5.4 LAN – Created by Using NAT ............................................................................................. 206
4.5 Upgrade Firmware for Your Router..................................................................................... 207
5.6 Request a certificate from a CA server on Windows CA Server......................................... 210
5.7 Request a CA Certificate and Set as Trusted on Windows CA Server............................... 214
Trouble Shooting .........................................................................................217
6.1 Checking If the Hardware Status Is OK or Not.................................................................... 217
6.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 218
6.3 Pinging the Router from Your Computer............................................................................. 220
6.4 Checking If the ISP Settings are OK or Not........................................................................ 221
6.5 Backing to Factory Default Setting If Necessary ................................................................ 222
6.6 Contacting Your Dealer....................................................................................................... 223

Vigor2710 Series User’s Guide 1
1
P Pr re ef fa ac ce e
Vigor2710 series is an ADSL router. It integrates IP layer QoS, NAT session/bandwidth
management to help users control works well with large bandwidth.
By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DS, the
router increases the performance of VPN greatly, and offers several protocols (such as
IPSec/PPTP/L2TP) with up to 2 VPN tunnels.
The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set
firewall policy with ease. CSM (Content Security Management) provides users control and
management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before.
By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security
outside and control inside.
Object-based firewall is flexible and allows your network be safe. In addition, through VoIP
function, the communication fee for you and remote people can be reduced.
In addition, Vigor2710 series supports USB interface for connecting USB printer to share
printer or USB storage device for sharing files. Vigor2710 series provides two-level
management to simplify the configuration of network connection. The user operation allows
user accessing into WEB interface via simple configuration. However, if users want to have
advanced configurations, they can access into WEB interface through administration
operation.
1
1. .1 1 W We eb b C Co on nf fi ig gu ur ra at ti io on n B Bu ut tt to on ns s E Ex xp pl la an na at ti io on n
Several main buttons appeared on the web pages are defined as the following:
Save and apply current settings.
Cancel current settings and recover to the previous saved settings.
Clear all the selections and parameters settings, including selection from
drop-down list. All the values must be reset with factory default settings.
Add new settings for specified item.
Edit the settings for the selected item.
Delete the selected item with the corresponding settings.
Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed
explanation.

Vigor2710 Series User’s Guide
2
1
1. .2 2 L LE ED D I In nd di ic ca at to or rs s a an nd d C Co on nn ne ec ct to or rs s
Before you use the Vigor router, please get acquainted with the LED indicators and
connectors first.
1
1. .2 2. .1 1 F Fo or r V Vi ig go or r2 27 71 10 0
LED Status Explanation
Blinking The router is powered on and running
normally.
ACT
(Activity) Off The router is powered off.
CSM On The profile(s) of CSM (Content Security
Management) for IM/P2P, URL/Web
Content Filter application can be enabled
from Firewall >>General Setup. (Such
profile must be established under CSM
menu).
On The router is ready to access Internet
through DSL link.
DSL
Blinking Slowly: The modem is ready.
Quickly: The connection is training.
On The port is connected.
Off The port is disconnected.
LAN 1/2/3/4
Blinking The data is transmitting.
On A USB device is connected and active.USB Blinking The data is transmitting.
VPN On The VPN tunnel is active.
QoS On The QoS function is active.
On The DoS/DDoS function is active.DoS Blinking It will blink while detecting an attack.
WCF On The profile(s) of CSM (Content Security
Management) for Web Content Filter
application can be enabled from Firewall
>>General Setup. (Such profile must be
established under CSM menu)
Interface Description
DSL Connecter for accessing the Internet through ADSL2/2+.
LAN (1-4) Connecters for local networked devices.
USB Connecter for USB storage device (Pen Driver/Mobile
HD) or printer.

Vigor2710 Series User’s Guide 3
Interface Description
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the
hole and keep for more than 5 seconds. When you see the ACT LED begins to blink
rapidly than usual, release the button. Then the router will restart with the factory default
configuration.
PWR Connecter for a power adapter.
ON/OFF Power Switch.

Vigor2710 Series User’s Guide
4
1
1. .2 2. .2 2 F Fo or r V Vi ig go or r2 27 71 10 0n n
LED Status Explanation
Blinking The router is powered on and running
normally.
ACT
(Activity) Off The router is powered off.
On Wireless access point is ready.WLAN Blinking It will blink while wireless traffic goes
through.
On The router is ready to access Internet
through DSL link.
DSL
Blinking Slowly: The modem is ready.
Quickly: The connection is training.
On The port is connected.
Off The port is disconnected.
LAN 1/2/3/4
Blinking The data is transmitting.
On A USB device is connected and active.USB Blinking The data is transmitting.
VPN On The VPN tunnel is active.
QoS On The QoS function is active.
On The DoS/DDoS function is active.DoS Blinking It will blink while detecting an attack.
On The WPS is on.
Off The WPS is off.
WPS
Blinking Waiting for wireless client sending requests
for connection about two minutes.
On Press this button for 2 seconds to wait for
client device making network connection
through WPS. When the LED lights up, the
WPS will be on.
Off The WPS is off.
WPS Button
Blinking Waiting for wireless client sending requests
for connection about two minutes.
Interface Description
WLAN Press the button once to enable (WLAN LED on) or
disable (WLAN LED off) wireless connection.
DSL Connecter for accessing the Internet through ADSL2/2+.
LAN (1-4) Connecters for local networked devices.
USB Connecter for USB storage (Pen Driver Mobile/HD) or
printer.

Vigor2710 Series User’s Guide 5
Interface Description
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the
hole and keep for more than 5 seconds. When you see the ACT LED begins to blink
rapidly than usual, release the button. Then the router will restart with the factory default
configuration.
PWR Connecter for a power adapter.
ON/OFF Power Switch.

Vigor2710 Series User’s Guide
6
1
1. .2 2. .3 3 F Fo or r V Vi ig go or r2 27 71 10 0V Vn n
LED Status Explanation
Blinking The router is powered on and running
normally.
ACT
(Activity) Off The router is powered off.
On Wireless access point is ready.WLAN Blinking It will blink while wireless traffic goes
through.
On The router is ready to access Internet
through DSL link.
DSL
Blinking Slowly: The modem is ready.
Quickly: The connection is training.
On The port is connected.
Off The port is disconnected.
LAN 1/2/3/4
Blinking The data is transmitting.
On A USB device is connected and active.USB Blinking The data is transmitting.
On The phone connected to this port is off-hook.
Off The phone connected to this port is on-hook.
Phone1/
Phone2
Blinking A phone call comes.
On A PSTN phone call comes (in and out).
However, when the phone call is
disconnected, the LED will be off about six
seconds later.
Line
Off There is no PSTN phone call.
On The WPS is on.
Off The WPS is off.
WPS
Blinking Waiting for wireless client sending requests
for connection about two minutes.
On Press this button for 2 seconds to wait for
client device making network connection
through WPS. When the LED lights up, the
WPS will be on.
Off The WPS is off.
WPS Button
Blinking Waiting for wireless client sending requests
for connection about two minutes.
Interface Description
WLAN Press the button once to enable (WLAN LED on) or
disable (WLAN LED off) wireless connection.
DSL Connecter for accessing the Internet through ADSL2/2+.
LAN (1-4) Connecters for local networked devices.
USB Connecter for USB storage (Pen Driver Mobile/HD) or
printer.

Vigor2710 Series User’s Guide 7
Interface Description
Line Connector of analog phone for PSTN life line.
Phone2/Phone1 Connecter of analog phone for VoIP communication.
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the
hole and keep for more than 5 seconds. When you see the ACT LED begins to blink
rapidly than usual, release the button. Then the router will restart with the factory default
configuration.
PWR Connecter for a power adapter.
ON/OFF Power Switch.

Vigor2710 Series User’s Guide
8
1
1. .3 3 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
Before starting to configure the router, you have to connect your devices correctly.
1. Connect the ADSL interface to the external ADSL splitter with an ADSL line cable for
all models. For Vigor2710Vn, also connect Line interface to external ADSL splitter.
2. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of the router and
the other end of the cable (RJ-45) into the Ethernet port on your computer.
3. Connect the telephone sets with phone lines (for using VoIP function). For the model
without phone ports, skip this step.
4. Connect one end of the power adapter to the router’s power port on the rear panel, and
the other side into a wall outlet.
5. Power on the device by pressing down the power switch on the rear panel.
6. The system starts to initiate. After completing the system test, the ACT LED will light
up and start blinking.
(For the detailed information of LED status, please refer to section 1.2.)

Vigor2710 Series User’s Guide 9
Caution: Each of the Phone ports can be connected to an analog phone only. Do not
connect the phone ports to the telephone wall jack. Such connection might damage
your router.
1
1. .4 4 P Pr ri in nt te er r I In ns st ta al ll la at ti io on n
You can install a printer onto the router for sharing printing. All the PCs connected this
router can print documents via the router. The example provided here is made based on
Windows XP/2000. For Windows 98/SE/Vista, please visit www.draytek.com.
Before using it, please follow the steps below to configure settings for connected computers
(or wireless clients).
1. Connect the printer with the router through USB/parallel port.
2. Open Start->Settings-> Printer and Faxes.
3. Open File->Add a New Computer. A welcome dialog will appear. Please click Next.

Vigor2710 Series User’s Guide
10
4. Click Local printer attached to this computer and click Next.
5. In this dialog, choose Create a new port Type of port and use the drop down list to select
Standard TCP/IP Port. Click Next.

Vigor2710 Series User’s Guide 11
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP
Address and type IP_192.168.1.1 as the port name. Then, click Next.
7. Click Standard and choose Generic Network Card.
8. Then, in the following dialog, click Finish.

Vigor2710 Series User’s Guide
12
9. Now, your system will ask you to choose right name of the printer that you installed onto the
router. Such step can make correct driver loaded onto your PC. When you finish the selection,
click Next.
10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the
new printer you have added.
11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer
to the red rectangle for choosing the correct protocol and UPR name.