Draytek Vigor2760 User manual

Vigor2760 Series User’s Guide ii

Vigor2760 Series User’s Guide
iii
Vigor2760 Series
VDSL2 Security Firewall
User’s Guide
Version: 1.6
Firmware Version: V3.8.2.1
(For future update, please visit DrayTek web site)
Date: January 11, 2016

Vigor2760 Series User’s Guide iv
Intellectual Property Rights (IPR) Information
Copyrights
© All rights reserved. This publication contains information that is protected by
copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval
system, or translated into any language without written permission from the copyright
holders.
Trademarks
The following trademarks are used in this document:
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are
trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Inc.
Other products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
Read the installation guide thoroughly before you set up the router.
The router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
Do not place the router in a damp or humid place, e.g. a bathroom.
The router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
Do not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
Do not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
Keep the package out of reach of children.
When you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner Web registration is preferred. You can register your Vigor router via
http://www.DrayTek.com.
Firmware & Tools
Updates Due to the continuous evolution of DrayTek technology, all routers will be regularly
upgraded. Please consult the DrayTek web site for more information on newest
firmware, tools and documents.
http://www.DrayTek.com

Vigor2760 Series User’s Guide
v
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, Hukou Township, Hsinchu Industrial Park, Hsinchu County, Taiwan 303
Product: Vigor2760 Series Router
DrayTek Corp. declares that Vigor2760 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.
This product is designed for the DSL and 2.4GHz WLAN network throughout the EC region. Please see the user
manual for the applicable networks on your product.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the equipment off and
on, the user is encouraged to try to correct the interference by one of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
RF Exposure Warning
This equipment must be installed and operated in accordance with provided instructions and the antenna(s) used
for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must
not be co-located or operating in conjunction with any other antenna or transmitter. End-users and installers must
be provided with antenna installation instructions and transmitter operating conditions for satisfying RF exposure
compliance.
Caution
Any changes or modifications not expressly approved by the grantee of this device could void the user's
authority to operate the equipment.
The antenna/transmitter should be kept at least 20 cm away from human body.
DrayTek Vigor2760 series VDSL2/ADSL2+ routers are compliant with 47 C.F.R. Part 68.

Vigor2760 Series User’s Guide vi
IC Regulatory Information
Product: Vigor2760Vn, Vigor2760n
IC : 20803-V2760
Canadian Representative:
Company Name: Network Systems Solutions Canada Inc.
Company Address: 56 Rory Road, North York, ON, M6L 3G1
Company Telephone: [phone]
This radio transmitter (IC:20803-V2760) has been approved by Industry Canada to operate with the antenna types listed below
with the maximum permissible gain indicated. Antenna types not included in this list, having a gain greater than the maximum
gain indicated for that type, are strictly prohibited for use with this device.
Dipole antenna, maximum permissible gain: 2.1 dBi
Le présent émetteur radio (IC:20803-V2760) a été approuvé par Industrie Canada pour fonctionner avec les types d'antenne
énumérés ci-dessous et ayant un gain admissible maximal. Les types d'antenne non inclus dans cette liste, et dont le gain est
supérieur au gain maximal indiqué, sont strictement interdits pour l'exploitation de l'émetteur.
Dipole antenne, maximal admissible gain: 2.1 dBi
This device complies with Industry Canada licence-exempt RSS standard(s). Operation is subject to the following two
conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including
interference that may cause undesired operation of the device.
This product meets the applicable Innovation, Science and Economic Development Canada technical specifications.
The Ringer Equivalence Number (REN) indicates the maximum number of devices allowed to be connected to a telephone
interface. The termination of an interface may consist of any combination of devices subject only to the requirement that
the sum of the RENs of all the devices not exceed five.
Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence.
L'exploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2)
l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'en
compromettre le fonctionnement.
Le présent produit est conforme aux spécifications techniques applicables d'Innovation, Sciences et Développement
économique Canada.
L'indice d'équivalence de la sonnerie (IES) sert à indiquer le nombre maximal de dispositifs qui peuvent être raccordés à
une interface téléphonique. La terminaison d'une interface peut consister en une combinaison quelconque de dispositifs, à la
seule condition que la somme des IES de tous les dispositifs n'excède pas cinq.
Product: Vigor2760
IC: 20803-2760
Canadian Representative:
Company Name: Network Systems Solutions Canada Inc.
Company Address: 56 Rory Road, North York, ON, M6L 3G1
Company Telephone: [phone]
This product meets the applicable Innovation, Science and Economic Development Canada technical specifications.
The Ringer Equivalence Number (REN) indicates the maximum number of devices allowed to be connected to a telephone
interface. The termination of an interface may consist of any combination of devices subject only to the requirement that
the sum of the RENs of all the devices not exceed five.
Le présent produit est conforme aux spécifications techniques applicables d'Innovation, Sciences et Développement
économique Canada.
L'indice d'équivalence de la sonnerie (IES) sert à indiquer le nombre maximal de dispositifs qui peuvent être raccordés à
une interface téléphonique. La terminaison d'une interface peut consister en une combinaison quelconque de dispositifs, à la
seule condition que la somme des IES de tous les dispositifs n'excède pas cinq.

Vigor2760 Series User’s Guide
vii
More update, please visit www.draytek.com.

Vigor2760 Series User’s Guide viii
T
Ta ab bl le e o of f C Co on nt te en nt ts s
Introduction...................................................................................................1
1.1 Features.......................................................................................................................... 2
1.2 Package and Content.............................................................................................................. 4
1.3 LED Indicators and Connectors.............................................................................................. 5
1.3.1 For Vigor2760................................................................................................................... 5
1.3.2 For Vigor2760n................................................................................................................. 7
1.3.3 For Vigor2760Vn............................................................................................................... 9
1.4 Hardware Installation .............................................................................................................11
1.5 Printer Installation ................................................................................................................. 12
1.6 Accessing Web Page............................................................................................................ 20
1.7 Changing Password.............................................................................................................. 21
1.8 Introducing Dashboard.......................................................................................................... 22
1.8.1 Virtual Panel ................................................................................................................... 23
1.8.2 Name with a Link............................................................................................................ 23
1.8.3 Quick Access for Common Used Menu.......................................................................... 24
1.8.4 GUI Map ......................................................................................................................... 25
1.8.5 Web Console .................................................................................................................. 26
1.8.6 Config Backup ................................................................................................................ 27
1.8.7 Logout............................................................................................................................. 27
1.9 Online Status......................................................................................................................... 28
1.9.1 Physical Connection.......................................................................................................28
1.9.2 Virtual WAN.................................................................................................................... 30
1.10 Saving Configuration........................................................................................................... 31
Quick Setup.................................................................................................33
2.1 Quick Start Wizard ................................................................................................................ 33
2.1.1 For WAN1 (ADSL/VDSL2).............................................................................................. 35
2.1.2 For WAN2 (Ethernet)...................................................................................................... 41
2.1.3 For WAN3 (USB)............................................................................................................50
2.2 Service Activation Wizard...................................................................................................... 52
2.3 VPN Client Wizard ................................................................................................................ 55
2.4 VPN Server Wizard............................................................................................................... 61
2.5 Wireless Wizard.................................................................................................................... 66
2.6 VoIP Wizard........................................................................................................................... 69
2.7 Registering Vigor Router....................................................................................................... 71

Vigor2760 Series User’s Guide
ix
Advanced Configuration............................................................................75
3.1 WAN...................................................................................................................................... 75
3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 75
3.1.2 General Setup................................................................................................................. 77
3.1.3 Internet Access............................................................................................................... 82
3.1.4 Multi-PVC/VLAN........................................................................................................... 119
3.2 LAN ..................................................................................................................................... 125
3.2.1 Basics of LAN............................................................................................................... 125
3.2.2 General Setup............................................................................................................... 128
3.2.3 Static Route.................................................................................................................. 140
3.2.4 VLAN............................................................................................................................. 145
3.2.5 Bind IP to MAC............................................................................................................. 148
3.2.6 LAN Port Mirror............................................................................................................. 150
3.2.7 Web Portal Setup.......................................................................................................... 151
3.3 Route Policy........................................................................................................................ 152
3.3.1 General Setup............................................................................................................... 152
3.3.2 Diagnose....................................................................................................................... 159
3.4 NAT ..................................................................................................................................... 162
3.4.1 Port Redirection............................................................................................................ 162
3.4.2 DMZ Host...................................................................................................................... 166
3.4.3 Open Ports.................................................................................................................... 169
3.4.4 Port Triggering.............................................................................................................. 171
3.5 Firewall................................................................................................................................ 174
3.5.1 Basics for Firewall......................................................................................................... 174
3.5.2 General Setup............................................................................................................... 176
3.5.3 Filter Setup ................................................................................................................... 181
3.5.4 DoS Defense ................................................................................................................ 189
3.6 Objects Settings.................................................................................................................. 193
3.6.1 IP Object....................................................................................................................... 193
3.6.2 IP Group ....................................................................................................................... 196
3.6.3 IPv6 Object................................................................................................................... 198
3.6.4 IPv6 Group.................................................................................................................... 200
3.6.5 Service Type Object ..................................................................................................... 201
3.6.6 Service Type Group...................................................................................................... 203
3.6.7 Keyword Object ............................................................................................................ 205
3.6.8 Keyword Group............................................................................................................. 207
3.6.9 File Extension Object.................................................................................................... 208
3.6.10 SMS/Mail Service Object............................................................................................ 210
3.6.11 Notification Object....................................................................................................... 215
3.7 CSM Profile......................................................................................................................... 217
3.7.1 APP Enforcement Profile.............................................................................................. 218
3.7.2 APPE Signature Upgrade............................................................................................. 221
3.7.3 URL Content Filter Profile............................................................................................. 222
3.7.4 Web Content Filter Profile............................................................................................. 226
3.7.5 DNS Filter Profile.......................................................................................................... 230
3.7.6 APPE Support List........................................................................................................ 231
3.8 Bandwidth Management ..................................................................................................... 232
3.8.1 Sessions Limit............................................................................................................... 232

Vigor2760 Series User’s Guide x
3.8.2 Bandwidth Limit ............................................................................................................ 234
3.8.3 Quality of Service.......................................................................................................... 236
3.8.4 APP QoS ...................................................................................................................... 245
3.9 Applications......................................................................................................................... 247
3.9.1 Dynamic DNS............................................................................................................... 247
3.9.2 LAN DNS / DNS Forwarding ........................................................................................ 250
3.9.3 Schedule....................................................................................................................... 253
3.9.4 RADIUS ........................................................................................................................ 256
3.9.5 Active Directory/LDAP.................................................................................................. 257
3.9.6 UPnP............................................................................................................................. 259
3.9.7 IGMP............................................................................................................................. 261
3.9.8 Wake on LAN................................................................................................................ 262
3.9.9 SMS / Mail Alert Service............................................................................................... 263
3.9.10 Bonjour ....................................................................................................................... 265
3.10 VPN and Remote Access.................................................................................................. 268
3.10.1 Remote Access Control.............................................................................................. 268
3.10.2 PPP General Setup .................................................................................................... 269
3.10.3 IPsec General Setup................................................................................................... 270
3.10.4 IPsec Peer Identity...................................................................................................... 272
3.10.5 Remote Dial-in User ................................................................................................... 274
3.10.6 LAN to LAN................................................................................................................. 277
3.10.7 Connection Management ........................................................................................... 287
3.11 Certificate Management.................................................................................................... 288
3.11.1 Local Certificate.......................................................................................................... 288
3.11.2 Trusted CA Certificate ................................................................................................ 291
3.11.3 Certificate Backup....................................................................................................... 293
3.12 VoIP................................................................................................................................... 294
3.12.1 General Setting........................................................................................................... 296
3.12.1 SIP Accounts.............................................................................................................. 298
3.12.2 DialPlan ...................................................................................................................... 302
3.12.3 Phone Settings ........................................................................................................... 311
3.12.4 Status.......................................................................................................................... 315
3.13 Wireless LAN .................................................................................................................... 317
3.13.1 Basic Concepts........................................................................................................... 317
3.13.2 General Setup............................................................................................................. 319
3.13.3 Security....................................................................................................................... 320
3.13.4 Access Control............................................................................................................ 323
3.13.5 WPS............................................................................................................................ 324
3.13.6 WDS............................................................................................................................ 327
3.13.7 Advanced Setting........................................................................................................ 330
3.13.8 Station Control............................................................................................................ 333
3.13.9 Bandwidth Management............................................................................................. 334
3.13.10 AP Discovery............................................................................................................ 335
3.13.11 Station List................................................................................................................ 336
3.14 SSL VPN........................................................................................................................... 337
3.14.1 General Setup............................................................................................................. 337
3.14.2 SSL Web Proxy .......................................................................................................... 338
3.14.3 SSL Application .......................................................................................................... 339
3.14.4 User Account.............................................................................................................. 341
3.14.5 User Group................................................................................................................. 345
3.14.6 Online User Status...................................................................................................... 347
3.15 USB Application ................................................................................................................ 348
3.15.1 USB General Settings................................................................................................. 348