Draytek Vigor2800 Series User manual

Vigor2800 Series
ADSL2/2+ Security Router
User’s Guide
Version: 2.1
Date: 2005/12/19
Copyright 2005 All rights reserved.
This publication contains information that is protected by copyright. No part may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright
holders. The scope of delivery and other details are subject to change without prior notice.
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Computer Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.

Vigor2800 Series User’s Guide
ii

Vigor2800 Series User’s Guide iii
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1
Preface ...............................................................................................................1
1.1 LED Indicators and Connectors.......................................................................................... 1
1.1.1 For Vigor2800.............................................................................................................. 2
1.1.2 For Vigor2800G............................................................................................................ 3
1.1.3 For Vigor2800V............................................................................................................ 4
1.1.4 For Vigor2800VG......................................................................................................... 5
1.2 Hardware Installation.......................................................................................................... 6
2
Configuring Basic Settings ..............................................................................7
2.1 Changing Password ........................................................................................................... 7
2.2 Quick Start Wizard.............................................................................................................. 9
2.2.1 Adjusting Protocol/Encapsulation.................................................................................. 9
2.2.2 PPPoE/PPPoA............................................................................................................10
2.2.3 Bridged IP...................................................................................................................11
2.2.4 Routed IP....................................................................................................................13
2.3 Online Status.....................................................................................................................14
2.4 Saving Configuration.........................................................................................................15
3
AdvancedWebConfiguration..................................................................................17
3.1 Internet Access..................................................................................................................17
3.1.1 Basics of Internet Protocol (IP) Network ......................................................................17
3.1.2 PPPoE/PPPoA............................................................................................................18
3.1.3 MPoA..........................................................................................................................20
3.1.4 Multi-PVCs..................................................................................................................22
3.2 LAN...................................................................................................................................23
3.2.1 Basics of LAN .............................................................................................................23
3.2.2 General Setup.............................................................................................................25
3.2.3 Static Route................................................................................................................27
3.2.4 VLAN/Rate Control......................................................................................................31
3.3 NAT...................................................................................................................................32
3.3.1 Port Redirection ..........................................................................................................33
3.3.2 DMZ Host....................................................................................................................35
3.3.3 Open Ports..................................................................................................................37
3.4 Firewall .............................................................................................................................39
3.4.1 Basics for Firewall.......................................................................................................39
3.4.2 General Setup.............................................................................................................42
3.4.3 Filter Setup..................................................................................................................43
3.4.4 IM Blocking.................................................................................................................46
3.4.5 P2P Blocking...............................................................................................................47

Vigor2800 Series User’s Guide
iv
3.4.6 DoS Defense...............................................................................................................48
3.4.7 URL Content Filter.......................................................................................................50
3.4.8 Web Content Filter......................................................................................................52
3.5 Applications.......................................................................................................................53
3.5.1 Dynamic DNS .............................................................................................................53
3.5.2 Schedule.....................................................................................................................55
3.5.3 RADIUS......................................................................................................................57
3.5.4 UPnP..........................................................................................................................58
3.5.5 Quality of Service........................................................................................................59
3.6 VPN and RemoteAccess ..................................................................................................64
3.6.1 Remote Access Control...............................................................................................64
3.6.2 PPP General Setup.....................................................................................................64
3.6.3 IPSec General Setup...................................................................................................66
3.6.4 IPSec Peer Identity......................................................................................................67
3.6.5 Remote User Profiles..................................................................................................68
3.6.6 LAN to LAN Profiles....................................................................................................71
3.6.7 VPN Connection Management....................................................................................78
3.7 Certificate Management.....................................................................................................80
3.7.1 Local Certificate..........................................................................................................80
3.7.2 Trusted CA Certificate.................................................................................................81
3.8 VoIP..................................................................................................................................82
3.8.1 DialPlan......................................................................................................................84
3.8.2 SIP Accounts ..............................................................................................................86
3.8.3 Phone Settings............................................................................................................90
3.8.4 Status .........................................................................................................................93
3.9 WLAN...............................................................................................................................94
3.9.1 Basic Concepts...........................................................................................................94
3.9.2 General Settings .........................................................................................................96
3.9.3 Security.......................................................................................................................98
3.9.4 Access Control..........................................................................................................100
3.9.5 Station List................................................................................................................101
3.10 System Maintenance.....................................................................................................102
3.10.1 System Status.........................................................................................................102
3.10.2 Administrator Password...........................................................................................103
3.10.3 Configuration Backup..............................................................................................103
3.10.4 Syslog/Mail Alert .....................................................................................................105
3.10.5 Time and Date.........................................................................................................107
3.10.6 Management Setup.................................................................................................108
3.10.7 Reboot System........................................................................................................109
3.10.8 Firmware Upgrade (TFTP).......................................................................................109
3.11 Diagnostics....................................................................................................................110
3.11.1 WAN Connection.....................................................................................................110
3.11.2 Dial-out Triggerred ..................................................................................................111
3.11.3 Routing Table..........................................................................................................111
3.11.4 ARP Cache Table....................................................................................................112
3.11.5 DHCP Table............................................................................................................112
3.11.6 NAT Sessions Table................................................................................................113
3.11.7 ADSL Spectrum Analysis.........................................................................................114
4
Application and Examples............................................................................115

Vigor2800 Series User’s Guide v
4.1 Create a LAN-to-LAN Connection Between Remote Office and Headquarter...................115
4.2 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter ......122
4.3 QoS Setting Example......................................................................................................126
4.4 LAN – Created by Using NAT..........................................................................................128
4.5 Calling Scenario for VoIPfunction....................................................................................131
4.5.1 Calling via SIP Sever.................................................................................................131
4.5.2 Peer-to-Peer Calling..................................................................................................133
4.6 Upgrade Firmware for Your Router ..................................................................................134
4.7 Request a certificate from a CA server on Windows CA Server........................................136
4.8 Request a CA Certificate and Set as Trusted on Windows CA Server...............................139
5
Trouble Shooting...........................................................................................143
5.1 Checking If the Hardware Status Is OK or Not..................................................................143
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not..................143
5.3 Pinging the Router from Your Computer...........................................................................146
5.4 Checking If the ISP Settings are OK or Not......................................................................148
5.5 Backing to Factory Default Setting If Necessary...............................................................149
5.6 Contacting Your Dealer....................................................................................................150

Vigor2800 Series User’s Guide 1
1
P Pr re ef fa ac ce e
Targeting requirement for residential, SOHO (Small Office and Home Office) and business
users, the Vigor2800 series is an ADSL2/2+ enabled integrated access device. With
downstream speed up to 12Mbps (ADSL2) or 24Mbps (ADSL2+), the Vigor2800V/VG
provides exceptional bandwidth for Internet access.
To secure your network, the Vigor2800 series provides an advanced firewall with advanced
features, such as NAT with multi VPN pass-through, Stateful Packet Inspection (SPI) to offer
network reliability by detecting and prohibiting malicious penetrating packets,
user-configurable web filtering for parental control against network abuse etc.
Vigor2800 series is embedded with an 802.11g compliant wireless module which provides
wireless LAN access with data rate as much as 108Mpbs, SuperG. As for data privacy of
wireless network, the Vigor2800 series can encode all transmissions data with standard WEP
and industrial strength WPA2 (IEEE 802.11i) encryption. Additional features include Wireless
Client List and MAC Address Control for maintaining control over user’s authorization in
your network, and Hidden SSID for being invisible to outside intruders scanning.
1
1. .1 1 L LE ED D I In nd di ic ca at to or rs s a an nd d C Co on nn ne ec ct to or rs s
The displays of LED indicators and connectors for the routers are different slightly.

Vigor2800 Series User’s Guide
2
1
1. .1 1. .1 1 F Fo or r V Vi ig go or r2 28 80 00 0
ACT
QoS
P2P
Firewall VPN Printer DSL P1 P2 P3 P4
LAN
Factory
Reset
DSL
P1P2P3
P4
PWR
Printer
L
LE ED D E Ex xp pl la an na at ti io on n
LED Status Explanation
Blinking The router is powered on and running properly. ACT
(Activity) On The router is powered on.
On The QoS function is active. QoS
Off The QoS function is inactive.
On The P2P function is active.P2P
Blinking Starts to prohibit P2P data.
VPN On The VPN tunnel is launched.
DSL On The ADSL, ADSL2/2+ line is connected.
Printer On The USB interface printer is ready.
Orange A normal 10Mbps connection is through its
corresponding port.
Green A normal 100Mbps connection is through its
corresponding port.
LAN (P1, P2,
P3, P4)
Blinking Ethernet packets are transmitting.
C
Co on nn ne ec ct to or r E Ex xp pl la an na at ti io on n
Interface Description
Printer Connecter for a USB printer.
PWR Connecter for a power adapter with 12-15VDC.
ON/OFF Power Switch.
LAN P4 – P1 Connecters for local networked devices.
DSL Connecter for accessing Internet with the ADSL,ADSL2/2+ line
Factory Reset Restore the default settings.
Usage: Turn on the router (ACT LED is blinking). Press the hole and
keep for more than 5 seconds. When you see the ACT LED begins to
blink rapidly than usual, release the button. Then the router will restart
with the factory default configuration.

Vigor2800 Series User’s Guide 3
1
1. .1 1. .2 2 F Fo or r V Vi ig go or r2 28 80 00 0G G
ACT
QoS
P2P
Firewall WLAN Printer DSL P1 P2 P3 P4
LAN
Factory
Reset
DSL
P1P2P3
P4
PWR
Printer
L
LE ED D E Ex xp pl la an na at ti io on n
LED Status Explanation
Blinking The router is powered on and running properly.
ACT (Activity) On The router is powered on.
On The QoS function is active.
QoS Off The QoS function is inactive.
On The P2P function is active.
P2P Blinking Starts to prohibit P2P data.
On The DoS function is enabled.Firewall Blinking When encountered DoS attacks.
On Wireless access point is ready.
Blinking Wireless traffic goes through.
WLAN
Off Wireless access point is turned off.
DSL On The ADSL, ADSL2/2+ line is connected.
Printer On The USB interface printer is ready.
Orange A normal 10Mbps connection is through its corresponding
port.
Green A normal 100Mbps connection is through its corresponding
port.
LAN (P1, P2,
P3, P4)
Blinking Ethernet packets are transmitting.
C
Co on nn ne ec ct to or r E Ex xp pl la an na at ti io on n
Interface Description
Printer Connecter for a USB printer.
PWR Connecter for a power adapter with 12-15VDC.
ON/OFF Power Switch.
LAN P4 – P1 Connecters for local networked devices.
DSL Connecter for accessing Internet with the ADSL,ADSL2/2+ line
Factory Reset Restore the default settings.
Usage: Turn on the router (ACT LED is blinking). Press the hole and keep for
more than 5 seconds. When you see the ACT LED begins to blink rapidly than
usual, release the button. Then the router will restart with the factory default
configuration.

Vigor2800 Series User’s Guide
4
1
1. .1 1. .3 3 F Fo or r V Vi ig go or r2 28 80 00 0V V
L
LE ED D E Ex xp pl la an na at ti io on n
LED Status Explanation
Blinking The router is powered on and running properly. ACT
(Activity) On The router is powered on.
On The QoS function is active. QoS
Off The QoS function is inactive.
On The phone is off hook (the handset of phone is hanging).FXS1/FXS2
Blinking A phone call is incoming.
VPN On The VPN tunnel is launched.
DSL On The ADSL, ADSL2/2+ line is connected.
Printer On The USB interface printer is ready.
Orange A normal 10Mbps connection is through its corresponding
port.
Green A normal 100Mbps connection is through its
corresponding port.
LAN (P1, P2,
P3, P4)
Blinking Ethernet packets are transmitting.
C
Co on nn ne ec ct to or r E Ex xp pl la an na at ti io on n
Interface Description
Printer Connecter for a USB printer.
PWR Connecter for a power adapter with 12-15VDC.
ON/OFF Power Switch.
FXS2 & FXS1
Connecters for telephone set and analog phone with VoIP
communication.
LAN P4 – P1 Connecters for local networked devices.
DSL Connecter for accessing Internet with the ADSL,ADSL2/2+ line
Factory Reset Restore the default settings.
Usage: Turn on the router (ACT LED is blinking). Press the hole and
keep for more than 5 seconds. When you see the ACT LED begins to
blink rapidly than usual, release the button. Then the router will restart
with the factory default configuration.

Vigor2800 Series User’s Guide 5
1
1. .1 1. .4 4 F Fo or r V Vi ig go or r2 28 80 00 0V VG G
L
LE ED D E Ex xp pl la an na at ti io on n
LED Status Explanation
Blinking The router is powered on and running properly. ACT
(Activity) On The router is powered on.
On The QoS function is active. QoS
Off The QoS function is inactive.
On The phone is off hook (the handset of phone is hanging).FXS1/FXS2
Blinking A phone call is incoming.
On Wireless access point is ready.
Blinking Wireless traffic goes through.
WLAN
Off Wireless access point is turned off.
DSL On The ADSL, ADSL2/2+ line is connected.
Printer On The USB interface printer is ready.
Orange A normal 10Mbps connection is through its corresponding
port.
Green A normal 100Mbps connection is through its
corresponding port.
LAN (P1, P2,
P3, P4)
Blinking Ethernet packets are transmitting.
C
Co on nn ne ec ct to or r E Ex xp pl la an na at ti io on n
Interface
Description
Printer Connecter for a USB printer.
PWR Connecter for a power adapter with12-15VDC.
ON/OFF Power Switch.
FXS2 & FXS1
Connecters for telephone set and analog phone with VoIP
communication.
LAN P4 – P1
Connecters for local networked devices.
DSL Connecter for accessing Internet with the ADSL,ADSL2/2+ line
Factory Reset Restore the default settings.
Usage: Turn on the router (ACT LED is blinking). Press the hole and
keep for more than 5 seconds. When you see the ACT LED begins to
blink rapidly than usual, release the button. Then the router will restart
with the factory default configuration.

Vigor2800 Series User’s Guide
6
1
1. .2 2 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
Before starting to configure the router, you have to connect your devices correctly.
1. Connect the DSL interface to the external ADSL splitter with an ADSL line cable.
2. Connect one port of 4-port switch to your computer with a RJ-45 cable. This device
allows you to connect 4 PCs directly.
3. Connect one end of the power cord to the power port of this device. Connect the other
end to the wall outlet of electricity.
4. Connect the telephone sets with phone lines (for using VoIP function). For the user of the
model without VoIP ports, skip this step.
5. Power on the router.
6. Check the ACT LED to assure network connections.
(For the detailed information of LED status, please refer to section 1.1.)
Caution: Each of the FXS ports can be connected to an analog phone only. Do not
connect the FXS ports to the telephone wall jack. This connection might damage your
router.

Vigor2800 Series User’s Guide 7
2
C Co on nf fi ig gu ur ri in ng g B Ba as si ic c S Se et tt ti in ng gs s
For use the router properly, it is necessary for you to change the password of web
configuration for security and adjust primary basic settings.
This chapter explains how to setup a password for an administrator and how to adjust basic
settings for accessing Internet successfully. Be aware that only the administrator can change
the router configuration.
2
2. .1 1 C Ch ha an ng gi in ng g P Pa as ss sw wo or rd d
To change the password for this device, you have to access into the web browse with default
password first.
1. Make sure your computer connects to the router correctly.
Notice: You may either simply set up your computer to get IP dynamically
from the router or set up the IP address of the computer to be the same
subnet as the default IP address of Vigor router 192.168.1.1. For the
detailed information, please refer to the later section - Trouble Shooting of
this guide.
2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password. Please type default values (both username and
password are Null) on the window for the first time accessing and click OK for next
screen.
3. Now, the Main Screen will pop up.

Vigor2800 Series User’s Guide
8
4. Go to System Maintenance page and choose Administrator Password.
5. Enter the login password (the default is blank) on the field of Old Password. Type a new
one in the field of New Password and retype it on the field of Retype New Password.
Then click OK to continue.
6. Now, the password has been changed. Next time, use the new password to access the
Web Configurator for this router.

Vigor2800 Series User’s Guide 9
2
2. .2 2 Q Qu ui ic ck k S St ta ar rt t W Wi iz za ar rd d
If your router can be under an environment with high speed NAT, the configuration provide
here can help you to deploy and use the router quickly. The first screen of Quick Start
Wizard is entering login password. After typing the password, please click Next.
2
2. .2 2. .1 1 A Ad dj ju us st ti in ng g P Pr ro ot to oc co ol l/ /E En nc ca ap ps su ul la at ti io on n
In the Quick Start Wizard, you can configure the router to access the Internet with different
protocol/modes such as PPPoE, PPPoA, Bridged IP, or Routed IP. The router supports the
DSL WAN interface for Internet access.
Now, you have to select an appropriate WAN connection type for connecting to the Internet
through this router according to the settings that your ISP provided.
VPI Stands for Virtual Path Identifier. It is an 8-bit header inside each
ATM cell that indicates where the cell should be routed. The ATM,
is a method of sending data in small packets of fixed sizes. It is
used for transferring data to client computers.
VCI Stands for Virtual Channel Identifier. It is a 16-bit field inside
ATM cell’s header that indicates the cell’s next destination as it

Vigor2800 Series User’s Guide
10
travels through the network. A virtual channel is a logical
connection between two end devices on the network.
Protocol/Encapsulation Select an IP mode for this WAN interface. There are several
available modes for Internet access such as PPPoE, PPPoA,
Bridged IP and Routed IP.
Fixed IP Click Yes to specify a fixed IP for the router. Otherwise, click No
(Dynamic IP) to allow the router choosing a dynamic IP. If you
choose No, the following IP Address, Subnet Mask and Default
Gateway will not be changed.
IP Address Assign an IP address for the protocol that you select.
Subnet Mask Assign a subnet mask value for the protocol of Routed IP and
Bridged IP.
Default Gateway Assign an IP address to the gateway for the protocol of Routed IP
and Bridged IP.
Primary DNS Assign an IP address to the primary DNS.
Second DNS Assign an IP address to the secondary DNS.
2
2. .2 2. .2 2 P PP PP Po oE E/ /P PP PP Po oA A
PPPoE stands for Point-to-Point Protocol over Ethernet.It relies on two widely accepted
standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a
common broadband medium, such as a single DSL line, wireless device or cable modem. All
the users over the Ethernet can share a common connection. And the PPPoA stands for
Point-to-Point Protocol over ATM. PPPoA uses the PPP dial-up protocol with ATM as the
transport.
PPPoE or PPPoA is used for most of DSL modem users. All local users can share one PPPoE
or PPPoA connection for accessing the Internet. Your service provider will provide you
information about user name, password, and authentication mode.
If your ISP provides you the PPPoE or PPPoA connection, please select PPPoE or PPPoA
for this router. The following page will be shown:
ISP Name Assign a specific name for ISP requirement.
User Name Assign a specific valid user name provided by the ISP.

Vigor2800 Series User’s Guide 11
Password Assign a valid password provided by the ISP.
Confirm Password Retype the password.
Always On Check this box to allow the router connecting to Internet forever.
Idle Timeout Type in the value (unit is second) as the idle timeout of the connection.
When the time is expired, the internet connection will be dropped
immediately.
Click Next for viewing summary of such connection.
Click Finish. The online status of this protocol will be shown as below.
2
2. .2 2. .3 3 B Br ri id dg ge ed d I IP P
Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for
this protocol.

Vigor2800 Series User’s Guide
12
After finishing the settings in this page, click Next to see the following page.
Click Finish. The online status of this protocol will be shown as below.

Vigor2800 Series User’s Guide 13
2
2. .2 2. .4 4 R Ro ou ut te ed d I IP P
Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for
this protocol.
After finishing the settings in this page, click Next to see the following page.
Click Finish. The online status of this protocol will be shown as below.

Vigor2800 Series User’s Guide
14
2
2. . O On nl li in ne e S St ta at tu us s
The online status shows the system status, WAN status, ADSL Information and other status
related to this router within one page. If you select PPPoE or PPPoA as the protocol, you will
find out a button of Dial PPPoE or Dial PPPoE in the Online Status web page.
Online status for PPPoA/PPPoE
Online status for Bridge