Draytek Vigor2925 Series User manual

Vigor2925 Series User’s Guide ii

Vigor2925 Series User’s Guide
iii
Vigor2925 Series
Dual-WAN Security Router
User’s Guide
Version: 3.1
Firmware Version: V3.8.0
(For future update, please visit DrayTek web site)
Date: April 15, 2015

Vigor2925 Series User’s Guide iv
Intellectual Property Rights (IPR) Information
Copyrights
©All rights reserved. This publication contains information that is protected by
copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval
system, or translated into any language without written permission from the copyright
holders.
Trademarks
The following trademarks are used in this document:
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are
trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Inc.
Other products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
Read the installation guide thoroughly before you set up the router.
The router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
Do not place the router in a damp or humid place, e.g. a bathroom.
The router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
Do not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
Do not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
Keep the package out of reach of children.
When you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner Web registration is preferred. You can register your Vigor router via
http://www.draytek.com.
Firmware & Tools
Updates Due to the continuous evolution of DrayTek technology, all routers will be regularly
upgraded. Please consult the DrayTek web site for more information on newest
firmware, tools and documents.
http://www.draytek.com

Vigor2925 Series User’s Guide
v
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, Hukou Township, Hsinchu Industrial Park, Hsinchu County, Taiwan 303
Product: Vigor2925 Series Router
DrayTek Corp. declares that Vigor2925 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.
This product is designed for 2.4GHz /5GHz WLAN network throughout the EC region.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the equipment off and
on, the user is encouraged to try to correct the interference by one of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
The antenna/transmitter should be kept at least 20 cm away from human body.
More update, please visit www.draytek.com.

Vigor2925 Series User’s Guide vi

Vigor2925 Series User’s Guide
vii
T
Ta ab bl le e o of f C Co on nt te en nt ts s
Introduction...................................................................................................1
1.1 Web Configuration Buttons Explanation................................................................................. 2
1.2 Comparison Chart................................................................................................................... 2
1.3 LED Indicators and Connectors.............................................................................................. 3
1.3.1 For Vigor2925 / Vigor2925F............................................................................................. 3
1.3.2 For Vigor2925ac / Vigor2925n-plus / Vigor2925n / Vigor2925Fn..................................... 5
1.3.3 For Vigor2925Vac / Vigor2925Vn-plus............................................................................. 8
1.4 Hardware Installation ............................................................................................................ 10
1.5 Printer Installation ................................................................................................................. 12
1.6 Accessing Web Page............................................................................................................ 19
1.7 Changing Password.............................................................................................................. 20
1.8 Introducing Dashboard.......................................................................................................... 21
1.8.1 Virtual Panel ................................................................................................................... 22
1.8.2 Name with a Link............................................................................................................ 23
1.8.3 Quick Access for Common Used Menu.......................................................................... 23
1.8.4 GUI Map ......................................................................................................................... 24
1.8.5 Web Console .................................................................................................................. 25
1.8.6 Config Backup ................................................................................................................ 26
1.9 Online Status......................................................................................................................... 26
1.9.1 Physical Connection.......................................................................................................26
1.9.2 Virtual WAN.................................................................................................................... 29
1.10 Saving Configuration........................................................................................................... 29
Quick Setup.................................................................................................31
2.1 Quick Start Wizard ................................................................................................................ 31
2.1.1 For WAN1/WAN2 (Ethernet) .......................................................................................... 33
2.1.2 For WAN3/WAN4 (USB)................................................................................................. 41
2.2 Service Activation Wizard...................................................................................................... 43
2.3 VPN Client Wizard ................................................................................................................ 46
2.4 VPN Server Wizard............................................................................................................... 52
2.5 Wireless Wizard.................................................................................................................... 57
2.6 VoIP Wizard........................................................................................................................... 61
2.7 Registering Vigor Router....................................................................................................... 63
Tutorials and Applications.........................................................................67

Vigor2925 Series User’s Guide viii
3.1 How to configure settings for IPv6 Service in Vigor2925...................................................... 67
3.2 How can I get the files from USB storage device connecting to Vigor router?..................... 80
3.3 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPSec Tunnel
(Main Mode)................................................................................................................................ 83
3.4 How to Optimize the Bandwidth through QoS Technology................................................... 87
3.5 QoS Setting Example............................................................................................................ 91
3.6 How to use Landing Page Feature ....................................................................................... 95
3.7 How to Send a Notification to Specified Phone Number via SMS Service in WAN
Disconnection.............................................................................................................................. 99
3.8 How to Create an Account for MyVigor............................................................................... 103
3.8.1 Create an Account via Vigor Router............................................................................. 103
3.8.2 Create an Account via MyVigor Web Site .................................................................... 107
3.9 How to Configure Certain Computers Accessing to Internet...............................................111
3.10 How to Block Facebook ServiceAccessed by the Users via Web Content Filter / URL
Content Filter..............................................................................................................................115
3.11 How to Setup Address Mapping........................................................................................ 121
3.12 How to Setup Load Balance for Packets? ........................................................................ 125
3.13 How to Authenticate Clients via User Management.......................................................... 127
3.14 How to use DNS Filter....................................................................................................... 136
3.15 How to use AP Management function (in Vigor2925) to check AP status and deploy WLAN
profile......................................................................................................................................... 139
3.16 CVM Application - How to manage the CPE (router) through Vigor2925 series? ............ 142
3.17 CVM Application - How to build the VPN between remote devices and Vigor2925 series?
.................................................................................................................................................. 146
3.18 CVM Application - How to upgrade CPE firmware through Vigor2925 series?................ 148
Advanced Configuration..........................................................................151
4.1 WAN.................................................................................................................................... 151
4.1.1 Basics of Internet Protocol (IP) Network....................................................................... 151
4.1.2 General Setup............................................................................................................... 153
4.1.3 Internet Access............................................................................................................. 157
4.1.4 Multi-VLAN.................................................................................................................... 180
4.1.5 WAN Budget................................................................................................................. 184
4.2 LAN ..................................................................................................................................... 187
4.2.1 Basics of LAN............................................................................................................... 187
4.2.2 General Setup............................................................................................................... 189
4.2.3 Static Route.................................................................................................................. 204
4.2.4 VLAN............................................................................................................................. 209
4.2.5 Bind IP to MAC............................................................................................................. 213
4.2.6 LAN Port Mirror............................................................................................................. 215
4.2.7 Wired 802.1x................................................................................................................. 216
4.2.8 Web Portal Setup.......................................................................................................... 217
4.3 Load-Balance /Route Policy................................................................................................ 219
4.4 NAT ..................................................................................................................................... 231

Vigor2925 Series User’s Guide
ix
4.4.1 Port Redirection............................................................................................................ 232
4.4.2 DMZ Host...................................................................................................................... 235
4.4.3 Open Ports.................................................................................................................... 239
4.4.4 Port Triggering.............................................................................................................. 241
4.5 Hardware Acceleration........................................................................................................ 244
4.5.1 Setup............................................................................................................................. 244
4.6 Firewall................................................................................................................................ 246
4.6.1 Basics for Firewall......................................................................................................... 246
4.6.2 General Setup............................................................................................................... 248
4.6.3 Filter Setup ................................................................................................................... 253
4.6.4 DoS Defense ................................................................................................................ 261
4.7 User Management............................................................................................................... 265
4.7.1 General Setup............................................................................................................... 266
4.7.2 User Profile................................................................................................................... 267
4.7.3 User Group................................................................................................................... 272
4.7.4 User Online Status........................................................................................................ 273
4.8 Objects Settings.................................................................................................................. 274
4.8.1 IP Object....................................................................................................................... 275
4.8.2 IP Group ....................................................................................................................... 278
4.8.3 IPv6 Object................................................................................................................... 279
4.8.4 IPv6 Group.................................................................................................................... 281
4.8.5 Service Type Object ..................................................................................................... 282
4.8.6 Service Type Group...................................................................................................... 284
4.8.7 Keyword Object ............................................................................................................ 285
4.8.8 Keyword Group............................................................................................................. 287
4.8.9 File Extension Object.................................................................................................... 288
4.8.10 SMS/Mail Service Object............................................................................................ 290
4.8.11 Notification Object....................................................................................................... 295
4.9 CSM Profile......................................................................................................................... 297
4.9.1 APP Enforcement Profile.............................................................................................. 298
4.9.2 APPE Signature Upgrade............................................................................................. 302
4.9.3 URL Content Filter Profile............................................................................................. 304
4.9.4 Web Content Filter Profile............................................................................................. 308
4.9.5 DNS Filter Profile.......................................................................................................... 312
4.10 Bandwidth Management ................................................................................................... 314
4.10.1 Sessions Limit............................................................................................................. 314
4.10.2 Bandwidth Limit .......................................................................................................... 316
4.10.3 Quality of Service........................................................................................................ 318
4.11 Applications ....................................................................................................................... 327
4.11.1 Dynamic DNS............................................................................................................. 327
4.11.2 LAN DNS / DNS Forwarding ...................................................................................... 330
4.11.3 Schedule..................................................................................................................... 333
4.11.4 RADIUS/TACACS+ .................................................................................................... 336
4.11.5 Active Directory/ LDAP............................................................................................... 338
4.11.6 UPnP........................................................................................................................... 341
4.11.7 IGMP........................................................................................................................... 342
4.11.8 Wake on LAN.............................................................................................................. 343
4.11.9 SMS / Mail Alert Service............................................................................................. 344
4.11.10 Bonjour ..................................................................................................................... 346
4.12 VPN and Remote Access.................................................................................................. 349
4.12.1 Remote Access Control.............................................................................................. 350
4.12.2 PPP General Setup .................................................................................................... 350

Vigor2925 Series User’s Guide x
4.12.3 IPSec General Setup.................................................................................................. 352
4.12.4 IPSec Peer Identity..................................................................................................... 354
4.12.5 Remote Dial-in User ................................................................................................... 356
4.12.6 LAN to LAN................................................................................................................. 359
4.12.7 VPN TRUNK Management......................................................................................... 371
4.12.8 Connection Management ........................................................................................... 380
4.13 Certificate Management.................................................................................................... 381
4.13.1 Local Certificate.......................................................................................................... 381
4.13.2 Trusted CA Certificate ................................................................................................ 385
4.13.3 Certificate Backup....................................................................................................... 387
4.14 Central VPN Management................................................................................................ 388
4.14.1 General Setup............................................................................................................. 388
4.14.2 CPE Management ...................................................................................................... 391
4.14.3 VPN Management ...................................................................................................... 397
4.14.4 Log & Alert.................................................................................................................. 399
4.15 Central AP Management................................................................................................... 400
4.15.1 Status.......................................................................................................................... 400
4.15.2 WLAN Profile.............................................................................................................. 401
4.15.3 AP Maintenance ......................................................................................................... 405
4.15.4 Traffic Graph............................................................................................................... 406
4.15.5 Rogue AP Detection................................................................................................... 406
4.15.6 Load Balance.............................................................................................................. 410
4.15.7 Function Support List.................................................................................................. 411
4.16 VoIP................................................................................................................................... 412
4.16.1 General Setting........................................................................................................... 414
4.16.2 SIP Accounts.............................................................................................................. 416
4.16.3 DialPlan ...................................................................................................................... 420
4.16.4 Phone Settings ........................................................................................................... 428
4.16.4 Status.......................................................................................................................... 432
4.17 Wireless LAN(2.4GHz/5GHz) ........................................................................................... 433
4.17.1 Basic Concepts........................................................................................................... 433
4.17.2 General Setup............................................................................................................. 436
4.17.3 Security....................................................................................................................... 439
4.17.4 Access Control............................................................................................................ 441
4.17.5 WPS............................................................................................................................ 442
4.17.6 WDS............................................................................................................................ 445
4.17.7 Advanced Setting........................................................................................................ 448
4.17.8 AP Discovery.............................................................................................................. 450
4.17.9 Station List.................................................................................................................. 451
4.17.10 Station Control.......................................................................................................... 451
4.18 SSL VPN........................................................................................................................... 453
4.18.1 General Setup............................................................................................................. 453
4.18.2 SSL Web Proxy .......................................................................................................... 454
4.18.3 SSL Application .......................................................................................................... 455
4.18.4 User Account.............................................................................................................. 458
4.18.5 User Group................................................................................................................. 462
4.18.6 Online User Status...................................................................................................... 464
4.19 USB Application ................................................................................................................ 465
4.19.1 USB General Settings................................................................................................. 465
4.19.2 USB User Management.............................................................................................. 467
4.19.3 File Explorer................................................................................................................ 469
4.19.4 USB Device Status..................................................................................................... 470
4.19.5 Temperature Sensor................................................................................................... 471

Vigor2925 Series User’s Guide
xi
4.19.6 Modem Support List.................................................................................................... 472
4.19.7 SMB Client Support List.............................................................................................. 473
4.20 System Maintenance......................................................................................................... 474
4.20.1 System Status............................................................................................................. 474
4.20.2 TR-069........................................................................................................................ 476
4.20.3 Administrator Password.............................................................................................. 478
4.20.4 User Password ........................................................................................................... 480
4.20.5 Login Page Greeting................................................................................................... 483
4.20.6 Configuration Backup ................................................................................................. 485
4.20.7 Syslog/Mail Alert......................................................................................................... 488
4.20.8 Time and Date............................................................................................................ 491
4.20.9 SNMP.......................................................................................................................... 492
4.20.10 Management............................................................................................................. 494
4.20.11 Reboot System......................................................................................................... 497
4.20.12 Firmware Upgrade.................................................................................................... 498
4.20.13 Activation.................................................................................................................. 499
4.21 Diagnostics........................................................................................................................ 500
4.21.1 Dial-out Triggering...................................................................................................... 501
4.21.2 Routing Table ............................................................................................................. 502
4.21.3 ARP Cache Table....................................................................................................... 503
4.21.4 IPv6 Neighbour Table................................................................................................. 503
4.21.5 DHCP Table................................................................................................................ 504
4.21.6 NAT Sessions Table................................................................................................... 505
4.21.7 DNS Cache Table....................................................................................................... 506
4.21.8 Ping Diagnosis............................................................................................................ 507
4.21.9 Data Flow Monitor....................................................................................................... 508
4.21.10 Traffic Graph............................................................................................................. 511
4.21.11 Trace Route.............................................................................................................. 512
4.21.12 Syslog Explorer......................................................................................................... 513
4.21.13 IPv6 TSPC Status..................................................................................................... 514
4.22 External Devices............................................................................................................... 515
Trouble Shooting......................................................................................516
5.1 Checking If the Hardware Status Is OK or Not.................................................................... 516
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 517
5.3 Pinging the Router from Your Computer............................................................................. 520
5.4 Checking If the ISP Settings are OK or Not........................................................................ 521
5.5 Problems for 3G/4G Network Connection........................................................................... 522
5.6 Backing to Factory Default Setting If Necessary ................................................................ 522
5.7 Contacting DrayTek............................................................................................................. 524
Telnet Command Reference..........................................................................................526
Accessing Telnet of Vigor2925.................................................................................................. 526
Telnet Command: bpa........................................................................................................... 527
Telnet Command: csm appe prof.......................................................................................... 528
Telnet Command: csm appe set............................................................................................ 528
Telnet Command: csm appe show........................................................................................ 529
Telnet Command: csm appe config....................................................................................... 530
Telnet Command: csm ucf..................................................................................................... 531

Vigor2925 Series User’s Guide xii
Telnet Command: csm ucf obj INDEX uac............................................................................ 532
Telnet Command: csm ucf obj INDEX wf.............................................................................. 534
Telnet Command: csm wcf.................................................................................................... 535
Telnet Command: csm dnsf................................................................................................... 537
Telnet Command: ddns log.................................................................................................... 538
Telnet Command: ddns time.................................................................................................. 538
Telnet Command: dos ........................................................................................................... 539
Telnet Command: exit............................................................................................................ 540
Telnet Command: Internet..................................................................................................... 540
Telnet Command: ip pubsubnet............................................................................................. 541
Telnet Command: ip pubaddr................................................................................................ 541
Telnet Command: ip pubmask............................................................................................... 542
Telnet Command: ip aux........................................................................................................ 542
Telnet Command: ip addr...................................................................................................... 543
Telnet Command: ip nmask................................................................................................... 544
Telnet Command: ip arp........................................................................................................ 544
Telnet Command: ip dhcpc.................................................................................................... 545
Telnet Command: ip ping....................................................................................................... 546
Telnet Command: ip tracert................................................................................................... 546
Telnet Command: ip telnet..................................................................................................... 547
Telnet Command: ip rip ......................................................................................................... 547
Telnet Command: ip wanrip................................................................................................... 548
Telnet Command: ip route..................................................................................................... 549
Telnet Command: ip igmp_proxy........................................................................................... 550
Telnet Command: ip igmp_snoop.......................................................................................... 550
Telnet Command: ip wanaddr................................................................................................ 552
Telnet Command: ip wanttr.................................................................................................... 552
Telnet Command: ip dmz....................................................................................................... 552
Telnet Command: ip dmzswitch............................................................................................. 553
Telnet Command: ip session................................................................................................. 553
Telnet Command: ip bandwidth............................................................................................. 554
Telnet Command: ip bindmac................................................................................................ 555
Telnet Command: ip maxnatuser........................................................................................... 557
Telnet Command: ip lanDNSRes .......................................................................................... 557
Telnet Command: ip6 addr.................................................................................................... 558
Telnet Command: ip6 dhcp req_opt...................................................................................... 559
Telnet Command: ip6 dhcp client.......................................................................................... 560
Telnet Command: ip6 dhcp server ........................................................................................ 561
Telnet Command: ip6 internet ............................................................................................... 562
Telnet Command: ip6 neigh................................................................................................... 563
Telnet Command: ip6 pneigh................................................................................................. 564
Telnet Command: ip6 route................................................................................................... 564
Telnet Command: ip6 ping..................................................................................................... 565
Telnet Command: ip6 tspc..................................................................................................... 566
Telnet Command: ip6 radvd .................................................................................................. 566
Telnet Command: ip6 mngt ................................................................................................... 567
Telnet Command: ip6 online.................................................................................................. 568
Telnet Command: ip6 aiccu................................................................................................... 569
Telnet Command: ip6 ntp ...................................................................................................... 569
Telnet Command: ipf view..................................................................................................... 570
Telnet Command: ipf set........................................................................................................ 570
Telnet Command: ipf rule ...................................................................................................... 572
Telnet Command: ipf flowtrack.............................................................................................. 576
Telnet Command: Log........................................................................................................... 577
Telnet Command: mngt ftpport.............................................................................................. 578
Telnet Command: mngt httpport............................................................................................ 578
Telnet Command: mngt httpsport.......................................................................................... 578
Telnet Command: mngt telnetport......................................................................................... 579
Telnet Command: mngt sshport ............................................................................................ 579
Telnet Command: mngt ftpserver.......................................................................................... 579

Vigor2925 Series User’s Guide
xiii
Telnet Command: mngt noping ............................................................................................. 580
Telnet Command: mngt defenseworm .................................................................................. 581
Telnet Command: mngt rmtcfg.............................................................................................. 581
Telnet Command: mngt echoicmp......................................................................................... 582
Telnet Command: mngt accesslist ........................................................................................ 582
Telnet Command: mngt snmp ............................................................................................... 583
Telnet Command: msubnet switch ........................................................................................ 584
Telnet Command: msubnet addr........................................................................................... 584
Telnet Command: msubnet nmask........................................................................................ 585
Telnet Command: msubnet status......................................................................................... 585
Telnet Command: msubnet dhcps......................................................................................... 585
Telnet Command: msubnet nat ............................................................................................. 586
Telnet Command: msubnet gateway..................................................................................... 586
Telnet Command: msubnet ipcnt........................................................................................... 587
Telnet Command: msubnet talk............................................................................................. 587
Telnet Command: msubnet startip ........................................................................................ 588
Telnet Command: msubnet pppip ......................................................................................... 588
Telnet Command: msubnet nodetype ................................................................................... 589
Telnet Command: msubnet primWINS.................................................................................. 589
Telnet Command: msubnet secWINS................................................................................... 590
Telnet Command: msubnet tftp ............................................................................................. 590
Telnet Command: msubnet mtu ............................................................................................ 591
Telnet Command: object ip obj.............................................................................................. 591
Telnet Command: object ip grp.............................................................................................. 593
Telnet Command: object ipv6 obj.......................................................................................... 594
Telnet Command: object ipv6 grp.......................................................................................... 595
Telnet Command: object service obj ..................................................................................... 597
Telnet Command: object service grp..................................................................................... 598
Telnet Command: object kw.................................................................................................. 599
Telnet Command: object fe.................................................................................................... 600
Telnet Command: port........................................................................................................... 602
Telnet Command: portmaptime............................................................................................. 602
Telnet Command: prn............................................................................................................ 603
Telnet Command: qos setup.................................................................................................. 603
Telnet Command: qos class.................................................................................................. 605
Telnet Command: qos type.................................................................................................... 606
Telnet Command: quit ........................................................................................................... 607
Telnet Command: show lan................................................................................................... 607
Telnet Command: show dmz................................................................................................. 607
Telnet Command: show dns.................................................................................................. 608
Telnet Command: show openport ......................................................................................... 608
Telnet Command: show nat................................................................................................... 608
Telnet Command: show portmap........................................................................................... 609
Telnet Command: show pmtime............................................................................................ 609
Telnet Command: show session............................................................................................ 609
Telnet Command: show status.............................................................................................. 609
Telnet Command: show traffic............................................................................................... 610
Telnet Command: show statistic............................................................................................ 610
Telnet Command: srv dhcp dhcp2......................................................................................... 610
Telnet Command: srv dhcp public......................................................................................... 611
Telnet Command: srv dhcp dns1........................................................................................... 612
Telnet Command: srv dhcp dns2........................................................................................... 613
Telnet Command: srv dhcp frcdnsmanl................................................................................. 613
Telnet Command: srv dhcp gateway..................................................................................... 613
Telnet Command: srv dhcp ipcnt........................................................................................... 614
Telnet Command: srv dhcp off............................................................................................... 614
Telnet Command: srv dhcp on............................................................................................... 614
Telnet Command: srv dhcp relay........................................................................................... 614
Telnet Command: srv dhcp startip......................................................................................... 615
Telnet Command: srv dhcp status......................................................................................... 615

Vigor2925 Series User’s Guide xiv
Telnet Command: srv dhcp leasetime................................................................................... 616
Telnet Command: srv dhcp nodetype.................................................................................... 616
Telnet Command: srv dhcp primWINS.................................................................................. 617
Telnet Command: srv dhcp secWINS ................................................................................... 617
Telnet Command: srv dhcp expRecycleIP ............................................................................ 618
Telnet Command: srv dhcp tftp.............................................................................................. 618
Telnet Command: srv dhcp tftpdel......................................................................................... 618
Telnet Command: srv dhcp option......................................................................................... 619
Telnet Command: srv nat addrmapping................................................................................ 620
Telnet Command: srv nat dmz............................................................................................... 621
Telnet Command: srv nat ipsecpass..................................................................................... 621
Telnet Command: srv nat openport....................................................................................... 622
Telnet Command: srv nat portmap........................................................................................ 623
Telnet Command: srv nat showall ......................................................................................... 626
Telnet Command: switch -i.................................................................................................... 626
Telnet Command: switch status............................................................................................. 627
Telnet Command: sys admin................................................................................................. 627
Telnet Command: sys bonjour............................................................................................... 627
Telnet Command: sys cfg...................................................................................................... 628
Telnet Command: sys cmdlog............................................................................................... 628
Telnet Command: sys ftpd..................................................................................................... 629
Telnet Command: sys domainname...................................................................................... 629
Telnet Command: sys iface................................................................................................... 630
Telnet Command: sys name.................................................................................................. 631
Telnet Command: sys passwd............................................................................................... 631
Telnet Command: sys reboot................................................................................................. 631
Telnet Command: sys autoreboot ......................................................................................... 632
Telnet Command: sys commit............................................................................................... 632
Telnet Command: sys tftpd.................................................................................................... 632
Telnet Command: sys cc....................................................................................................... 632
Telnet Command: sys version............................................................................................... 633
Telnet Command: sys qrybuf................................................................................................. 633
Telnet Command: sys pollbuf................................................................................................ 633
Telnet Command: sys tr069................................................................................................... 634
Telnet Command: sys sip_alg ............................................................................................... 636
Telnet Command: sys license................................................................................................ 636
Telnet Command: sys fr_log.................................................................................................. 637
Telnet Command: testmail..................................................................................................... 638
Telnet Command: upnp off.................................................................................................... 638
Telnet Command: upnp on.................................................................................................... 638
Telnet Command: upnp nat................................................................................................... 638
Telnet Command: upnp service............................................................................................. 639
Telnet Command: upnp subscribe......................................................................................... 640
Telnet Command: upnp tmpvs............................................................................................... 641
Telnet Command: upnp wan.................................................................................................. 641
Telnet Command: usb list...................................................................................................... 642
Telnet Command: vigbrg on .................................................................................................. 642
Telnet Command: vigbrg off .................................................................................................. 642
Telnet Command: vigbrg status............................................................................................. 643
Telnet Command: vigbrg cfgip............................................................................................... 643
Telnet Command: vigbrg wanstatus...................................................................................... 643
Telnet Command: vigbrg wlanstatus ..................................................................................... 643
Telnet Command: vpn group................................................................................................. 644
Telnet Command: vlan off...................................................................................................... 644
Telnet Command: vlan on...................................................................................................... 644
Telnet Command: vlan pri...................................................................................................... 644
Telnet Command: vlan restart ............................................................................................... 645
Telnet Command: vlan status................................................................................................ 645
Telnet Command: vlan subnet............................................................................................... 646
Telnet Command: vlan submode........................................................................................... 646

Vigor2925 Series User’s Guide
xv
Telnet Command: vlan tagged............................................................................................... 647
Telnet Command: vlan vid..................................................................................................... 647
Telnet Command: vlan sysvid................................................................................................ 647
Telnet Command: vpn l2lset.................................................................................................. 648
Telnet Command: vpn l2lDrop............................................................................................... 649
Telnet Command: vpn dinset................................................................................................. 649
Telnet Command: vpn subnet................................................................................................ 650
Telnet Command: vpn setup.................................................................................................. 651
Telnet Command: vpn option................................................................................................. 652
Telnet Command: vpn mroute............................................................................................... 656
Telnet Command: vpn list...................................................................................................... 656
Telnet Command: vpn remote............................................................................................... 658
Telnet Command: vpn 2ndsubnet ......................................................................................... 658
Telnet Command: vpn NetBios.............................................................................................. 658
Telnet Command: vpn mss.................................................................................................... 659
Telnet Command: vpn ike...................................................................................................... 660
Telnet Command: vpn Multicast............................................................................................ 660
Telnet Command: vpn pass2nd............................................................................................. 661
Telnet Command: vpn pass2nat............................................................................................ 661
Telnet Command: wan ppp_mru ........................................................................................... 662
Telnet Command: wan mtu.................................................................................................... 662
Telnet Command: wan DF_check ......................................................................................... 663
Telnet Command: wan disable.............................................................................................. 663
Telnet Command: wan enable............................................................................................... 663
Telnet Command: wan forward.............................................................................................. 663
Telnet Command: wan status................................................................................................ 664
Telnet Command: wan modem.............................................................................................. 664
Telnet Command: wan wimax ............................................................................................... 665
Telnet Command: wan detect................................................................................................ 666
Telnet Command: wan lb....................................................................................................... 667
Telnet Command: wan mvlan................................................................................................ 667
Telnet Command: wan multifno............................................................................................. 668
Telnet Command: wan vlan................................................................................................... 669
Telnet Command: wan fiber................................................................................................... 670
Telnet Command: wptl........................................................................................................... 670
Telnet Command: wl acl........................................................................................................ 672
Telnet Command: wl config................................................................................................... 673
Telnet Command: wl set........................................................................................................ 676
Telnet Command: wl act........................................................................................................ 676
Telnet Command: wl scan..................................................................................................... 677
Telnet Command: wl stamgt.................................................................................................. 678
Telnet Command: wl iso_vpn ................................................................................................ 679
Telnet Command: wl wmm.................................................................................................... 679
Telnet Command: wl ht.......................................................................................................... 680
Telnet Command: wl restart................................................................................................... 681
Telnet Command: wl wds ...................................................................................................... 682
Telnet Command: wl btnctl.................................................................................................... 683
Telnet Command: wl iwpriv.................................................................................................... 683
Telnet Command: wl wlanconfig............................................................................................ 683
Telnet Command: wl efuse.................................................................................................... 683
Telnet Command: wl ce_cert................................................................................................. 683
Telnet Command: wl dual acl ................................................................................................ 683
Telnet Command: wl dual apscan ......................................................................................... 685
Telnet Command: wl dual cardmac....................................................................................... 685
Telnet Command: wl dual config ........................................................................................... 685
Telnet Command: wl dual restart........................................................................................... 688
Telnet Command: wl dual security ........................................................................................ 688
Telnet Command: wl dual stalist............................................................................................ 689
Telnet Command: wl dual wds............................................................................................... 689
Telnet Command: wl dual wps............................................................................................... 692

Vigor2925 Series User’s Guide xvi
Telnet Command: wol............................................................................................................ 693
Telnet Command: appqos ..................................................................................................... 693

Vigor2925 Series User’s Guide
1
I In nt tr ro od du uc ct ti io on n
N
No ot te e: : T Th hi is s i is s a a g ge en ne er ri ic c I In nt te er rn na at ti io on na al l v ve er rs si io on n o of f t th he e
u
us se er r g gu ui id de e. . S Sp pe ec ci if fi ic ca at ti io on n, , c co om mp pa at ti ib bi il li it ty y a an nd d f fe ea at tu ur re es s
v
va ar ry y b by y r re eg gi io on n. . F Fo or r s sp pe ec ci if fi ic c u us se er r g gu ui id de es s s su ui it ta ab bl le e f fo or r
y
yo ou ur r r re eg gi io on n o or r p pr ro od du uc ct t, , p pl le ea as se e c co on nt ta ac ct t l lo oc ca al l
d
di is st tr ri ib bu ut to or r. .
Vigor2925 series integrates IP layer QoS, NAT session/bandwidth management to help users
control works well with large bandwidth.
By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the
router increases the performance of VPN greatly, and offers several protocols (such as
IPSec/PPTP/L2TP) with up to 50 VPN tunnels.
The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set
firewall policy with ease. CSM (Content Security Management) provides users control and
management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before.
By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security
outside and control inside. Object-based firewall is flexible and allows your network be safe.
User Management implemented on your router firmware can allow you to prevent any
computer from accessing your Internet connection without a username or password. You can
also allocate time budgets to your employees within office network.
With the 6-port Gigabit switch on the LAN side provides extremely high speed connectivity
for the highest speed local data transfer of any server or local PCs. The tagged VLANs
(IEEE802.1Q) can mark data with a VLAN identifier. This identifier can be carried through an
onward Ethernet switch to specific ports. The specific VLAN clients can also pick up this
identifier as it is just passed to the LAN. You can set the priorities for LAN-side QoS. You can
assign each of VLANs to each of the different IP subnets that the router may also be operating,
to provide even more isolation. The said functionality is tag-based Multi-subnet
(Multiple-Private LAN Subnets).
On the Wireless-equipped models (Vigor2925n/n-plus/Vn/Vn-plus/ac/Vac) each of the
wireless SSIDs can also be grouped within one of the VLANs.
In addition, Vigor2925 series supports USB interface for connecting USB printer to share
printing function or 3G USB modem for network connection.
Vigor2925 series provides two-level management to simplify the configuration of network
connection. The user mode allows user accessing into WEB interface via simple configuration.
However, if users want to have advanced configurations, they can access into WEB interface
through admin mode.

Vigor2925 Series User’s Guide 2
1
1. .1 1 W We eb b C Co on nf fi ig gu ur ra at ti io on n B Bu ut tt to on ns s E Ex xp pl la an na at ti io on n
Several main buttons appeared on the web pages are defined as the following:
Save and apply current settings.
Cancel current settings and recover to the previous saved settings.
Clear all the selections and parameters settings, including selection from
drop-down list. All the values must be reset with factory default settings.
Add new settings for specified item.
Edit the settings for the selected item.
Delete the selected item with the corresponding settings.
Note: For the other buttons shown on the web pages, please refer to Chapter 3, 4 for detailed
explanation.
1
1. .2 2 C Co om mp pa ar ri is so on n C Ch ha ar rt t

Vigor2925 Series User’s Guide
3
1
1. .3 3 L LE ED D I In nd di ic ca at to or rs s a an nd d C Co on nn ne ec ct to or rs s
Before you use the Vigor router, please get acquainted with the LED indicators and connectors
first.
1
1. .3 3. .1 1 F Fo or r V Vi ig go or r2 29 92 25 5 / / V Vi ig go or r2 29 92 25 5F F
LED Status Explanation
Blinking The router is powered on and running normally.ACT (Activity) Off The router is powered off.
On Internet connection is ready.
Off Internet connection is not ready.
WAN1~WAN2
Blinking The data is transmitting.
QoS On The QoS function is active.
On USB device is connected and ready for use.USB1~USB2 Blinking The data is transmitting.
WCF On The Web Content Filter is active. (It is enabled from
Firewall >> General Setup).
On The VPN tunnel is active.
Off VPN service is disabled.
VPN
Blinking Traffic is passing through VPN tunnel.
On The DMZ function is enabled.
Off The DMZ function is disabled.
DMZ
Blinking The data is transmitting.
LED on Connector On The port is connected.
Off The port is disconnected.
Left
LED
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
WAN1~
WAN2
Right
LED Off The port is connected with 10/100Mbps
On The port is connected.
Off The port is disconnected.
Left
LED
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
LAN1~LAN5
(for Vigor2925)
LAN1~LAN4
(for Vigor2925F) Right
LED Off The port is connected with 10/100Mbps

Vigor2925 Series User’s Guide 4
Interface Description
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you
see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration.
USB1~USB2 Connecter for a USB device (for 3G/4G USB Modem or printer).
WAN1~WAN2
(for Vigor2925)
WAN2
(for Vigor2925F)
Connecter for local network devices or modem for accessing Internet.
WAN1
(for Vigor2925F) Fiber connection (100Mbps) for accessing the Internet.
LAN1~LAN5
(for Vigor2925)
LAN1~LAN4
(for Vigor2925F)
Connecters for local network devices.
PWR Connecter for a power adapter.
ON/OFF Power Switch.