Draytek Vigor 2110 User manual

Vigor2110 Series User’s Guide
ii
Vigor2110 Series
Broadband Firewall Router
User Guide
Version: 1.0(UK)
Date: 15/04/2009

Vigor2110 Series User’s Guide iii
Copyright Information
Copyright
Declarations
Copyright 2009 All rights reserved. This publication contains information that is
protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a
retrieval system, or translated into any language without written permission from the
copyright holders.
Trademarks
The following trademarks are used in this document:
zMicrosoft is a registered trademark of Microsoft Corp.
zWindows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are
trademarks of Microsoft Corp.
zApple and Mac OS are registered trademarks of Apple Inc.
zOther products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
zRead the installation guide thoroughly before you set up the router.
zThe router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
zDo not place the router in a damp or humid place, e.g. a bathroom.
zThe router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
zDo not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
zDo not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
zKeep the package out of reach of children.
zWhen you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner Web registration is preferred. You can register your Vigor router via
http://www.draytek.com.
Firmware & Tools
Updates Due to the continuous evolution of DrayTek technology, all routers may be regularly
updated with new firmware. Please consult the DrayTek UK web site for more
information on newest firmware, tools and documents. Please also check the UK web
site for the full product specification and accessories as this can vary depending on your
locality/market.
http://www.draytek.co.uk

Vigor2110 Series User’s Guide
iv
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou County, HsinChu Industrial Park, Hsin-Chu, Taiwan 303
Product: Vigor2110 Series Router
DrayTek Corp. declares that Vigor2110 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE Directive 1999/5/EEC.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the equipment off and
on, the use is encouraged to try to correct the interference by one of the following measures:
zReorient or relocate the receiving antenna.
zIncrease the separation between the equipment and receiver.
zConnect the equipment into an outlet on a circuit different form that to which the receiver is connected.
zConsult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
Please visit http://www.draytek.com/user/AboutRegulatory.php
This product is designed for DSL, POTS and 2.4GHz WLAN network throughout the EC region and Switzerland
with restrictions in France. Please see the user manual for the applicable networks on your product.

Vigor2110 Series User’s Guide v
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1
Preface ...............................................................................................................1
1.1 Web Configuration Buttons Explanation................................................................................. 1
1.2 LED Indicators and Connectors.............................................................................................. 2
1.2.1 For Vigor2110................................................................................................................... 2
1.2.2 For Vigor2110n................................................................................................................. 4
1.2.3 For Vigor2110Vn............................................................................................................... 6
1.3 Hardware Installation .............................................................................................................. 8
1.4 Printer Installation ................................................................................................................... 8
2
Configuring Basic Settings ............................................................................15
2.1 Two-Level Management........................................................................................................15
2.2 Accessing Web Page............................................................................................................ 15
2.3 Changing Password.............................................................................................................. 16
2.4 Configuring Router for Internet Connectivity......................................................................... 18
2.5 Online Status......................................................................................................................... 20
2.6 Saving Configuration............................................................................................................. 21
3
UserModeOperation............................................................................................23
3.1 Internet Access...................................................................................................................... 23
3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 23
3.1.2 PPPoE ............................................................................................................................ 24
3.1.3 Static or Dynamic IP....................................................................................................... 25
3.1.4 PPTP............................................................................................................................... 27
3.2 LAN ....................................................................................................................................... 28
3.2.1 Basics of LAN................................................................................................................. 28
3.2.2 General Setup................................................................................................................. 29
3.3 NAT ....................................................................................................................................... 30
3.3.1 Port Redirection.............................................................................................................. 31
3.3.2 DMZ Host........................................................................................................................ 33
3.3.3 Open Ports...................................................................................................................... 34
3.4 Applications........................................................................................................................... 35
3.4.1 Dynamic DNS................................................................................................................. 35
3.4.2 UPnP............................................................................................................................... 37
3.5 VoIP....................................................................................................................................... 39
3.5.1 DialPlan .......................................................................................................................... 41
3.5.2 SIP Accounts.................................................................................................................. 49
3.5.3 Phone Settings ............................................................................................................... 53

Vigor2110 Series User’s Guide
vi
3.5.4 Status.............................................................................................................................. 58
3.6 Wireless LAN ........................................................................................................................ 59
3.6.1 Basic Concepts............................................................................................................... 59
3.6.2 General Setup................................................................................................................. 61
3.6.3 Security........................................................................................................................... 63
3.6.4 Access Control................................................................................................................ 64
3.6.5 Station List...................................................................................................................... 65
3.7 System Maintenance............................................................................................................. 66
3.7.1 System Status................................................................................................................. 66
3.7.2 User Password ............................................................................................................... 68
3.7.3 Time and Date................................................................................................................ 68
3.7.4 Reboot System............................................................................................................... 69
3.8 Diagnostics............................................................................................................................ 69
3.8.1 DHCP Table.................................................................................................................... 69
3.8.2 Traffic Graph................................................................................................................... 70
3.8.3 Ping Diagnosis................................................................................................................ 71
3.8.4 Trace Route.................................................................................................................... 71
4
AdminModeOperation.........................................................................................73
4.1 Internet Access...................................................................................................................... 73
4.1.1 Basics of Internet Protocol (IP) Network......................................................................... 73
4.1.2 PPPoE ............................................................................................................................ 74
4.1.3 Static or Dynamic IP....................................................................................................... 75
4.1.4 PPTP............................................................................................................................... 77
4.2 LAN ....................................................................................................................................... 79
4.2.1 Basics of LAN................................................................................................................. 79
4.2.2 General Setup................................................................................................................. 80
4.2.3 VLAN............................................................................................................................... 82
4.2.4 Bind IP to MAC............................................................................................................... 83
4.3 NAT ....................................................................................................................................... 84
4.3.1 Port Redirection.............................................................................................................. 84
4.3.2 DMZ Host........................................................................................................................ 87
4.3.3 Open Ports...................................................................................................................... 89
4.4 Hardware Acceleration.......................................................................................................... 91
4.5 Firewall.................................................................................................................................. 91
4.5.1 Basics for Firewall........................................................................................................... 91
4.5.2 General Setup................................................................................................................. 93
4.5.3 Filter Setup ..................................................................................................................... 96
4.5.4 DoS Defense ................................................................................................................ 103
4.6 Objects Settings.................................................................................................................. 106
4.6.1 IP Object....................................................................................................................... 106
4.6.2 IP Group ....................................................................................................................... 108
4.6.3 Service Type Object ..................................................................................................... 110
4.6.4 Service Type Group...................................................................................................... 111
4.6.5 Keyword Object ............................................................................................................ 112
4.6.6 Keyword Group............................................................................................................. 113
4.6.7 File Extension Object.................................................................................................... 114
4.6.8 IM Object ...................................................................................................................... 116

Vigor2110 Series User’s Guide vii
4.6.9 P2P Object.................................................................................................................... 117
4.6.10 Misc Object................................................................................................................. 118
4.7 CSM Profile..........................................................................................................................119
4.7.1 IM/P2P Filter Profile...................................................................................................... 120
4.7.2 URL Content Filter Profile............................................................................................. 121
4.7.3 Web Content Filter Profile............................................................................................. 125
4.8 Bandwidth Management ..................................................................................................... 127
4.8.1 Sessions Limit............................................................................................................... 127
4.8.2 Bandwidth Limit ............................................................................................................ 128
4.9 Applications......................................................................................................................... 130
4.9.1 Dynamic DNS............................................................................................................... 130
4.9.2 Schedule....................................................................................................................... 132
4.9.3 UPnP............................................................................................................................. 133
4.9.4 IGMP............................................................................................................................. 135
4.9.5 Wake on LAN................................................................................................................ 136
4.10 VPN and Remote Access.................................................................................................. 138
4.10.1 IPSec Peer Identity..................................................................................................... 138
4.10.2 LAN to LAN................................................................................................................. 139
4.10.3 Connection Management ........................................................................................... 145
4.11 Certificate Management.................................................................................................... 146
4.11.1 Local Certificate.......................................................................................................... 146
4.11.2 Trusted CA Certificate ................................................................................................ 148
4.11.3 Certificate Backup....................................................................................................... 149
4.12 VoIP................................................................................................................................... 149
4.12.1 DialPlan ...................................................................................................................... 151
4.12.2 SIP Accounts.............................................................................................................. 158
4.12.3 Phone Settings ........................................................................................................... 162
4.12.4 Status.......................................................................................................................... 167
4.13 Wireless LAN .................................................................................................................... 168
4.13.1 Basic Concepts........................................................................................................... 168
4.13.2 General Setup............................................................................................................. 170
4.13.3 Security....................................................................................................................... 173
4.13.4 Access Control............................................................................................................ 174
4.13.5 WPS............................................................................................................................ 175
4.13.6 WDS............................................................................................................................ 177
4.13.6 AP Discovery.............................................................................................................. 180
4.13.7 Station List.................................................................................................................. 181
4.14 System Maintenance......................................................................................................... 183
4.14.1 System Status............................................................................................................. 183
4.14.2 TR-069........................................................................................................................ 185
4.14.3 Administrator Password.............................................................................................. 186
4.14.4 Configuration Backup ................................................................................................. 186
4.14.5 Syslog/Mail Alert......................................................................................................... 188
4.14.6 Time and Date............................................................................................................ 190
4.14.7 Management............................................................................................................... 191
4.14.8 Reboot System........................................................................................................... 192
4.14.9 Firmware Upgrade...................................................................................................... 193
4.15 Diagnostics........................................................................................................................ 194
4.15.1 Dial-out Trigger........................................................................................................... 194
4.15.2 Routing Table ............................................................................................................. 195
4.15.3 ARP Cache Table....................................................................................................... 195

Vigor2110 Series User’s Guide
viii
4.15.4 DHCP Table................................................................................................................ 196
4.15.5 NAT Sessions Table................................................................................................... 196
4.15.6 Data Flow Monitor....................................................................................................... 197
4.15.7 Traffic Graph............................................................................................................... 199
4.15.8 Ping Diagnosis............................................................................................................ 199
4.15.9 Trace Route................................................................................................................ 200
5
Application and Examples............................................................................201
5.1 Request a certificate from a CA server on Windows CA Server......................................... 201
5.2 Request a CA Certificate and Set as Trusted on Windows CA Server............................... 205
5.3 Calling Scenario for VoIP function ...................................................................................... 207
5.3.1 Calling via SIP Sever.................................................................................................... 207
5.3.2 Peer-to-Peer Calling..................................................................................................... 209
5.4 Upgrade Firmware for Your Router..................................................................................... 210
Trouble Shooting .........................................................................................213
6.1 Checking the Hardware Status ........................................................................................... 213
6.2 Checking the Network Connection Settings on Your Computer ......................................... 214
6.3 Pinging the Router from Your Computer............................................................................. 216
6.4 Check Online Status Page.................................................................................................. 217
6.5 Resetting the Router to Factory Default Settings ............................................................... 217
6.6 Technical Support................................................................................................................ 218

Vigor2110 Series User’s Guide 1
1
P Pr re ef fa ac ce e
The Vigor2110 series features advanced bandwidth control mechanism such as IP-layer QoS,
NAT Session Limitation, Bandwidth Borrowed, etc., to allow easy, flexible, reliable access
control and bandwidth management.
The SPI (Stateful Packet Inspection) firewall uses object-based design to make settings of
firewall policies easy. The CSM (Content Security Management) feature allows more precise
and efficient access control for URL/Web Content Filtering, IM (Instant Messenger) and P2P
(Peer to Peer) applications.
Vigor2110 supports up to 2 VPN tunnels using advanced protocols such as
IPSec/PPTP/L2TP/L2TP over IPSec with AES/DES/3DES for encryption and MD5/SHA-1
for authentication.
Vigor2110 ‘n’ models comply with 802.11n Draft-n standards. They support
WEP/WPA/WPA2 encryption, MAC Address Control, Wireless LAN Isolation as well as
wireless distribution system (WDS). Wireless Rate Control function can adjust the data rate of
each wireless station (client).
Vigor2110 ‘V’ models provide two analogue phone connectors and one line port. It supports
multiple SIP registrars with high flexible configuration and call handing options.
In addition, Vigor2110 series supports USB interface for connecting USB printer to share
printer or USB storage device for sharing files. Vigor2110 series also provide two-level
administration to control the manageability of the router based on administrative rights.
1
1. .1 1 W We eb b C Co on nf fi ig gu ur ra at ti io on n B Bu ut tt to on ns s E Ex xp pl la an na at ti io on n
Several main buttons appeared on the web pages are defined as the following:
Save and apply current settings.
Cancel current settings and recover to the previous saved settings.
Clear all the selections and parameters settings, including selection from
drop-down list. All the values must be reset with factory default settings.
Add new settings for specified item.
Edit the settings for the selected item.
Delete the selected item with the corresponding settings.
Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed
explanation.

Vigor2110 Series User’s Guide
2
1
1. .2 2 L LE ED D I In nd di ic ca at to or rs s a an nd d C Co on nn ne ec ct to or rs s
Before you use the Vigor router, please get acquainted with the LED indicators and connectors
first.
1
1. .2 2. .1 1 F Fo or r V Vi ig go or r2 21 11 10 0
LED Status Explanation
Blinking The router is powered on and running
normally.
ACT
(Activity) Off The router is powered off.
CSM On The profile(s) of CSM (Content Security
Management) for IM/P2P, URL/Web
Content Filter application can be enabled
from Firewall >>General Setup. (Such
profile must be established under CSM
menu).
On The WAN port is connected.WAN Blinking It will blink while transmitting data.
On The port is connected.
Off The port is disconnected.
LAN 1/2/3/4
Blinking The data is transmitting.
On A USB device is connected and active.USB Blinking The data is transmitting.
VPN On The VPN tunnel is active.
QoS On The QoS function is active.
On The DoS/DDoS function is active.DoS Blinking It will blink while detecting an attack.
WCF On The profile(s) of CSM (Content Security
Management) for Web Content Filter
application can be enabled from Firewall
>>General Setup. (Such profile must be
established under CSM menu)
Interface Description
WAN Connector for accessing the Internet.
LAN (1-4) Connecters for local networked devices.
USB Connecter for USB storage device (Pen Driver/Mobile
HD) or printer.

Vigor2110 Series User’s Guide 3
Interface Description
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the
hole and keep for more than 5 seconds. When you see the ACT LED begins to blink
rapidly than usual, release the button. Then the router will restart with the factory default
configuration.
PWR Connecter for a power adapter.
ON/OFF Power Switch.

Vigor2110 Series User’s Guide
4
1
1. .2 2. .2 2 F Fo or r V Vi ig go or r2 21 11 10 0n n
LED Status Explanation
Blinking The router is powered on and running
normally.
ACT
(Activity) Off The router is powered off.
On Wireless access point is ready.WLAN Blinking It will blink while wireless traffic goes
through.
On The WAN port is connected.WAN Blinking It will blink while transmitting data.
On The port is connected.
Off The port is disconnected.
LAN 1/2/3/4
Blinking The data is transmitting.
On A USB device is connected and active.USB Blinking The data is transmitting.
VPN On The VPN tunnel is active.
QoS On The QoS function is active.
On The DoS/DDoS function is active.DoS Blinking It will blink while detecting an attack.
On The WPS is on.
Off The WPS is off.
WPS
Blinking Waiting for wireless client sending requests
for connection about two minutes.
On Press this button for 2 seconds to wait for
client device making network connection
through WPS. When the LED lights up, the
WPS will be on.
Off The WPS is off.
WPS Button
Blinking Waiting for wireless client sending requests
for connection about two minutes.
Interface Description
WLAN Press the button once to enable (WLAN LED on) or
disable (WLAN LED off) wireless connection.
WAN Connector for accessing the Internet.
LAN (1-4) Connecters for local networked devices.
USB Connecter for USB storage (Pen Driver Mobile/HD) or
printer.

Vigor2110 Series User’s Guide 5
Interface Description
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the
hole and keep for more than 5 seconds. When you see the ACT LED begins to blink
rapidly than usual, release the button. Then the router will restart with the factory default
configuration.
PWR Connecter for a power adapter.
ON/OFF Power Switch.

Vigor2110 Series User’s Guide
6
1
1. .2 2. .3 3 F Fo or r V Vi ig go or r2 21 11 10 0V Vn n
LED Status Explanation
Blinking The router is powered on and running
normally.
ACT
(Activity) Off The router is powered off.
On Wireless access point is ready.WLAN Blinking It will blink while wireless traffic goes
through.
On The WAN port is connected.WAN Blinking It will blink while transmitting data.
On The port is connected.
Off The port is disconnected.
LAN 1/2/3/4
Blinking The data is transmitting.
On A USB device is connected and active.USB Blinking The data is transmitting.
On The phone connected to this port is off-hook.
Off The phone connected to this port is on-hook.
Phone1/
Phone2
Blinking A phone call comes.
On A PSTN phone call comes (in and out).
However, when the phone call is
disconnected, the LED will be off about six
seconds later.
Line
Off There is no PSTN phone call.
On The WPS is on.
Off The WPS is off.
WPS
Blinking Waiting for wireless client sending requests
for connection about two minutes.
On Press this button for 2 seconds to wait for
client device making network connection
through WPS. When the LED lights up, the
WPS will be on.
Off The WPS is off.
WPS Button
Blinking Waiting for wireless client sending requests
for connection about two minutes.
Interface Description
WLAN Press the button once to enable (WLAN LED on) or
disable (WLAN LED off) wireless connection.
WAN Connector for accessing the Internet.
LAN (1-4) Connecters for local networked devices.
USB Connecter for USB storage (Pen Driver Mobile/HD) or
printer.

Vigor2110 Series User’s Guide 7
Interface Description
Line Connector of analog phone for PSTN life line.
Phone2/Phone1 Connecter of analog phone for VoIP communication.
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the
hole and keep for more than 5 seconds. When you see the ACT LED begins to blink
rapidly than usual, release the button. Then the router will restart with the factory default
configuration.
PWR Connecter for a power adapter.
ON/OFF Power Switch.

Vigor2110 Series User’s Guide
8
1
1. .3 3 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
Before starting to configure the router, you have to connect your devices correctly.
1. Connect Line port to land line jack with a RJ-11 cable (Vn model).
2. Connect this device to a modem with an Ethernet cable.
3. Connect one port of 4-port switch to your computer with a RJ-45 cable. This device
allows you to connect 4 PCs directly.
4. Connect Phone port to a conventional analog telephone.
5. Connect detachable antennas to the router for Vigor2110 series (n model).
6. Connect one end of the power cord to the power port of this device. Connect the other
end to the wall outlet of electricity.
7. Power on the router.
8. Check the ACT and WAN, LAN LEDs to assure network connections.
Caution: Each of the Phone ports can be connected to an analog phone only. Do not
connect the phone ports to the telephone wall jack. Such connection might damage your
router.
1
1. .4 4 P Pr ri in nt te er r I In ns st ta al ll la at ti io on n
You can install a printer onto the router for sharing printing. All the PCs connected this router
can print documents via the router. The example provided here is made based on Windows
XP/2000. For Windows 98/SE/Vista, please visit www.draytek.com.

Vigor2110 Series User’s Guide 9
Before using it, please follow the steps below to configure settings for connected computers
(or wireless clients).
1. Connect the printer with the router through USB/parallel port.
2. Open Start->Settings-> Printer and Faxes.
3. Open File->Add a New Computer. A welcome dialog will appear. Please click Next.

Vigor2110 Series User’s Guide
10
4. Click Local printer attached to this computer and click Next.
5. In this dialog, choose Create a new port Type of port and use the drop down list to select
Standard TCP/IP Port. Click Next.

Vigor2110 Series User’s Guide 11
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP
Address and type IP_192.168.1.1 as the port name. Then, click Next.
7. Click Standard and choose Generic Network Card.
8. Then, in the following dialog, click Finish.

Vigor2110 Series User’s Guide
12
9. Now, your system will ask you to choose right name of the printer that you installed onto the router.
Such step can make correct driver loaded onto your PC. When you finish the selection, click Next.
10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the
new printer you have added.
11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer
to the red rectangle for choosing the correct protocol and UPR name.
The printer can be used for printing now. Most of the printers with different manufacturers are
compatible with vigor router.