Page is loading ...
Vigor2952 Series User’s Guide
ii
Vigor2952 Series
Dual-WAN Security Firewall
User’s Guide
Version: 2.3
Firmware Version: V3.9.0
(For future update, please visit DrayTek web site)
Date: October 28, 2018
Vigor2952 Series User’s Guide
iii
Copyrights
© All rights reserved. This publication contains information that is protected by copyright. No part may be
reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without
written permission from the copyright holders.
Trademarks
The following trademarks are used in this document:
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.
Safety Instructions
Read the installation guide thoroughly before you set up the router.
The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel.
Do not try to open or repair the router yourself.
Do not place the router in a damp or humid place, e.g. a bathroom.
The router should be used in a sheltered area, within a temperature range of +5 to +40 Celsius.
Do not expose the router to direct sunlight or other heat sources. The housing and electronic components
may be damaged by direct sunlight or heat sources.
Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards.
Keep the package out of reach of children.
When you want to dispose of the router, please follow local regulations on conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship
or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your
purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon
proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials,
we will, at our discretion, repair or replace the defective products or components, without charge for either
parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition.
Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is modified, misused,
tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does
not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the
usability of the product will not be covered by the warranty. We reserve the right to revise the manual and
online documentation and to make changes from time to time in the contents hereof without obligation to
notify any person of such revision or changes.
Be a Registered Owner
Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com.
Firmware & Tools Updates
Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult
the DrayTek web site for more information on newest firmware, tools and documents.
http://www.DrayTek.com
Vigor2952 Series User’s Guide
i
v
Vigor2952 Series User’s Guide
v
T
T
a
a
b
b
l
l
e
e
o
o
f
f
C
C
o
o
n
n
t
t
e
e
n
n
t
t
s
s
Part I Installation................................................................................................................1
I-1 Introduction ................................................................................................................................... 2
I-1-1 Indicators and Connectors .................................................................................................. 4
I-2 Hardware Installation .................................................................................................................... 7
I-2-1 Installing Vigor Router......................................................................................................... 7
I-2-2 Wall-Mounted Installation of Vigor Router........................................................................... 8
I-2-3 Installing USB Printer to Vigor Router................................................................................. 9
I-3 Accessing Web Page.................................................................................................................. 17
I-4 Changing Password.................................................................................................................... 19
I-5 Dashboard................................................................................................................................... 21
I-5-1 Virtual Panel...................................................................................................................... 21
I-5-2 Name with a Link............................................................................................................... 22
I-5-3 Quick Access for Common Used Menu ............................................................................ 23
I-5-4 GUI Map ............................................................................................................................ 24
I-5-5 Web Console..................................................................................................................... 25
I-5-6 Config Backup................................................................................................................... 26
I-5-7 Manual Download.............................................................................................................. 27
I-5-7 Logout................................................................................................................................ 28
I-5-8 Online Status..................................................................................................................... 29
I-5-8-1 Physical Connection......................................................................29
I-5-8-2 Virtual WAN ...............................................................................31
I-6 Quick Start Wizard ...................................................................................................................... 32
I-6-1 WAN1 (Fiber) / WAN1/2(Ethernet).................................................................................... 33
I-6-2 WAN3 / WAN4 (USB)........................................................................................................ 42
I-7 Service Activation Wizard ........................................................................................................... 44
I-8 Registering Vigor Router............................................................................................................. 46
Part II Connectivity ..........................................................................................................49
II-1 WAN........................................................................................................................................... 50
Web User Interface.................................................................................................................... 52
II-1-1 General Setup .................................................................................................................. 52
II-1-1-1 WAN1 (Fiber/AUTO).....................................................................53
II-1-1-2 WAN2 (Ethernet).........................................................................55
II-1-1-3 WAN3 / WAN4 (USB).....................................................................56
II-1-2 Internet Access................................................................................................................. 59
II-1-2-1 Details Page for PPPoE in Ethernet WAN1/WAN2 and Fiber WAN1..............61
II-1-2-2 Details Page for Static or Dynamic IP in Etherenet WAN1/WAN2 and Fiber WAN1
.......................................................................................................64
II-1-2-3 Details Page for PPTP/L2TP in Etherenet WAN1/WAN2 and Fiber WAN1.......67
II-1-2-4 Details Page for 3G/4G USB Modem (PPP mode) in USB WAN3/WAN4 ..........70
II-1-2-5 Details Page for 3G/4G USB Modem (DHCP mode) in USB WAN3/WAN4........72
II-1-2-6 Details Page for IPv6 – Offline in WAN1/WAN2/WAN3/WAN4....................74
II-1-2-7 Details Page for IPv6 – PPP in WAN1/WAN2 .........................................74
Vigor2952 Series User’s Guide
vi
II-1-2-8 Details Page for IPv6 – TSPC in WAN1/WAN2/WAN3/WAN4.......................75
II-1-2-9 Details Page for IPv6 – AICCU in WAN1/WAN2/WAN3/WAN4 .....................76
II-1-2-10 Details Page for IPv6 – DHCPv6 Client in WAN1/WAN2...........................78
II-1-2-11 Details Page for IPv6 – Static IPv6 in in WAN1/WAN2 ............................80
II-1-2-12 Details Page for IPv6 – 6in4 Static Tunnel in WAN1 / WAN2 ....................81
II-1-2-13 Details Page for IPv6 – 6rd in WAN1 / WAN2.......................................83
II-1-3 Multi-VLAN ....................................................................................................................... 85
II-1-4 WAN Budget..................................................................................................................... 90
II-1-4-1 General Setup ............................................................................90
II-1-4-2 Status ......................................................................................93
Application Notes....................................................................................................................... 94
A-1 How to configure settings for IPv6 Service in Vigor2952...............................94
A-2 Load Balancing and Failover for multi-WAN Vigor Routers.......................... 107
II-2 LAN.......................................................................................................................................... 109
Web User Interface.................................................................................................................. 111
II-2-1 General Setup ................................................................................................................ 111
II-2-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup...................... 114
II-2-1-2 Details Page for LAN1~ LAN4 – IPv6 Setup......................................... 117
II-2-1-3 Details Page for LAN2 ~ LAN8........................................................ 120
II-2-1-4 Details Page for IP Routed Subnet .................................................. 122
II-2-1-5 DHCP Server Options .................................................................. 123
II-2-2 VLAN.............................................................................................................................. 125
II-2-3 Bind IP to MAC............................................................................................................... 129
II-2-4 LAN Port Mirror............................................................................................................... 132
II-2-5 Wired 802.1x .................................................................................................................. 133
II-2-6 PPPoE Server ................................................................................................................ 134
II-2-7 PoE................................................................................................................................. 135
II-2-7-1 General Setup .......................................................................... 135
II-2-7-2 Device Check............................................................................ 136
II-2-7-3 Status .................................................................................... 137
Application Notes..................................................................................................................... 138
A-1 How to configure DHCP options for DHCP clients?.................................... 138
A-2 How to use a Public IP on LAN?........................................................... 141
A-3 How to set up multi-subnet with port-based VLAN?.................................. 145
II-3 NAT .......................................................................................................................................... 148
Web User Interface.................................................................................................................. 149
II-3-1 Port Redirection.............................................................................................................. 149
II-3-2 DMZ Host ....................................................................................................................... 154
II-3-3 Open Ports ..................................................................................................................... 157
II-3-4 Port Triggering................................................................................................................ 159
II-3-5 ALG................................................................................................................................. 162
II-4 Applications.............................................................................................................................. 163
Web User Interface.................................................................................................................. 165
II-4-1 Dynamic DNS................................................................................................................. 165
II-4-2 LAN DNS / DNS Forwarding.......................................................................................... 170
II-4-3 DNS Security.................................................................................................................. 173
II-4-3-1 General Setup .......................................................................... 173
Vigor2952 Series User’s Guide
vii
II-4-3-2 Domain Diagnose....................................................................... 174
II-4-4 Schedule......................................................................................................................... 175
II-4-5 RADIUS/TACACS+........................................................................................................ 178
II-4-5-1 External RADIUS........................................................................ 178
II-4-5-2 Internal RADIUS ........................................................................ 179
II-4-5-3 External TACACS+...................................................................... 182
II-4-6 Active Directory/ LDAP................................................................................................... 183
II-4-7 UPnP.............................................................................................................................. 186
II-4-8 IGMP............................................................................................................................... 187
II-4-8-1 General Setting ........................................................................ 187
II-4-8-2 Working Group ......................................................................... 188
II-4-9 Wake on LAN ................................................................................................................. 189
II-4-10 SMS / Mail Alert Service............................................................................................... 190
II-4-11 Bonjour......................................................................................................................... 192
II-4-12 High Availability............................................................................................................ 195
II-4-12-2 Config Sync ............................................................................ 199
II-4-13 Local 802.1X General Setup........................................................................................ 201
Application Notes..................................................................................................................... 203
A-1 How to Implement the LDAP/AD Authentication for User Management? ......... 203
A-2 How to use High Availability?............................................................. 206
A-3 How to use DrayDDNS?..................................................................... 214
A-4 How to Configure Customized DDNS?.................................................... 218
II-5 Routing..................................................................................................................................... 222
Web User Interface.................................................................................................................. 223
II-5-1 Static Route.................................................................................................................... 223
II-5-2 Load-Balance /Route Policy........................................................................................... 227
II-5-2-1 General Setup .......................................................................... 227
II-5-2-2 Diagnose................................................................................. 234
II-5-3 BGP................................................................................................................................ 236
II-5-3-1 Basic Settings........................................................................... 236
II-5-3-1 Static Network ......................................................................... 237
Application Notes..................................................................................................................... 238
A-1 How to Customize a Secure Route between VPN Router and Remote Router by Using
Route Policy ...................................................................................... 238
A-2 How to Setup Address Mapping with Route Policy.................................... 241
A-3 How to use destination domain name in a route policy?............................. 243
II-6 Hardware Acceleration............................................................................................................. 245
Web User Interface.................................................................................................................. 245
Part III Wireless LAN......................................................................................................247
III-1 Wireless LAN .......................................................................................................................... 248
Web User Interface.................................................................................................................. 251
III-1-1 Wireless Wizard............................................................................................................. 251
III-1-2 General Setup ............................................................................................................... 254
III-1-3 Security.......................................................................................................................... 256
III-1-4 Access Control .............................................................................................................. 259
Vigor2952 Series User’s Guide
viii
III-1-5 WPS............................................................................................................................... 260
III-1-6 WDS .............................................................................................................................. 263
III-1-7 Advanced Setting .......................................................................................................... 266
III-1-8 AP Discovery................................................................................................................. 269
III-1-9 Airtime Fairness............................................................................................................. 270
III-1-10 Station List................................................................................................................... 272
III-1-11 Station Control............................................................................................................. 273
III-1-12 Bandwidth Management.............................................................................................. 274
Part IV VPN.....................................................................................................................275
IV-1 VPN and Remote Access ....................................................................................................... 276
Web User Interface.................................................................................................................. 277
IV-1-1 VPN Client Wizard ........................................................................................................ 277
IV-1-2 VPN Server Wizard....................................................................................................... 284
IV-1-3 Remote Access Control ................................................................................................ 289
IV-1-4 PPP General Setup....................................................................................................... 290
IV-1-5 IPsec General Setup..................................................................................................... 292
IV-1-6 IPsec Peer Identity........................................................................................................ 294
IV-1-7 OpenVPN...................................................................................................................... 296
IV-1-7-1 General Setup ......................................................................... 296
IV-1-7-2 Client Config........................................................................... 297
IV-1-8 Remote Dial-in User...................................................................................................... 298
IV-1-9 LAN to LAN................................................................................................................... 302
IV-1-10 VPN Trunk Management ............................................................................................ 312
IV-1-11 Connection Management............................................................................................ 321
Application Notes..................................................................................................................... 323
A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec
Tunnel (Main Mode)............................................................................. 323
A-2 How to Build a LAN-to-LAN VPN Between Vigor Routers via IKEv2................. 328
IV-2 SSL VPN................................................................................................................................. 331
Web User Interface.................................................................................................................. 332
IV-2-1 General Setup............................................................................................................... 332
IV-2-2 SSL Web Proxy............................................................................................................. 333
IV-2-3 SSL Application............................................................................................................. 335
IV-2-4 User Account................................................................................................................. 337
IV-2-5 User Group.................................................................................................................... 341
IV-2-6 SSL Portal Online User................................................................................................. 344
Application Notes..................................................................................................................... 345
A-1 Vigor Router to Vigor Router – SSL VPN................................................. 345
VPN Client (Dial-out Site) Setup .............................................................. 346
Establishing the VPN Tunnel................................................................... 348
IV-3 Certificate Management.......................................................................................................... 349
Web User Interface.................................................................................................................. 350
Vigor2952 Series User’s Guide
ix
IV-3-1 Local Certificate ............................................................................................................ 350
IV-3-2 Trusted CA Certificate................................................................................................... 354
IV-3-3 Certificate Backup......................................................................................................... 356
IV-3-4 Self-Signed Certificate .................................................................................................. 357
Part V Security...............................................................................................................359
V-1 Firewall..................................................................................................................................... 360
Web User Interface.................................................................................................................. 362
V-1-1 General Setup................................................................................................................ 362
V-1-2 Filter Setup..................................................................................................................... 367
V-1-3 Defense Setup ............................................................................................................... 378
V-1-3-1 DoS Defense............................................................................. 378
V-1-3-2 Spoofing Defense....................................................................... 381
V-1-4 Diagnose........................................................................................................................ 382
Application Notes..................................................................................................................... 385
A-1 How to Configure Certain Computers Accessing to Internet........................ 385
A-2 How to backup and restore firewall rule and object settings? ..................... 389
V-2 CSM (Central Security Management)...................................................................................... 391
Web User Interface.................................................................................................................. 392
V-2-1 APP Enforcement Profile ............................................................................................... 392
V-2-2 APPE Signature Upgrade.............................................................................................. 394
V-2-3 URL Content Filter Profile.............................................................................................. 395
V-2-4 Web Content Filter Profile.............................................................................................. 399
V-2-5 DNS Filter Profile ........................................................................................................... 403
Application Notes..................................................................................................................... 406
A-1 How to Create an Account for MyVigor ................................................. 406
A-2 How to Block Facebook Service Accessed by the Users via Web Content Filter / URL
Content Filter.................................................................................... 411
A-3 How to use APP Enforcement to block application like Facebook, YouTube or
TeamViewer?..................................................................................... 416
Part VI Management ......................................................................................................421
VI-1 System Maintenance.............................................................................................................. 422
Web User Interface.................................................................................................................. 423
VI-1-1 System Status............................................................................................................... 424
VI-1-2 TR-069 .......................................................................................................................... 426
VI-1-3 Admininstrator Password.............................................................................................. 429
VI-1-4 User Password.............................................................................................................. 432
VI-1-5 Login Page Greeting..................................................................................................... 435
VI-1-6 Configuration Backup.................................................................................................... 437
VI-1-7 SysLog/Mail Alert.......................................................................................................... 440
VI-1-8 Time and Date............................................................................................................... 443
VI-1-9 SNMP............................................................................................................................ 444
VI-1-10 Management............................................................................................................... 446
Vigor2952 Series User’s Guide
x
VI-1-11 Panel Control .............................................................................................................. 450
VI-1-12 Self-Signed Certificate ................................................................................................ 453
VI-1-13 Reboot System............................................................................................................ 455
VI-1-14 Firmware Upgrade ...................................................................................................... 456
VI-1-15 Activation..................................................................................................................... 457
VI-1-16 Internal Service User List............................................................................................ 458
VI-1-17 Dashboard Control...................................................................................................... 459
VI-2 Bandwidth Management......................................................................................................... 460
Web User Interface.................................................................................................................. 462
VI-2-1 Sessions Limit............................................................................................................... 462
VI-2-2 Bandwidth Limit............................................................................................................. 464
VI-2-3 Quality of Service.......................................................................................................... 466
VI-2-4 APP QoS....................................................................................................................... 473
Application Notes..................................................................................................................... 475
A-1 How to Optimize the Bandwidth through QoS Technology .......................... 475
VI-3 User Management.................................................................................................................. 479
Web User Interface.................................................................................................................. 480
VI-3-1 General Setup............................................................................................................... 480
VI-3-2 User Profile ................................................................................................................... 482
VI-3-3 User Group.................................................................................................................... 488
VI-3-4 User Online Status........................................................................................................ 489
VI-3-5 PPPoE User Online Status........................................................................................... 490
VI-4 Hotspot Web Portal................................................................................................................. 491
Web User Interface.................................................................................................................. 492
VI-4-1 Profile Setup.................................................................................................................. 492
VI-4-1-1 Login Method .......................................................................... 492
VI-4-1-2 Steps for Configuring a Web Portal Profile....................................... 493
VI-4-2 User Information............................................................................................................ 509
VI-4-2-1 User Info................................................................................ 509
VI-4-2-2 Database Setup........................................................................ 510
VI-4-3 Quota Management ...................................................................................................... 512
Application Notes..................................................................................................................... 515
A-1 How to allow users login to Vigor’s Hotspot with their social media accounts (e.g.,
Facebook & Google)............................................................................. 515
A-2 How to allow hotspot clients to get login PIN code via SMS?........................ 523
VI-5 Central Management (VPN)................................................................................................... 531
Web User Interface.................................................................................................................. 532
VI-5-1 General Setup............................................................................................................... 532
VI-5-1-1 General Settings....................................................................... 532
VI-5-1-2 IPsec VPN Settings .................................................................... 533
VI-5-2 CPE Management......................................................................................................... 534
VI-5-2-1 Managed Device List.................................................................. 534
VI-5-2-2 CPE Maintenance...................................................................... 536
VI-5-2-3 Google Map............................................................................. 539
Vigor2952 Series User’s Guide
x
i
VI-5-3 VPN Management......................................................................................................... 540
VI-5-4 Log & Alert .................................................................................................................... 541
Application Notes..................................................................................................................... 542
A-1 CVM Application - How to manage the CPE (router) through Vigor2952 Series?. 542
A-2 CVM Application - How to build the VPN between remote devices and Vigor2952
Series?............................................................................................. 546
A-3 CVM Application - How to upgrade CPE firmware through Vigor2952 Series?.... 548
VI-6 Central Management (AP)...................................................................................................... 551
Web User Interface.................................................................................................................. 552
VI-6-1 Dashboard..................................................................................................................... 552
VI-6-2 Status............................................................................................................................ 553
VI-6-3 WLAN Profile................................................................................................................. 554
VI-6-4 AP Maintenance............................................................................................................ 559
VI-6-5 AP Map ......................................................................................................................... 560
VI-6-6 Traffic Graph................................................................................................................. 563
VI-6-7 Temperature Sensor..................................................................................................... 564
VI-6-8 Event Log...................................................................................................................... 564
VI-6-9 Total Traffic................................................................................................................... 565
VI-6-10 Station Number........................................................................................................... 565
VI-6-11 Load Balance.............................................................................................................. 566
VI-6-12 Function Support List.................................................................................................. 567
Application Notes..................................................................................................................... 569
A-1 How to use AP Management function (in Vigor2952) to check AP status and deploy
WLAN profile..................................................................................... 569
VI-7 Central Management (Switch)................................................................................................ 573
Web User Interface.................................................................................................................. 574
VI-7-1 Status............................................................................................................................ 574
VI-7-1-1 Switch Status .......................................................................... 574
VI-7-1-2 Switch Hierarchy...................................................................... 577
VI-7-1-3 Detailed Info........................................................................... 578
VI-7-2 Profile............................................................................................................................ 579
VI-7-3 Group ............................................................................................................................ 583
VI-7-4 Maintenance.................................................................................................................. 585
VI-7-5 Alert and Log................................................................................................................. 586
VII-7-5-1 Alert Setup............................................................................ 586
VII-7-5-2 Switch and Port Setup............................................................... 587
VII-7-5-3 Alert Logs.............................................................................. 589
VI-7-6 Database Setup ............................................................................................................ 590
VI-7-7 Support List................................................................................................................... 591
Application Notes..................................................................................................................... 592
A-1 How to set up VLAN on VigorSwitch with Central Switch Management (SWM)?.. 592
VI-8 Central Management (External Devices) ............................................................................... 596
Part VII Others................................................................................................................597
VII-1 Objects Settings..................................................................................................................... 598
Vigor2952 Series User’s Guide
x
ii
Web User Interface.................................................................................................................. 599
VII-1-1 IP Object ...................................................................................................................... 599
VII-1-2 IP Group....................................................................................................................... 604
VII-1-3 IPv6 Object................................................................................................................... 605
VII-1-4 IPv6 Group................................................................................................................... 607
VII-1-5 Service Type Object..................................................................................................... 609
VII-1-6 Service Type Group..................................................................................................... 611
VII-1-7 Keyword Object............................................................................................................ 613
VII-1-8 Keyword Group............................................................................................................ 615
VII-1-9 File Extension Object................................................................................................... 616
VII-1-10 SMS/Mail Service Object........................................................................................... 618
VII-1-11 Notification Object...................................................................................................... 623
VII-1-12 String Object .............................................................................................................. 625
VII-1-13 Country Object........................................................................................................... 626
Application Notes..................................................................................................................... 628
A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN
Disconnection .................................................................................... 628
VII-2 USB Application..................................................................................................................... 632
Web User Interface.................................................................................................................. 633
VII-2-1 USB General Settings.................................................................................................. 633
VII-2-2 USB User Management............................................................................................... 634
VII-2-3 File Explorer................................................................................................................. 636
VII-2-4 USB Device Status....................................................................................................... 637
VII-2-5 Temperature Sensor.................................................................................................... 638
VII-2-6 Modem Support List..................................................................................................... 640
VII-2-7 SMB Client Support List............................................................................................... 641
Application Notes..................................................................................................................... 642
A-1 How can I get the files from USB storage device connecting to Vigor router? ... 642
Part VIII Troubleshooting ..............................................................................................645
VIII-1 Diagnostics........................................................................................................................... 646
Web User Interface.................................................................................................................. 647
VIII-1-1 Dial-out Triggering....................................................................................................... 647
VIII-1-2 Routing Table.............................................................................................................. 648
VIII-1-3 ARP Cache Table ....................................................................................................... 649
VIII-1-4 IPv6 Neighbour Table ................................................................................................. 650
VIII-1-5 DHCP Table................................................................................................................ 651
VIII-1-6 NAT Sessions Table ................................................................................................... 652
VIII-1-7 DNS Cache Table....................................................................................................... 653
VIII-1-8 Ping Diagnosis............................................................................................................ 654
VIII-1-9 Data Flow Monitor....................................................................................................... 656
VIII-1-10 Traffic Graph............................................................................................................. 658
Vigor2952 Series User’s Guide
x
iii
VIII-1-11 VPN Graph................................................................................................................ 659
VIII-1-12 Trace Route .............................................................................................................. 660
VIII-1-13 Syslog Explorer......................................................................................................... 661
VIII-1-14 IPv6 TSPC Status..................................................................................................... 662
VIII-1-15 High Availability Status ............................................................................................. 663
VIII-1-16 Authentication Information........................................................................................ 665
VIII-1-17 DoS Flood Table....................................................................................................... 666
VIII-1-18 Route Policy Diagnosis............................................................................................. 667
VIII-2 Checking If the Hardware Status Is OK or Not..................................................................... 669
VIII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not................... 670
VIII-4 Pinging the Router from Your Computer .............................................................................. 673
VIII-5 Checking If the ISP Settings are OK or Not ......................................................................... 675
VIII-6 Problems for 3G/4G Network Connection............................................................................ 676
VIII-7 Backing to Factory Default Setting If Necessary.................................................................. 677
VIII-8 Contacting DrayTek .............................................................................................................. 678
Part IX DrayTek Tools ....................................................................................................679
IX-1 SmartVPN Client..................................................................................................................... 680
IX-1-1 DrayTek Android-based SmartVPN APP for the establishment of SSL VPN connection
................................................................................................................................................. 680
IX-1-2 How to Use SmartVPN Android APP to Establish SSL VPN Tunnel?.......................... 681
Part X Telnet Commands...............................................................................................685
Accessing Telnet of Vigor2952....................................................................................................... 686
Index ...............................................................................................................................881
Vigor2952 Series User’s Guide
1
This part will introduce Vigor router and guide to
install the device in hardware and software.
Vigor2952 Series User’s Guide
2
T
T
h
h
i
i
s
s
i
i
s
s
a
a
g
g
e
e
n
n
e
e
r
r
i
i
c
c
I
I
n
n
t
t
e
e
r
r
n
n
a
a
t
t
i
i
o
o
n
n
a
a
l
l
v
v
e
e
r
r
s
s
i
i
o
o
n
n
o
o
f
f
t
t
h
h
e
e
u
u
s
s
e
e
r
r
g
g
u
u
i
i
d
d
e
e
.
.
S
S
p
p
e
e
c
c
i
i
f
f
i
i
c
c
a
a
t
t
i
i
o
o
n
n
,
,
c
c
o
o
m
m
p
p
a
a
t
t
i
i
b
b
i
i
l
l
i
i
t
t
y
y
a
a
n
n
d
d
f
f
e
e
a
a
t
t
u
u
r
r
e
e
s
s
v
v
a
a
r
r
y
y
b
b
y
y
r
r
e
e
g
g
i
i
o
o
n
n
.
.
F
F
o
o
r
r
s
s
p
p
e
e
c
c
i
i
f
f
i
i
c
c
u
u
s
s
e
e
r
r
g
g
u
u
i
i
d
d
e
e
s
s
s
s
u
u
i
i
t
t
a
a
b
b
l
l
e
e
f
f
o
o
r
r
y
y
o
o
u
u
r
r
r
r
e
e
g
g
i
i
o
o
n
n
o
o
r
r
p
p
r
r
o
o
d
d
u
u
c
c
t
t
,
,
p
p
l
l
e
e
a
a
s
s
e
e
c
c
o
o
n
n
t
t
a
a
c
c
t
t
l
l
o
o
c
c
a
a
l
l
d
d
i
i
s
s
t
t
r
r
i
i
b
b
u
u
t
t
o
o
r
r
.
.
Vigor2952 Series, a broadband router, integrates IP layer QoS, NAT session/bandwidth
management to help users control works well with large bandwidth.
By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the
router increases the performance of VPN greatly and offers several protocols (such as
IPSec/PPTP/L2TP) with up to 100 VPN tunnels.
The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set
firewall policy easily. CSM (Content Security Management) provides users control and
management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before. By
the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside
and control inside.
Vigor2952 Series User’s Guide
3
In addition, Vigor2952 Series supports USB interface for connecting USB printer to share
printer, USB storage device for sharing files, or for 3G/4G WAN.
The LAN ports of Vigor2952P and Vigor2952Pn allow power to be supplied to end devices, such
as Wireless Access Points, IP Phones and IP cams, directly through the existing LAN cables,
eliminating costs for additional AC wiring and reducing installation cost. PoE connection frees
your wireless AP deployment from the restriction due to power outlet location. By supplying
the power end-span, you can centralize power distribution and backup without the need to
increase infrastructure.
Vigor2952 Series User’s Guide
4
Before you use the Vigor router, please get acquainted with the LED indicators and
connectors first.
LED Status Explanation
Blinking The router is powered on and running normally. ACT (Activity)
Off The router is powered off.
On A USB device is connected and active. USB1~USB2
Blinking The data is transmitting.
On No fiber line connected. SFP
Off File line connected.
On The WAN connection is ready. WAN1~WAN2
Blinking It will blink while transmitting data.
QoS On The QoS function is active.
On Wireless access point is ready.
Blinking Ethernet packets are transmitting over wireless LAN.
WLAN
Off The WLAN function is inactive.
CSM On The profile of CSM (Content Security Management) for
IM/P2P application is enabled from Firewall >> General
Setup. (Such profile is established under CSM menu).
On Power sourcing equipment for PoE is enabled. PoE
Off Power sourcing equipment for PoE is disabled.
On VPN tunnel is up and down.
Off VPN services are disabled.
VPN
Blinking Traffic is passing through VPN tunnel.
LED on Connector
On The port is connected.
Off The port is disconnected.
Left LED
(Green)
Blinking The data is transmitting through WAN1 or Fiber WAN.
WAN1
or
Fiber
WAN
Right LED
On The WAN1/Fiber port is connected with 1000Mbps.
Vigor2952 Series User’s Guide
5
(Green)
Off The WAN1/Fiber port is connected with 10/100Mbps.
On The port is connected.
Off The port is disconnected.
Left LED
(Green)
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
WAN2
Right LED
(Green)
Off The port is connected with 10/100Mbps.
On The port is connected.
Off The port is disconnected.
Left LED
(Green)
Blinking The data is transmitting.
On The port is connected with 1000Mbps.
LAN1~
LAN4
Right LED
(Green)
Off The port is connected with 10/100Mbps.
Vigor2952 Series User’s Guide
6
Interface Description
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you
see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration.
Wireless LAN
ON/OFF/WPS
WLAN On - Press the button and release it within 2 seconds. When the
wireless function is ready, the green LED will be on.
WLAN Off - Press the button and release it within 2 seconds to turn off
the WLAN function. When the wireless function is not ready, the LED will
be off.
WPS - When WPS function is enabled by web user interface, press this
button for more than 2 seconds to wait for client’s device making
network connection through WPS.
Fiber Connector for accessing the Internet.
WAN1~WAN2 Connector for remote networked devices.
LAN1~LAN4 Connectors for local networked devices.
USB1~USB2 Connector for a USB device (for 3G/4G USB Modem or printer).
PWR Connector for a power cord.
ON/OFF
Power Switch.
Note 1
Vigor router will use either Fiber WAN or WAN1 for Internet connection. If
both Fiber WAN and WAN1 are connected at the same time, Fiber WAN will be
the first choice.
Note 2
The PoE Power budget is up to 60W.
/
