Draytek Vigor2952P Owner's manual

Vigor2952 Series User’s Guide

ii

Vigor2952 Series

Dual-WAN Security Firewall

User’s Guide

Version: 2.3

Firmware Version: V3.9.0

(For future update, please visit DrayTek web site)

Date: October 28, 2018

Vigor2952 Series User’s Guide

iii

Copyrights

reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without

written permission from the copyright holders.

Trademarks

The following trademarks are used in this document:

 Microsoft is a registered trademark of Microsoft Corp.

 Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are trademarks of Microsoft Corp.

 Apple and Mac OS are registered trademarks of Apple Inc.

 Other products may be trademarks or registered trademarks of their respective manufacturers.

Safety Instructions



Read the installation guide thoroughly before you set up the router.

 The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel.

Do not try to open or repair the router yourself.

 Do not place the router in a damp or humid place, e.g. a bathroom.

 The router should be used in a sheltered area, within a temperature range of +5 to +40 Celsius.

 Do not expose the router to direct sunlight or other heat sources. The housing and electronic components

may be damaged by direct sunlight or heat sources.

 Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards.

 Keep the package out of reach of children.

 When you want to dispose of the router, please follow local regulations on conservation of the environment.

Warranty

 We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship

or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your

purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon

proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials,

we will, at our discretion, repair or replace the defective products or components, without charge for either

parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition.

Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and

will be offered solely at our discretion. This warranty will not apply if the product is modified, misused,

tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does

not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the

usability of the product will not be covered by the warranty. We reserve the right to revise the manual and

online documentation and to make changes from time to time in the contents hereof without obligation to

notify any person of such revision or changes.

Be a Registered Owner

 Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com.

Firmware & Tools Updates

 Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult

the DrayTek web site for more information on newest firmware, tools and documents.

http://www.DrayTek.com

Vigor2952 Series User’s Guide

i

v

Vigor2952 Series User’s Guide

v

T

a

b

l

e

o

f

C

o

n

t

e

n

t

s

Part I Installation................................................................................................................1

I-1 Introduction ................................................................................................................................... 2

I-1-1 Indicators and Connectors .................................................................................................. 4

I-2 Hardware Installation .................................................................................................................... 7

I-2-1 Installing Vigor Router......................................................................................................... 7

I-2-2 Wall-Mounted Installation of Vigor Router........................................................................... 8

I-2-3 Installing USB Printer to Vigor Router................................................................................. 9

I-3 Accessing Web Page.................................................................................................................. 17

I-4 Changing Password.................................................................................................................... 19

I-5 Dashboard................................................................................................................................... 21

I-5-1 Virtual Panel...................................................................................................................... 21

I-5-2 Name with a Link............................................................................................................... 22

I-5-3 Quick Access for Common Used Menu ............................................................................ 23

I-5-4 GUI Map ............................................................................................................................ 24

I-5-5 Web Console..................................................................................................................... 25

I-5-6 Config Backup................................................................................................................... 26

I-5-7 Manual Download.............................................................................................................. 27

I-5-7 Logout................................................................................................................................ 28

I-5-8 Online Status..................................................................................................................... 29

I-5-8-1 Physical Connection......................................................................29

I-5-8-2 Virtual WAN ...............................................................................31

I-6 Quick Start Wizard ...................................................................................................................... 32

I-6-1 WAN1 (Fiber) / WAN1/2(Ethernet).................................................................................... 33

I-6-2 WAN3 / WAN4 (USB)........................................................................................................ 42

I-7 Service Activation Wizard ........................................................................................................... 44

I-8 Registering Vigor Router............................................................................................................. 46

Part II Connectivity ..........................................................................................................49

II-1 WAN........................................................................................................................................... 50

Web User Interface.................................................................................................................... 52

II-1-1 General Setup .................................................................................................................. 52

II-1-1-1 WAN1 (Fiber/AUTO).....................................................................53

II-1-1-2 WAN2 (Ethernet).........................................................................55

II-1-1-3 WAN3 / WAN4 (USB).....................................................................56

II-1-2 Internet Access................................................................................................................. 59

II-1-2-1 Details Page for PPPoE in Ethernet WAN1/WAN2 and Fiber WAN1..............61

II-1-2-2 Details Page for Static or Dynamic IP in Etherenet WAN1/WAN2 and Fiber WAN1

.......................................................................................................64

II-1-2-3 Details Page for PPTP/L2TP in Etherenet WAN1/WAN2 and Fiber WAN1.......67

II-1-2-4 Details Page for 3G/4G USB Modem (PPP mode) in USB WAN3/WAN4 ..........70

II-1-2-5 Details Page for 3G/4G USB Modem (DHCP mode) in USB WAN3/WAN4........72

II-1-2-6 Details Page for IPv6 – Offline in WAN1/WAN2/WAN3/WAN4....................74

II-1-2-7 Details Page for IPv6 – PPP in WAN1/WAN2 .........................................74

Vigor2952 Series User’s Guide

vi

II-1-2-8 Details Page for IPv6 – TSPC in WAN1/WAN2/WAN3/WAN4.......................75

II-1-2-9 Details Page for IPv6 – AICCU in WAN1/WAN2/WAN3/WAN4 .....................76

II-1-2-10 Details Page for IPv6 – DHCPv6 Client in WAN1/WAN2...........................78

II-1-2-11 Details Page for IPv6 – Static IPv6 in in WAN1/WAN2 ............................80

II-1-2-12 Details Page for IPv6 – 6in4 Static Tunnel in WAN1 / WAN2 ....................81

II-1-2-13 Details Page for IPv6 – 6rd in WAN1 / WAN2.......................................83

II-1-3 Multi-VLAN ....................................................................................................................... 85

II-1-4 WAN Budget..................................................................................................................... 90

II-1-4-1 General Setup ............................................................................90

II-1-4-2 Status ......................................................................................93

Application Notes....................................................................................................................... 94

A-1 How to configure settings for IPv6 Service in Vigor2952...............................94

A-2 Load Balancing and Failover for multi-WAN Vigor Routers.......................... 107

II-2 LAN.......................................................................................................................................... 109

Web User Interface.................................................................................................................. 111

II-2-1 General Setup ................................................................................................................ 111

II-2-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup...................... 114

II-2-1-2 Details Page for LAN1~ LAN4 – IPv6 Setup......................................... 117

II-2-1-3 Details Page for LAN2 ~ LAN8........................................................ 120

II-2-1-4 Details Page for IP Routed Subnet .................................................. 122

II-2-1-5 DHCP Server Options .................................................................. 123

II-2-2 VLAN.............................................................................................................................. 125

II-2-3 Bind IP to MAC............................................................................................................... 129

II-2-4 LAN Port Mirror............................................................................................................... 132

II-2-5 Wired 802.1x .................................................................................................................. 133

II-2-6 PPPoE Server ................................................................................................................ 134

II-2-7 PoE................................................................................................................................. 135

II-2-7-1 General Setup .......................................................................... 135

II-2-7-2 Device Check............................................................................ 136

II-2-7-3 Status .................................................................................... 137

Application Notes..................................................................................................................... 138

A-1 How to configure DHCP options for DHCP clients?.................................... 138

A-2 How to use a Public IP on LAN?........................................................... 141

A-3 How to set up multi-subnet with port-based VLAN?.................................. 145

II-3 NAT .......................................................................................................................................... 148

Web User Interface.................................................................................................................. 149

II-3-1 Port Redirection.............................................................................................................. 149

II-3-2 DMZ Host ....................................................................................................................... 154

II-3-3 Open Ports ..................................................................................................................... 157

II-3-4 Port Triggering................................................................................................................ 159

II-3-5 ALG................................................................................................................................. 162

II-4 Applications.............................................................................................................................. 163

Web User Interface.................................................................................................................. 165

II-4-1 Dynamic DNS................................................................................................................. 165

II-4-2 LAN DNS / DNS Forwarding.......................................................................................... 170

II-4-3 DNS Security.................................................................................................................. 173

II-4-3-1 General Setup .......................................................................... 173

Vigor2952 Series User’s Guide

vii

II-4-3-2 Domain Diagnose....................................................................... 174

II-4-4 Schedule......................................................................................................................... 175

II-4-5 RADIUS/TACACS+........................................................................................................ 178

II-4-5-1 External RADIUS........................................................................ 178

II-4-5-2 Internal RADIUS ........................................................................ 179

II-4-5-3 External TACACS+...................................................................... 182

II-4-6 Active Directory/ LDAP................................................................................................... 183

II-4-7 UPnP.............................................................................................................................. 186

II-4-8 IGMP............................................................................................................................... 187

II-4-8-1 General Setting ........................................................................ 187

II-4-8-2 Working Group ......................................................................... 188

II-4-9 Wake on LAN ................................................................................................................. 189

II-4-10 SMS / Mail Alert Service............................................................................................... 190

II-4-11 Bonjour......................................................................................................................... 192

II-4-12 High Availability............................................................................................................ 195

II-4-12-2 Config Sync ............................................................................ 199

II-4-13 Local 802.1X General Setup........................................................................................ 201

Application Notes..................................................................................................................... 203

A-1 How to Implement the LDAP/AD Authentication for User Management? ......... 203

A-2 How to use High Availability?............................................................. 206

A-3 How to use DrayDDNS?..................................................................... 214

A-4 How to Configure Customized DDNS?.................................................... 218

II-5 Routing..................................................................................................................................... 222

Web User Interface.................................................................................................................. 223

II-5-1 Static Route.................................................................................................................... 223

II-5-2 Load-Balance /Route Policy........................................................................................... 227

II-5-2-1 General Setup .......................................................................... 227

II-5-2-2 Diagnose................................................................................. 234

II-5-3 BGP................................................................................................................................ 236

II-5-3-1 Basic Settings........................................................................... 236

II-5-3-1 Static Network ......................................................................... 237

Application Notes..................................................................................................................... 238

A-1 How to Customize a Secure Route between VPN Router and Remote Router by Using

Route Policy ...................................................................................... 238

A-2 How to Setup Address Mapping with Route Policy.................................... 241

A-3 How to use destination domain name in a route policy?............................. 243

II-6 Hardware Acceleration............................................................................................................. 245

Web User Interface.................................................................................................................. 245

Part III Wireless LAN......................................................................................................247

III-1 Wireless LAN .......................................................................................................................... 248

Web User Interface.................................................................................................................. 251

III-1-1 Wireless Wizard............................................................................................................. 251

III-1-2 General Setup ............................................................................................................... 254

III-1-3 Security.......................................................................................................................... 256

III-1-4 Access Control .............................................................................................................. 259

Vigor2952 Series User’s Guide

viii

III-1-5 WPS............................................................................................................................... 260

III-1-6 WDS .............................................................................................................................. 263

III-1-7 Advanced Setting .......................................................................................................... 266

III-1-8 AP Discovery................................................................................................................. 269

III-1-9 Airtime Fairness............................................................................................................. 270

III-1-10 Station List................................................................................................................... 272

III-1-11 Station Control............................................................................................................. 273

III-1-12 Bandwidth Management.............................................................................................. 274

Part IV VPN.....................................................................................................................275

IV-1 VPN and Remote Access ....................................................................................................... 276

Web User Interface.................................................................................................................. 277

IV-1-1 VPN Client Wizard ........................................................................................................ 277

IV-1-2 VPN Server Wizard....................................................................................................... 284

IV-1-3 Remote Access Control ................................................................................................ 289

IV-1-4 PPP General Setup....................................................................................................... 290

IV-1-5 IPsec General Setup..................................................................................................... 292

IV-1-6 IPsec Peer Identity........................................................................................................ 294

IV-1-7 OpenVPN...................................................................................................................... 296

IV-1-7-1 General Setup ......................................................................... 296

IV-1-7-2 Client Config........................................................................... 297

IV-1-8 Remote Dial-in User...................................................................................................... 298

IV-1-9 LAN to LAN................................................................................................................... 302

IV-1-10 VPN Trunk Management ............................................................................................ 312

IV-1-11 Connection Management............................................................................................ 321

Application Notes..................................................................................................................... 323

A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec

Tunnel (Main Mode)............................................................................. 323

A-2 How to Build a LAN-to-LAN VPN Between Vigor Routers via IKEv2................. 328

IV-2 SSL VPN................................................................................................................................. 331

Web User Interface.................................................................................................................. 332

IV-2-1 General Setup............................................................................................................... 332

IV-2-2 SSL Web Proxy............................................................................................................. 333

IV-2-3 SSL Application............................................................................................................. 335

IV-2-4 User Account................................................................................................................. 337

IV-2-5 User Group.................................................................................................................... 341

IV-2-6 SSL Portal Online User................................................................................................. 344

Application Notes..................................................................................................................... 345

A-1 Vigor Router to Vigor Router – SSL VPN................................................. 345

VPN Client (Dial-out Site) Setup .............................................................. 346

Establishing the VPN Tunnel................................................................... 348

IV-3 Certificate Management.......................................................................................................... 349

Web User Interface.................................................................................................................. 350

Vigor2952 Series User’s Guide

ix

IV-3-1 Local Certificate ............................................................................................................ 350

IV-3-2 Trusted CA Certificate................................................................................................... 354

IV-3-3 Certificate Backup......................................................................................................... 356

IV-3-4 Self-Signed Certificate .................................................................................................. 357

Part V Security...............................................................................................................359

V-1 Firewall..................................................................................................................................... 360

Web User Interface.................................................................................................................. 362

V-1-1 General Setup................................................................................................................ 362

V-1-2 Filter Setup..................................................................................................................... 367

V-1-3 Defense Setup ............................................................................................................... 378

V-1-3-1 DoS Defense............................................................................. 378

V-1-3-2 Spoofing Defense....................................................................... 381

V-1-4 Diagnose........................................................................................................................ 382

Application Notes..................................................................................................................... 385

A-1 How to Configure Certain Computers Accessing to Internet........................ 385

A-2 How to backup and restore firewall rule and object settings? ..................... 389

V-2 CSM (Central Security Management)...................................................................................... 391

Web User Interface.................................................................................................................. 392

V-2-1 APP Enforcement Profile ............................................................................................... 392

V-2-2 APPE Signature Upgrade.............................................................................................. 394

V-2-3 URL Content Filter Profile.............................................................................................. 395

V-2-4 Web Content Filter Profile.............................................................................................. 399

V-2-5 DNS Filter Profile ........................................................................................................... 403

Application Notes..................................................................................................................... 406

A-1 How to Create an Account for MyVigor ................................................. 406

A-2 How to Block Facebook Service Accessed by the Users via Web Content Filter / URL

Content Filter.................................................................................... 411

A-3 How to use APP Enforcement to block application like Facebook, YouTube or

TeamViewer?..................................................................................... 416

Part VI Management ......................................................................................................421

VI-1 System Maintenance.............................................................................................................. 422

Web User Interface.................................................................................................................. 423

VI-1-1 System Status............................................................................................................... 424

VI-1-2 TR-069 .......................................................................................................................... 426

VI-1-3 Admininstrator Password.............................................................................................. 429

VI-1-4 User Password.............................................................................................................. 432

VI-1-5 Login Page Greeting..................................................................................................... 435

VI-1-6 Configuration Backup.................................................................................................... 437

VI-1-7 SysLog/Mail Alert.......................................................................................................... 440

VI-1-8 Time and Date............................................................................................................... 443

VI-1-9 SNMP............................................................................................................................ 444

VI-1-10 Management............................................................................................................... 446

Vigor2952 Series User’s Guide

x

VI-1-11 Panel Control .............................................................................................................. 450

VI-1-12 Self-Signed Certificate ................................................................................................ 453

VI-1-13 Reboot System............................................................................................................ 455

VI-1-14 Firmware Upgrade ...................................................................................................... 456

VI-1-15 Activation..................................................................................................................... 457

VI-1-16 Internal Service User List............................................................................................ 458

VI-1-17 Dashboard Control...................................................................................................... 459

VI-2 Bandwidth Management......................................................................................................... 460

Web User Interface.................................................................................................................. 462

VI-2-1 Sessions Limit............................................................................................................... 462

VI-2-2 Bandwidth Limit............................................................................................................. 464

VI-2-3 Quality of Service.......................................................................................................... 466

VI-2-4 APP QoS....................................................................................................................... 473

Application Notes..................................................................................................................... 475

A-1 How to Optimize the Bandwidth through QoS Technology .......................... 475

VI-3 User Management.................................................................................................................. 479

Web User Interface.................................................................................................................. 480

VI-3-1 General Setup............................................................................................................... 480

VI-3-2 User Profile ................................................................................................................... 482

VI-3-3 User Group.................................................................................................................... 488

VI-3-4 User Online Status........................................................................................................ 489

VI-3-5 PPPoE User Online Status........................................................................................... 490

VI-4 Hotspot Web Portal................................................................................................................. 491

Web User Interface.................................................................................................................. 492

VI-4-1 Profile Setup.................................................................................................................. 492

VI-4-1-1 Login Method .......................................................................... 492

VI-4-1-2 Steps for Configuring a Web Portal Profile....................................... 493

VI-4-2 User Information............................................................................................................ 509

VI-4-2-1 User Info................................................................................ 509

VI-4-2-2 Database Setup........................................................................ 510

VI-4-3 Quota Management ...................................................................................................... 512

Application Notes..................................................................................................................... 515

A-1 How to allow users login to Vigor’s Hotspot with their social media accounts (e.g.,

Facebook & Google)............................................................................. 515

A-2 How to allow hotspot clients to get login PIN code via SMS?........................ 523

VI-5 Central Management (VPN)................................................................................................... 531

Web User Interface.................................................................................................................. 532

VI-5-1 General Setup............................................................................................................... 532

VI-5-1-1 General Settings....................................................................... 532

VI-5-1-2 IPsec VPN Settings .................................................................... 533

VI-5-2 CPE Management......................................................................................................... 534

VI-5-2-1 Managed Device List.................................................................. 534

VI-5-2-2 CPE Maintenance...................................................................... 536

VI-5-2-3 Google Map............................................................................. 539

Vigor2952 Series User’s Guide

x

i

VI-5-3 VPN Management......................................................................................................... 540

VI-5-4 Log & Alert .................................................................................................................... 541

Application Notes..................................................................................................................... 542

A-1 CVM Application - How to manage the CPE (router) through Vigor2952 Series?. 542

A-2 CVM Application - How to build the VPN between remote devices and Vigor2952

Series?............................................................................................. 546

A-3 CVM Application - How to upgrade CPE firmware through Vigor2952 Series?.... 548

VI-6 Central Management (AP)...................................................................................................... 551

Web User Interface.................................................................................................................. 552

VI-6-1 Dashboard..................................................................................................................... 552

VI-6-2 Status............................................................................................................................ 553

VI-6-3 WLAN Profile................................................................................................................. 554

VI-6-4 AP Maintenance............................................................................................................ 559

VI-6-5 AP Map ......................................................................................................................... 560

VI-6-6 Traffic Graph................................................................................................................. 563

VI-6-7 Temperature Sensor..................................................................................................... 564

VI-6-8 Event Log...................................................................................................................... 564

VI-6-9 Total Traffic................................................................................................................... 565

VI-6-10 Station Number........................................................................................................... 565

VI-6-11 Load Balance.............................................................................................................. 566

VI-6-12 Function Support List.................................................................................................. 567

Application Notes..................................................................................................................... 569

A-1 How to use AP Management function (in Vigor2952) to check AP status and deploy

WLAN profile..................................................................................... 569

VI-7 Central Management (Switch)................................................................................................ 573

Web User Interface.................................................................................................................. 574

VI-7-1 Status............................................................................................................................ 574

VI-7-1-1 Switch Status .......................................................................... 574

VI-7-1-2 Switch Hierarchy...................................................................... 577

VI-7-1-3 Detailed Info........................................................................... 578

VI-7-2 Profile............................................................................................................................ 579

VI-7-3 Group ............................................................................................................................ 583

VI-7-4 Maintenance.................................................................................................................. 585

VI-7-5 Alert and Log................................................................................................................. 586

VII-7-5-1 Alert Setup............................................................................ 586

VII-7-5-2 Switch and Port Setup............................................................... 587

VII-7-5-3 Alert Logs.............................................................................. 589

VI-7-6 Database Setup ............................................................................................................ 590

VI-7-7 Support List................................................................................................................... 591

Application Notes..................................................................................................................... 592

A-1 How to set up VLAN on VigorSwitch with Central Switch Management (SWM)?.. 592

VI-8 Central Management (External Devices) ............................................................................... 596

Part VII Others................................................................................................................597

VII-1 Objects Settings..................................................................................................................... 598

Vigor2952 Series User’s Guide

x

ii

Web User Interface.................................................................................................................. 599

VII-1-1 IP Object ...................................................................................................................... 599

VII-1-2 IP Group....................................................................................................................... 604

VII-1-3 IPv6 Object................................................................................................................... 605

VII-1-4 IPv6 Group................................................................................................................... 607

VII-1-5 Service Type Object..................................................................................................... 609

VII-1-6 Service Type Group..................................................................................................... 611

VII-1-7 Keyword Object............................................................................................................ 613

VII-1-8 Keyword Group............................................................................................................ 615

VII-1-9 File Extension Object................................................................................................... 616

VII-1-10 SMS/Mail Service Object........................................................................................... 618

VII-1-11 Notification Object...................................................................................................... 623

VII-1-12 String Object .............................................................................................................. 625

VII-1-13 Country Object........................................................................................................... 626

Application Notes..................................................................................................................... 628

A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN

Disconnection .................................................................................... 628

VII-2 USB Application..................................................................................................................... 632

Web User Interface.................................................................................................................. 633

VII-2-1 USB General Settings.................................................................................................. 633

VII-2-2 USB User Management............................................................................................... 634

VII-2-3 File Explorer................................................................................................................. 636

VII-2-4 USB Device Status....................................................................................................... 637

VII-2-5 Temperature Sensor.................................................................................................... 638

VII-2-6 Modem Support List..................................................................................................... 640

VII-2-7 SMB Client Support List............................................................................................... 641

Application Notes..................................................................................................................... 642

A-1 How can I get the files from USB storage device connecting to Vigor router? ... 642

Part VIII Troubleshooting ..............................................................................................645

VIII-1 Diagnostics........................................................................................................................... 646

Web User Interface.................................................................................................................. 647

VIII-1-1 Dial-out Triggering....................................................................................................... 647

VIII-1-2 Routing Table.............................................................................................................. 648

VIII-1-3 ARP Cache Table ....................................................................................................... 649

VIII-1-4 IPv6 Neighbour Table ................................................................................................. 650

VIII-1-5 DHCP Table................................................................................................................ 651

VIII-1-6 NAT Sessions Table ................................................................................................... 652

VIII-1-7 DNS Cache Table....................................................................................................... 653

VIII-1-8 Ping Diagnosis............................................................................................................ 654

VIII-1-9 Data Flow Monitor....................................................................................................... 656

VIII-1-10 Traffic Graph............................................................................................................. 658

Vigor2952 Series User’s Guide

x

iii

VIII-1-11 VPN Graph................................................................................................................ 659

VIII-1-12 Trace Route .............................................................................................................. 660

VIII-1-13 Syslog Explorer......................................................................................................... 661

VIII-1-14 IPv6 TSPC Status..................................................................................................... 662

VIII-1-15 High Availability Status ............................................................................................. 663

VIII-1-16 Authentication Information........................................................................................ 665

VIII-1-17 DoS Flood Table....................................................................................................... 666

VIII-1-18 Route Policy Diagnosis............................................................................................. 667

VIII-2 Checking If the Hardware Status Is OK or Not..................................................................... 669

VIII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not................... 670

VIII-4 Pinging the Router from Your Computer .............................................................................. 673

VIII-5 Checking If the ISP Settings are OK or Not ......................................................................... 675

VIII-6 Problems for 3G/4G Network Connection............................................................................ 676

VIII-7 Backing to Factory Default Setting If Necessary.................................................................. 677

VIII-8 Contacting DrayTek .............................................................................................................. 678

Part IX DrayTek Tools ....................................................................................................679

IX-1 SmartVPN Client..................................................................................................................... 680

IX-1-1 DrayTek Android-based SmartVPN APP for the establishment of SSL VPN connection

................................................................................................................................................. 680

IX-1-2 How to Use SmartVPN Android APP to Establish SSL VPN Tunnel?.......................... 681

Part X Telnet Commands...............................................................................................685

Accessing Telnet of Vigor2952....................................................................................................... 686

Index ...............................................................................................................................881

Vigor2952 Series User’s Guide

1

This part will introduce Vigor router and guide to

install the device in hardware and software.

Vigor2952 Series User’s Guide

2

T

h

i

s

i

s

a

g

e

n

e

r

i

c

I

n

t

e

r

n

a

t

i

o

n

a

l

v

e

r

s

i

o

n

o

f

t

h

e

u

s

e

r

g

u

i

d

e

.

S

p

e

c

i

f

i

c

a

t

i

o

n

,

c

o

m

p

a

t

i

b

i

l

i

t

y

a

n

d

f

e

a

t

u

r

e

s

v

a

r

y

b

y

r

e

g

i

o

n

.

F

o

r

s

p

e

c

i

f

i

c

u

s

e

r

g

u

i

d

e

s

u

i

t

a

b

l

e

f

o

r

y

o

u

r

e

g

i

o

n

o

r

p

r

o

d

u

c

t

,

p

l

e

a

s

e

c

o

n

t

a

c

t

l

o

c

a

l

d

i

s

t

r

i

b

u

t

o

r

.

Vigor2952 Series, a broadband router, integrates IP layer QoS, NAT session/bandwidth

management to help users control works well with large bandwidth.

By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the

router increases the performance of VPN greatly and offers several protocols (such as

IPSec/PPTP/L2TP) with up to 100 VPN tunnels.

The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set

firewall policy easily. CSM (Content Security Management) provides users control and

management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before. By

the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside

and control inside.

Vigor2952 Series User’s Guide

3

In addition, Vigor2952 Series supports USB interface for connecting USB printer to share

printer, USB storage device for sharing files, or for 3G/4G WAN.

The LAN ports of Vigor2952P and Vigor2952Pn allow power to be supplied to end devices, such

as Wireless Access Points, IP Phones and IP cams, directly through the existing LAN cables,

eliminating costs for additional AC wiring and reducing installation cost. PoE connection frees

your wireless AP deployment from the restriction due to power outlet location. By supplying

the power end-span, you can centralize power distribution and backup without the need to

increase infrastructure.

Vigor2952 Series User’s Guide

4

Before you use the Vigor router, please get acquainted with the LED indicators and

connectors first.

LED Status Explanation

Blinking The router is powered on and running normally. ACT (Activity)

Off The router is powered off.

On A USB device is connected and active. USB1~USB2

Blinking The data is transmitting.

On No fiber line connected. SFP

Off File line connected.

On The WAN connection is ready. WAN1~WAN2

Blinking It will blink while transmitting data.

QoS On The QoS function is active.

On Wireless access point is ready.

Blinking Ethernet packets are transmitting over wireless LAN.

WLAN

Off The WLAN function is inactive.

CSM On The profile of CSM (Content Security Management) for

IM/P2P application is enabled from Firewall >> General

Setup. (Such profile is established under CSM menu).

On Power sourcing equipment for PoE is enabled. PoE

Off Power sourcing equipment for PoE is disabled.

On VPN tunnel is up and down.

Off VPN services are disabled.

VPN

Blinking Traffic is passing through VPN tunnel.

LED on Connector

On The port is connected.

Off The port is disconnected.

Left LED

(Green)

Blinking The data is transmitting through WAN1 or Fiber WAN.

WAN1

or

Fiber

WAN

Right LED

On The WAN1/Fiber port is connected with 1000Mbps.

Vigor2952 Series User’s Guide

5

(Green)

Off The WAN1/Fiber port is connected with 10/100Mbps.

On The port is connected.

Off The port is disconnected.

Left LED

(Green)

Blinking The data is transmitting.

On The port is connected with 1000Mbps.

WAN2

Right LED

(Green)

Off The port is connected with 10/100Mbps.

On The port is connected.

Off The port is disconnected.

Left LED

(Green)

Blinking The data is transmitting.

On The port is connected with 1000Mbps.

LAN1~

LAN4

Right LED

(Green)

Off The port is connected with 10/100Mbps.

Vigor2952 Series User’s Guide

6

Interface Description

Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is

blinking). Press the hole and keep for more than 5 seconds. When you

see the ACT LED begins to blink rapidly than usual, release the button.

Then the router will restart with the factory default configuration.

Wireless LAN

ON/OFF/WPS

WLAN On - Press the button and release it within 2 seconds. When the

wireless function is ready, the green LED will be on.

WLAN Off - Press the button and release it within 2 seconds to turn off

the WLAN function. When the wireless function is not ready, the LED will

be off.

WPS - When WPS function is enabled by web user interface, press this

button for more than 2 seconds to wait for client’s device making

network connection through WPS.

Fiber Connector for accessing the Internet.

WAN1~WAN2 Connector for remote networked devices.

LAN1~LAN4 Connectors for local networked devices.

USB1~USB2 Connector for a USB device (for 3G/4G USB Modem or printer).

PWR Connector for a power cord.

ON/OFF

Power Switch.

Note 1

Vigor router will use either Fiber WAN or WAN1 for Internet connection. If

both Fiber WAN and WAN1 are connected at the same time, Fiber WAN will be

the first choice.

Note 2

The PoE Power budget is up to 60W.

Page is loading ...

Draytek Vigor2952P Owner's manual

This manual is also suitable for

Draytek Vigor2952P Owner's manual

Related papers

Other documents