Draytek Vigor2000 Instalační příručka

0. Preface ... 0-10.1 About This Manual ...

1-3Getting Started1.2 Unpacking Your Vigor2000 RouterYour Vigor2000 Router package should contain items listed below. Ifany item is missing or damaged

6-5Virtual TA Application6.3 Configuring a Virtual TA Client/ServerThe Virtual TA application is a client/server model. You must set it upon both end

6-6Virtual TA ApplicationVirtual TA User Profiles:Username: Specify the username for a specific client.Password: Specify the password for a specific

6-7Virtual TA Application3. Click "Virtual TA Login" to open the login box.4. Enter the Username and Password and click "OK". Aft

6-8Virtual TA Application1. As an example, you could assign the MSN number "123" tothe client.2. Set the specified MSN number in the CAPI-b

7-17SystemManagement7.1 Online Status7.2 Management Setup7.3 Diagnostic Tools7.4 Reboot System7.5 Firmware Upgrade

7-2System ManagementThis chapter will show you how to manage your router using the Sys-tem Management tools shown below.System Management> Online S

7-3System Management7.1 Online StatusClick "Online Status" to open the Online Status page. The exampleshown in the next page has both ISDN

7-4System ManagementTX Rate: Transmission rate for outgoing data. The unit ischaracters per second (cps).RX Pkts: Total number of received IP packets

7-5System ManagementRX Rate: Reception rate for ingoing data. The unit is charactersper second (cps).Up Time: Connection time. The format is HH:MM:SS

7-6System ManagementManagement Access ControlAllow management from the Internet: Check to allow sys-tem administrators to login from the Internet. Th

1-4Getting Started1.3 Front Panel & Rear Panel DescriptionsVigor2000 Router: Front Panel Description -- LED IndicatorsThere are eleven LEDs on the

7-7System ManagementUser Defined Ports: Check and enter user-defined port num-bers for the Telnet and HTTP servers.7.3 Diagnostic ToolsDiagnostic Tool

7-8System ManagementRefresh: To obtain the latest information, click here to reloadthe page.ISDN:ISDN Link Status: If the link is active, this field w

7-9System Managementit will show PPPoE, PPTP, or Static IP depending on whichaccess mode is enabled. If the connection is idle, it will show"- -

7-10System ManagementThe table provides current IP routing information held in the router. Tothe left of each routing rule you will see a key. These

7-11System ManagementView DHCP Assigned IP Addresses:View DHCP Assigned IP Addresses provides information on IP ad-dress assignments. This informatio

7-12System ManagementView NAT Port Redirection Running Table:If you have configured Port Redirection (under NAT Setup), click toverify that your setti

7-13System ManagementEach line across the screen indicates an active session. The followinginformation is displayed:Private IP, Port: The internal us

7-14System Management7.4 Reboot SystemThe Web Configurator may be used to restart your router. Click RebootSystem to open the following setup page.Th

7-15System Management7.5 Firmware UpgradeBefore upgrading your router firmware, you must install the RouterTools. The Firmware Upgrade Utility is inc

7-16System Management3. Click Start -> Programs -> Router Tools -> Firmware UpgradeUtility to launch the Firmware Upgrade Utility.The Router

1-5Getting StartedISDN Group:Note:On some NT1 boxes, the LNK LED will go OFF when theISDN line has been idle for a while. When the router isdialing or

8-18Troubleshooting& FAQ8.1 Using the Telnet Terminal Commands8.2 Viewing Call Logs8.3 Viewing ISDN Logs8.4 Viewing PPP Logs8.5 Viewing WAN Logs8.

8-2Troubleshooting & FAQThe following section explains how to use Telnet terminal commandsto diagnose your network problems via the built-in debug

8-3Troubleshooting & FAQAfter assigning a password, type ?. You will see all possible Telnetcommands.Command Help:If you are not familiar with th

8-4Troubleshooting & FAQRecall Commands:The Telnet terminal also provides a method to recall the commandhistory. Use the Up and Down arrow keys o

8-5Troubleshooting & FAQ4. Type "log -c" to display the latest call log.ISDN example:PPPoE example:

8-6Troubleshooting & FAQ8.3 Viewing ISDN LogsTo capture messages exchanged on the ISDN interface, clear all ISDNlogs before you start capturing th

8-7Troubleshooting & FAQThe above example shows detailed D-channel SETUP messages only.Note that all ISDN D-channel messages will be displayed whe

8-8Troubleshooting & FAQThe PPP log is useful in solving communication problems for normalISDN dialup, or PPPoE and PPTP dialup via a DSL modem.8.

8-9Troubleshooting & FAQdisplay all WAN logs, use the "log -w -t" command.8.6 FAQsThe following session cover answers for some frequentl

8-10Troubleshooting & FAQ5. Why can I ping to outside hosts but can not access Internetwebsites?A: Check if the Primary and the Secondary DNS serv

1-6Getting StartedOnly the DrayTek supplied power adapter should be connected to thepower jack.UPLINK (back panel)Use attached 10BaseT LAN cable to co

1-7Getting Started1.4 Key FeaturesThe Vigor2000 Router provides many built-in server and software fea-tures to provide a convenient comprehensive solu

1-8Getting StartedLAN-to-LAN applications. The RIP protocol exchanges routing infor-mation between routers.7. Domain Name Server (DNS) Proxy: The DN

1-9Getting Startedbuilt-in PPTP client for establishing a DSL link transport protocol foryour entire local network. There is no need to install a PPT

2-12Installation &Setup2.1 Before you Begin2.2 Hardware Installation2.3 Setting up a Management PC2.4 Using the Smart Start Wizard2.5 Using the We

2-2Installation & Setup2.1 Before You Begin1. Use only the power adapter supplied by DrayTek Corp. Using anincorrectly rated power adapter will r

2-3Installation & SetupSubnet Mask: 255.255.255.0DHCP Server: Enabled Start IP Address: 192.168.1.10IP Pool Counts: 50DNS Server IP Address

3. Basic Setup & Internet Access ... 3-13.1 Basic Setup ... 3-23.2 Internet

2-4Installation & Setup2.2 Hardware Installation2.2.1 Connecting the Power Adapter1. Connect the power adapter to the power outlet on the wall and

2-5Installation & SetupEthernet hub or switch.3. The LED indicators on both the Uplink port and the externalEthernet hub or switch should be ON.No

2-6Installation & Setup3. If the Pn (the port that be plugged) LED is not bright, please changethe direct cable to cross cable.The hardware instal

2-7Installation & Setup2.3 Setting Up a Management PCThe Vigor2000 Router has a built-in HTTP (Web) server for configuration.Before you use the ro

2-8Installation & SetupYour particular system may differ from the screen shown here. Checkif you have an Ethernet Network Interface card (NIC) in

2-9Installation & Setup2.3.2 Configuring the TCP/IP Protocol1. On the Network dialog box Configuration card, select TCP/IP andthen click "Pro

2-10Installation & Setup4. Click the "Gateway" tab.

2-11Installation & Setup5. Make the "New gateway" and "Installed gateways" fields blankand click "OK". A dialog bo

2-12Installation & Setupon the next page. If not, verify that the Ethernet cable is connected tothe router properly and the Ethernet port LED on

2-13Installation & Setup2.4 Using the Smart Start WizardThe Smart Start Wizard will guide you to the Web Configurator orTelnet Terminal (command-l

6.3 Configuring a Virtual TA Client/Server ... 6-57. System Management ... 7-17.1 Online Status ...

2-14Installation & SetupThe following screen will open.2. Click "Search" to find the router on your network.3. Click "OK" to g

2-15Installation & SetupThe screen shows read-only IP and IP mask settings for the PC youare using, and also the IP Address and IP Mask settings f

2-16Installation & SetupIf the IP address and IP Mask of your PC and the router are not locatedat the same subnet, please renew your PC's IP

2-17Installation & Setup

2-18Installation & Setup2.5 Using the Web Configurator2.5.1 Connecting to the Web Configurator via a Web Browser1. Launch the Web browser. Enter

2-19Installation & Setup2.5.2 Overview of the Web ConfiguratorThe Setup Main Menu (see above figure) consists of four groups: Ba-sic Setup (Setup

2-20Installation & Setup3. ISDN Setup:ISDN users need to select a country code. Sets some ISDNnumbering settings, e.g. MSN numbers and Own (Calli

2-21Installation & Setup3. Static Route SetupThis menu has 10 routing rules for static routing usage. Hereyou may add/delete or activate/deactiva

2-22Installation & SetupDiagnostic tools offers useful tools to diagnose the router oryour network, e.g. view ARP table, routing table, NAT port m

3-13Basic Setup &Internet Access3.1 Basic Setup3.2 Internet Access Setup3.3 ISDN Dial-up Internet Access3.4 IDSL Leased-Line3.5 DSL/Cable Modem In

0-10Preface0.1 About This Manual0.2 Copyright Declarations0.3 Trademarks0.4 How To Become A Registered Owner0.5 Safety Instructions0.6 Warranty0.7 Eur

3-2Basic Setup & Internet AccessThe Web Configurator Setup Main Menu includes four groups: BasicSetup (Setup First), Quick Setup, Advanced Setup,

3-3Basic Setup & Internet AccessOld Password:If this is the first time you enter this menu, leave this field blank.New Password:Enter an administr

3-4Basic Setup & Internet AccessRouter IP Network Configuration1st IP Address: Private IP address for connecting to a localprivate network (Defau

3-5Basic Setup & Internet Accessthe local network.Activate: (Default: Yes)Yes: Enable the DHCP server.No: Disable the DHCP server.Start IP Add

3-6Basic Setup & Internet Access3.1.3 Configuring the ISDN InterfaceCountry Code:Set the correct country code for proper function on your localISD

3-7Basic Setup & Internet Access3.2 Internet Access SetupFor most users, Internet access is the primary application. Thefollowing sections will e

3-8Basic Setup & Internet AccessIDSL Client (For U Interface Model Only): If you are anIDSL subscriber, you must use U Interface Vigor2000 Router

3-9Basic Setup & Internet Access3.3 ISDN Dial-up Internet Access3.3.1 Connecting to a Single ISPISP Access SetupISP Name: Enter your ISP name.Dia

3-10Basic Setup & Internet Access- Dialup 64KbpsUse one ISDN B channel for Internet access.- Dialup 128KbpsUse both ISDN B channels for Internet a

3-11Basic Setup & Internet Access3.3.2 Connecting to Dual ISPsMost configuration parameters are the same as last section. Thispage provides an &q

0-2Preface0.1 About This ManualThis manual is designed to assist users in using the DrayTekVigor2000 Router. Information in this document has been ca

3-12Basic Setup & Internet Access3.4 IDSL Leased - LineIDSL Client ISP Access Setup ISP Name: Enter the Internet Service Provider

3-13Basic Setup & Internet AccessUse both B channels for Internet access.PPP Authentication: two types of authentication - PAP OnlySet the

3-14Basic Setup & Internet Access3.5 DSL/Cable Modem Internet AccessBefore you connect a broadband access device, e.g. a DSL/Cablemodem, to the ro

3-15Basic Setup & Internet Access3.5.1 Using PPPoE with a DSL ModemClick "Internet Access Setup" -> "PPPoE" to enter the se

3-16Basic Setup & Internet AccessPPPoE SetupPPPoE Link: Check "Enable" to enable the PPPoE clientprotocol. ISP Access SetupISP Name: E

3-17Basic Setup & Internet Access3.5.2 Using PPTP with a DSL ModemPPTP SetupPPTP Link: Check "Enable" to enable a PPTP client to es-tab

3-18Basic Setup & Internet AccessISDN Dial Backup SetupDial Backup Mode: Select "None" to disable this feature orselect "Packet Tr

3-19Basic Setup & Internet AccessClick "Internet Access Setup" -> "Static IP" to enter the setup page.Access ControlBroadba

3-20Basic Setup & Internet AccessGateway IP Address: Enter the IP address from DSL serviceprovider as Router IP address or the fixed IP gateway IP

3-21Basic Setup & Internet AccessDial Backup Mode:None: Disable the backup function.Packet Trigger: The backup line is disconnected until a pack

0-3Preface 0.5 Safety Instructions! Please read the installation guide thoroughly before you setup the router.! The router can be used only with a B

4-14Remote Access4.1 Introduction to Remote Access4.2 Remote Dial-in Access4.3 LAN-to-LAN Access

4-2Remote AccessThis chapter explains the capabilities of remote access of theVigor2000 Router. Use the following setup links on the Setup MainMenu t

4-3Remote Access4.1 Introduction to Remote AccessHere the term "Remote Access" covers two types of remote access.The first, "Remote Dia

4-4Remote AccessDial-In Access ControlDial-In Service: Check "Enable" to allow dial-in service. Notethat if you check "Disable",

4-5Remote Accesscount for each dial-in user. From the Advanced Setup menu, click"Remote Dial-In User Setup" to open the page shown below.

4-6Remote AccessUser Account and AuthenticationClick to enable the user account: Check this item to acti-vate the individual user account.Username:

4-7Remote AccessClick to enable the Callback function: Enable the callbackfunction.Specify the callback number: The option is for extra secu-rity.

4-8Remote AccessThe following sections are based on the network layout above to de-scribe how to set up a LAN-to-LAN profile to connect two private ne

4-9Remote AccessHead Office:The IP range of the Head Office network is 192.168.1.0/24, the settingsshould be as below:Dial-In Service: EnableStart IP

4-10Remote AccessBranch Office:The IP range of the Branch Office network is 192.168.2.0/24, the settingsshould be as below:Dial-In Service: EnableSta

0-4Prefacelent product of equal value, and will be offered solely at ourdiscretion. This warranty will not apply if the product is modi-fied, misused,

4-11Remote Access The router provides 16 LAN-to-LAN profiles for connecting to up to16 different remote networks.Set to Factory Default: Cl

4-12Remote AccessEach LAN-to-LAN profile includes 4 subgroups: Common Settings,Dial-Out Settings, Dial-In Settings, and TCP/IP Network Settings. The

4-13Remote AccessBoth: allow access of both outgoing and incoming calls.Dial-Out: allow access of outgoing calls only.Dial-In: allow access of incomin

4-14Remote Access- Require Remote to Callback: Inactive by default. Whenactive, the router exchanges connection information with theremote router an

4-15Remote AccessTCP/IP Network SettingsThe following settings are required for proper LAN-to-LAN operation.My WAN IP: In most cases you may accept t

4-16Remote AccessHead Office:

4-17Remote AccessBranch Office:

5-15Advanced Setup5.1 Enabling the Remote Activation Function5.2 Call Control Setup5.3 Configuring the BOD Parameters5.4 NAT Setup5.5 IP Filter/Firewa

5-2Advanced SetupThis chapter explains the remaining options available in AdvancedSetup:Advanced Setup> Call Control and PPP/MP Setup> NAT Setup

5-3Advanced Setup5.1 Enabling the Remote Activation FunctionSome applications require the router to be remotely activated, or dialup to the ISP using

1-11Getting Started1.1 Introduction1.2 Unpacking Your Vigor2000 Router1.3 Front Panel& Rear Panel Descriptions1.4 Key Features

5-4Advanced Setup5.2 Call Control SetupRemote ActivationIf the router accepts a call from the number 12345678, it will disconnectimmediately and dial

5-5Advanced SetupPPP/MP Dial-Out Setup Basic SetupSelect according to the ISP service type you subscribed and enterparameters according to th

5-6Advanced SetupBOD. Usually the ISDN will use one B channel to access the Internetor remote network when you use the Dialup BOD link type. The rou

5-7Advanced Setup5.4 NAT SetupUsually you will use the router as a NAT-enabled router. NAT standsfor Network Address Translation. It means the route

5-8Advanced Setupto the public domain. The internal FTP server is running on the localhost addressed as 192.168.1.10.As shown above, the Port Redirec

5-9Advanced SetupActive: Check here to activate the port-mapping entry.5.4.2 DMZ Host SetupClick “DMZ Host Setup” to open the setup page. The DMZ Hos

5-10Advanced Setup5.5 IP Filter/Firewall SetupThe IP Filter/Firewall function helps to prevent your local networkagainst attack from outside. It also

5-11Advanced SetupIn concept, when an outgoing packet is routed to the WAN, the IPFilter will decide if the packet should be forwarded to the Call Fil

5-12Advanced Setupset 1 and the Data Filter rules are defined in filter set 2.General Setup: Some general settings are in the setup link.Filter Setup

5-13Advanced SetupCall Filter: Check "Enable" to activate the Call Filter function.Assign a start filter set for Call Filter.Data Filter:

1-2Getting Started1.1 IntroductionThe Vigor2000 Router provides multiple users with efficient and reli-able access over a single ISDN BRI, IDSL (U In

5-14Advanced SetupMAC Address for Packet Duplication: Logged packets mayalso be logged to another location via Ethernet. If you want toduplicate log

5-15Advanced Setupany possible loop among the filter sets.The following setup pages show the default settings for Call Filter andData Filter. You wil

5-16Advanced Setup5.5.4 Editing the Filter RulesClick the Filter Rule index button to enter the Filter Rule setup pagefor each filter. The following

5-17Advanced Setupand that does not match further rules, will be dropped.Pass If No Further Match: A packet matching the rule,and that does not match

5-18Advanced SetupFor the Data Filter:IN: Specify the rule for filtering incoming packets.OUT: Specify the rule for filtering outgoing packets.Proto

5-19Advanced SetupFragments: Specify a fragmented packets action.Don't Care: Specify no fragment options in the filterrule.Unfragmented: Apply

6-16Virtual TAApplication6.1 Virtual TA Concepts6.2 Installing a Virtual TA Client6.3 Configuring a Virtual TA Client/Server

6-2Virtual TA ApplicationThis chapter covers Virtual TA concepts and explains how to setup aVirtual TA.Quick Setup> Virtual TA (Remote CAPI) Setup6

6-3Virtual TA Applicationmaximum number of active clients is also 2.4. Before you set up the Virtual TA, you must set thecorrect country code. Click

6-4Virtual TA Application6.2 Installing a Virtual TA Client1. Insert the CD-ROM supplied with your Vigor2000, or directly double-click the installer f