Draytek Vigor 2950 User Manual

Vigor2950
Security VPN Router
User’s Guide
Version: 3.0
Date: 2007/11/23
Copyright 2007 All rights reserved.
This publication contains information that is protected by copyright. No part may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright
holders. The scope of delivery and other details are subject to change without prior notice.
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Computer Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.

Draytek Vigor 2950 Specifications

General

WAN Ports	2
LAN Ports	4
Wireless	No
VPN Support	Yes
Firewall	Yes
Max VPN Tunnels	50
VPN Tunnels	50
USB Ports	1
WAN Ports Type	RJ45
LAN Ports Type	RJ45
VPN Protocols	PPTP, L2TP, IPSec
Power Supply	12V DC

Summary

Safety Instructions and Approval

Safety Instructions

Provides essential guidelines for safe router installation and operation.

Warranty

1 Preface

1.2 LED Indicators and Connectors

Guides users to identify and understand the router's LEDs and physical connectors.

1.2.1 For Vigor2950

1.2.2 For Vigor2950G

1.2.3 For Vigor2950i

1.2.4 For Vigor2950Gi

1.3 Hardware Installation

2 Configuring Basic Settings

2.1 Changing Password

Explains how to change the router's administrator password for security.

2.2 Quick Start Wizard

2.2.1 PPPoE

Details how to configure PPPoE for internet access, common for DSL connections.

2.2.2 PPTP

Explains the configuration steps for PPTP protocol to establish internet connections.

2.2.3 L2TP

Details the configuration process for L2TP protocol to connect to the internet.

2.2.4 Static IP

Guides users on configuring a static IP address for internet access.

2.2.5 DHCP

Explains how to set up DHCP for automatic IP address assignment for internet access.

2.4 Saving Configuration

3 Advanced Web Configuration

3.1 WAN

Details Wide Area Network (WAN) settings for internet connectivity.

3.1.2 General Setup

Configures general settings for WAN interfaces, including connection modes.

3.1.3 Internet Access

Configures the access mode for WAN connections, supporting PPPoE, Static/Dynamic IP, and PPTP.

3.1.4 Load-Balance Policy

3.2 LAN

Covers Local Area Network (LAN) configuration settings.

3.2.2 General Setup

Configures general settings for the LAN interface, including IP addressing and DHCP.

3.2.3 Static Route

3.2.4 Bind IP to MAC

3.3 NAT

Details Network Address Translation (NAT) functionality for IP address mapping and security.

3.3.1 Port Redirection

Configures port forwarding to direct external traffic to specific internal hosts.

3.3.2 DMZ Host

3.3.3 Open Ports

Allows opening specific ports for various applications and services.

3.4 Firewall

Covers firewall settings for network security and traffic filtering.

3.4.2 General Setup

3.4.3 Filter Setup

Allows detailed configuration of firewall filter rules for traffic control.

3.4.4 DoS Defense

Enables protection against Denial of Service (DoS) and DDoS attacks.

3.4.5 URL Content Filter

3.4.6 Web Content Filter

3.6 Bandwidth Management

Manages and controls network bandwidth usage for different applications and users.

3.6.1 Sessions Limit

3.6.2 Bandwidth Limit

Sets upstream and downstream bandwidth limits for specific IP addresses or ranges.

3.6.3 Quality of Service

Configures Quality of Service (QoS) to prioritize network traffic based on application needs.

3.7.1 Dynamic DNS

3.7.2 Schedule

3.7.3 RADIUS

3.8 VPN and Remote Access

Covers configuration for Virtual Private Network (VPN) and remote access services.

3.8.1 Remote Access Control

Manages and enables VPN services for remote access and tunneling.

3.8.2 PPP General Setup

3.8.3 IPSec General Setup

Details general IPSec configuration, including IKE phases and encapsulation methods.

3.8.4 IPSec Peer Identity

3.8.5 Remote Dial-in User

3.8.6 LAN to LAN

Configures LAN-to-LAN connections for site-to-site VPN tunnels.

3.8.7 VPN TRUNK Management

3.9.1 Local Certificate

3.9.2 Trusted CA Certificate

3.10.3 Select Dialing to Single/Dual ISPs

3.11 Wireless LAN

Covers configuration and management of the router's wireless LAN interface.

3.11.2 General Setup

3.11.3 Security

Configures wireless security settings, including WEP and WPA encryption.

3.11.4 Access Control

3.11.5 WDS

3.12.1 Wired VLAN

3.12.2 Wireless VLAN

3.12.3 VLAN Cross Setup

3.13 System Maintenance

Provides tools for system management, including status, backups, and upgrades.

3.13.3 Administrator Password

Allows changing the router's administrator password for enhanced security.

3.13.4 Configuration Backup

3.13.7 Management

3.13.9 Firmware Upgrade

Details the process for upgrading the router's firmware using the upgrade utility.

3.14 Diagnostics

Offers diagnostic tools for troubleshooting network issues and monitoring router status.

4.1 Create a LAN-to-LAN Connection Between Remote Office and Headquarter

4.2 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter

Configures remote dial-in access for teleworkers to connect securely to the enterprise network.

4.3 QoS Setting Example

4.5 Upgrade Firmware for Your Router

Provides instructions for installing the router tools and upgrading the firmware.

4.9 VPN Load Balance Application

5 Trouble Shooting

Provides guidance on resolving common issues and abnormal situations with the router.

5.1 Checking If the Hardware Status Is OK or Not

Guides users to verify the router's hardware status and LED indicators.

5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not

5.4 Checking If the ISP Settings are OK or Not

5.5 Backing to Factory Default Setting If Necessary