Uživatelská příručka k routeru DrayTek Vigor 2927AX s dvojitým WAN ethernetovým firewallem a VPN

1. Úvod

This manual provides comprehensive instructions for the installation, configuration, and operation of your DrayTek Vigor 2927AX Dual WAN Ethernet Firewall VPN Router. The Vigor 2927AX is designed to deliver robust and secure network connectivity for small to medium-sized businesses, offering advanced features such as Dual WAN load balancing, Wi-Fi 6 wireless, Gigabit LAN ports, and extensive VPN capabilities.

2. Bezpečnostní informace

• Ujistěte se, že je router umístěn v dobře větraném prostoru, mimo dosah přímého slunečního záření, zdrojů tepla a vlhkosti.
• Používejte pouze napájecí adaptér dodaný se zařízením. Použití nesprávného adaptéru může poškodit router a zrušit platnost záruky.
• Neotevírejte router casing. Veškerý servis svěřte kvalifikovanému personálu.
• Udržujte zařízení mimo dosah dětí.
• Disconnect power during electrical storms or when unused for long periods.

3. Obsah balení

Ověřte, zda váš balíček obsahuje následující položky:

• DrayTek Vigor 2927AX Router
• Napájecí adaptér
• Ethernetový kabel
• Rychlý průvodce

4. Hardware skončilview

4.1 Přední panel

The front panel of the Vigor 2927AX features various LED indicators and ports for status monitoring and connectivity.

Obraz: Front panel of the DrayTek Vigor 2927AX router, highlighting its LED status indicators, two USB ports, two WAN ports (WAN1 and WAN2/LAN6), and five Gigabit LAN ports (P1-P5).

1. LED indikátory stavu: Provide live feedback on the router's operational status, including power, internet connectivity, Wi-Fi activity, and LAN port status.
2. 2x USB Ports (USB1, USB2): Used for connecting 3G/4G/5G USB modems for failover or load balancing, or for connecting USB storage devices for network-attached storage (NAS) functionality.
3. Dual WAN Ports (WAN1, WAN2/LAN6): WAN1 is a dedicated Gigabit Ethernet port. WAN2/LAN6 is a configurable Gigabit Ethernet port that can function as a second WAN port for multi-WAN connectivity or as an additional LAN port.
4. 5x LAN Ports (P1-P5): Gigabit Ethernet ports for connecting local network devices such as computers, servers, network printers, and network-attached storage (NAS) devices.

4.2 Zadní panel

The rear panel typically includes the power input, power switch, and a factory reset button.

• Příkon: Připojuje se k dodanému napájecímu adaptéru.
• Vypínač: Zapíná nebo vypíná router.
• Tlačítko pro obnovení továrního nastavení: Used to restore the router to its default factory settings. Press and hold for approximately 5-10 seconds while the router is powered on.

5. Nastavení

5.1 Počáteční připojení

1. Připojte napájení: Connect the power adapter to the router's power input and plug it into an electrical outlet. Turn on the power switch.
2. Připojení k WAN:
   • For primary internet access, connect your modem or fiber optic terminal (ONT) to the WAN1 portu pomocí ethernetového kabelu.
   • If using a second internet connection, connect its modem/ONT to the WAN2/LAN6 přístav.
   • For 3G/4G/5G failover, insert a compatible USB modem into one of the USB porty.
3. Připojení k lokální síti (LAN): Connect a computer or network switch to any of the LAN ports (P1-P5) pomocí ethernetového kabelu.

Obraz: The DrayTek Vigor 2927AX router, illustrating its physical appearance and port layout for initial setup.

5.2 Přístup k Web Rozhraní

1. Ujistěte se, že je váš počítač připojen k LAN portu routeru.
2. Otevřete a web prohlížeč (např. Chrome, Firefox, Edge).
3. Do adresního řádku zadejte výchozí IP adresu: 192.168.1.1 a stiskněte Enter.
4. Enter the default username (admin) a heslo (admin). It is highly recommended to change the default password immediately after the first login for security purposes.

5.3 Základní konfigurace

Upon first login, you may be guided through a Quick Start Wizard to configure basic internet settings and Wi-Fi.

• Nastavení WAN: Configure your internet connection type (e.g., PPPoE, DHCP, Static IP) for WAN1 and WAN2.
• Nastavení Wi-Fi: Set up your Wi-Fi network name (SSID) and password for both 2.4GHz and 5GHz bands. The Vigor 2927AX supports Wi-Fi 6 (802.11ax) for enhanced performance.

6. Návod k obsluze

6.1 Dual WAN Load Balancing and Failover

The Vigor 2927AX supports multiple WAN interfaces, allowing for increased bandwidth and connection reliability.

Obraz: Diagram illustrating the router's capability to connect to various internet sources like VDSL, Ethernet, and Wi-Fi WAN for multi-WAN functionality.

• Vyrovnávání zátěže: Distributes internet traffic across multiple WAN connections to optimize bandwidth usage. Configure this under WAN > General Setup.
• Failover: Automatically switches to a backup WAN connection if the primary connection fails, ensuring continuous internet access. This can be configured for both wired WANs and USB 3G/4G/5G modems.

6.2 Konfigurace VPN

The router supports up to 50 VPN tunnels, enabling secure remote access and site-to-site connections.

Obraz: Visual representation of VPN tunnels securing connections between a headquarters, a branch office, and a remote home user through the Vigor router.

• SSL VPN: Provides clientless remote access via a web browser. Configure under VPN and Remote Access > SSL VPN.
• IPsec/PPTP/L2TP VPN: For site-to-site connections and client-based remote access. Configure under VPN and Remote Access > LAN to LAN or Remote Dial-in User.
• OpenVPN: Supports OpenVPN for flexible and secure VPN connections.

6.3 Wi-Fi 6 (802.11ax) Wireless

The Vigor 2927AX features dual-band Wi-Fi 6 for high-speed and efficient wireless connectivity.

Obraz: Illustration of the router's dual-band Wi-Fi coverage, showing devices connected to both the 2.4GHz (AX600) and 5GHz (AX2400) wireless networks.

• Duální pásmo: Operates on both 2.4GHz and 5GHz frequencies. Configure SSIDs, security, and channels under Wireless LAN > General Setup.
• Hostující Wi-Fi: Create isolated wireless networks for guests with custom login pages and time/data limits. Access this feature under Wireless LAN > General Setup > Multi-SSID.

6.4 VLANs (Virtual Local Area Networks)

VLANs allow you to segment your network into multiple logical broadcast domains, enhancing security and network management.

Obraz: A diagram illustrating how the Vigor router can be used with a SmartLite switch to create and manage VLANs, separating different groups of network devices.

• Configure VLANs under LAN > VLAN. You can assign VLAN IDs to specific LAN ports or SSIDs.

6.5 Firewall and Content Filtering

The router includes an advanced firewall and content filtering features to protect your network.

• Firewall: Configure rules to control inbound and outbound traffic under Firewall > Filter Setup.
• Filtrování obsahu: Blokovat přístup ke konkrétním websites or categories of content using URL Content Filter or Web Content Filter (requires subscription).

6.6 Kvalita služeb (QoS)

QoS allows you to prioritize network traffic, ensuring critical applications like VoIP and video conferencing receive sufficient bandwidth.

Obraz: A diagram demonstrating Quality of Service (QoS) settings, where different applications and services are assigned varying priority levels to optimize network performance.

• Configure QoS rules under Bandwidth Management > QoS.

7. Údržba

7.1 aktualizací firmwaru

Regularly update the router's firmware to ensure optimal performance, security, and access to new features.

1. Download the latest firmware from the official DrayTek webmísto.
2. Přístup k routeru web interface and navigate to System Maintenance > Firmware Upgrade.
3. Follow the on-screen instructions to upload and install the firmware. Do not power off the router during the upgrade process.

7.2 Konfigurace zálohování a obnovení

It is recommended to back up your router's configuration settings before making significant changes or performing firmware upgrades.

• To back up, go to System Maintenance > Configuration Backup.
• To restore, use the same menu and upload your saved configuration file.

7.3 Obnovení továrního nastavení

A factory reset will revert all settings to their default values. This can be useful for troubleshooting or when reconfiguring the router from scratch.

• Hardwarový reset: With the router powered on, use a paperclip to press and hold the Obnovení továrního nastavení button on the rear panel for 5-10 seconds until the ACT LED flashes rapidly.
• Reset softwaru: Přejděte na System Maintenance > Factory Default v web rozhraní.

8. Řešení problémů

• Žádný přístup k internetu:
  • Check WAN LED status. If off, verify cable connection to modem/ONT.
  • Ensure WAN settings (PPPoE, DHCP, Static IP) are correctly configured in the web rozhraní.
  • Restart the modem/ONT and then the router.
• Nelze přistupovat Web Rozhraní:
  • Ensure your computer's IP address is set to obtain automatically (DHCP).
  • Verify physical connection to a LAN port.
  • Try pinging 192.168.1.1. If unsuccessful, perform a factory reset.
• Pomalá rychlost Wi-Fi:
  • Zkontrolujte, zda nedochází k rušení jinými zařízeními nebo sítěmi.
  • Pro optimální výkon se ujistěte, že vaše zařízení podporují Wi-Fi 6 (802.11ax).
  • Adjust Wi-Fi channels to less congested ones.
  • Ujistěte se, že je router umístěn uprostřed a není nijak překážen.
• Problémy s připojením k VPN:
  • Verify VPN server and client configurations match.
  • Check firewall rules to ensure VPN traffic is allowed.
  • Ensure correct authentication credentials are used.

9. Specifikace

10. Záruka a podpora

DrayTek products typically come with a limited hardware warranty. For specific warranty terms and conditions, please refer to the warranty card included with your product or visit the official DrayTek webmísto.

For technical support, firmware downloads, and additional documentation, please visit the DrayTek support portal or contact your local DrayTek distributor.

• Oficiální Webmísto: www.draytek.com
• Portál podpory: Obraťte se na úředníka website for regional support contacts and resources.