DrayTek Vigor 2927AX Dual WAN Ethernet Firewall VPN Router User Manual

1. Introdución

This manual provides comprehensive instructions for the installation, configuration, and operation of your DrayTek Vigor 2927AX Dual WAN Ethernet Firewall VPN Router. The Vigor 2927AX is designed to deliver robust and secure network connectivity for small to medium-sized businesses, offering advanced features such as Dual WAN load balancing, Wi-Fi 6 wireless, Gigabit LAN ports, and extensive VPN capabilities.

2. Información de seguridade

• Ensure the router is placed in a well-ventilated area, away from direct sunlight, heat sources, and moisture.
• Use only the power adapter supplied with the device. Using an incorrect adapter may damage the router and void the warranty.
• Do not open the router casing. Encomende todo o mantemento a persoal cualificado.
• Manteña o dispositivo lonxe dos nenos.
• Disconnect power during electrical storms or when unused for long periods.

3. Contido do paquete

Verifique que o seu paquete conteña os seguintes elementos:

• DrayTek Vigor 2927AX Router
• Adaptador de alimentación
• Cable Ethernet
• Guía de inicio rápido

4. Acabado o hardwareview

4.1 Panel frontal

The front panel of the Vigor 2927AX features various LED indicators and ports for status monitoring and connectivity.

Imaxe: Front panel of the DrayTek Vigor 2927AX router, highlighting its LED status indicators, two USB ports, two WAN ports (WAN1 and WAN2/LAN6), and five Gigabit LAN ports (P1-P5).

1. Indicadores LED de estado: Provide live feedback on the router's operational status, including power, internet connectivity, Wi-Fi activity, and LAN port status.
2. 2x USB Ports (USB1, USB2): Used for connecting 3G/4G/5G USB modems for failover or load balancing, or for connecting USB storage devices for network-attached storage (NAS) functionality.
3. Dual WAN Ports (WAN1, WAN2/LAN6): WAN1 is a dedicated Gigabit Ethernet port. WAN2/LAN6 is a configurable Gigabit Ethernet port that can function as a second WAN port for multi-WAN connectivity or as an additional LAN port.
4. 5x LAN Ports (P1-P5): Gigabit Ethernet ports for connecting local network devices such as computers, servers, network printers, and network-attached storage (NAS) devices.

4.2 Panel posterior

The rear panel typically includes the power input, power switch, and a factory reset button.

• Entrada de enerxía: Conéctase ao adaptador de corrente fornecido.
• Interruptor de alimentación: Acende ou apaga o enrutador.
• Botón de restablecemento de fábrica: Used to restore the router to its default factory settings. Press and hold for approximately 5-10 seconds while the router is powered on.

5. Configuración

5.1 Conexión inicial

1. Conectar enerxía: Connect the power adapter to the router's power input and plug it into an electrical outlet. Turn on the power switch.
2. Conectar á WAN:
   • For primary internet access, connect your modem or fiber optic terminal (ONT) to the WAN1 porto mediante un cable Ethernet.
   • If using a second internet connection, connect its modem/ONT to the WAN2/LAN6 porto.
   • For 3G/4G/5G failover, insert a compatible USB modem into one of the USB portos.
3. Conectar á LAN: Connect a computer or network switch to any of the LAN ports (P1-P5) utilizando un cable Ethernet.

Imaxe: The DrayTek Vigor 2927AX router, illustrating its physical appearance and port layout for initial setup.

5.2 Acceso ao Web Interface

1. Asegúrate de que o teu ordenador estea conectado a un porto LAN do enrutador.
2. Abrir a web navegador (por exemplo, Chrome, Firefox, Edge).
3. Na barra de enderezos, escribe o enderezo IP predeterminado: 192.168.1.1 e prema Intro.
4. Introduza o nome de usuario predeterminado (administrador) e contrasinal (administrador). It is highly recommended to change the default password immediately after the first login for security purposes.

5.3 Configuración básica

Upon first login, you may be guided through a Quick Start Wizard to configure basic internet settings and Wi-Fi.

• Configuración da WAN: Configure your internet connection type (e.g., PPPoE, DHCP, Static IP) for WAN1 and WAN2.
• Configuración de wifi: Set up your Wi-Fi network name (SSID) and password for both 2.4GHz and 5GHz bands. The Vigor 2927AX supports Wi-Fi 6 (802.11ax) for enhanced performance.

6. Instrucións de funcionamento

6.1 Dual WAN Load Balancing and Failover

The Vigor 2927AX supports multiple WAN interfaces, allowing for increased bandwidth and connection reliability.

Imaxe: Diagram illustrating the router's capability to connect to various internet sources like VDSL, Ethernet, and Wi-Fi WAN for multi-WAN functionality.

• Equilibrio de carga: Distributes internet traffic across multiple WAN connections to optimize bandwidth usage. Configure this under WAN > General Setup.
• Failover: Automatically switches to a backup WAN connection if the primary connection fails, ensuring continuous internet access. This can be configured for both wired WANs and USB 3G/4G/5G modems.

6.2 Configuración da VPN

The router supports up to 50 VPN tunnels, enabling secure remote access and site-to-site connections.

Imaxe: Visual representation of VPN tunnels securing connections between a headquarters, a branch office, and a remote home user through the Vigor router.

• SSL VPN: Provides clientless remote access via a web browser. Configure under VPN and Remote Access > SSL VPN.
• IPsec/PPTP/L2TP VPN: For site-to-site connections and client-based remote access. Configure under VPN and Remote Access > LAN to LAN or Remote Dial-in User.
• OpenVPN: Supports OpenVPN for flexible and secure VPN connections.

6.3 Wi-Fi 6 (802.11ax) Wireless

The Vigor 2927AX features dual-band Wi-Fi 6 for high-speed and efficient wireless connectivity.

Imaxe: Illustration of the router's dual-band Wi-Fi coverage, showing devices connected to both the 2.4GHz (AX600) and 5GHz (AX2400) wireless networks.

• Banda dual: Operates on both 2.4GHz and 5GHz frequencies. Configure SSIDs, security, and channels under Wireless LAN > General Setup.
• Wi-Fi para convidados: Create isolated wireless networks for guests with custom login pages and time/data limits. Access this feature under Wireless LAN > General Setup > Multi-SSID.

6.4 VLANs (Virtual Local Area Networks)

VLANs allow you to segment your network into multiple logical broadcast domains, enhancing security and network management.

Imaxe: A diagram illustrating how the Vigor router can be used with a SmartLite switch to create and manage VLANs, separating different groups of network devices.

• Configure VLANs under LAN > VLAN. You can assign VLAN IDs to specific LAN ports or SSIDs.

6.5 Firewall and Content Filtering

The router includes an advanced firewall and content filtering features to protect your network.

• Firewall: Configure rules to control inbound and outbound traffic under Firewall > Filter Setup.
• Filtrado de contido: Bloquear o acceso a elementos específicos websites or categories of content using URL Content Filter or Web Content Filter (requires subscription).

6.6 Calidade de servizo (QoS)

QoS allows you to prioritize network traffic, ensuring critical applications like VoIP and video conferencing receive sufficient bandwidth.

Imaxe: A diagram demonstrating Quality of Service (QoS) settings, where different applications and services are assigned varying priority levels to optimize network performance.

• Configure QoS rules under Bandwidth Management > QoS.

7. Mantemento

7.1 Actualizacións de firmware

Regularly update the router's firmware to ensure optimal performance, security, and access to new features.

1. Download the latest firmware from the official DrayTek websitio.
2. Acceder ao enrutador web interface and navigate to System Maintenance > Firmware Upgrade.
3. Follow the on-screen instructions to upload and install the firmware. Do not power off the router during the upgrade process.

7.2 Configuración de copia de seguridade e restauración

It is recommended to back up your router's configuration settings before making significant changes or performing firmware upgrades.

• To back up, go to System Maintenance > Configuration Backup.
• To restore, use the same menu and upload your saved configuration file.

7.3 Restablecemento de fábrica

A factory reset will revert all settings to their default values. This can be useful for troubleshooting or when reconfiguring the router from scratch.

• Restablecemento de hardware: With the router powered on, use a paperclip to press and hold the Restablecemento de fábrica button on the rear panel for 5-10 seconds until the ACT LED flashes rapidly.
• Restablecemento do software: Navega ata System Maintenance > Factory Default no web interface.

8 Solución de problemas

• Sen acceso a Internet:
  • Check WAN LED status. If off, verify cable connection to modem/ONT.
  • Ensure WAN settings (PPPoE, DHCP, Static IP) are correctly configured in the web interface.
  • Restart the modem/ONT and then the router.
• Non se pode acceder Web Interface:
  • Ensure your computer's IP address is set to obtain automatically (DHCP).
  • Verify physical connection to a LAN port.
  • Try pinging 192.168.1.1. If unsuccessful, perform a factory reset.
• Velocidade lenta do wifi:
  • Check for interference from other devices or networks.
  • Ensure your devices support Wi-Fi 6 (802.11ax) for optimal performance.
  • Adjust Wi-Fi channels to less congested ones.
  • Asegúrate de que o router estea situado nun lugar central e sen obstrucións.
• Problemas de conexión VPN:
  • Verify VPN server and client configurations match.
  • Check firewall rules to ensure VPN traffic is allowed.
  • Ensure correct authentication credentials are used.

9. Especificacións

10. Garantía e soporte

DrayTek products typically come with a limited hardware warranty. For specific warranty terms and conditions, please refer to the warranty card included with your product or visit the official DrayTek websitio.

For technical support, firmware downloads, and additional documentation, please visit the DrayTek support portal or contact your local DrayTek distributor.

• Oficial Websitio: www.draytek.com
• Portal de soporte: Consulte o oficial website for regional support contacts and resources.