XV. VigorACS and VigorConnect
ExpiredVigorACS - How to use VigorACS to track local admin access and configuration changes to a router
DrayTek Vigor ACS is a great tool for provisioning, monitoring, and managing routers, wireless APs, and switches. As part of the monitoring functionality, routers can be configured to inform VigorACS of any administration access to the Web Interface of the router and any configuration changes which are applied to the router. This behaviour is controlled by enabling the CPE notification settings on the router, and any information reported by the router to VigorACS is stored in the CPE Notify Log. This log can be a useful auditing tool for tracking changes that are made to devices.
Option 1. Configuration on a Vigor Router
1. Go to [System Maintenance] > [TR-069 Setting], then open Reporting Configuration
2. In Reporting Configuration,
- Enable CPE Notification Settings
- Select Web Login or Web Changed
- Press OK to save
Option 2. Setup on VigorACS 3
1. Open the ACS dashboard
- Select the Network tab
- Open your network group and choose the device to configure
2. Go to [Configuration] > [System]
3. Click TR069 Settings on the sidebar and enable CPE Notification Settings which is located at the bottom of this page.
4. In CPE Notification Settings,
- Select Web Login Notify or Web Login Notify.
- Click Save.
Check notifications on VigorACS 3
1. Go to [Monitoring] > [Logs]
2. On the Logs Dashboard, select CPE Notify
Here we can see different messages:
- Web Change: If someone has changed the settings of the router, CPE Notify will show the setup updates
- Web Login: If someone has accessed the GUI of the router successfully, CPE Notify will show the message “[Web]WebUI login success.”
- Web Login: If someone has tried to log in the GUI of the router with invalid username, CPE Notify will show the message “[Web]WebUI login fail, Invalid user!”
- Web Login: If someone has tried to log in the GUI of the router with wrong password, CPE Notify will show the message “[Web]WebUI login fail, Invalid password!”
If you need to check CPE notifications for a specific group or a single device instead of whole network:
- Tap the Network box which is located at the top of ACS Dashboard
- Select the network group
- (optional) Click the arrow icon of the network group to select the specific device
- First Published: 08/03/2021
- Last Updated: 01/06/2021