Draytek Vigor3200 Series User Manual Download Page 9

Page: 9 / 319

Vigor3200 Series User’s Guide

4.13.1 USB General Settings................................................................................................. 239

4.13.2 USB User Management.............................................................................................. 240

4.13.3 File Explorer................................................................................................................ 242

4.13.4 USB Disk Status ......................................................................................................... 242

4.14 System Maintenance......................................................................................................... 243

4.14.1 System Status............................................................................................................. 244

4.14.2 TR-069 ........................................................................................................................ 245

4.14.3 Administrator Password.............................................................................................. 246

4.14.4 User Password ........................................................................................................... 247

4.14.5 Configuration Backup ................................................................................................. 247

4.14.6 Syslog/Mail Alert ......................................................................................................... 250

4.14.7 Time and Date ............................................................................................................ 252

4.14.8 Management............................................................................................................... 253

4.14.9 Reboot System ........................................................................................................... 254

4.14.10 Firmware Upgrade .................................................................................................... 255

4.14.11 Activation .................................................................................................................. 256

4.15 Diagnostics........................................................................................................................ 257

4.15.1 Dial-out Trigger ........................................................................................................... 258

4.15.2 Routing Table ............................................................................................................. 258

4.15.3 ARP Cache Table ....................................................................................................... 259

4.15.4 DHCP Table................................................................................................................ 259

4.15.5 NAT Sessions Table ................................................................................................... 260

4.15.6 Data Flow Monitor....................................................................................................... 260

4.15.7 Traffic Graph............................................................................................................... 262

4.15.8 Ping Diagnosis............................................................................................................ 263

4.15.9 Trace Route ................................................................................................................ 264

Application and Examples ............................................................................265

5.1 How to Configure Multi-Subnet ........................................................................................... 265

5.2 Create a LAN-to-LAN Connection Between Remote Office and Headquarter ................... 270

5.3 Create a Remote Dial-in User Connection Between the Teleworker and Headquarter...... 278

5.4 QoS Setting Example.......................................................................................................... 283

5.5 Upgrade Firmware for Your Router ..................................................................................... 287

5.6 Request a certificate from a CA server on Windows CA Server ......................................... 290

5.7 Request a CA Certificate and Set as Trusted on Windows CA Server ............................... 294

5.8 Creating an Account for MyVigor ........................................................................................ 296

5.8.1 Creating an Account via Vigor Router .......................................................................... 296

5.8.2 Creating an Account via MyVigor Web Site.................................................................. 299

Trouble Shooting .........................................................................................303

6.1 Checking If the Hardware Status Is OK or Not.................................................................... 303

6.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 304

6.3 Pinging the Router from Your Computer ............................................................................. 306

6.4 Checking If the ISP Settings are OK or Not ........................................................................ 307

Summary of Contents for Vigor3200 Series

Page 1: ......

Page 2: ...Vigor3200 Series User s Guide ii Vigor3200 Series Multi WAN Security Router User s Guide Version 1 0 Firmware Version V3 3 6_RC6 Date 18 11 2010 ...

Page 3: ...ions on conservation of the environment Warranty We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the prod...

Page 4: ...an radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user i...

Page 5: ...Vigor3200 Series User s Guide v ...

Page 6: ...ng Web Page 13 2 3 Changing Password 14 2 4 Quick Start Wizard 16 2 4 1 PPPoE 17 2 4 2 PPTP L2TP 19 2 4 3 Static IP 20 2 4 4 DHCP 21 2 5 Service Activation Wizard 22 2 6 Online Status 25 2 7 Saving Configuration 26 2 8 Support Area 26 3 UserModeOperation 29 3 1 WAN 29 3 1 1 Basics of Internet Protocol IP Network 29 3 1 2 General Setup 31 3 1 3 Internet Access 35 3 1 4 Load Balance Policy 45 3 2 LA...

Page 7: ...iagnostics 81 3 8 1 DHCP Table 81 3 8 2 Traffic Graph 82 3 8 3 Ping Diagnosis 82 3 8 4 Trace Route 83 4 AdminModeOperation 85 4 1 WAN 85 4 1 1 Basics of Internet Protocol IP Network 85 4 1 2 General Setup 87 4 1 3 Internet Access 91 4 1 4 Load Balance Policy 101 4 2 LAN 103 4 2 1 Basics of LAN 103 4 2 2 General Setup 105 4 2 3 Static Route 112 4 2 4 VLAN 115 4 2 5 Bind IP to MAC 116 4 2 6 LAN Port...

Page 8: ...S 181 4 9 2 Schedule 183 4 9 3 RADIUS 185 4 9 4 UPnP 186 4 9 5 IGMP 188 4 9 6 Wake on LAN 189 4 10 VPN and Remote Access 190 4 10 1 VPN Client Wizard 190 4 10 2 VPN Server Wizard 196 4 10 3 Remote Access Control 200 4 10 4 PPP General Setup 201 4 10 5 IPSec General Setup 202 4 10 6 IPSec Peer Identity 203 4 10 7 Remote Dial in User 204 4 10 8 LAN to LAN 208 4 10 9 Connection Management 216 4 11 Ce...

Page 9: ...8 Ping Diagnosis 263 4 15 9 Trace Route 264 5 Application and Examples 265 5 1 How to Configure Multi Subnet 265 5 2 Create a LAN to LAN Connection Between Remote Office and Headquarter 270 5 3 Create a Remote Dial in User Connection Between the Teleworker and Headquarter 278 5 4 QoS Setting Example 283 5 5 Upgrade Firmware for Your Router 287 5 6 Request a certificate from a CA server on Windows ...

Page 10: ...Vigor3200 Series User s Guide x 6 5 Problems for 3G Network Connection 308 6 6 Backing to Factory Default Setting If Necessary 308 6 7 Contacting Your Dealer 309 ...

Page 11: ...orts USB interface for connecting USB printer to share printer or USB storage device for sharing files or for 3G WAN connection Vigor3200 Series provides two level management to simplify the configuration of network connection The user mode allows user accessing into WEB interface via simple configuration However if users want to have advanced configurations they can access into WEB interface thro...

Page 12: ...SM On The profile s of CSM Content Security Management for IM P2P URL Web Content Filter application can be enabled from Firewall General Setup Such profile must be established under CSM menu LED on Connector On The port is connected Off The port is disconnected Left LED Green Blinking The data is transmitting On The port is connected with 1000Mbps WAN 1 2 3 4 Right LED Green Off The port is conne...

Page 13: ...than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration WAN1 WAN4 Connecters for remote networked devices DMZ Connecter for local DMZ host LAN Connecter for local network devices USB Connecter for 3G Modem or printer PWR Connecter for a power adapter ON OFF Power Switch ...

Page 14: ...Web Content Filter application can be enabled from Firewall General Setup Such profile must be established under CSM menu LED on Connector On The port is connected Off The port is disconnected Left LED Green Blinking The data is transmitting On The port is connected with 1000Mbps WAN 1 2 3 4 Right LED Green Off The port is connected with 10 100Mbps when left LED is on On The port is connected Off ...

Page 15: ...actory Reset Restore the default settings Usage Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with the factory default configuration WAN1 WAN4 Connecters for remote networked devices DMZ Connecter for local DMZ host LAN Connecter for local network dev...

Page 16: ...o the LAN port of the router and the other end of the cable RJ 45 into the Ethernet port on your computer Or use a switch to connect Vigor router and computer s 3 Connect one end of the power adapter to the router s power port on the rear panel and the other side into a wall outlet 4 Power on the device by pressing down the power switch on the rear panel 5 The system starts to initiate After compl...

Page 17: ...ected this router can print documents via the router The example provided here is made based on Windows XP 2000 For Windows 98 SE Vista please visit www DrayTek com Before using it please follow the steps below to configure settings for connected computers or wireless clients 1 Connect the printer with the router through USB parallel port 2 Open Start Settings Printer and Faxes ...

Page 18: ...Add Printer A welcome dialog will appear Please click Next 4 Click Local printer attached to this computer and click Next 5 In this dialog choose Create a new port Type of port and use the drop down list to select Standard TCP IP Port Click Next ...

Page 19: ...following dialog type 192 168 1 1 router s LAN IP in the field of Printer Name or IP Address and type IP_192 168 1 1 as the port name Then click Next 7 Click Standard and choose Generic Network Card 8 Then in the following dialog click Finish ...

Page 20: ...orrect driver loaded onto your PC When you finish the selection click Next 10 For the final stage you need to go back to Control Panel Printers and edit the property of the new printer you have added 11 Select LPR on Protocol type p1 number 1 as Queue Name Then click OK Next please refer to the red rectangle for choosing the correct protocol and LPR name ...

Page 21: ...g or other additional functions are not supported If you do not know whether your printer is supported or not please visit www DrayTek com to find out the printer list Open Support FAQ find out the link of Printer Server and click it then choose the What types of printers are compatible with Vigor router Note 2 Vigor router supports printing request from computers via the LAN port but not WAN port...

Page 22: ...Vigor3200 Series User s Guide 12 This page is left blank ...

Page 23: ...ectly You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and type http 192 168 1 1 The following window will be open to ask for ...

Page 24: ...he router 1 Open a web browser on your PC and type http 192 168 1 1 A pop up window will open to ask for username and password 2 Please type admin admin on Username Password for admin mode Otherwise do not type any word both username and password are Null for user mode on the window and click Login on the window 3 Now the Main Screen will appear Main screen for admin mode operation full configurat...

Page 25: ...the router you have 4 Go to System Maintenance page and choose Administrator Password User Password or 5 Enter the login password the default is blank on the field of Old Password Type New Password and confirm the password Then click OK to continue 6 Now the password has been changed Next time use the new password to access the Web Configurator for this router ...

Page 26: ...be under an environment with high speed NAT the configuration provide here can help you to deploy and use the router quickly The first screen of Quick Start Wizard is entering login password After typing the password please click Next On the next page as shown below please select the WAN interface that you use Choose Auto negotiation as the physical type for your router Then click Next for next st...

Page 27: ...or next step 2 2 4 4 1 1 P PP PP Po oE E PPPoE stands for Point to Point Protocol over Ethernet It relies on two widely accepted standards PPP and Ethernet It connects users through an Ethernet to the Internet with a common broadband medium such as a single DSL line wireless device or cable modem All the users over the Ethernet can share a common connection PPPoE is used for most of DSL modem user...

Page 28: ... will be shown User Name Assign a specific valid user name provided by the ISP Password Assign a valid password provided by the ISP Confirm Password Retype the password Click Next for viewing summary of such connection Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown ...

Page 29: ... P Click PPTP L2TP as the protocol Type in all the information that your ISP provides for this protocol Click Next for viewing summary of such connection Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown ...

Page 30: ... IP as the protocol Type in all the information that your ISP provides for this protocol After finishing the settings in this page click Next to see the following page Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown ...

Page 31: ...e protocol Type in all the information that your ISP provides for this protocol After finishing the settings in this page click Next to see the following page Click Finish A page of Quick Start Wizard Setup OK will appear Then the system status of this protocol will be shown ...

Page 32: ...to the server MyVigor located on http myvigor draytek com For using Web Content Filter Profile please refer to later section Web Content Filter Profile for detailed information Now follow the steps listed below to activate WCF feature for your router 1 Open Service Activation Wizard 2 The screen of Service Activation Wizard will be shown as follows Choose the one you need and click Next In this ca...

Page 33: ...selection please click Next 4 Setting confirmation page will be displayed as follows please click Next 5 Wait for a moment till the following page appears When such page appears you can enable or disable these services for your necessity Then click Finish Note The service will be activated and applied as the default rule configured in Firewall General Setup ...

Page 34: ...d according to your selection s The valid time for the free trial of these services is one month Later if you need to extend the license valid time you can also use the Service Activation Wizard again to reach your goal by clicking the radio button of Formal edition with license key and clicking Next ...

Page 35: ...tion is shown below Primary DNS Displays the IP address of the primary DNS Secondary DNS Displays the IP address of the secondary DNS LAN Status IP Address Displays the IP address of the LAN interface TX Packets Displays the total transmitted packets at the LAN interface RX Packets Displays the total number of received packets at the LAN interface WAN1 WAN5 Status Line Displays the physical connec...

Page 36: ... Internet the words in red mean that the WAN connection of that interface is not ready for accessing Internet 2 2 7 7 S Sa av vi in ng g C Co on nf fi ig gu ur ra at ti io on n Each time you click OK on the web page for saving the configuration you can find messages showing the system interaction with you Ready indicates the system is ready for you to input settings Settings Saved means your setti...

Page 37: ...Vigor3200 Series User s Guide 27 Click Support Area Product Registration the following web page will be displayed ...

Page 38: ...Vigor3200 Series User s Guide 28 This page is left blank ...

Page 39: ...reover if you want to adjust more settings for different WAN modes please go to WAN group 3 3 1 1 1 1 B Ba as si ic cs s o of f I In nt te er rn ne et t P Pr ro ot to oc co ol l I IP P N Ne et tw wo or rk k IP means Internet Protocol Every device in an IP based Network including routers print server and host PCs needs an IP address to identify its location on the network To avoid address conflicts...

Page 40: ...users with significant ease of use Meanwhile it provides access control billing and type of service according to user requirement When a router begins to connect to your ISP a serial of discovery process will occur to ask for a connection Then a session will be created Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system And your IP address DNS server and ot...

Page 41: ...ion service such as DSL Cable modem etc If any connection problem occurred on one of the ISP connections all the traffic will be guided and switched to the normal communication port for proper operation This webpage allows you to set general setup for WAN1 to WAN5 respectively From the above figure WAN1 WAN4 connect to Internet through the interface of Ethernet WAN5 connects to Internet via USB in...

Page 42: ...4 4 WAN1 WAN4 are fixed with physical mode of Giga Ethernet Here we take WAN1 as an example Enable Choose Yes to invoke the settings for this WAN interface Choose No to disable the settings for this WAN interface Display Name Type the description for such WAN interface Physical Mode Display the physical mode of such WAN interface Physical type You can change the physical type for WAN2 or choose Au...

Page 43: ...nterface Backup Backup WAN Backup Type Determine the role of such WAN interface It will be changed according to the Active Mode specified If you choose Always On as Active Mode you can choose one of the backup WAN interfaces from the Backup WAN drop down list Later when such WAN is disconnected for some reason the backup WAN will be activated automatically to prevent data transmission from connect...

Page 44: ...eed as the Load Balance Mode please type the line speed for downloading and uploading for such WAN interface The unit is kbps Active Mode and Backup WAN Backup Type Active Mode Determine the WAN interface will be active for always Always On or be treated as a backup WAN interface Backup Backup WAN Backup Type Determine the role of such WAN interface It will be changed according to the Active Mode ...

Page 45: ... t A Ac cc ce es ss s For the router supports multi WAN function the users can set different WAN settings for WAN1 WAN2 WAN3 WAN4 WAN5 for Internet Access Due to different Physical Mode of WAN interface the Access Mode for these connections also varies Refer to the following figures Index Display the WAN interface Display Name It shows the name of the WAN1 WAN2 WAN3 WAN4 WAN5 that entered in gener...

Page 46: ...f you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid ISP Access Setup Enter your allocated username password and authentication parameters according to the information provided by your ISP Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this field WAN Connection Detection Su...

Page 47: ... your ISP before you want to use this function WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 32 public IP addresses other than the current one you are using Type the additional WAN IP address and check the Enable box Then click OK to exit the dialog Fixed IP Click Yes to use this function and type...

Page 48: ...age will be shown Static or Dynamic IP Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid Keep WAN Connection Normally this function is designed for Dynamic IP environments because some ISPs will drop connections if there is no traffic within certain periods of time Check Enable PING to kee...

Page 49: ...er you request In this case you can fill in this IP address in the Fixed IP field Please contact your ISP before you want to use this function WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 32 public IP addresses other than the current one you are using Type the additional WAN IP address and check ...

Page 50: ...outer Specify a MAC Address Some Cable service providers specify a specific MAC address for access authentication In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field DNS Server IP Address Type in the primary IP address for the router if you want to use Static IP mode If necessary type in secondary IP address for necessity in the future ...

Page 51: ... or L2TP Server Address Specify the IP address of the PPTP L2TP server if you enable PPTP L2TP client mode Specify Gateway IP Address Specify the gateway IP address for DHCP server ISP Access Setup Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this field MTU It means Max Transmit Unit for packet The default setting is 1442 PPP Setup PP...

Page 52: ...n this IP address in the Fixed IP field Please contact your ISP before you want to use this function Click Yes to use this function and type in a fixed IP address in the box Fixed IP Address Type a fixed IP address WAN IP Network Settings Obtain an IP address automatically Click this button to obtain the IP address automatically Specify an IP address Click this radio button to specify some data IP...

Page 53: ...lize USB modem Please use the default value If you have any question please contact to your ISP APN Name APN means Access Point Name which is provided and required by some ISPs Type the name and click Apply Modem Initial String2 The initial string is shared with APN In some cases users may need another initial AT command to restrict 3G band or do any special settings Modem Dial String Such value i...

Page 54: ... execute for WAN detection Ping IP If you choose Ping Detect as detection mode you have to type IP address in this field for pinging TTL Time to Live Displays value for your reference TTL value is set by telnet command After finishing all the settings here please click OK to activate them ...

Page 55: ...dex Click the number of index to access into the load balance policy configuration web page Enable Check this box to enable this policy Protocol Use the drop down menu to change the protocol for the WAN interface WAN Use the drop down menu to change the WAN interface Src IP Start Displays the IP address for the start of the source IP Src IP End Displays the IP address for the end of the source IP ...

Page 56: ...start for the specified WAN interface Src IP End Type the source IP end for the specified WAN interface If this field is blank it means that all the source IPs inside the LAN will be passed through the WAN interface Dest IP Start Type the destination IP start for the specified WAN interface Dest IP End Type the destination IP end for the specified WAN interface If this field is blank it means that...

Page 57: ...T does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built in DHCP server that assigns private IP address to each local host See the following diagram for a briefly understanding In some special case you may have a public IP subnet from your ISP such as 220 135 240 0 24 This means th...

Page 58: ... such as IP address and the routers will automatically inform for each other 3 3 2 2 2 2 G Ge en ne er ra al l S Se et tu up p This page provides you the general settings for LAN Click LAN to open the LAN settings page and choose General Setup Index Display the number of LAN interface Status Basically LAN1 status is enabled in default DHCP LAN1 is configured with DHCP in default IP Address Display...

Page 59: ...d IP settings to any local user configured as a DHCP client It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network Enable Server Let the router assign IP address to every host in the LAN Disable Server Let you manually assign IP address to every host in the LAN Relay Agent Specify which subnet that DHCP server is located the re...

Page 60: ...P L2TP or DHCP server Primary IPAddress You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the router will automatically apply default DNS Server IP address 194 109 6 66 to this field Secondary IPAddress You can specify secondary DNS server IP address here because your ISP often provides you more t...

Page 61: ...the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes z Save cost on applying public IP address and apply efficient usage of IP address NAT allows the internal IP addresses of local hosts to be translated into one public IP address thus you can have only one IP address on behalf of the entire inte...

Page 62: ...zed by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping private IP address port of the server The port redirection can only apply to incoming traffic To use this fu...

Page 63: ...ed the system will calculate and display the ending IP of private IP automatically Service Name Enter the description of the specific network service Protocol Select the transport layer protocol TCP or UDP WAN IP Select the WAN IP used for port redirection There are eight WAN IP alias that can be selected and used for port redirection The default setting is All which means all the incoming data fr...

Page 64: ...e service offered by the internal host Note that the router has its own built in services servers such as Telnet HTTP and FTP etc Since the common port numbers of these services servers are all the same you may need to reset the router in order to avoid confliction For example the built in web configurator in the router is with default port 80 which may conflict with the web server in the local ne...

Page 65: ...ular web surfing and other such Internet activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be totally exposed to the Internet which usually helps some special applications such as NetMeeting or Internet Games etc The security properties of NAT are somewhat bypassed if you set up DMZ host We suggest you to add additiona...

Page 66: ...and then a window will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the above dialog the IP address will be shown on the following screen Click OK to save the setting ...

Page 67: ...nable the DMZ Host function Private IP Enter the private IP address of the DMZ host or click Choose PC to select one Choose PC Click this button and then a window will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from th...

Page 68: ...ervice in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Specify the name for the defined network service WAN Interface Display the WAN interface for such NAT profile Aux WAN IP Display the WAN IP address specified in WAN IP Alias page It will be hidden if WAN IP Alias page is not configured Local IP Address Display the private IP addres...

Page 69: ... click Choose PC to select one Choose PC Click this button and subsequently a window having a list of private IP addresses of local hosts will automatically pop up Select the appropriate IP address of the local host in the list Protocol Specify the transport layer protocol It could be TCP UDP or none for selection Start Port Specify the starting port number of the service offered by the local host...

Page 70: ...rvice providers The router provides up to three accounts from three different DDNS service providers Basically Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www dyndns org www no ip com www dtdns com www changeip com www dynamic nameserver com You should visit their websites to register your own domain name for the router Enable the Fun...

Page 71: ...5 First While connecting the router will use WAN1 WAN2 WAN3 WAN4 WAN5 as the first channel for such account If WAN1 WAN2 WAN3 fails the router will use another WAN interface instead WAN1 WAN2 WAN3 WAN4 WAN5 Only While connecting the router will use WAN1 WAN2 WAN3 WAN4 WAN5 as the only channel for such account Service Provider Select the service provider for the DDNS account Service Type Select a s...

Page 72: ...nction and Clear all Dynamic DNS Accounts In the DDNS setup menu uncheck Enable Dynamic DNS Setup and push Clear All button to disable the function and clear all accounts from the router Delete a Dynamic DNS Account In the DDNS setup menu click the Index number you want to delete and then push Clear All button to delete the account ...

Page 73: ...essenger to allow full use of the voice video and messaging features Enable UPNP Service Accordingly you can enable either the Connection Control Service or Connection Status Service After setting Enable UPNP Service setting an icon of IP Broadband Connection on Router on Windows XP Network Connections will appear The connection status and control status will be able to be activated The NAT Traver...

Page 74: ...AN N This function is used for n models 3 3 5 5 1 1 B Ba as si ic c C Co on nc ce ep pt ts s Over recent years the market for wireless communications has enjoyed tremendous growth Wireless technology now reaches or is capable of reaching virtually every location on the surface of the earth Hundreds of millions of people exchange information every day via wireless communication products The Vigor n...

Page 75: ...security and privacy of your wireless communication we provide several prevailing standards on market WEP Wired Equivalent Privacy is a legacy method to encrypt each frame transmitted via radio using either a 64 bit or 128 bit key Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys WPA Wi Fi Protected Access the most dom...

Page 76: ...fidential information leakage For a more flexible deployment you may add filters of MAC addresses to isolate users access from wired LAN Manage Wireless Stations Station List will display all the station in your wireless network and the status of their connection Below shows the menu items for Wireless LAN 3 3 5 5 2 2 G Ge en ne er ra al l S Se et tu up p By clicking the General Settings a new web...

Page 77: ...select Auto to let system determine for you Packet OVERDRIVE This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports ...

Page 78: ...ying The system allows you to set four sets of SSID for different usage In default the first set of SSID will be enabled You can hide it for your necessity Long Preamble This option is to define the length of the sync field in an 802 11 packet Most modern wireless network uses short preamble with 56 bit sync field instead of long preamble with 128 bit sync field However some original 11b wireless ...

Page 79: ...SK value for connection Mode There are several modes provided for you to choose Disable Turn off the encryption mechanism WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK Accepts only WPA clients and the encryption key should be entered in PSK WPA2 PSK Accepts only WPA2 clients and the encryption key should be entered in PSK Mixed WPA WPA2 PSK Accepts WPA an...

Page 80: ...leading by 0x such as 0x321253abcde WEP 64 Bit For 64 bits WEP key either 5 ASCII characters such as 12345 or 10 hexadecimal digitals leading by 0x such as 0x4142434445 128 Bit For 128 bits WEP key either 13 ASCII characters such as ABCDEFGHIJKLM or 26 hexadecimal digits leading by 0x such as 0x4142434445464748494A4B4C4D All wireless devices must support the same WEP encryption bit size and have t...

Page 81: ...lect to enable the MAC Address access control feature Policy Select to enable any one of the following policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Isolate WLAN from LAN will separate all the WLAN stations from LAN based on the MAC Address list MAC Address Filter Display all MAC addresses that are edited before Client s MAC...

Page 82: ...sh Click this button to refresh the status of station list Add Click this button to add current typed MAC address into Access Control 3 3 6 6 U US SB B A Ap pp pl li ic ca at ti io on n USB diskette connected on Vigor router can be regarded as a server By way of Vigor router clients on LAN WAN can access write and read data stored in USB diskette with different applications After setting the confi...

Page 83: ...ompletely FAT16 cannot support long filename General Settings Simultaneous FTP Connection This field is used to specify the quantity of the FTP sessions The router allows up to 6 FTP sessions connecting to USB storage diskette at one time Default Charset At present Vigor router supports three types of character sets default GB2312 and BIG5 Default Charset is for English based file name For Simplif...

Page 84: ...he host name for the router 3 3 6 6 2 2 U US SB B U Us se er r M Ma an na ag ge em me en nt t This page allows you to set profiles for FTP Samba users Any user who wants to access into the USB diskette must type the same username and password configured in this page Before adding or modifying settings in this page please insert a USB diskette first Otherwise an error message will appear to warn yo...

Page 85: ... specified here for accessing into USB storage diskette Confirm Password Type the password again to make confirmation Home Folder It determines the range for the client to access into The user can enter a directory name in this field Then after clicking OK the router will create the specific new folder in the USB diskette In addition if the user types here he she can access into all of the disk fo...

Page 86: ... Click this icon to return to the upper directory Create Click this icon to add a new folder Current Path Display current folder Upload Click this button to upload the selected file to the USB diskette The uploaded file in the USB diskette can be shared for other user through FTP 3 3 6 6 4 4 U US SB B D Di is sk k S St ta at tu us s This page is to monitor the status for the users who accessing in...

Page 87: ...ce of the USB diskette Click Refresh at any time to get new status for free capacity Index It displays the number of the client which connecting to FTP server IP Address It displays the IP address of the user s host which connecting to the FTP server Username It displays the username that user uses to login to the FTP server When you insert USB diskette into the Vigor router the system will start ...

Page 88: ...rface information Also you could get the current running firmware version or firmware related information from this presentation Model Name Display the model name of the router Firmware Version Display the firmware version of the router Build Date Time Display the date and time of the current firmware built LAN MAC Address Display the MAC address of the LAN Interface IP Address Display the IP addr...

Page 89: ...nk Status Display current connection status MAC Address Display the MAC address of the WAN Interface Connection Display the connection type IP Address Display the IP address of the WAN interface Default Gateway Display the assigned IP address of the default gateway 3 3 7 7 2 2 U Us se er r P Pa as ss sw wo or rd d This page allows you to set new password for user operation Old Password Type in the...

Page 90: ...l Time Protocol Select a time protocol Server IP Address Type the IP address of the time server Time Zone Select the time zone where the router is located Enable Daylight Saving Check the box to activate daylight saving function Such feature is useful for some areas Automatically Update Interval Select a time interval for updating from the NTP server Click OK to save these settings 3 3 7 7 4 4 R R...

Page 91: ...3 8 8 1 1 D DH HC CP P T Ta ab bl le e The facility provides information on IP address assignments This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and click DHCP Table to open the web page Index It displays the connection item number IP Address It displays the IP address assigned by this router for specified PC MAC Address It displays t...

Page 92: ...ime Yet the vertical axis has different meanings For WAN1 WAN2 WAN3 WAN4 WAN5 Bandwidth chart the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past For Sessions chart the numbers displayed on vertical axis represent the numbers of the NAT sessions during the past 3 3 8 8 3 3 P Pi in ng g D Di ia ag gn no os si is s Click Diagnostics and cl...

Page 93: ... on the window 3 3 8 8 4 4 T Tr ra ac ce e R Ro ou ut te e Click Diagnostics and click Trace Route to open the web page This page allows you to trace the routes from router to the host Simply type the IP address of the host in the box and click Run The result of route trace will be shown on the screen Trace through Use the drop down list to choose the WAN interface that you want to ping through or...

Page 94: ...Vigor3200 Series User s Guide 84 Host IP Address It indicates the IP address of the host Run Click this button to start route tracing work Clear Click this link to remove the result on the window ...

Page 95: ...lease go to WAN group 4 4 1 1 1 1 B Ba as si ic cs s o of f I In nt te er rn ne et t P Pr ro ot to oc co ol l I IP P N Ne et tw wo or rk k IP means Internet Protocol Every device in an IP based Network including routers print server and host PCs needs an IP address to identify its location on the network To avoid address conflicts IP addresses are publicly registered with the Network Information C...

Page 96: ...a router begins to connect to your ISP a serial of discovery process will occur to ask for a connection Then a session will be created Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system And your IP address DNS server and other related information will usually be assigned by your ISP N Ne et tw wo or rk k C Co on nn ne ec ct ti io on n b by y 3 3G G U US SB...

Page 97: ...al communication port for proper operation This webpage allows you to set general setup for WAN1 to WAN5 respectively From the above figure WAN1 WAN4 connect to Internet through the interface of Ethernet WAN5 connects to Internet via USB interface Therefore the configuration for each WAN port will be different slightly Please click the WAN link under Index to open the web page for detailed configu...

Page 98: ... to disable the settings for this WAN interface Display Name Type the description for such WAN interface Physical Mode Display the physical mode of such WAN interface Physical type You can change the physical type for WAN2 or choose Auto negotiation for determined by the system Line Speed If your choose According to Line Speed as the Load Balance Mode please type the line speed for downloading and...

Page 99: ...N interface It will be changed according to the Active Mode specified If you choose Always On as Active Mode you can choose one of the backup WAN interfaces from the Backup WAN drop down list Later when such WAN is disconnected for some reason the backup WAN will be activated automatically to prevent data transmission from connection interrupted If you choose Backup as the Active Mode Backup WAN w...

Page 100: ...d as the Load Balance Mode please type the line speed for downloading and uploading for such WAN interface The unit is kbps Active Mode and Backup WAN Backup Type Active Mode Determine the WAN interface will be active for always Always On or be treated as a backup WAN interface Backup WAN Backup WAN Backup Type Determine the role of such WAN interface It will be changed according to the Active Mod...

Page 101: ... t A Ac cc ce es ss s For the router supports multi WAN function the users can set different WAN settings for WAN1 WAN2 WAN3 WAN4 WAN5 for Internet Access Due to different Physical Mode of WAN interface the Access Mode for these connections also varies Refer to the following figures Index Display the WAN interface Display Name It shows the name of the WAN1 WAN2 WAN3 WAN4 WAN5 that entered in gener...

Page 102: ... for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid ISP Access Setup Enter your allocated username password and authentication parameters according to the information provided by your ISP Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this fi...

Page 103: ...o always assign you the same IP address whenever you request In this case you can fill in this IP address in the Fixed IP field Please contact your ISP before you want to use this function WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 32 public IP addresses other than the current one you are using...

Page 104: ...age will be shown Static or Dynamic IP Click Enable for activating this function If you click Disable this function will be closed and all the settings that you adjusted in this page will be invalid Keep WAN Connection Normally this function is designed for Dynamic IP environments because some ISPs will drop connections if there is no traffic within certain periods of time Check Enable PING to kee...

Page 105: ...er you request In this case you can fill in this IP address in the Fixed IP field Please contact your ISP before you want to use this function WAN IP Alias If you have multiple public IP addresses and would like to utilize them on the WAN interface please use WAN IP Alias You can set up to 32 public IP addresses other than the current one you are using Type the additional WAN IP address and check ...

Page 106: ...outer Specify a MAC Address Some Cable service providers specify a specific MAC address for access authentication In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field DNS Server IP Address Type in the primary IP address for the router if you want to use Static IP mode If necessary type in secondary IP address for necessity in the future ...

Page 107: ...erver if you enable PPTP L2TP client mode Specify Gateway IP Address Specify the gateway IP address for DHCP server ISP Access Setup Username Type in the username provided by ISP in this field Password Type in the password provided by ISP in this field Index 1 15 in Schedule Setup You can type in four sets of time schedule for your request All the schedules can be set previously in Application Sch...

Page 108: ...henever you request In this case you can fill in this IP address in the Fixed IP field Please contact your ISP before you want to use this function Click Yes to use this function and type in a fixed IP address in the box Fixed IP Address Type a fixed IP address WAN IP Network Settings Obtain an IP address automatically Click this button to obtain the IP address automatically Specify an IP address ...

Page 109: ...net Modem Initial String Such value is used to initialize USB modem Please use the default value If you have any question please contact to your ISP APN Name APN means Access Point Name which is provided and required by some ISPs Type the name and click Apply Modem Initial String2 The initial string 1 is shared with APN In some cases users may need another initial AT command to restrict 3G band or...

Page 110: ...erify whether network connection is alive or not through ARP Detect or Ping Detect Mode Choose ARP Detect or Ping Detect for the system to execute for WAN detection Ping IP If you choose Ping Detect as detection mode you have to type IP address in this field for pinging TTL Time to Live Displays value for your reference TTL value is set by telnet command After finishing all the settings here pleas...

Page 111: ...dex Click the number of index to access into the load balance policy configuration web page Enable Check this box to enable this policy Protocol Use the drop down menu to change the protocol for the WAN interface WAN Use the drop down menu to change the WAN interface Src IP Start Displays the IP address for the start of the source IP Src IP End Displays the IP address for the end of the source IP ...

Page 112: ...start for the specified WAN interface Src IP End Type the source IP end for the specified WAN interface If this field is blank it means that all the source IPs inside the LAN will be passed through the WAN interface Dest IP Start Type the destination IP start for the specified WAN interface Dest IP End Type the destination IP end for the specified WAN interface If this field is blank it means that...

Page 113: ... is NAT It creates a private subnet of your own As mentioned previously the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address What NAT does is to translate the packets from public IP address to private IP address to forward the right packets to the right host and vice versa Besides Vigor router has a built i...

Page 114: ...h ha at t i is s R Ro ou ut ti in ng g I In nf fo or rm ma at ti io on n P Pr ro ot to oc co ol l R RI IP P Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing This allows users to change the information of the router such as IP address and the routers will automatically inform for each other W Wh ha at t i is s S St ta at ti ic c R Ro ou ...

Page 115: ...ra al l S Se et tu up p This page provides you the general settings for LAN Vigor3200 series provides four LANs one DMZ and one IP Routed Subnet Click LAN to open the LAN settings page and choose General Setup There are four subnets provided by the router which allow users to divide groups into different subnets LAN1 LAN4 In addition different subnets can link for each other by configuring Inter L...

Page 116: ...uired please check the DHCP box for each LAN IP Address Display the IP address of the LAN configuration Display the IP address for each LAN item Such information is set in default and you can not modify it Details Page Click it to access into the setting page Each LAN will have different LAN configuration page Each LAN must be configured in different subnet Inter LAN Routing Check the box to allow...

Page 117: ...er for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network If you want to use another DHCP server in the network other than the Vigor Router s you can let Relay Agent help you to redirect the DHCP request to the specif...

Page 118: ...ervers in this page instead of DNS servers given by the Internet Access server PPPoE PPTP L2TP or DHCP server Primary IPAddress You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the router will automatically apply default DNS Server IP address 194 109 6 66 to this field Secondary IPAddress You can...

Page 119: ...nt It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network If you want to use another DHCP server in the network other than the Vigor Router s you can let Relay Agent help you to redirect the DHCP request to the specified location Enable Server Let the router assign IP address to every host in the LAN Disable Server Let you manu...

Page 120: ... DHCP server for your network If you want to use another DHCP server in the network other than the Vigor Router s you can let Relay Agent help you to redirect the DHCP request to the specified location Enable Server Let the router assign IP address to every host in the LAN Disable Server Let you manually assign IP address to every host in the LAN Start IPAddress Enter a value of the IP address poo...

Page 121: ...uration Protocol The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client It is highly recommended that you leave the router enabled as a DHCP server if you do not have a DHCP server for your network If you want to use another DHCP server in the network other than the Vigor Router s you can let ...

Page 122: ...by one and click Add to create a list of hosts to be assigned deleted or edited IP address from above pool Set a list of MAC Address of the DHCP server which can help the router to assign the correct IP address of the correct subnet to the correct host 4 4 2 2 3 3 S St ta at ti ic c R Ro ou ut te e Go to LAN to open setting page and choose Static Route Index The number 1 to 10 under Index allows y...

Page 123: ... Router B 192 168 1 3 z have set Main Router 192 168 1 1 as the default gateway for the Router A 192 168 1 2 Before setting Static Route user A cannot talk to user B for Router A can only forward recognized packets to its default gateway Main Router 1 Go to LAN page and click General Setup select 1st Subnet as the RIP Protocol Control Then click the OK button Note There are two reasons that we hav...

Page 124: ...ch regulates all packets destined to 192 168 10 0 will be forwarded to 192 168 1 2 Click OK 3 Return to Static Route Setup page Click on another Index Number to add another static route as show below which regulates all packets destined to 211 100 88 0 will be forwarded to 192 168 1 3 4 Go to Diagnostics and choose Routing Table to verify current routing table ...

Page 125: ...or the packets sending by LAN port VLAN Tag Enable Check this box to enable the VID and the Priority The router will add specific VLAN number to all packets on LAN while sending them out VID Type the value as the VLAN ID number The range is form 0 to 4095 Priority Type the number for such VLAN The range is from 0 to 7 LAN Port Check this box to make the VLAN settings such as VID priority subnet ap...

Page 126: ...o disable this function All the settings on this page will be invalid Strict Bind Click this radio button to block the connection of the IP MAC which is not listed in IP Bind List ARP Table This table is the LAN ARP table of this router The information for IP and MAC will be displayed in this field Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by cli...

Page 127: ...from one or more specific ports to a target port This mechanism helps manager track the network errors or abnormal packets transmission without interrupting the flow of data access the network By the way user can apply this function to monitor all traffics which user needs to check There are some advantages supported in this feature First it is more economical without other detecting equipments to...

Page 128: ...the router will do the inversion based on its table Therefore the internal host can communicate with external host smoothly The benefit of the NAT includes z Save cost on applying public IP address and apply efficient usage of IP address NAT allows the internal IP addresses of local hosts to be translated into one public IP address thus you can have only one IP address on behalf of the entire inte...

Page 129: ...zed by all users Since the server is actually located inside the LAN the network well protected by NAT of the router and identified by its private IP address port the goal of Port Redirection function is to forward all access request with public IP address from external users to the mapping private IP address port of the server The port redirection can only apply to incoming traffic To use this fu...

Page 130: ...will calculate and display the ending IP of private IP automatically Service Name Enter the description of the specific network service Protocol Select the transport layer protocol TCP or UDP WAN Interface Select the WAN interface used for port redirection Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host If you choose Range as the port redi...

Page 131: ...P and FTP etc Since the common port numbers of these services servers are all the same you may need to reset the router in order to avoid confliction For example the built in web configurator in the router is with default port 80 which may conflict with the web server in the local network http 192 168 1 13 80 Therefore you need to change the router s http port to any one other than the default por...

Page 132: ...net activities from other clients will continue to work without inappropriate interruption DMZ Host allows a defined internal user to be totally exposed to the Internet which usually helps some special applications such as NetMeeting or Internet Games etc The security properties of NAT are somewhat bypassed if you set up DMZ host We suggest you to add additional filter rules or a secondary firewal...

Page 133: ...ists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the above dialog the IP address will be shown on the following screen Click OK to save the setting DMZ Host for WAN2 WAN5 are slightly different with WAN1 See the following figure ...

Page 134: ...nter the private IP address of the DMZ host or click Choose PC to select one Choose PC Click this button and then a window will automatically pop up as depicted below The window consists of a list of private IP addresses of all hosts in your LAN network Select one private IP address in the list to be the DMZ host When you have selected one private IP from the above dialog the IP address will be sh...

Page 135: ...elative number for the particular entry that you want to offer service in a local host You should click the appropriate index number to edit or clear the corresponding entry Comment Specify the name for the defined network service WAN Interface Display the WAN interface used by such index Local IP Address Display the private IP address of the local host offering the service Status Display the stat...

Page 136: ...dress of the local host or click Choose PC to select one Choose PC Click this button and subsequently a window having a list of private IP addresses of local hosts will automatically pop up Select the appropriate IP address of the local host in the list Protocol Specify the transport layer protocol It could be TCP UDP or none for selection Start Port Specify the starting port number of the service...

Page 137: ...tion SPI tracks packets and denies unsolicited incoming data z Selectable Denial of Service DoS Distributed DoS DDoS attacks protection I IP P F Fi il lt te er rs s Depending on whether there is an existing Internet connection or in other words the WAN link status is up or down the IP filter architecture categorizes traffic into two Call Filter and Data Filter z Call Filter When there is no existi...

Page 138: ...tem s resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system The DoS Defense function enables the Vigor router to inspect every incoming packet based on the attack signature database Any malicious packet that might duplicate itself to paralyze the host in the secure LAN will be strictly blocked and a Syslog mess...

Page 139: ... Assign a start filter set for the Call Filter Data Filter Check Enable to activate the Data Filter function Assign a start filter set for the Data Filter Accept large incoming Some on line games for example Half Life will use lots of fragmented UDP packets to transfer game data Instinctively as a secure firewall Vigor router will reject these fragmented packets to prevent attack unless you enable...

Page 140: ...via Vigor router Filter Select Pass or Block for the packets that do not match with the filter rules Sessions Control The number typed here is the total sessions of the packets that do not match the filter rule configured in this page The default setting is 60000 Quality of Service Choose one of the QoS rules to be applied as firewall rule For detailed information of setting QoS please refer to th...

Page 141: ...lert for more detailed information URL Content Filter Select one of the URL Content Filter profile settings created in CSM URL Content Filter for applying with this router Please set at least one profile for choosing in CSM URL Content Filter web page first Or choose Create New from the drop down list in this page to create a new profile For troubleshooting needs you can specify to record informat...

Page 142: ...ou do not choose any codepage no decoding job of URL will be processed Please use the drop down list to choose a codepage If you do not have any idea of choosing suitable codepage please open Syslog From Codepage Information of Setup dialog you will see the recommended codepage listed on the dialog box Window size It determines the size of TCP protocol 0 65535 The more the value is the better the ...

Page 143: ...e Check Active to enable the rule Filter Rule Click a button numbered 1 7 to edit the filter rule Click the button will open Edit Filter Rule web page For the detailed information refer to the following page Active Enable or disable the filter rule Comment Enter filter set comments description Maximum length is 23 character long Move Up Down Use Up or Down link to move the order of the filter rule...

Page 144: ...erval only You may choose up to 4 schedules out of the 15 schedules pre defined in Applications Schedule setup The default setting of this field is blank and the function will always work Direction Set the direction of packet flow It is for Data Filter only For the Call Filter this setting is not available since Call Filter is only applied to outgoing traffic Note RT means routing domain for 2nd s...

Page 145: ...s the Address Type From the IP Group drop down list choose the one that you want to apply Or use the IP Object drop down list to choose the object that you want Service Type Click Edit to access into the following dialog to choose a suitable service type To set the service type manually please choose User defined as the Service Type and type them in this dialog In addition if you want to use the s...

Page 146: ...to unfragmented packets Fragmented Apply the rule to fragmented packets Too Short Apply the rule only to packets that are too short to contain a complete header Filter Specifies the action to be taken when packets match the rule Block Immediately Packets matching the rule will be dropped immediately Pass Immediately Packets matching the rule will be passed immediately Block If No Further Match A p...

Page 147: ...ge to create a new profile All the hosts in LAN must follow the standard configured in the APP Enforcement profile selected here For detailed information refer to the section of APP Enforcement profile setup For troubleshooting needs you can specify to record information for IM P2P by checking the Log box It will be sent to Syslog server Please refer to section Syslog Mail Alert for more detailed ...

Page 148: ...e This function is used to compare the characters among different languages Choose correct codepage can help the system obtaining correct ASCII after decoding data from URL and enhance the correctness of URL Content Filter The default value for this setting is ANSI 1252 Latin I If you do not choose any codepage no decoding job of URL will be processed Please use the drop down list to choose a code...

Page 149: ... be filtered by firewall settings configured by Vigor router if Strict Security Firewall is enabled If the firewall system does not have any response pass or block for these packets such as no response coming from Anti Spam server then the router s firewall will block the packets directly In addition you can restrict the strict security checking just be done by specified server and conditions such...

Page 150: ...f two IP filters call filter or data filter You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner Each filter set is composed by 7 filter rules which can be further defined After that in General Setup you may specify one set for call filter and one set for data filter to execute first ...

Page 151: ...P SYN packets for a period defined in Timeout The goal for this is prevent the TCP SYN packets attempt to exhaust the limited resource of Vigor router By default the threshold and timeout values are set to 50 packets per second and 10 seconds respectively Enable UDP flood defense Check the box to activate the UDP flood defense function Once detecting the Threshold of the UDP packets from the Inter...

Page 152: ...o victims Block Smurf Check the box to activate the Block Smurf function The Vigor router will ignore any broadcasting ICMP echo request Block trace router Check the box to enforce the Vigor router not to forward any trace route packets Block SYN fragment Check the box to activate the Block SYN fragment function The Vigor router will drop any packets having SYN flag and more fragment bit set Block...

Page 153: ...ndicate the protocol type running over the upper layer However the protocol types greater than 100 are reserved and undefined at this time Therefore the router should have ability to detect and reject this kind of packets Warning Messages We provide Syslog function for user to retrieve message from Vigor router The user as a Syslog Server shall receive the report sending from Vigor router which is...

Page 154: ...lly are applied to the host the one that the router installed only With user management the rules can be applied to every user connected to the router with customized profiles Note If Transparency Mode is selected in Firewall General Setup User Management cannot be used any more Please uncheck Transparency Mode first if you want to utilize user management to handle users in LAN WAN or WLAN 4 4 5 5...

Page 155: ...is page allows you to set customized profiles up to 200 which will be applied for users controlled under User Management Simply open User Management User Profile Reserved To set the user profile please click any index number link to open the following page Notice that profile 1 Admin and profile 2 System Reservation are factory default settings and only few settings for them can be modified ...

Page 156: ... user passes the authentication he she can access Internet via this router with the limitation configured in this user profile Confirm Password Type the password again for confirmation Idle Timeout If the user is idle over the limitation of the timer the network connection will be stopped for such user By default the Idle Timeout is set to 10 minutes Max User Login Such profile can be used by many...

Page 157: ...s offered by the router for the user to choose for authentication Web If it is selected the use can type the URL of the router from any browser Then a login window will be popped up and ask the user to type the user name and password for authentication If succeed a Welcome Message configured in User Management General Setup will be displayed After authentication the destination URL if requested by...

Page 158: ...that web page 4 4 5 5 3 3 U Us se er r G Gr ro ou up p This page allows you to bind several user profiles into one group These groups will be used in Firewall General Setup as part of filter rules Please click any index number link to open the following page Name Type a name for this user group Available User Objects You can gather user profiles objects from User Profile page within one user group...

Page 159: ...ne by the system automatically Refresh Click this link to refresh this page manually Index Display the number of the data flow Active User Display the users which connect to Vigor router currently You can click the link under the username to open the user profile setting page for that user IP Address Display the IP address of the device Last Login Time Display the login time that such user connect...

Page 160: ...erefore we can define them with objects and bind them with groups for using conveniently Later we can select that object group that can apply it For example all the IPs in the same department can be defined with an IP object a range of IP address 4 4 6 6 1 1 I IP P O Ob bj je ec ct t You can set up to 192 sets of IP Objects with different conditions Set to Factory Default Clear all profiles Click ...

Page 161: ...ened for you to choose in Edit Filter Rule page Address Type Determine the address type for the IP address Select Single Address if this object contains one IP address only Select Range Address if this object contains several IPs within a range Select Subnet Address if this object contains one subnet for IP address Select Any Address if this object contains any IP address Select Mac Address if thi...

Page 162: ...nvert Selection If it is checked all the IP addresses except the ones listed above will be applied later while it is chosen Below is an example of IP objects settings 4 4 6 6 2 2 I IP P G Gr ro ou up p This page allows you to bind several IP objects into one IP group Set to Factory Default Clear all profiles ...

Page 163: ...Maximum 15 characters are allowed Interface Choose WAN LAN or Any to display all the available IP objects with the specified interface Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box Selected IP Objects Click button to add the selected IP objects in this box ...

Page 164: ...o Factory Default Clear all profiles Click the number under Index column for settings in detail Name Type a name for this profile Protocol Specify the protocol s which this profile will apply to Source Destination Port Source Port and the Destination Port column are available for TCP UDP protocol It can be ignored for other protocols The filter rule will filter out any port number ...

Page 165: ...efined here when the first and last values are different it indicates that all the ports except the range defined here are available for this service type the port number greater than this value is available the port number less than this value is available for this profile Below is an example of service type objects settings 4 4 6 6 4 4 S Se er rv vi ic ce e T Ty yp pe e G Gr ro ou up p This page...

Page 166: ... objects that you have added on Objects Setting Service Type Object will be shown in this box Selected Service Type Objects Click button to add the selected IP objects in this box 4 4 6 6 5 5 K Ke ey yw wo or rd d O Ob bj je ec ct t You can set 200 keyword object profiles for choosing as black white list in CSM URL Web Content Filter Profile Set to Factory Default Clear all profiles ...

Page 167: ...s When you browse the webpage the page with gambling information will be watched out and be passed blocked based on the configuration on Firewall settings 4 4 6 6 6 6 K Ke ey yw wo or rd d G Gr ro ou up p This page allows you to bind several keyword objects into one group The keyword groups set here will be chosen as black white list in CSM URL Web Content Filter Profile Set to Factory Default Cle...

Page 168: ...k button to add the selected Keyword objects in this box 4 4 6 6 7 7 F Fi il le e E Ex xt te en ns si io on n O Ob bj je ec ct t This page allows you to set eight profiles which will be applied in CSM URL Content Filter All the files with the extension names specified in these profiles will be processed according to the chosen action Profile 1 with name of default is the default profile some files...

Page 169: ... number under Profile column for configuration in details Profile Name Type a name for this profile Type a name for such profile and check all the items of file extension that will be processed in the router Finally click OK to save this profile ...

Page 170: ...g Because it checks the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can prevent user from accidentally downloading malicious codes from web pages It s very common that malicious codes conceal in the executable objects such as ActiveX Java Applet compressed file...

Page 171: ...nforcement Profile will be applied in Default Rule of Firewall General Setup for filtering Set to Factory Default Clear all profiles Profile Display the number of the profile which allows you to click to set different policy Name Display the name of the APP Enforcement Profile Click the number under Index column for settings in detail There are four tabs IM P2P Protocol and Misc displayed on this ...

Page 172: ...the CSM profile Select All Click it to choose all of the items in this page Clear All Uncheck all the selected boxes The profiles configured here can be applied in the Firewall General Setup and Firewall Filter Setup pages as the standard for the host s to follow Below shows the items which are categorized under P2P ...

Page 173: ...Vigor3200 Series User s Guide 163 Below shows the items which are categorized under Protocol The items categorized under Misc ...

Page 174: ...payload of TCP packets while legacy firewall inspects packets based on the fields of TCP IP headers only On the other hand Vigor router can prevent user from accidentally downloading malicious codes from web pages It s very common that malicious codes conceal in the executable objects such as ActiveX Java Applet compressed files and other executable files Once downloading these types of files from...

Page 175: ...nfiguration set in this page for URL Access Control and Web Feature will be inactive Either URL Access Control First When all the packages matching with the conditions specified in URL Access Control and Web Feature below such function can determine the priority for the actions executed For this one the router will process the packages with the conditions set below for URL first then Web feature s...

Page 176: ...y on a web page that you visited before Action This setting is available only when Either URL Access Control First or Either Web Feature First is selected Pass Allow accessing into the corresponding webpage with the keywords listed on the box below Block Restrict accessing into the corresponding webpage with the keywords listed on the box below If the web pages do not match with the keyword set he...

Page 177: ...ding webpage with the keywords listed on the box below If the web pages do not match with the specified feature set here it will be processed with reverse action Cookie Check the box to filter out the cookie transmission from inside to outside world to protect the local user s privacy Proxy Check the box to reject any proxy transmission To control efficiently the limited bandwidth usage it will be...

Page 178: ...filter you have to click Activate to satisfy your request Be aware that service provider matching with Vigor router currently offers a period of time for trial version for users to experiment If you want to purchase a formal edition simply contact with the channel partner or your dealer Click CSM and click Web Content Filter Profile to open the profile setting page The default setting for Setup Qu...

Page 179: ...the data has been accessed previously the IP addresses of source and destination IDs will be memorized for a short time about 1 second in the router When the user tries to access the same destination ID the router will check it by comparing the record stored If it matches the page will be retrieved quickly Such item can provide URL matching with the fastest rate L1 L2 Cache the router will check t...

Page 180: ...ted on the box below Block restrict accessing into the corresponding webpage with the characters listed on Group Object Selections If the web pages do not match with the specified feature set here they will be processed with the categories listed on the box below Action Pass allow accessing into the corresponding webpage with the categories listed on the box below Block restrict accessing into the...

Page 181: ...1 S Se es ss si io on ns s L Li im mi it t A PC with private IP address can access to the Internet via NAT router The router will generate the records of NAT sessions for such connection The P2P Peer to Peer applications e g BitTorrent always need many sessions for procession and also they will occupy over resources which might result in important accesses impacted To solve the problem you can use...

Page 182: ... Start IP Defines the start IP address for limit session End IP Defines the end IP address for limit session Maximum Sessions Defines the available session number for each host in the specific range of IP addresses If you do not set the session number in this field the system will use the default session limit for the specific limitation you set for each index Add Adds the specific session limitat...

Page 183: ...ther programs Please use Limit Bandwidth to make the bandwidth usage more efficient In the Bandwidth Management menu click Bandwidth Limit to open the web page To activate the function of limit bandwidth simply click Enable and set the default upstream and downstream limit Enable Click this button to activate the function of limit bandwidth Apply to IP Routed Subnet Check this box to apply the ban...

Page 184: ...lity of Service management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise network One reason for QoS is that numerous TCP based applications tend to continually increase their transmission rate and consume all available bandwidth which is called TCP slow start If ot...

Page 185: ...warding AF and Best Effort BE AF defines the four classes of delivery or forwarding classes and three levels of drop precedence in each class Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic thus to allocate certain amount of resource execute appropriate policing classification or scheduling The core routers in the backbone will do ...

Page 186: ...y to incoming traffic only OUT apply to outgoing traffic only BOTH apply to both incoming and outgoing traffic Check this box and click OK then click Setup link again You will see the Online Statistics link appearing on this page WAN Inbound Bandwidth It allows you to set the connecting rate of data input for WAN For example if your ADSL supports 1M of downstream and 256K upstream please set 1000k...

Page 187: ...ze The difference in bandwidth between download and upload are great in ADSL2 environment For the download speed might be impacted by the uploading TCP ACK you can check this box to push ACK of upload faster to speed the network traffic Limited_bandwidth Ratio The ratio typed here is reserved for limited bandwidth of UDP application Online Statistics Display an online statistics for quality of ser...

Page 188: ...settings Local Address Click the Edit button to set the local IP address on LAN for the rule Remote Address Click the Edit button to set the remote IP address on LAN WAN for the rule Edit It allows you to edit source address information Address Type Determine the address type for the source address For Single Address you have to fill in Start IP address For Range Address you have to fill in Start ...

Page 189: ...u can choose the predefined service type from the Service Type drop down list Those types are predefined in factory Simply choose the one that you want for using by current QoS By the way you can set up to 20 rules for one Class If you want to edit an existed rule please select the radio button of that one and click Edit to open the rule edit page for modification E Ed di it t t th he e S Se er rv...

Page 190: ...r the new service Port Configuration Click Single or Range as the Type If you select Range you have to type in the starting port number and the end porting number on the boxes below Port Number Type in the starting port number and the end porting number here if you choose Range as the type By the way you can set up to 40 service types If you want to edit delete an existed service type please selec...

Page 191: ...NS feature you have to apply for free DDNS service to the DDNS service providers The router provides up to three accounts from three different DDNS service providers Basically Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www dyndns org www no ip com www dtdns com www changeip com www dynamic nameserver com You should visit their websit...

Page 192: ... check the box you will see a check mark appeared on the Active column of the previous web page in step 2 WAN Interface WAN1 WAN2 WAN3 WAN4 WAN5 First While connecting the router will use WAN1 WAN2 WAN3 WAN4 WAN5 as the first channel for such account If WAN1 WAN2 WAN3 WAN4 WAN5 fails the router will use another WAN interface instead WAN1 WAN2 WAN3 WAN4 WAN5 Only While connecting the router will us...

Page 193: ...ime but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours say business hours The schedule is also applicable to other functions You have to set your time before set schedule In System Maintenance Time and Date menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you po...

Page 194: ... and the value of idle timeout should be specified in Idle Timeout field Disable Dial On Demand Specify the connection to be up when it has traffic on the line Once there is no traffic over idle timeout the connection will be down and never up again during the schedule Idle Timeout Specify the duration or period for the schedule How often Specify how often the schedule will be applied Once The sch...

Page 195: ...authorization and accounting which is widely used by Internet service providers It is the most common method of authenticating and authorizing dial up and tunneled network users The built in RADIUS client feature enables the router to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication fo...

Page 196: ...Messenger to allow full use of the voice video and messaging features Enable UPNP Service Accordingly you can enable either the Connection Control Service or Connection Status Service After setting Enable UPNP Service setting an icon of IP Broadband Connection on Router on Windows XP Network Connections will appear The connection status and control status will be able to be activated The NAT Trave...

Page 197: ...ction on your network may incur some security threats You should consider carefully these risks before activating the UPnP function Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches Non privileged users can control some router functions including removing and adding port mappings The UPnP func...

Page 198: ...t selected In addition such function is available in NAT mode Enable IGMP Snooping Check this box to enable this function Multicast traffic will be forwarded to ports that have members of that group Disabling IGMP snooping will make multicast traffic treated in the same manner as broadcast traffic Group ID This field displays the ID port for the multicast group The available range for IGMP starts ...

Page 199: ...le on the BIOS setting Wake by Two types provide for you to wake up the binded IP If you choose Wake by MAC Address you have to type the correct MAC address of the host in MAC Address boxes If you choose Wake by IP Address you have to choose the correct IP address IP Address The IP addresses that have been configured in Firewall Bind IP to MAC will be shown in this drop down list Choose the IP add...

Page 200: ...int to point private link Below shows the menu items for VPN and Remote Access 4 4 1 10 0 1 1 V VP PN N C Cl li ie en nt t W Wi iz za ar rd d Such wizard is used to configure VPN settings for VPN client Such wizard will guide to set the LAN to LAN profile for VPN dial out connection from server to client step by step LAN to LAN Client Mode Selection Choose the client mode Route Mode NAT Mode If th...

Page 201: ...table VPN type for the VPN client profile There are six types provided here Different type will lead to different configuration page After making the choices for the client profile please click Next You will see different configurations based on the selection s you made z When you choose PPTP None Encryption or PPTP Encryption you will see the following graphic ...

Page 202: ...Vigor3200 Series User s Guide 192 z When you choose IPSec you will see the following graphic ...

Page 203: ...Vigor3200 Series User s Guide 193 z When you choose L2TP you will see the following graphic z When you choose L2TP over IPSec Nice to Have you will see the following graphic ...

Page 204: ... fails the router will use another WAN interface instead WAN1 Only WAN2 Only WAN3 Only WAN4 Only WAN5 Only While connecting the router will use WAN1 WAN2 WAN3 WAN4 WAN5 as the only channel for VPN connection Always On Check to enable router always keep VPN connection Pre Shared Key IKE Authentication Method usually applies to those are remote dial in user or node LAN to LAN which uses dynamic IP a...

Page 205: ...S Triple DES 3DES and AES User Name This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above Password This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above Remote Network IP Please type one LAN IP address according to the real location of the remote host for building VPN connection ...

Page 206: ...configure VPN settings for VPN server Such wizard will guide to set the LAN to LAN profile for VPN dial in connection from client to server step by step VPN Server Mode Selection Choose the direction for the VPN server Site to Site VPN Remote Dial in User To set a LAN to LAN profile automatically please choose Site to Site VPN Remote Dial in User You can manage remote access by maintaining a table...

Page 207: ...item is available after you choose any one of dial in user account profiles Next you have to select suitable dial in type for the VPN server profile There are several types provided here similar to VPN Client Wizard Different Dial in Type will lead to different configuration page In addition adjustable items for each dial in type will be changed according to the VPN Server Mode Site to Site VPN an...

Page 208: ...configurations based on the selection you made Here we take the example of choosing Remote Dial in User as the VPN Server Mode z When you check PPTP you will see the following graphic z When you check PPTP IPSec L2TP three types or PPTP IPSec two types or L2TP with Policy Nice to Have Must you will see the following graphic ...

Page 209: ...the pre shared key again for confirmation Digital Signature X 509 Check the box of Digital Signature to invoke this function Use the drop down list to choose one of the certificates for using You have to configure one certificate at least previously in Certificate Management Local Certificate Otherwise the setting you choose here will not be effective Peer IP VPN Client IP Type the WAN IP address ...

Page 210: ...nnection status Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server through VPN Server Wizard View more detailed configuration Click this radio button to access VPN and Remote Access LAN to LAN for viewing detailed configuration 4 4 1 10 0 3 3 R Re em mo ot te e A Ac cc ce es ss s C Co on nt tr ro ol l Enable the necessary VPN service as you need If you ...

Page 211: ...transmit no MPPE encrypted packets Otherwise the MPPE encryption scheme will be used to encrypt the data Require MPPE 40 128bits Selecting this option will force the router to encrypt packets by using the MPPE encryption algorithm In addition the remote dial in user will use 40 bit to perform encryption prior to using 128 bit for encryption In other words if 128 bit MPPE encryption method is not a...

Page 212: ... the following IKE exchange and mutual examination of the secure tunnel establishment There are two encapsulation methods used in IPSec Transport and Tunnel The Transport mode will add the AH ESP payload and use original IP header to encapsulate the data payload only It can just apply to local packet e g L2TP over IPSec The Tunnel mode will not only add the AH ESP payload but also use a new IP hea...

Page 213: ... 1 10 0 6 6 I IP PS Se ec c P Pe ee er r I Id de en nt ti it ty y To use digital certificate for peer authentication in either LAN to LAN connection or Remote User Dial In connection here you may edit a table of peer certificate for selection As shown below the router provides 32 entries of digital certificates for peer dial in users Set to Factory Default Click it to clear all indexes Index Click...

Page 214: ...th matching value The field includes Country C State ST Location L Organization O Organization Unit OU Common Name CN and Email E 4 4 1 10 0 7 7 R Re em mo ot te e D Di ia al l i in n U Us se er r You can manage remote access by maintaining a table of remote user profile so that users can be authenticated to dial in via VPN connection You may set parameters including specified connection peer ID c...

Page 215: ... into the setting page of Remote Dial in User User Display the username for the specific dial in user of the LAN to LAN profile The symbol represents that the profile is empty Status Display the access state of the specific dial in user The symbol V and X represent the specific dial in user to be active and inactive respectively ...

Page 216: ...ow the remote dial in user to make a PPTP VPN connection through the Internet You should set the User Name and Password of remote dial in user below IPSec Tunnel Allow the remote dial in user to make an IPSec VPN connection through Internet L2TP with IPSec Policy Allow the remote dial in user to make a L2TP VPN connection through the Internet You can select to use L2TP alone or with IPSec Select f...

Page 217: ...ress for the subnet you specified User Name This field is applicable when you select PPTP or L2TP with or without IPSec policy above Password This field is applicable when you select PPTP or L2TP with or without IPSec policy above Enable Mobile One Time Passwords mOTP Check this box to make the authentication with mOTP function PIN Code Type the code for authentication e g 1234 Secret Use the 32 d...

Page 218: ...ameters including specified connection direction dial in or dial out connection peer ID connection type VPN connection including PPTP IPSec Tunnel and L2TP by itself or over IPSec and corresponding security methods etc The router supports up to 32 VPN tunnels simultaneously The following figure shows the summary table Set to Factory Default Click to clear all indexes Name Indicate the name of the ...

Page 219: ...2 WAN3 WAN4 WAN5 as the first channel for VPN connection If WAN1 fails the router will use another WAN interface instead WAN1 WAN2 WAN3 WAN4 WAN5 Only While connecting the router will use WAN1 WAN2 WAN3 WAN4 WAN5 as the only channel for VPN connection Netbios Naming Packet Pass click it to have an inquiry for data transmission between the hosts located on both sides of VPN Tunnel while connecting ...

Page 220: ...s used to handle abnormal IPSec VPN connection disruption It will help to provide the state of a VPN connection for router s judgment of redial Normally if any one of VPN peers wants to disconnect the connection it should follow a serial of packet exchange procedure to inform each other However if the remote peer disconnect without notice Vigor router will by no where to know this situation To res...

Page 221: ... predefined Profiles set in the VPN and Remote Access IPSec Peer Identity IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy Medium AH Authentication Header means data will be authenticated but not be encrypted By default this option is active High ESP Encapsulating Security Payload means payload data will be encrypted and authenticated Select from be...

Page 222: ...se 2 proposal To propose the local available algorithms to the VPN peers and get its feedback to find a match Three combinations are available for both modes We suggest you select the combination that covers the most algorithms IKE phase 1 key lifetime For security reason the lifetime of key should be defined The default value is 28800 seconds You may specify a value in between 900 and 86400 secon...

Page 223: ...to use L2TP alone or with IPSec Select from below None Do not apply the IPSec policy Accordingly the VPN connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection Nice to Have Apply the IPSec policy first if it is applicable during negotiation Otherwise the dial in VPN connection becomes one pure L2TP connection Must Specify the IPSec policy to be definitely appli...

Page 224: ...y when you specify the remote node Medium Authentication Header AH means data will be authenticated but not be encrypted By default this option is active High Encapsulating Security Payload ESP means payload data will be encrypted and authenticated You may select encryption algorithm from Data Encryption Standard DES Triple DES 3DES and AES My WAN IP This field is only applicable when you select P...

Page 225: ...ts behind the remote VPN router RIP Direction The option specifies the direction of RIP Routing Information Protocol packets You can enable disable one of direction here Herein we provide four options TX RX Both TX Only RX Only and Disable From first subnet to remote network you have to do If the remote network only allows you to dial in with single IP please choose NAT otherwise choose Route Chan...

Page 226: ...onnections You may disconnect any VPN connection by clicking Drop button You may also aggressively Dial out by using Dial out Tool and clicking Dial button Dial Click this button to execute dial out function Refresh Seconds Choose the time for refresh the dial information among 5 10 and 30 Refresh Click this button to refresh the whole connection status ...

Page 227: ...9 Any entity wants to utilize digital certificates should first request a certificate issued by a CA server It should also retrieve certificates of other trusted CA servers so it can authenticate the peer with certificates issued by those trusted CA servers Here you can manage generate and manage the local digital certificates and set trusted CA certificates Remember to adjust the time of Vigor ro...

Page 228: ...n Import Click this button to import a saved file as the certification information Refresh Click this button to refresh the information listed below View Click this button to view the detailed settings for certificate request After clicking Generate the generated information will be displayed on the window below ...

Page 229: ...lick IMPORT to open the following window Use Browse to find out the saved text file Then click Import The one you imported will be listed on the Trusted CA Certificate window Then click Import to use the pre saved file For viewing each trusted CA certificate click View to open the certificate detail information window If you want to delete a CA certificate choose the one and click Delete to remove...

Page 230: ...cy of a small office home Any authorized staff can bring a built in WLAN client PDA or notebook into a meeting room for conference without laying a clot of LAN cable or drilling holes everywhere Wireless LAN enables high mobility so WLAN users can simultaneously access all LAN facilities just like on a wired LAN as well as Internet access The Vigor wireless routers are equipped with a wireless LAN...

Page 231: ...ss point will preset a set of four keys and it will communicate with each station using only one out of the four keys WPA Wi Fi Protected Access the most dominating security mechanism in industry is separated into two categories WPA personal or called WPA Pre Share Key WPA PSK and WPA Enterprise or called WPA 802 1x In WPA Personal a pre defined key is used for encryption during data transmission ...

Page 232: ... To elaborate an example for business use you may set up a wireless LAN for visitors only so they can connect to Internet without hassle of the confidential information leakage For a more flexible deployment you may add filters of MAC addresses to isolate users access from wired LAN Manage Wireless Stations Station List will display all the station in your wireless network and the status of their ...

Page 233: ...at you could configure the SSID and the wireless channel Please refer to the following figure for more information Enable Wireless LAN Check the box to enable wireless function Mode At present the router can connect to Mixed 11b 11g 11g Only 11b Only Mixed 11g 11n 11n Only and Mixed 11b 11g 11n stations simultaneously Simply choose Mix 11b 11g 11n mode ...

Page 234: ...age In default the first set of SSID will be enabled You can hide it for your necessity SSID Means the identification of the wireless LAN SSID can be any text numbers or various special characters The default SSID is DrayTek We suggest you to change it Isolate LAN Check this box to make the wireless clients stations with the same SSID cannot access wired PCs on LAN Member Check this box to make th...

Page 235: ...ccess Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on ...

Page 236: ... to save and invoke it Default Pre Shared Key PSK is provided and stated on the label pasted on the bottom of the router For the wireless client who wants to access into Internet through such router please input the default PSK value for connection By clicking the Security Settings a new web page will appear so that you could configure the settings of WEP and WPA Mode There are several modes provi...

Page 237: ...pts WPA and WPA2 clients simultaneously and the encryption key should be entered in PSK WPA The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde Type Sel...

Page 238: ...entified with SSID 1 to 4 respectively All the clients expressed by MAC addresses listed in the box can be grouped under different wireless LAN For example they can be grouped under SSID 1 and SSID 2 at the same time if you check SSID 1 and SSID 2 MAC Address Filter Display all MAC addresses that are edited before Client s MAC Address Manually enter the MAC address of wireless client Apply SSID Af...

Page 239: ...reless network clients and vigor router Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time He she only needs to press a button on wireless client and WPS will connect for client and router automatically There are two methods to do network connection through WPS between AP and Stations pressing the Start PBC button or using ...

Page 240: ...e if you do not choose such mode in Wireless LAN Security you will see the following message box Please click OK and go back Wireless LAN Security to choose WPA PSK or WPA2 PSK mode and access WPS again Below shows Wireless LAN WPS web page Enable WPS Check this box to enable WPS setting WPS Status Display related system information for WPS If the wireless security encryption function of the route...

Page 241: ...nutes Configure via Client PinCode Please input the PIN code specified in wireless client you wish to connect and click Start PIN button The WPS LED on the router will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes 4 4 1 12 2 6 6 W WD DS S WDS means Wireless Distribution System It is a protocol for connecting two acc...

Page 242: ...in Bridge mode packets received from a WDS link will only be forwarded to local wired or wireless hosts In other words only Repeater mode can do WDS to WDS packet forwarding In the following examples hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links However hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Brid...

Page 243: ... the types for the router WEP Check this box to use the same key set in Security Settings page If you did not set any key in Security Settings page this check box will be dimmed Pre shared Key Type There are three types for you to choose DrayTek WPA can be used for all DrayTek wireless routers like Vigor2700 Vigor2800 Vigor2820 and etc except for other brand s wireless routers WPA and WPA2 are use...

Page 244: ...on 4 4 1 12 2 7 7 A Ad dv va an nc ce ed d S Se et tt ti in ng g This page allows users to set advanced settings such as operation mode channel bandwidth guard interval and aggregation MSDU for wireless data transmission Operation Mode Mixed Mode the router can transmit data with the ways supported in both 802 11a b g and 802 11n standards However the entire wireless transmission will be slowed do...

Page 245: ...power save mechanisms supported by Wi Fi networks It allows devices to take more time in sleeping state and consume less power to improve the performance by minimizing transmission latency WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button APSD Capable The default setting is Disable Aifsn It controls how long the client waits for each data trans...

Page 246: ...535 ACM It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note Vigor2830 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP router will answer the response request while transm...

Page 247: ... is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of this router can be found Please click Scan to discover all the connected APs Scan It is used to discover all the connected AP The results will be shown on the box above this button Statistics It displays the statistics for the channels used by APs Add to If you want the found AP applying t...

Page 248: ...ck this button to add current typed MAC address into Access Control 4 4 1 13 3 U US SB B A Ap pp pl li ic ca at ti io on n USB diskette connected on Vigor router can be regarded as a server By way of Vigor router clients on LAN WAN can access write and read data stored in USB diskette with different applications After setting the configuration in USB Application you can type the IP address of the ...

Page 249: ...cify the quantity of the FTP sessions The router allows up to 6 FTP sessions connecting to USB storage diskette at one time Default Charset At present Vigor router supports three types of character sets default GB2312 and BIG5 Default Charset is for English based file name For Simplified Chinese file directory names please choose GB2312 for Traditional Chinese file directory names choose BIG5 Samb...

Page 250: ...page Before adding or modifying settings in this page please insert a USB diskette first Otherwise an error message will appear to warn you Click index number to access into configuration page FTP Samba User Enable Click this button to activate this profile account for FTP service or Samba User service Later the user can use the username specified in this page to login into FTP server Disable Clic...

Page 251: ...me in this field Then after clicking OK the router will create the specific new folder in the USB diskette In addition if the user types here he she can access into all of the disk folders and files in USB diskette Note When write protect status for the USB diskette is ON you cannot type any new folder name in this field Only can be used in such case You can click to open the following dialog to a...

Page 252: ...lder Upload Click this button to upload the selected file to the USB diskette The uploaded file in the USB diskette can be shared for other user through FTP 4 4 1 13 3 4 4 U US SB B D Di is sk k S St ta at tu us s This page is to monitor the status for the users who accessing into FTP or Samba server USB diskette via the Vigor router If you want to remove the diskette from USB port in router pleas...

Page 253: ...r s host which connecting to the FTP server Username It displays the username that user uses to login to the FTP server When you insert USB diskette into the Vigor router the system will start to find out such device within several seconds 4 4 1 14 4 S Sy ys st te em m M Ma ai in nt te en na an nc ce e For the system setup there are several items that you have to know the way of configuration Stat...

Page 254: ...ce IP Address Display the IP address of the LAN interface Subnet Mask Display the subnet mask address of the LAN interface DHCP Server Display the current status of DHCP server of the LAN interface DNS Display the assigned IP address of the primary DNS Wireless LAN MAC Address Display the MAC address of the wireless LAN Frequency Domain It can be Europe 13 usable channels USA 11 usable channels et...

Page 255: ...ator to manage a TR 069 device through an Auto Configuration Server e g VigorACS ACS Server On Choose the interface for the router connecting to ACS server ACS Server URL Username Password Such data must be typed according to the ACS Auto Configuration Server you want to link Please refer to Auto Configuration Server user s manual for detailed information CPE Client Such information is useful for ...

Page 256: ...e of maintaining the binding in the Gateway Please type a number as the minimum period The default setting is 60 seconds Maximum Keep Alive Period If STUN is enabled the CPE must send binding request to the server for the purpose of maintaining the binding in the Gateway Please type a number as the maximum period A value of 1 indicates that no maximum period is specified 4 4 1 14 4 3 3 A Ad dm mi ...

Page 257: ...this field Confirm Password Type in the new password again When you click OK the login window will appear Please use the new password to access into the web configurator again 4 4 1 14 4 5 5 C Co on nf fi ig gu ur ra at ti io on n B Ba ac ck ku up p B Ba ac ck ku up p t th he e C Co on nf fi ig gu ur ra at ti io on n Follow the steps below to backup your configuration 1 Go to System Maintenance Co...

Page 258: ...e it another name by yourself 4 Click Save button the configuration will download automatically to your computer as a file named config cfg The above example is using Windows platform for demonstrating examples The Mac or Linux platform will appear different windows but the backup function is still available Note Backup for Certification must be done independently The Configuration Backup does not...

Page 259: ...em Maintenance Configuration Backup The following windows will be popped up as shown below 2 Click Browse button to choose the correct configuration file for uploading to the router 3 Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful ...

Page 260: ...ess into System Maintenance Management to set the router name Server IP Address The IP address of the Syslog server Destination Port Assign a port for the Syslog protocol Enable syslog message Check the box listed on this web page to send the corresponding message of firewall VPN User Access Call WAN Router DSL information to Syslog AlertLog Setup Check Enable to activate function of alert log Typ...

Page 261: ...to the e mail box while the router detecting the item s you specify here Click OK to save these settings For viewing the Syslog please do the following 1 Just set your monitor PC s IP address in the field of Server IP Address 2 Install the Router Tools in the Utility within provided CD After installation click on the Router Tools Syslog from program menu 3 From the Syslog screen select the router ...

Page 262: ...e administrator PC host as router s system time Use Internet Time Select to inquire time information from Time Server on the Internet using assigned protocol Time Protocol Select a time protocol Server IP Address Type the IP address of the time server Time Zone Select the time zone where the router is located Enable Daylight Saving Check this box to enable daylight saving function Automatically Up...

Page 263: ...ify Disable PING from the Internet Check the checkbox to reject all PING packets from the Internet For security issue this function is enabled by default Access List You could specify that the system administrator can only login from a specific host or network defined in the list A maximum of three IPs subnet masks is allowed List IP Indicate an IP address allowed to login to the router Subnet Mas...

Page 264: ... 4 4 1 14 4 9 9 R Re eb bo oo ot t S Sy ys st te em m The Web Configurator may be used to restart your router Click Reboot System from System Maintenance to open the following page If you want to reboot the router using the current configuration check Using current configuration and click OK To reset the router settings to default values check Using factory default configuration and click OK The r...

Page 265: ...ing an example Note that this example is running over Windows OS Operating System Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www DrayTek com or local DrayTek s web site and FTP site is ftp DrayTek com Click System Maintenance Firmware Upgrade to launch the Firmware Upgrade Utility Click OK The following screen will appear Please execute the firmware up...

Page 266: ... is the time to activate the mechanism for your computer Click System Maintenance Activation to open the following page for accessing http myvigor draytek com Activate via Interface Choose WAN interface used by such device for activating Web Content Filter Activate The Activate link brings you accessing into http myvigor draytek com to finish the activation of the account and the router Authentica...

Page 267: ...elow shows the successful activation of Web Content Filter 4 4 1 15 5 D Di ia ag gn no os st ti ic cs s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router Below shows the menu items for Diagnostics ...

Page 268: ...on e g PPPoE is triggered by a package sending from the source IP address Decoded Format It shows the source IP address local destination IP remote address the protocol and length of the package Refresh Click it to reload the page 4 4 1 15 5 2 2 R Ro ou ut ti in ng g T Ta ab bl le e Click Diagnostics and click Routing Table to open the web page Refresh Click it to reload the page ...

Page 269: ...reload the page Clear Click it to clear the whole table 4 4 1 15 5 4 4 D DH HC CP P T Ta ab bl le e The facility provides information on IP address assignments This information is helpful in diagnosing network problems such as IP address conflicts etc Click Diagnostics and click DHCP Table to open the web page Index It displays the connection item number IP Address It displays the IP address assig...

Page 270: ... address and port of remote host Interface It displays the representing number for different interface Refresh Click it to reload the page 4 4 1 15 5 6 6 D Da at ta a F Fl lo ow w M Mo on ni it to or r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds The IP address listed here is configured in Bandwidth Management You ha...

Page 271: ...sh Click this link to refresh this page manually Index Display the number of the data flow IP Address Display the IP address of the monitored device TX rate kbps Display the transmission speed of the monitored device RX rate kbps Display the receiving speed of the monitored device Sessions Display the session number that you specified in Limit Session web page Action Block can prevent specified PC...

Page 272: ...ns the highest peak value detected by the router in data transmission Speed means line speed specified in WAN General Setup If you do not specify any rate at that page here will display Auto for instead 4 4 1 15 5 7 7 T Tr ra af ff fi ic c G Gr ra ap ph h Click Diagnostics and click Traffic Graph to open the web page Choose WAN1 WAN2 WN3 WAN4 WAN5 Bandwidth Sessions daily or weekly for viewing dif...

Page 273: ...layed on vertical axis represent the numbers of the NAT sessions during the past 4 4 1 15 5 8 8 P Pi in ng g D Di ia ag gn no os si is s Click Diagnostics and click Ping Diagnosis to pen the web page Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically Ping to Use the drop down list to choos...

Page 274: ...ou to trace the routes from router to the host Simply type the IP address of the host in the box and click Run The result of route trace will be shown on the screen Trace through Use the drop down list to choose the WAN interface that you want to ping through Protocol Use the drop down list to choose the protocol that you want to ping through Host IP Address It indicates the IP address of the host...

Page 275: ...kets only with VLAN ID number For example Vigor3200 can divide the internal departments of a company into four different groups by using VigorSwitch G2240 Each group uses different network segment and does not connect for each other VigorSwitch G2240 Trunk Port 23 and Vigor3200 LAN Port are connected with network cable See the following graphic for an example VLAN0 Human Resource LAN Port 4 IP 192...

Page 276: ...te the function of VLAN Tag for VLAN2 setting check the box of Enable and type the value 20 for VID setting Then check LAN Port and set LAN2 as the Subnet 5 To activate the function of VLAN Tag for VLAN3 setting check the box of Enable and type the value 30 for VID setting Then check LAN Port and set LAN3 as the Subnet 6 To activate the function of VLAN Tag for VLAN4 setting check the box of Enabl...

Page 277: ...0 24 The equipment connecting to Vigor3200 LAN Port 3 LAN3 can get the IP address of 192 168 5 0 24 The equipment connecting to Vigor3200 LAN Port 4 LAN4 can get the IP address of 192 168 7 0 24 For the detailed settings of the network segment open LAN General Setup and click Details Page Adjust the settings for your request Refer to the following figure 7 To make any two of VLAN groups linked wit...

Page 278: ...3200 VID30 Port Members 17 23 VLAN Name 3200 VID40 Port Members 18 23 3 Open Vlan Ports and set the VID value with role for each Port Port 15 VID 10 Role Access Port 16 VID 20 Role Access Port 17 VID 30 Role Access Port 18 VID 40 Role Access Port 23 VID 1 Role Trunk Port 23 is set with Trunk in this example and will transfer the packets with VLAN Tag information That is packets with VID 10 20 30 a...

Page 279: ...e equipment connecting to VigorSwitch Port 16 can get the IP address of 192 168 3 0 24 The equipment connecting to VigorSwitch Port 17 can get the IP address of 192 168 5 0 24 The equipment connecting to VigorSwitch Port 18 can get the IP address of 192 168 7 0 24 5 To make any two of VLAN groups of Tag Based VLAN linked with each other just check the boxes of the ones in the field of Inter LAN Ro...

Page 280: ...hown in the below illustration you may follow the steps to create a LAN to LAN profile These two networks LANs should NOT have the same network address Settings in Router A in headquarter 1 Go to VPN and Remote Access and select Remote Access Control to enable the necessary VPN service and click OK 2 Then For using PPP based services such as PPTP L2TP you have to set general settings in PPP Genera...

Page 281: ...User s Guide 271 3 Go to LAN to LAN Click on one index number to edit a profile 4 Set Common Settings as shown below You should enable both of VPN connections because any one of the parties may start the VPN connection ...

Page 282: ...od If an IPSec based service is selected you should further specify the remote peer IP Address IKE Authentication Method and IPSec Security Method for this Dial Out connection If a PPP based service is selected you should further specify the remote peer IP Address Username Password PPP Authentication and VJ Compression for this Dial Out connection ...

Page 283: ...ed you may further specify the remote peer IP Address IKE Authentication Method and IPSec Security Method for this Dial In connection Otherwise it will apply the settings defined in IPSec General Setup above If a PPP based service is selected you should further specify the remote peer IP Address Username Password and VJ Compression for this Dial In connection ...

Page 284: ...er B in the remote office 1 Go to VPN and Remote Access and select Remote Access Control to enable the necessary VPN service and click OK 2 Then for using PPP based services such as PPTP L2TP you have to set general settings in PPP General Setup For using IPSec based service such as IPSec or L2TP with IPSec Policy you have to set general settings in IPSec General Setup such as the pre shared key t...

Page 285: ...N connections because any one of the parties may start the VPN connection 5 Set Dial Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial Out method If an IPSec based service is selected you should further specify the remote peer IP Address IKE Authentication Method and IPSec Security Method for this Dial Out connection ...

Page 286: ...or3200 Series User s Guide 276 If a PPP based service is selected you should further specify the remote peer IP Address Username Password PPP Authentication and VJ Compression for this Dial Out connection ...

Page 287: ...ed you may further specify the remote peer IP Address IKE Authentication Method and IPSec Security Method for this Dial In connection Otherwise it will apply the settings defined in IPSec General Setup above If a PPP based service is selected you should further specify the remote peer IP Address Username Password and VJ Compression for this Dial In connection ...

Page 288: ... an nd d H He ea ad dq qu ua ar rt te er r The other common case is that you as a teleworker may want to connect to the enterprise network securely According to the network structure as shown in the below illustration you may follow the steps to create a Remote User Profile and install Smart VPN Client on the remote host Settings in VPN Router in the enterprise office 1 Go to VPN and Remote Access...

Page 289: ...nown 3 Go to Remote Dial In User Click on one index number to edit a profile 4 Set Dial In settings to as shown below to allow the remote user dial in to build VPN connection If an IPSec based service is selected you may further specify the remote peer IP Address IKE Authentication Method and IPSec Security Method for this Dial In connection Otherwise it will apply the settings defined in IPSec Ge...

Page 290: ...Vigor3200 Series User s Guide 280 If a PPP based service is selected you should further specify the remote peer IP Address Username Password and VJ Compression for this Dial In connection ...

Page 291: ...t in CD ROM in the package or go to www DrayTek com download center Install as instructed 2 After successful installation for the first time user you should click on the Step 0 Configure button Reboot the host 3 In Step 2 Connect to VPN Server click Insert button to add a new entry If an IPSec based service is selected as shown below You may further specify the method you use to get IP the securit...

Page 292: ...ld be consistent with the one set up in the VPN router To use default gateway on remote network means that all the packets of remote host will be directed to VPN server then forwarded to Internet This will make the remote host seem to be working in the enterprise network 4 Click Connect button to build connection When the connection is successful you will find a green light on the right down corne...

Page 293: ...ccess internal database Meanwhile children may chat on Skype in other room 1 Go to Bandwidth Management Quality of Service 2 Click Setup link of WAN Make sure the QoS Control on the left corner is checked And select BOTH in Direction 3 Set Inbound Outbound bandwidth Note The rate of outbound inbound must be smaller than the real bandwidth to ensure correct calculation of QoS It is suggested to set...

Page 294: ...ing Edit link Type the name E mail for Class 1 5 For this index the user will set reserved bandwidth e g 25 for E mail using protocol POP3 and SMTP 6 Return to previous page Enter the Name of Index Class 2 by clicking Edit link In this index the user will set reserved bandwidth for HTTPS And click OK ...

Page 295: ...igor3200 Series User s Guide 285 7 Click Setup link for one of the WAN interface 8 Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of influent other application Click OK ...

Page 296: ... up an index for it Enter the Class Name of Index 3 In this index he will set reserved bandwidth for 1 VPN tunnel 10 Click Edit to open a new window 11 Click Edit to open the following window Check the ACT box first 12 Then click Edit of Local Address to set a worker s subnet address Click Edit of Remote Address to set headquarter s IP address Leave other fields and click OK ...

Page 297: ...all the Router Tools The Firmware Upgrade Utility is included in the tools 1 Go to www DrayTek com 2 Access into Support Downloads Please find out Firmware menu and click it Search the model you have and click on it to download the newly update firmware for your router 3 Access into Support Downloads Please find out Utility menu and click it 4 Click on the link of Router Tools to download the file...

Page 298: ...n Programs and choose Router Tools XXX Firmware Upgrade Utility 8 Type in your router IP usually 192 168 1 1 9 Click the button to the right side of Firmware file typing box Locate the files that you download from the company web sites You will find out two files with different extension names xxxx all keep the old custom settings and xxxx rst reset all the custom settings to default settings Choo...

Page 299: ...mware Note that this example is running over Windows OS Operating System 1 Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www DrayTek com or local DrayTek s web site and FTP site is ftp DrayTek com 2 Click System Maintenance Firmware Upgrade 3 Select a firmware file by clicking Browse Click Upgrade to perform the firmware upgrade ...

Page 300: ... 290 5 5 6 6 R Re eq qu ue es st t a a c ce er rt ti if fi ic ca at te e f fr ro om m a a C CA A s se er rv ve er r o on n W Wi in nd do ow ws s C CA A S Se er rv ve er r 1 Go to Certificate Management and choose Local Certificate ...

Page 301: ...t Enter the information in the certificate request 3 Copy and save the X509 Local Certificate Requet as a text file and save it for later use 4 Connect to CA server via web browser Follow the instruction to submit the request Below we take a Windows 2000 CA server for example Select Request a Certificate ...

Page 302: ...ile Select Router Offline request or IPSec Offline request below Then you have done the request and the server now issues you a certificate Select Base 64 encoded certificate and Download CA certificate Now you should get a certificate cer file and save it 5 Back to Vigor router go to Local Certificate Click IMPORT button and browse the file to import the certificate cer file into Vigor router Whe...

Page 303: ...Vigor3200 Series User s Guide 293 you will find the below window showing BEGINE CERTIFICATE 6 You may review the detail information of the certificate by clicking View button ...

Page 304: ... ti if fi ic ca at te e a an nd d S Se et t a as s T Tr ru us st te ed d o on n W Wi in nd do ow ws s C CA A S Se er rv ve er r 1 Use web browser connecting to the CA server that you would like to retrieve its CA certificate Click Retrive the CA certificate or certificate recoring list ...

Page 305: ...ed CA Certificate Click IMPORT button and browse the file to import the certificate cer file into Vigor router When finished click refresh and you will find the below illustration 4 You may review the detail information of the certificate by clicking View button Note Before setting certificate configuration please go to System Maintenance Time and Date to reset current time of the router first ...

Page 306: ...ti Intrusion and etc to filter the web pages for protecting your system To access into MyVigor for getting more information please create an account for MyVigor first 5 5 8 8 1 1 C Cr re ea at ti in ng g a an n A Ac cc co ou un nt t v vi ia a V Vi ig go or r R Ro ou ut te er r 1 Click System Maintenance Activation to open the following page 2 Click the Activate link A login page for MyVigor web si...

Page 307: ...s User s Guide 297 4 Check to confirm that you accept the Agreement and click Accept 5 Type your personal information in this page and then click Continue 6 Choose proper selection for your computer and click Continue ...

Page 308: ...TART 8 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 9 Click the Activate my Account link to enable the account that you created The following screen will be shown to verify the register process is finished Please click Login ...

Page 309: ... click Login Your account has been activated You can access into MyVigor server to activate the service e g WCF that you want 5 5 8 8 2 2 C Cr re ea at ti in ng g a an n A Ac cc co ou un nt t v vi ia a M My yV Vi ig go or r W We eb b S Si it te e 1 Access into http myvigor draytek com Find the line of Not registered yet Then click the link Click here to access into next page ...

Page 310: ...s User s Guide 300 2 Check to confirm that you accept the Agreement and click Accept 3 Type your personal information in this page and then click Continue 4 Choose proper selection for your computer and click Continue ...

Page 311: ...TART 6 Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor draytek com 7 Click the Activate my Account link to enable the account that you created The following screen will be shown to verify the register process is finished Please click Login ...

Page 312: ... password that you just created in the fields of UserName and Password Then type the code in the box of Auth Code according to the value displayed on the right side of it Now click Login Your account has been activated You can access into MyVigor server to activate the service e g WCF that you want ...

Page 313: ...cking to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 6 6 1 1 C Ch he ec ck ki in ng g I If f t th he e H Ha ar rd dw wa ar re e S St ta at tu us s I Is s O OK K o or r N No ot t Follow the steps below to verify the hardware status 1 Check the power line and WLAN LAN cable ...

Page 314: ...ter trying the above section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Windows XP As to the examples for other operation systems please refer to the similar steps or find support notes in www DrayTek com 1 Go to Control Panel and then double click on Network Connections 2...

Page 315: ...atically and Obtain DNS server address automatically F Fo or r M Ma ac c O OS S 1 Double click on the current used Mac OS on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop down list of Configure IPv4 ...

Page 316: ...uter correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista The DOS command dialog will appear 3 Type ping 192 168 1 1 and press Enter If the link is OK the line of Reply from 192 168 1 1 bytes 32 time 1ms TTL 255 will appear 4 If the line does not appear please check the IP address sett...

Page 317: ...I If f t th he e I IS SP P S Se et tt ti in ng gs s a ar re e O OK K o or r N No ot t Open WAN Internet Access page and then check whether the ISP settings are set correctly Click Details Page of each WAN interface to review the settings that you configured previously ...

Page 318: ... open DrayTek Syslog Tool to capture the connection information WAN Log and send the page similar to the following graphic to the service center of DrayTek T Tr ra an ns sm mi is ss si io on n R Ra at te e i is s n no ot t f fa as st t e en no ou ug gh h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor3200 In addition please re...

Page 319: ... R Re es se et t While the router is running ACT LED blinking press the Factory Reset button and hold for more than 5 seconds When you see the ACT LED blinks rapidly please release the button Then the router will restart with the default configuration After restore the factory default setting you can configure the settings for the router again to fit your personal request 6 6 7 7 C Co on nt ta ac ...

Search results

Summary of Contents for Vigor3200 Series

Reviews:

Related manuals for Vigor3200 Series

Brands by name

Popular brands

Draytek Vigor3200 Series, User Manual

Search results

Summary of Contents for Vigor3200 Series

Reviews:

Related manuals for Vigor3200 Series

Brands by name

Popular brands