Draytek Vigor3300V+ User Manual Download

Page: 170 / 230

Vig Series User’s Guide

162

For Default Configuration

Click

Default

tab. The following page of default configuration will be shown:

Profile Status

Set the initialization of IPSec Tunnel with this profile settings.

Enable

– Choose this one to invoke this profile manually. In

addition to select Enable, you have to click Initiate under the
page of VPN-IPSec Tunnel-Policy Table.

Always-On

– Choose this one to invoke this profile

automatically by the system for every 30 seconds.

Disable

– Choose this one to inactivate this profile.

Name

The name for VPN connection (ex. “VPN1”). The maximum
length of name is 20 characters including spaces.

Authentication

The authentication to be used by PreShared Key or RSA
Signature.

PreShared Key

The shared key for peer identification. The maximum length is
40 characters, including spaces.

Security Protocol

AH -

Specify the IPSec protocol for the Authentication Header

protocol. The data will be authenticated but not be encrypted.

ESP -

Specify the IPSec protocol for the Encapsulating

Security Payload protocol. The data will be encrypted and

Summary of Contents for Vigor3300V+

Page 1: ......

Page 2: ...Vigor3300V Series User s Guide ii ...

Page 3: ...Vigor3300V Series User s Guide iii Vigor3300 V Multi WAN Security Router User s Guide Version 1 0 Date 19 10 2009 ...

Page 4: ...ions on conservation of the environment Warranty We warrant to the original end user purchaser that the router will be free from any defects in workmanship or materials for a period of two 2 years from the date of purchase from the dealer Please keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the prod...

Page 5: ...and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the u...

Page 6: ...n A Company 32 3 1 5 Example for the Companies in the Same Building 34 3 1 6 Example for A Company and Guest 36 3 1 7 Example for Trunk Usage 38 3 2 Application for VoIP 40 3 2 1 FXS and FXO 40 3 2 2 Practical Application of FXS card with PBX 42 3 2 3 Practical Application of FXO card with PBX 42 3 2 4 ISDN NT and TE 43 3 2 5 Practical Application of ISDN NT with PBX 44 3 2 6 Practical Application...

Page 7: ...le Setup 133 4 3 7 WAN Port Mirroring Setup 134 4 3 8 LAN Port Mirroring Setup 136 4 3 9 LAN VLAN Setup 136 4 3 10 SNMP 139 4 4 Firewall Setup 142 4 4 1 IP Filter 142 4 4 2 DoS 146 4 4 3 URL Filter 148 4 4 4 Bind IP to MAC 153 4 4 5 IM P2P Blocking 154 4 5 Quality of Service Setup 155 4 5 1 Incoming Outgoing Class Setup 156 4 5 2 Incoming Outgoing Class Filter 157 4 6 VPN and Remote Access Setup 1...

Page 8: ...r Not 212 5 2 Checking If the Network Connection Settings on Your Computer Is OK or Not 213 5 3 Pinging the Router from Your Computer 215 5 4 Checking If the ISP Settings are OK or Not 216 5 5 Backing to Factory Default Setting If Necessary 220 5 6 Contacting Your Dealer 220 Appendix Hardware Specifications 222 ...

Page 9: ...at allows you to make telephone calls using a broadband Internet connection instead of a regular analog phone line Combining a PABX with a V3300V allows you to call anyone who has an Internet phone or a traditional telephone number including local long distance mobile and international numbers Internet Telephony offers features and services that are unavailable with a traditional phone at no addit...

Page 10: ...rt ISDN and or VoIP function simply ignore the relational description D De ef fi in ni it ti io on ns s f fo or r I IS SD DN N P Po or rt ts s Below shows the names that displayed on front panel of the device and the WEB UI of this device ISDN TE Terminal Equipment means an interface for transmitting analog signal through Internet between Switching and router Such interface is also named with ISDN...

Page 11: ...established on corresponding port LNK Off No Ethernet link is established On It means that a normal 100 Mbps connection is through its corresponding port 100 Off It means that a normal 10 Mbps connection is through its corresponding port On It means a full duplex connection on corresponding port LAN 1 2 3 4 FDX Off It means a half duplex connection on corresponding port On The Ethernet link is est...

Page 12: ... VoIP port is not connected FXS FXO Blinking It means a phone call is coming and the port is ringing On It means S0 port is connected and S0 mode is ready Off It means TE port is connected and TE mode is ready S0 TE Left LED Blinking No ISDN phone adapter connected On It means ISDN link is established Off It means ISDN link is off S0 TE Right LED Blinking It means the data and voice transmission i...

Page 13: ...for telephone set FXO Connecter for FXS interface of PABX ISDN S0 TE Connecter for ISDN phone ISDN line ISDN ALL TE Connecter for ISDN line Factory Reset button Used to restore the default settings Turn on the router ACT LED is blinking Press the hole and keep for more than 5 seconds When you see the ACT LED begins to blink rapidly than usual release the button Then the router will restart with th...

Page 14: ...thernet cable RJ 45 to one of the LAN ports of Vigor3300 5 Connect the other end of the cable RJ 45 to the Ethernet port on your computer that device also can connect to other computers to form a small area network The LAN LED for that port on the front panel will light up 6 Connect a server modem router depends on your requirement to any WAN port of Vigor3300V with Ethernet cable RJ 45 The WAN1 t...

Page 15: ... dedicated with TE mode the Green LED will flash while data transmission However if it is dedicated with NT mode the Orange LED will light on whenit connect to ISDN phone set And by using ISDN phone adapters coming from the router package the user can connect several phones to the router for communication Refer to the following figure for reference Note When ISDN phone is connected the Orange LED ...

Page 16: ...erface is used for connecting ISDN line Each port is dedicated to TE mode only Therefore you cannot use such interface to connect to any ISDN phone For the connection refer to the following figure for reference Note When data transmission through this interface the Green LED will flash ...

Page 17: ... brackets to the chassis of a 19 or a 23 inch rack The second bracket attaches the other side of the chassis as above procedure After the bracket installation the Vigor3300 Series chassis can be installed in a rack by using four screws for each side of the rack D De es sk kt to op p T Ty yp pe e I In ns st ta al ll la at ti io on n Rubber pads are included with the Vigor3300V Series These rubber p...

Page 18: ...Vigor3300V Series User s Guide 10 ...

Page 19: ...r rd d To change the password for this device you have to access into the web browse with default password first 1 Make sure your computer connects to the router correctly Notice You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192 168 1 1 For the detailed inform...

Page 20: ...e Password 5 Enter the login password 1234 on the field of Old Password Type a new one in the field of New Password and retype it on the field of Confirm Password Then click Apply to continue 6 Now the password has been changed Next time use the new password to access the Web Configurator for this router ...

Page 21: ...uration In the Quick Setup group you can configure the router to access the Internet with different modes such as Static DHCP PPPoE or PPTP modes For most users Internet access is the primary application The router supports the Ethernet WAN interface for Internet access The following sections will explain in more detail the various broadband access configurations All the settings in this section w...

Page 22: ...ng offered for you to choose Fast Ethernet Physical Mode Select connection speed mode for this WAN interface There are auto negotiation full duplex and half duplex of either 10M or 100M speed options for the WAN Interface IP Mode You have to select an appropriate WAN connection type for connecting to the Internet through this router according to the settings that your ISP provided Select an IP mod...

Page 23: ...r setting up the WAN interface click Next to setup the LAN interface continuously IP Address Type an IP address for the LAN interface Subnet Mask Type the subnet mask for the LAN interface Status Click Enable to use DHCP server click Disable to close DHCP server click Relay Agent to activate relay agent function Start IP Type the start IP address of the IP pool that DHCP server can use for clients...

Page 24: ...DHCP Server IP Address Type an IP address for the DHCP server Next click IP Routing tab to set routing path for each WAN interface if required When you finished the above required settings please click Finish A system reboot page will appear Click Apply to activate the static mode configuration ...

Page 25: ... Type the subnet mask for the LAN interface Status Click Enable to use DHCP server click Disable to close DHCP server click Relay Agent to activate relay agent function Start IP Type the start IP address of the IP pool that DHCP server can use for clients in LAN End IP Type the end IP address of the IP pool that DHCP sever can use for clients in LAN Primary DNS Type the IP address for primary DNS ...

Page 26: ...accepted standards PPP and Ethernet It connects users through an Ethernet to the Internet with a common broadband medium such as a single DSL line wireless device or cable modem All the users over the Ethernet can share a common connection PPPoE is used for most of DSL modem users All local users can share one PPPoE connection for accessing the Internet Your service provider will provide you infor...

Page 27: ... ISP service After setting up the PPPoE click Next to setup the LAN interface continuously IP Address Type an IP address for the LAN interface Subnet Mask Type the subnet mask for the LAN interface Status Click Enable to use DHCP server click Disable to close DHCP server click Relay Agent to activate relay agent function Start IP Type the start IP address of the IP pool that DHCP server can use fo...

Page 28: ... gateway IP address for the DHCP server Next click DHCP Relay Agent tab to set DHCP server if required WAN Interface Choose the WAN interface for such connection DHCP Server IP Address Type an IP address for the DHCP server Next click IP Routing tab to set routing path for each WAN interface if required When you finished the above settings please click Finish A system reboot page will appear Click...

Page 29: ...er the PPTP Subnet Mask e g 255 255 255 0 PPTP Local Address e g 10 66 99 88 and PPTP Server Address e g 172 66 99 88 provided by your ISP on the web page PPTP Local Address Assign a local IP address of PPTP PPTP Subnet Mask Assign a net mask value for IP address of PPTP PPTP Server Address Assign a remote IP address of PPTP server After setting up the PPTP click Next to setup the LAN interface co...

Page 30: ... Min Set a lease time for the DHCP server The time unit is minute Gateway IP Optional Set a gateway IP address for the DHCP server Next click DHCP Relay Agent tab to set DHCP server if required WAN Interface Choose the WAN interface for such connection DHCP Server IP Address Type an IP address for the DHCP server Next click IP Routing tab to set routing path for each WAN interface if required When...

Page 31: ...g to deny LAN to LAN communication from Firewall IP Filter Group Table Thus PCs that belong to various LANs will not connect with each other through the router To a company with several departments such feature is useful for it to determine data sharing among different departments 1 Open Firewall IP Filter Group Table to access into the following page Click Index 2 radio button 2 In this page clic...

Page 32: ...k Edit VLAN ID on Your PC Not all the network cards support VLAN features If you cannot sure if the network card of your computer supports tagged VLAN or not please do the following steps to check or edit VLAN ID on your PC 1 Go to Control Panel and then double click on Network Connections ...

Page 33: ...Vigor3300V Series User s Guide 25 2 Right click on Local Area Connection and click on Status 3 On the following dialog click Properties 4 Click Configure to access into next screen ...

Page 34: ...On this dialog box locate VLANs tag and click on it If you cannot find out VLANs tag that means your network card does not support VLAN feature 6 In this screen there is no VALN existed You can create a new one Please click the New button ...

Page 35: ...dialog please type a number in the box of VLAN ID Here 5 is entered The corresponding VLAN Name will appear automatically Next click OK to create it 8 After you click OK the system will configure for the VLAN settings Please wait for several seconds ...

Page 36: ... the configuration is finished the new VLAN settings with ID number and name will appear on previous dialog Desktop Adapter Properties Click OK to exit this dialog 10 Now the Desktop Adapter VLAN dialog will appear as follows Please click OK ...

Page 37: ...Vigor3300V Series User s Guide 29 11 Next time if you want to check VLAN setting again please open Settings tag to modify it ...

Page 38: ... communication 2 Create VLAN5 VLAN6 VLAN7 and VLAN8 Groups 3 In the VLAN5 input 5 to VLAN ID In the Member field choose p1 Then choose the Untagged for Frame Tag Operation in p1 Configure the PVID to 5 for the device does not support 802 1Q VLAN 4 In the VLAN6 input 6 to VLAN ID In the Member field choose p2 Then choose the Untagged for Frame Tag Operation in p2 Configure the PVID to 6 for the dev...

Page 39: ...om 192 168 1 2 to 192 168 1 254 10 In the Network setting type the subnet 192 168 2 0 to LAN2 For example the VLAN6 LAN IP is 192 168 2 1 and the Subnet Mask is 255 255 255 0 Then users in the Engineer Department can set IP address from 192 168 2 2 to 192 168 2 254 11 In the Network setting type the subnet 192 168 3 0 to LAN3 For example the VLAN7 LAN IP is 192 168 3 1 and the Subnet Mask is 255 2...

Page 40: ... du ur re e 1 Refer to A 1 to block LAN to LAN communication 2 Create VLAN5 and VLAN6 Groups 3 In the VLAN5 type 5 to VLAN ID In the Member field choose p1 and p2 Then choose Tagged for Frame Tag Operation in p1 and p2 We can ignore the PVID Port VLAN because 802 1q tag will be inserted to the frame from the PC of Engineer Department 4 In the VLAN6 type 6 to VLAN ID In the Member field choose p3 a...

Page 41: ... with 802 1Q tagged devices only 7 In the Network setting type the subnet 192 168 1 0 to LAN For example the VLAN5 LAN IP is 192 168 1 1 and the Subnet Mask is 255 255 255 0 Then users in the Engineer Department can set IP address from 192 168 1 2 to 192 168 1 254 8 In the Network setting type the subnet 192 168 2 0 to LAN2 For example the VLAN6 LAN IP is 192 168 2 1 and the Subnet Mask is 255 255...

Page 42: ...communication 2 Create VLAN5 VLAN6 VLAN7 and VLAN8 Groups 3 In the VLAN5 type 5 to VLAN ID In the Member field choose p1 Then choose the Tagged for Frame Tag Operation in p1 We can ignore the PVID Port VLAN ID because 802 1q tag will be inserted to the frame from the PC of company A 4 In the VLAN6 type 6 to VLAN ID In the Member field choose p2 Then choose the Tagged for Frame Tag Operation in p2 ...

Page 43: ... be inserted to the frame from company D 7 After applying the settings the web page will be redirect to reboot web page User can ignore it and continue to configure the Network setting After finishing Network setting you can execute the reboot procedure 8 After rebooting the tagged ports will communicate with 802 1Q tagged devices only 9 The network configuration is the same with A 2 1 Please refe...

Page 44: ... to LAN communication 2 Create VLAN5 VLAN6 VLAN7 and VLAN8 Groups 3 In the VLAN5 type 5 to VLAN ID In the Member field choose p1 Then choose the Tagged for Frame Tag Operation in p1 We can ignore the PVID Port VLAN ID because 802 1q tag will be inserted to the frame from the PC of Engineer Department 4 In the VLAN6 type 6 to VLAN ID In the Member field choose p2 Then choose the Tagged for Frame Ta...

Page 45: ... does not support 802 1Q VLAN 7 After applying the settings the web page will be redirected to reboot web page User can ignore it and continue to configure the Network setting After finishing Network setting you can execute the reboot procedure 8 After rebooting the tagged ports will communicate with 802 1Q tagged devices only 9 The network configuration is the same with A 2 1 Please refer to A 2 ...

Page 46: ... of VLAN8 is 192 168 4 0 P Pr ro oc ce ed du ur re e 1 Refer to A 1 to block LAN to LAN communication 2 Create VLAN5 VLAN6 VLAN7 and VLAN8 Groups 3 In the VLAN5 input 5 to VLAN ID In the Member field choose p1 p2 p3 and p4 Then choose the Tagged for Frame Tag Operation in p1 p2 p3 and p4 We can ignore the PVID Port VLAN ID because 802 1q tag will be inserted to the frame from the switch 4 In the V...

Page 47: ...can ignore the PVID Port VLAN ID because 802 1q tag will be inserted to the frame from some users 7 After applying the settings the web page will be redirected to reboot web page User can ignore it and continue to configure the Network setting After finishing Network setting you can execute the reboot procedure 8 After rebooting the tagged ports will communicate with 802 1Q tagged devices only 9 T...

Page 48: ...ions according to the requirements 3 2 1 FXS and FXO FXS Foreign eXchange Station and FXO Foreign eXchange Office are assembled with a pair A telecommunications line from an FXO device must be connected to an FXS device Similarly an FXS device must be connected to an FXO device For example PSTN is FXS equipment and a telephone is FXO equipment As for the Private Branch Exchange PBX it is more spec...

Page 49: ...racteristics described above that the FXS equipment and the FXO equipment must connect with each other please pay special attention when you use FXS card and FXO card FXS card This card can connect to the telephone FAX machine outside lines of PBX and FXO port on FXO card FXO card This card can connect to PSTN inside lines of PBX and FXS port on FXS cards ...

Page 50: ...ation please refer to VoIP and ISDN examples 3 2 3 Practical Application of FXO card with PBX By combining the FXO with headquarters PBX it allows the branch s telephones to connect to Headquarters PBX via the Internet and communicate with the customers via the PBX Another application is that you can call back to the Headquarters from outside and communicate with the branch via the Internet For de...

Page 51: ...ange PBX it is more special because it has both ISDN NT and ISDN TE devices at the same time Outside lines of the PBX are usually connected to the ISDN line at this case the PBX acts as ISDN TE equipment inside lines of the PBX are usually connected to telephones so the PBX acts as ISDN NT equipment Based on the characteristics described above that the ISDN NT equipment and the ISDN TE equipment m...

Page 52: ...ation please refer to VoIP and ISDN examples 3 2 6 Practical Application of ISDN TE with PBX By combining the ISDN TE with headquarters PBX it allows the branch s telephones to connect to Headquarters PBX via the Internet and communicate with the customers via the PBX Another application is that you can call back to the Headquarters from outside and communicate with the branch via the Internet For...

Page 53: ...first Please refer to the figure below as an example of Vigor 3300V Protocol SIP Accounts Router provides default configuration for SIP accounts You can click any one of the radio buttons and click Edit to modify the SIP account for your necessity Port Settings This page displays the basic settings for each port Click the Edit icon in the Phone Number page to enter the Edit page Then you can confi...

Page 54: ...Vigor3300V Series User s Guide 46 OR Port Settings Port Edit Configure related VoIP settings for each port respectively ...

Page 55: ...ial Setup the Speed Dial Phone numbers this function is more convenient to dial extension number or IP address There are 150 entries available at most Dial Plan It can simplify the dial process There are 60 dial plan entries available at most ...

Page 56: ...0V Series User s Guide 48 Miscellaneous Other related VoIP settings Tone Settings There are optional built in 15 groups of tone for different regions and a group of tone User Defined can be configured by users ...

Page 57: ...vate IP address the VoIP traffics must pass through the upper layer NAT router User can enable STUN function in order to make VoIP function can work smoothly Note The upper layer router must forward the UDP packets with port number 5060 for SIP protocol 13456 13486 for RTP and 49170 49200 for T 38 to the WAN IP address of Vigor3300V Users can define the port number s for their necessity ...

Page 58: ... This function can receive or reject the specific VoIP calling via Internet The rules are based on the speed dial number or IP Domain Call History It can display 50 groups of calling information Status Display current VoIP registering status and calling status ...

Page 59: ...tion of FXS Example 6 Practical Application of FXO Example 7 Practical Application of ISDN NT Example 8 Practical Application of ISDN TE 3 3 1 Example 1 Basic Configuration and Registration In this case Vigor3300V uses a FXS card and a FXO card with four groups of iptel numbers and fwd numbers respectively The Codec is G 729A WAN IP address is 220 135 240 207 2910V has two VoIP Ports with an iptel...

Page 60: ...e related settings on SIP Configuration 2 Set SIP accounts e g username and proxy server by referring to the table Basic settings in Vigor 3300V and 2910V on last page 3 Enter VoIP Port Settings page click the Edit icon of port 1 4 Enter the Port 1 page This page falls into six sections Port1 FXS Display the port type enable or disable the port choose the SIP account and etc ...

Page 61: ...or use G 729A 8kbps 6 Check the VoIP Status Please enter the VoIP Status SIP Status page first and wait one or two minutes The time depends on SIP Server s response speed and the network condition OK means the registration is successful Failed means the registration is failed Next please enter VoIP Status Port Status This page will display calling information from Port 1 Port 8 Idle means there is...

Page 62: ...d in Refresh Option You may click Refresh button to renew immediately C Co on nf fi ig gu ur ra at ti io on n E Ex xa am mp pl le e f fo or r V Vi ig go or r2 29 91 10 0V V 1 Open the Web interface of the router and open VoIP menu Click SIP Account Configure Port1 and Port2 by clicking Index number 1 and 2 ...

Page 63: ...he settings 2910 series will go to VoIP SIP Account page automatically 1 Open VoIP Status 2 Wait one or two minutes The time depends on SIP Server s response speed and the network condition Channel R means Port 1 and Port 2 register successfully Status IDLE means there is no conversations on Port 1 Port 8 Now the configuration is completed ...

Page 64: ... Phone Number Proxy Codec Port1 ISDN NT 888833 iptel G 729A Port2 ISDN NT 888834 iptel G 729A Port3 ISDN NT 660533 fwd G 729A Port4 ISDN NT 660534 fwd G 729A Port5 ISDN TE 888835 iptel G 729A Port6 ISDN TE 888836 iptel G 729A Port7 ISDN TE 660525 fwd G 729A 3300V 220 135 240 207 Port8 ISDN TE 660526 fwd G 729A Port1 ISDN NT 888829 iptel G 729A 2910V 61 31 167 135 Port2 ISDN NT 660529 fwd G 729A Pr...

Page 65: ...the Edit icon of port 1 4 Enter the Port 1 page This page falls into six sections Port1 ISDN NT Display the port type enable or disable the port choose the SIP account and etc 5 Set Port 2 Port 8 one by one in turn Type Port 1 Port 4 are ISDN NT Port 5 Port 8 are ISDN TE Active Port 1 Port 8 are all active v Enable SIP Account Accounts of Port 1 Port 8 Codec Port 1 Port 8 all prior use G 729A 8kbp...

Page 66: ...etwork condition OK means the registration is successful Failed means the registration is failed Next please enter VoIP Status Port Status This page will display calling information from Port 1 Port 8 Idle means there is no conversations on Port 1 Port 8 Note This page will automatically refresh based on the setting configured in Refresh Option You may click Refresh button to renew immediately ...

Page 67: ... Ex xa am mp pl le e f fo or r V Vi ig go or r2 29 91 10 0V V s se er ri ie es s 1 Open the Web interface of the router and open VoIP menu Click SIP Account Configure Port1 and Port2 by clicking Index number 1 and 2 Type relevant SIP Servers used for registration respectively ...

Page 68: ...o to VoIP SIP Account page automatically 2 Open VoIP Status 3 Wait one or two minutes The time depends on SIP Server s response speed and the network condition Channel R means Port 1 and Port 2 register successfully Status IDLE means there is no conversations on Port 1 Port 8 Now the configuration is completed ...

Page 69: ...ed on the VoIP Example 1 Basic Configuration and Registration D Di ir re ec ct t I IP P C Ca al ll l C Ca al ll l w wi it th h e ea ac ch h o ot th he er r w wi it th ho ou ut t r re eg gi is st tr ra at ti io on n Connect a telephone into 3300V s Port 1 and 2910V s Port 1 respectively They can call with each other directly with IP addresses if only 3300V and 2910V both have public IP addresses an...

Page 70: ... you dial the IP address the call will be sent to the SIP Proxy Server still Besides if the SIP Proxy Server doesn t forward the call to remote VoIP user s WAN IP you can t do this action C Co on nf fi ig gu ur ra at ti io on n E Ex xa am mp pl le e f fo or r V Vi ig go or r3 33 30 00 0V V Enter VoIP Speed Dial page configure relevant settings for 2910V s Port1 Speed Dial Phone Number type 2901 Sp...

Page 71: ...e of the router and open VoIP menu 2 Open VoIP DialPlan and click Phone Book 3 Click Index 1 4 Enter relevant settings for 3300V s Port 1 Click OK to save the settings Enable click to activate the entry Phone Number type 3301 Display Name To facilitate ease differentiation please type 3300V_Port1_IP SIP URL Callee s Number IP please type 888833 220 135 240 207 ...

Page 72: ...nation of the phone number After pressing VoIP is immediately called out Or you may wait 3 seconds if you do not press With 2910V you can t only dial alphanumeric addresses or symbols To dial an IP address start and end it with a hash replace the dots with star In this example you have to press 220 135 240 207 But 3300V can only receive the format of Number IP So it is required to setup 3300V s nu...

Page 73: ...tively Each port needs to register in the SIP Server Below shows a scenario architecture graph Configurations between Vigor 3300V and 2910V WAN IP Port Number Phone Number Proxy Codec Port1 FXS 888833 iptel G 729A 3300V 220 135 240 207 Port3 FXS 660533 fwd G 729A Port1 FXS 888829 iptel G 729A 2910V 61 31 167 135 Port2 FXS 660529 fwd G 729A You can also add Speed Dial numbers in Speed Dial to speed...

Page 74: ...Speed Dial number Then click Apply to save the settings and finish the configuration Start to dial by using telephones Phone 1 call Phone 3 Press 888829 or 291 Phone 2 call Phone 4 Press 660529 or 292 Phone 3 call Phone 1 Press 888833 Phone 4 call Phone 2 Press 660533 Note indicates termination of the phone number After pressing VoIP is immediately called out Or you may wait 3 seconds if you do no...

Page 75: ...3300 Enter the VoIP Speed Dial page and add the 4th and 5th group of Speed Dial number Then press Apply to save the settings and finish the configuration C Co on nf fi ig gu ur ra at ti io on n E Ex xa am mp pl le e f fo or r V Vi ig go or r2 29 91 10 0V V Open VoIP DialPlan and click Phone Book Then add the second and third group of Speed Dial number Start to dial by using telephone Phone 1 call ...

Page 76: ... bridge accepting incoming VPN connections from the other two routers Vigor2910V and Vigor2200V The VPN traffic between Vigor2910V and Vigor2200V are all passed through Vigor3300V These three sites internal networks must be within the same subnet 192 168 X X Either site can ping the other two routers Then you can make a VoIP call through the encrypted VPN tunnel by directly dialing remote router s...

Page 77: ...300V 220 135 240 207 Port1 FXS 888833 G 729A 2910V 61 31 167 135 Port1 FXS 888829 G 729A 2200V 61 230 207 146 Port1 FXS 888822 G 729A About the VPN configurations please refer to VPN Example 3 three part communication About VoIP basic configuration please refer to VoIP Example 1 Basic Configuration and Registration The following examples are modified which based on these two examples C Co on nf fi...

Page 78: ...ide 70 Or open VoIP SIP Accounts and click radio button 1 Click Edit Set LAN VPN as VoIP IP Address 2 Enter the VoIP Speed Dial page and input the first and second group of Speed Dial Phone Number Click Apply to save the settings ...

Page 79: ... n E Ex xa am mp pl le e f fo or r V Vi ig go or r2 29 91 10 0V V s se er ri ie es s 1 Open the Web interface of the router and open VoIP menu Click SIP Account Configure Port1 and Port2 by clicking Index number 1 and 2 Note Do not set Stun Server when calling through VPN ...

Page 80: ... respectively Set LAN VPN as Register via for Port1 and Port2 After configuration please click OK to save the settings Vigor2910 series will go to VoIP SIP Account page automatically 2 Open VoIP DialPlan and click Phone Book Add the first and second group of Speed Dial Phone Number ...

Page 81: ...elated function of 2200V 2 Setup Port 1 This page falls into two sections SIP Set up the SIP Server used for registration Ports Set up the account details After configuration please click OK to save the settings Note Do not set up the Proxy and Stun Server when calling through VPN While in 2200V firmware v2 5 5 4 the Proxy will be active if Use Registrar is enabled So make sure not click Use Regis...

Page 82: ...AN Usage Example 2 Start to dial by using telephones Phone 1 call Phone 2 Press 2901 or 888829 192 168 29 1 Phone 1 call Phone 3 Press 2201 or 888822 192 168 22 1 Phone 2 call Phone 1 Press 3301 Phone 2 call Phone 3 Press 2201 or 192 168 22 1 Phone 3 call Phone 1 Press 3301 Phone 3 call Phone 2 Press 2901 or 192 168 29 1 Note indicates termination of the phone number After pressing VoIP is immedia...

Page 83: ...same as that of PSTN line Different PBX has its own settings and required configuration by you Below shows a scenario architecture graph Configuration table between 3300V and 2910V WAN IP Port Number Phone Number Proxy Codec 3300V 220 135 240 207 Port1 FXS 888833 iptel G 729A 2910V 61 31 167 135 Port1 FXS 888829 iptel G 729A Suppose there are two PSTN lines connected to PBX s Outside Lines The thi...

Page 84: ...on of the phone number After pressing VoIP is immediately called out Or you may wait 3 seconds if you do not press This example is the intercommunication with one SIP Proxy Server For the applications of Direct IP Call and Intercommunication with different SIP Proxy Servers please refer to 3 3 3 Example 3 Basic Calling Method The VoIP call can also wok with VPN please refer to 3 3 4 Example 4 VoIP...

Page 85: ...910V WAN IP Port Number Phone Number Proxy Codec Port1 FXS 888833 iptel G 729A 3300V 220 135 240 207 Port5 FXO 888835 iptel G 729A 2100V 61 31 167 135 Port1 FXS 888829 iptel G 729A The number of the PSTN line connected into the FXO Port 5 on the 3300V is 12345678 The number of another PSTN line is 87654321 About VoIP basic settings please refer to VoIP Example 1 Basic configuration and registratio...

Page 86: ...you may wait 3 seconds if you do not press z Connect PBX s Inside Lines The usage is the same as that of common extension Different PBX has its own settings and required configuration by you By connecting 3300V s FXO Port5 to PBX s Inside Line VoIP is seamlessly integrated to PBX s inside lines and allows you to call not only the VoIP but also the PSTN line and PBX s extension Also the remote user...

Page 87: ...l tone then press the extension 101 Phone 2 calls Phone 4 Press 888835 After getting through you will hear the Dial tone Press outside line 0 then press 87654321 Phone 3 calls Phone 1 Press 888835 After getting through you will hear the Dial tone then press the extension 101 Phone 3 call Phone 4 Press 888835 After getting through you will hear the Dial tone Press outside line 0 then press 87654321...

Page 88: ...same as that of ISDN line Different PBX has its own settings and required configuration by you Below shows a scenario architecture graph Configuration table between 3300V and 2910V WAN IP Port Number Phone Number Proxy Codec 3300V 220 135 240 207 Port1 ISDN NT 888833 iptel G 729A 2910V 61 31 167 135 Port1 ISDN NT 888829 iptel G 729A Suppose there are two ISDN lines connected to PBX s Outside Lines...

Page 89: ...ion of the phone number After pressing VoIP is immediately called out Or you may wait 3 seconds if you do not press This example is the intercommunication with one SIP Proxy Server For the applications of Direct IP Call and Intercommunication with different SIP Proxy Servers please refer to 3 3 3 Example 3 Basic Calling Method The VoIP call can also wok with VPN please refer to 3 3 4 Example 4 VoI...

Page 90: ...V WAN IP Port Number Phone Number Proxy Codec Port1 ISDN NT 888833 iptel G 729A 3300V 220 135 240 207 Port5 ISDN TE 888835 iptel G 729A 2910V 61 31 167 135 Port1 ISDN NT 888829 iptel G 729A The number of the PSTN line connected into the ISDN TE Port 5 on the 3300V is 12345678 The number of another ISDN line is 87654321 About VoIP basic settings please refer to VoIP Example 2 Basic configuration an...

Page 91: ...u may wait 3 seconds if you do not press z Connect PBX s Inside Lines The usage is the same as that of common extension Different PBX has its own settings and required configuration by you By connecting 3300V s ISDN TE Port5 to PBX s Inside Line VoIP is seamlessly integrated to PBX s inside lines and allows you to call not only the VoIP but also the ISDN line and PBX s extension Also the remote us...

Page 92: ...ear the Dial tone then press the extension 101 Phone 2 calls Phone 4 Press 888835 After getting through you will hear the Dial tone Press outside line 0 then press 87654321 Phone 3 calls Phone 1 Press 888835 After getting through you will hear the Dial tone then press the extension 101 Phone 3 call Phone 4 Press 888835 After getting through you will hear the Dial tone Press outside line 0 then pre...

Page 93: ...tem setup there are several items provided for you to configure Status Time Setup Syslog Setup Access Control Setup Reboot and Firmware Upgrade Setup Diagnostic Tools and Configuration Setup Below shows the menu items for System 4 1 1 Status The online Status function provides some useful system information on the current status of the Vigor3300V Series A user can observe the system status on this...

Page 94: ...del name of the router Hardware Version Display the hardware version of the router Firmware Version Display the firmware version of the router Build Date Time Display the date and time of the current firmware build System Uptime Display the amount of time that the router has been online CPU Usage Display the average percentage of the CPU used Memory Size Display the size of the memory of this rout...

Page 95: ...hen it is enabled in Network High Availability When there are two Vigor3300 devices in the same LAN one can be set as Master device and the other can be set as Slave device Master It means that Vigor3300 plays the Master role in high availability feature Slave It means that Vigor3300 plays the Slave role in high availability feature If there is only one Vigor3300 used in LAN this line will be blan...

Page 96: ...ddress of the WAN interface MAC Address Display the MAC address of the WAN Interface Primary DNS Display the IP address of the primary DNS Secondary DNS Display the IP address of the secondary DNS Gateway Display the IP address of the default gateway RX Packets Display the total received packets for each WAN interface TX Packets Display the total transmitted packets for each WAN interface Connecti...

Page 97: ... the remote PC host of the administrator In the System group click the Time option The Time page is shown below Use Browser Time Click this option to use the browser time from the remote administrator PC host as router s system time Use NTP Time Click this option to use the time from an NTP server as router s system time NTP Server Type a public IP address or domain name of the NTP time server Tim...

Page 98: ...ll log VPN Log Check this box to record the VPN application log User Access Log Check this box to record the user access log Such information will be seen in Syslog server Call Log Check this box to record the VoIP ISDN phone log WAN Log Check this box to record the connection status log for WAN interface Syslog Facility When Vigor3300V runs VoIP program for dialing VoIP phone calls information ab...

Page 99: ...mational Notice Warning Error Critical Alert and Emergency And if you choose Critical the situation of Critical Alert and Emergency will be recorded That is Debug owns the lowest severity and Emergency owns the highest severity Apply Click Apply to save these settings Note VoIP Syslog option is useful for the trouble s happened while using VoIP feature of Vigor router It is optional and will be as...

Page 100: ...hree IPs subnet masks is allowed Disable Disable the management from the WAN interface Enable All Enable all management through HTTP Telnet SSH from the WAN interface Enable User Defined WAN IP System can be managed by these three IP addresses via WAN Allowed IP1 IP3 The former box indicates an IP address allowed to login to the router and the later box indicates a subnet mask allowed to login to ...

Page 101: ...e restore and upload functions of the configuration files Open System Configuration You can see the following page Select a Configuration File Please click the Browse button to find out the location of the configuration file to be uploaded to the router and click Apply Backup Configuration File Push Backup Button Download the configuration file to a local host The default file name is v3300 cfg ...

Page 102: ...irmware locally TFTP Server IP If you want to upgrade the firmware of this router from remote side please type the IP address of the TFTP server Remote File Name The default filename will be shown here If you have use another name to save the firmware file please type the new name in this field Apply After finished your selection please click Apply to execute the firmware upgrade F Fi ir rm mw wa ...

Page 103: ...al on the PC Now Vigor3300V can accept a TFTP download and will display the following message DrayTek V3300 Bootloader Press ENTER key within 5 sec to download image 2 Current LAN IP is 192 168 1 1 New IP Prepare downloading 5 Type the path name of the firmware image and activate the TFTP Client from the PC to download the image The corresponding message is shown as follows TFTP i 192 168 1 1 PUT ...

Page 104: ... at bfXXXXXX appears it means the firmware is under downloading 7 When set flash0_0 780000 800000 general appears it means the firmware downloading has been completed The router will reboot itself and you will see the Firmware version V2 X X Please wait about 20 seconds to relogin the router The procedure is finished now ...

Page 105: ... configured settings that you made before Besides you can select Reset to factory default to reboot the device and retrieve the default settings Click System Reboot If you want to reboot the router using the current configuration click Apply To reset the router settings to default values check Reset to factory default and click Apply Click Apply to reboot the whole system The rebooting procedure u...

Page 106: ...r for the user to review such information In the System group click the Diagnostic Tools option z Select View Routing Table to get the following page Destination Display the destination IP address for various routings Gateway Display the default gateway Subnet Mask Display the subnet mask for various routings Flags Display the status of the routing entries Interface Denoted by eth0 if it is a LAN ...

Page 107: ... display this web page for getting newest ARP information z Select View DHCP Assignment Table to get the following page Assigned IP Display the IP address of the static DHCP server MAC Address Display the MAC address of the static DHCP server Time Left Display the remaining time for this IP address assigned by DHCP server When the time expired such IP address would not be kept for this client and ...

Page 108: ...port of the packet transmitted Rep Source IP Display the source IP address of the packet replied Rep Dest IP Display the destination IP address of the packet replied sPort Display the source port of the packet replied dPort Display the destination port of the packet replied z Select Data Flow Monitor to get the following page This page displays the running procedure for the IP address monitored an...

Page 109: ...e IP addresses and are listed in the following ranges From 10 0 0 0 to 10 255 255 255 From 172 16 0 0 to 172 31 255 255 From 192 168 0 0 to 192 168 255 255 W Wh ha at t a ar re e P Pu ub bl li ic c I IP P A Ad dd dr re es ss s a an nd d P Pr ri iv va at te e I IP P A Ad dd dr re es ss s As the router plays a role to manage and further protect its LAN it interconnects groups of host PCs Each of the...

Page 110: ...uto Weight option becomes available if Enable mode is selected Load Balance allows the router distributing data in and out of the Internet by using different WAN interfaces at the same time Backup Enables or disables backup function for WAN interfaces If you enable this function the backup master backup slave will execute the job of master slave device when the master slave device fails to work Ed...

Page 111: ...ce The default value is 102400 kbps 100 Megabit Upstream Rate Set transmission rate for this WAN interface The default value is 102400 kbps 100 Megabit Type Set connection type for this WAN interface Physical Mode Set connection speed mode There are five options including Auto negotiation full duplex half duplex 10M and 100M IP Mode Set an IP Mode with Static fixed IP DHCP dynamic IP address PPPoE...

Page 112: ...Mean maximum transmission unit of one packet The default value is 1500 Host Name Some ISP may ask you to type your host name Please type in if necessary Domain Name Some ISP may ask you to type your domain name Please type in if necessary Detect Type Select a detecting type for this WAN interface There are three ways Send ARP to Gateway Send PING and Send HTTP Request supported in 3300 Detect Inte...

Page 113: ... Apply to go back to the WAN Interface Configuration page To apply all settings click Apply on the WAN Interface Configuration page and reboot your router Reset Click this button to clear all the configurations for this page D DH HC CP P C Cl li ie en nt t S Se et tu up p If the WAN interface is set as a DHCP client the Vigor3300 Series will ask for IP network settings from the DHCP server or DSL ...

Page 114: ...o back to the WAN Interface Configuration page To apply all settings click Apply on the WAN Interface Configuration page and reboot your router Reset Click this button to clear all the configurations for this page P PP PP Po oE E w wi it th h a a D DS SL L M Mo od de em m S Se et tu up p Most DSL modem users will use this mode All the local users can share one PPPoE connection to access the Intern...

Page 115: ... and type in a fixed IP address in the box of Fixed IP Address Detect Interval Assign an interval time for detecting if the WAN connection is on or off No Reply Count Assign detecting times to ensure the connection of the WAN After passing the times you set in this field and no reply received by the router the connection of WAN interface will be regarded as breaking down Apply Click Apply to go ba...

Page 116: ...r networks a DMZ De Militarized Zone is a computer host or small network inserted as a neutral zone between a company s private network and the outside public network It prevents outside users from getting direct access to company network A DMZ is an optional and more secure approach to a firewall and effectively acts as a proxy server as well In a typical DMZ configuration for a small company a s...

Page 117: ...AN Interface Configuration page To apply all settings click Apply on the WAN Interface Configuration page and reboot your router Reset Click this button to clear all the configurations for this page 4 2 2 Load Balance Policy Vigor3300V supports a load balancing function It can assign traffic with protocol type IP address for specific host a subnet of hosts and port range to be allocated in WAN int...

Page 118: ...rt End Display the end point specified in the Dest Port Range for this entry Network Interface Display the interface specified for this entry Strict Bind Display the status of Strict Bind Edit Click this button to open the edit page for adjusting the settings Delete Delete All Click this button to delete the selected setting or all settings A confirmation dialog box will appear Click OK to delete ...

Page 119: ...net of certain host in LAN for applying load balance policy Dest Port Range Assign a destination port number range The port range is from 1 to 65535 If you choose All as the protocol you don t need to type any number here Network Interface Select an interface WAN1 to WAN4 to be forwarded to Strict Bind Packets fitting the above settings can be routed through the selected interface only Check this ...

Page 120: ... company Other Traffic Regions that are not belonged to China Telecom and China CNC Apply Click Apply to save all configurations 4 2 4 LAN Local Area Network LAN is a group of subnets regulated and ruled by router The design of network structure is related to what type of public IP addresses coming from your ISP The most generic function of Vigor router is NAT It creates a private subnet of your o...

Page 121: ...lick Relay Agent to close DHCP sever and do the job of DHCP server Corresponding settings for Relay Agent can be configured in the page of DHCP Relay Agent Start IP Set the starting IP address of the IP address pool for DHCP server End IP Set the ending IP address of the IP address pool for DHCP server Primary DNS Set the private IP address of the primary DNS Secondary DNS Set the private IP addre...

Page 122: ...DHCP Server IP Address Type the IP address for the DHCP server F Fo or r I IP P R Ro ou ut ti in ng g This page allows users to type in secondary IP address for connecting to a subnet You can set IP routing for each WAN interface respectively Status Click Enable or Disable to activate or close the IP routing of specific WAN interface IP Address Type an IP address for the WAN interface WAN1 WAN2 WA...

Page 123: ...available despite failures The high availability of the V3300 Series is designed to avoid single points of failure When failures occur the failover process moves processing performed by the failed component the Master to the backup component the Slave This process remains system wide resources recovers partial of failed transactions and restores the system to normal within a matter of microseconds...

Page 124: ... an IP address as a virtual IP Click Apply to reboot the system and apply the settings 8 80 02 2 1 1Q Q S St ta at tu us s This page allows you to set High Availability for LAN ports 1 4 respectively High Availability Disables or enables this function When the master device fails down the slave device will take its work over Group Number Assign a group number The range is from 1 to 255 PCs on the ...

Page 125: ...ting table RIP can update the routing table automatically and find a route to send packet See the following figure as an example Suppose Vigor3300V A supports RIP on WAN1 WAN2 WAN3 WAN4 Vigor3300V B supports RIP on WAN1 and WAN2 and Vigor3300V C supports RIP on WAN1 WAN2 WAN3 WAN4 Vigor3300V B will tell 3300V A if you want to send packets to Vigor3300V C please send it to me first then Vigor3300V ...

Page 126: ...bles or enables this function Default TX Limit Define the default speed of the upstream for each computer in LAN The default value is 1024 Default RX limit Define the default speed of the downstream for each computer in LAN The default value is 1024 Apply After finishing the configuration please click this button to invoke these settings L Li im mi it ta at ti io on n T Ta ab bl le e This function...

Page 127: ...A confirmation dialog box will appear Click OK to delete this entry from the Load Balance Policy table In addition click Delete All in the Load Balance Policy page to delete all of 10 entries on this page To edit an entry select it by clicking the radio button from 1 to 10 Then click the Edit button on the bottom to bring up the following Web page Start IP End IP Assign the IP range for the bandwi...

Page 128: ...over resources which might result in important accesses impacted To solve the problem you can use limit session to limit the session procession for specified Hosts G Ge en ne er ra al l S Se et tu up p This function allows users to configure general settings for limit session Click Network Limit Session and then choose General Setup You will get the following page Enable Disable Disables or enable...

Page 129: ...alance Policy page to delete all of 10 entries on this page To edit an entry select it by clicking the radio button from 1 to 10 Then click the Edit button on the bottom to bring up the following Web page Start IP Assign the start IP address for limit session End IP Assign the end IP address for limit session Session Number Assign the available session number for each host in the specific range of...

Page 130: ...ard data from one specified subnet to another specified subnet without the presence of RIP This function allows users to assign static routing information In the Advanced group choose Static Route You will get the following page Network Interface Display the network interface LAN WAN1 2 3 or 4 Destination IP Display the destination IP of the static route Gateway IP Display the gateway address of t...

Page 131: ...tination will be sent out through the network interface chosen in this page Subnet Mask Assign a value of subnet mask for destination IP address Click Apply to reboot the system and apply the settings D De el le et te e t th he e S St ta at ti ic c R Ro ou ut te e Select the radio button of the item that you want to delete and click Delete on the bottom of the page The following web page will be d...

Page 132: ... It may be used to expose internal servers to the public domain or open a specific port to internal hosts Internet hosts can use the WAN IP address to access internal network services such as FTP WWW and etc The internal FTP server is running on the local host addressed as 192 168 1 2 When other users send this type of request to your network through the Internet the router will direct these reque...

Page 133: ...o add a new rule entry or modify an existed rule entry Profile Status Enable or disable this function Comment Assign a name for this entry The maximum is 20 characters Protocol Assign the transport layer protocol with TCP or UDP Public Port Range Assign a port range from starting to end public port number The port range is from 1 to 65535 Private IP Assign a local IP address to be transferred into...

Page 134: ...lick Delete All to remove all entries A Ad dd dr re es ss s M Ma ap pp pi in ng g If you have a group of static IP addresses then you can use the address mapping feature to multiple open ports hosts in the Vigor3300 Series of broadband security routers The following session will show you how to setup address mapping feature In the Advanced group move to NAT option and choose Address Mapping to get...

Page 135: ...move all entries D DM MZ Z H Ho os st t In computer networks a DMZ De Militarized Zone is a computer host or small network inserted as a neutral zone between a company s private network and the outside public network It prevents outside users from getting direct access to company network A DMZ is an optional and more secure approach to a firewall and effectively acts as a proxy server as well In a...

Page 136: ... want to modify Then click Edit on the bottom of the page to add a new rule entry or modify an existed rule entry WAN Interface Select a WAN interface as the channel for DMZ host Private IP Assign an IP address of DMZ server to be permitted for access from outside Use IP Alias Disable option uses WAN interface Enable option uses IP Alias addresses IP Alias Select an IP address which are set within...

Page 137: ...cess authentication for network management Radius is a server for remote user authentication and accounting Its primary use is for Internet Service Providers though it may as well be used on any network that needs a centralized authentication and or accounting service A Radius supports a wide variety of authentication schemes A user supplies his authentication data to the server either directly by...

Page 138: ...opped if destination ports both TCP and UCP of packets with these assigned port numbers are on WAN and LAN The advantage of this feature is to filter some unnecessary packets or attacking packets on Internet environment or LAN network Vigor3300 Series supports ten port numbers to be blocked Click Advanced Port Block You will get the following page Index The number of each entry Status User can Dis...

Page 139: ...n name set for the entry Service Provider Display the service provider that supports DDNS Service Type Display the service type for the entry Active Display the activation status disable or enable for this entry Status Display the connection status of this entry Click Refresh to re display the whole page information To modify DDNS setting click an entry number to get into edit mode Status Click Di...

Page 140: ... Enable to active this function Backup MX MX stands for Mail Exchanger Mail Exchangers are used for directing mail to specific servers other than the one a hostname points at Mail Extender Assign an email address Click Apply to finish these settings and return to previous page Note 1 The Wildcard and Backup MX features are not supported for all Dynamic DNS providers You could get more detailed inf...

Page 141: ...isable for this entry Date Time Display the start date and time for this schedule Action Display the action that this schedule adopts How often Display the using frequency once or specific day in a week of this schedule Week Option Display the specific day in a week if you choose Weekdays as the How often setting WAN Display the WAN interface used for this entry Edit Allow users to edit the select...

Page 142: ...te an item click the radio button of the item that you want to delete Then click Delete on the bottom of the page to remove the entry Also users can click Delete All to remove all entries in the table 4 3 7 WAN Port Mirroring Setup Vigor3300V supports port mirroring function in WAN interfaces Generally speaking this function copies traffic from one or more specific ports to a target port This mech...

Page 143: ...re convenient and easy to configure in user s interface Click Advanced WAN Port Mirroring You will see the following page Enable Disable Click Disable to disable this function Click Enable to activate this function Mirroring Port Select a port to view traffic sent from mirrored ports Mirrored Port s Click which ports are necessary to be mirrored After finishing the settings please click Apply ...

Page 144: ...in the enterprise a company might create one VLAN for multimedia users and another for e mail users or a company might have one VLAN for its Engineering Department another for its Marketing Department and another for its guest who can only use Internet not Intranet VLANs can also be set up according to the organization structure within a company For example the company president might have his own...

Page 145: ...e only if you check the box For example if you check the boxes of VLAN0 P1 and VLAN1 P1 you can make P1 to be grouped under VLAN0 and VLAN1 simultaneously VLAN 0 3 This router allows you to set 4 groups of virtual LAN Apply After finishing the settings please click Apply Reset In addition you can click Reset to reset the VLAN setting as default A dialog will be prompted for you to ask confirmation...

Page 146: ...ype a number used for identification on VLAN for your computer Later you have to type the same ID number for each PC which wants to be grouped within the same VLAN group In addition if you type wrong ID number the following message will appear to warn you Please type correct number By the way if you don t know how to configure a VLAN setting on your computer please refer to How to Check Edit VLAN ...

Page 147: ...tification on VLAN When the tag operation for each port representing for different computers connected to this router is marked by untagged to avoid conflict occurred the system will apply the ID listed in these boxes automatically for each port P1 to P4 to ensure proper and correct network operation 4 3 10 SNMP The Simple Network Management Protocol SNMP is an application layer protocol that faci...

Page 148: ... authority read only or read write for this entry Edit Allow users to edit the selected SNMP community settings Delete Delete All Remove one all the selected SNMP community settings A dialog will be prompted for you to ask confirmation Click OK To edit an item click the radio button of the item that you want to modify Then click Edit on the bottom of the page to add a new rule entry or modify an e...

Page 149: ...nk down Choose SNMP Traps option to see the following page Trap Server Display the IP address of the trap server Trap Community Display the community string of the trap server Trap server port Display the port number used for the trap server Edit Allow users to edit the selected SNMP traps settings Delete Delete All Remove one all the selected SNMP traps settings A dialog will be prompted for you ...

Page 150: ...acility can detect and mitigate the DoS attacks The URL Filter can block inappropriate websites for SME 4 4 1 IP Filter First you should create at least one Group in the IP Filter Group Table Then you can enable the Data Filter and select a Start Filter Group in General Setup The following sections explain IP Filter functions with details G Ge en ne er ra al l S Se et tu up p The page allows you t...

Page 151: ...ter table configuration If this entry is assigned as the started filter group already it cannot be deleted To add a new group please click Add on the Group Table page to access into the following page In this page you can type in new group name and decide the next group name Also you can type in your comment for such group After you click Apply the new group will be added and you will see it from ...

Page 152: ...ill prevent this rule from being applied to that IP address It is equal to the logical NOT operator Subnet Mask It means the subnet mask for the source IP Source Port It means the port for the source IP Type the values in the boxes of start port and end port As for the operators If the Start Port column is empty the Start Port and the End Port column will be ignored The filter rule will filter out...

Page 153: ... IP address for this filter rule Placing the symbol before a particular IP address will prevent this rule from being applied to that IP address It is equal to the logical NOT operator Destination Mask It means the subnet mask for the destination IP Destination Port It means the port for the destination IP Group Name It means the filter group for the current rule Protocol It is the protocol s for t...

Page 154: ...or Pass Apply Click this button to return to IP Filter Table setting page The new added rule information will be displayed on this page too Refer to the following graphic 4 4 2 DoS The DoS function helps to detect and mitigates DoS attacks These include flooding type attacks and vulnerability attacks Flooding type attacks attempt to use up all your system s resources while vulnerability attacks tr...

Page 155: ...ICMP Flood Defense Activates the ICMP flood defense function If the amount of ICMP echo requests from the Internet exceeds the user defined threshold value the router will discard the subsequent echo requests within the user defined timeout period The default setting for threshold and timeout are 300 packets per second and 10 seconds respectively Enable Port Scan Detection Activates the Port Scan ...

Page 156: ...e maximum length The router will block any fragmented ICMP packets with a length greater than 1024 octets Enable Block ICMP Fragment Activates the Block ICMP fragment function Any ICMP packets with fragmented bit sets are dropped Enable Block Unknown Protocol Activates the Block Unknown Protocol function The router will block any packets with unknown protocol types Click Apply to apply the setting...

Page 157: ... Control controls Web site access by inspecting the URL string against user defined keywords In the Firewall group click the URL Filter option You will see the following page Enable Disable Disable or Enable URL Filter function Keyword The keyword s used to filter URLs Keywords can be partial words or complete URLs The router will reject any Website which whole or partial URL matches any keywords ...

Page 158: ...ame is used to as a server The name should be filled when enable Server otherwise it will impact performance Permitted Categories List The permitted categories are obtained from the selected a server Forbidden Categories List The forbidden categories are obtained from the selected a server URL The URL domain name Option Allow or Deny the selected URL Exception URL List The list of filtered URLs R ...

Page 159: ...of any compressed file These following types of compressed files are blocked by the router zip rar arj ace cab sit Execution Files Activates the Block Executable file function to prevent from downloading of any executable file The following types of executable files are blocked by the router exe com scr pif bas bat inf reg Cookie Activates the Block Cookie function Cookies are used by many website...

Page 160: ...he URL content filtering facility is active during the specified times from H1 M1 to H2 M2 in one day where H1 and H2 indicate the hours and M1 and M2 represent the minutes Day of Week The URL content filtering facility is active during the specified days of the week The default value is 8 00 to 18 00 from Monday to Friday W Wa ar rn ni in ng g P Pa ag ge e After the configuration of URL Filter is...

Page 161: ... in IP Bind List ARP Table This table is the LAN ARP table of this router The information for IP and MAC will be displayed in this field Each pair of IP and MAC address listed in ARP table can be selected and added to IP Bind List by clicking Add below Add and Edit IP Address Type the IP address that will be used for the specified MAC address Mac Address Type the MAC address that is used to bind w...

Page 162: ...cess into Internet And the web configurator of the router might not be accessed 4 4 5 IM P2P Blocking IM Blocking means instant messenger blocking P2P is the short name of peer to peer You will see a list of common P2P applications You can define blocking rules such as specified an IP address for passing through or blocking for IM Instant Messenger P2P Peer to Peer application To edit IM P2P block...

Page 163: ...fic Thus timing sensitive applications will not be impacted by web surfing traffic or other non critical applications such as file transfer Without QoS guaranteed control there would be virtually no way to prioritize users services or guarantee allocation of finite bandwidth resources to network or servers for supporting timing sensitive and mission critical network applications such as VoIP Voice...

Page 164: ...QoS option and choose Incoming Class Setup Outgoing Class Setup There are eight queues that can be configured The total sum of bandwidth has to be 100 percent for all configured queues Any leftover bandwidth is assigned to eight queues to meet 100 percent totally Disable Enable Click Disable to close this setting Click Enable to activate this setting Index It represents the number for each queue C...

Page 165: ... destination IP address for the filter Service Type Status Display the service type that you choose for the filter DiffServ CodePoint Status Display the setting for DiffServ CodePoint Class Display the class name that you specified for the incoming outgoing class filter Edit Click this button to open the edit page for adjusting the settings Delete Delete All Click this button to delete the selecte...

Page 166: ...ield is allowed to be configured Advanced The Protocol and Port fields are allowed to be configured None No field is allowed to be configured Service Type Select the service type that you want to use There are thirty five service types provided Protocol There are three options TCP UDP and TCP UDP Choose the one you need Source Destination Port Type the port range number for source destination port...

Page 167: ... or public networks like the Intranet A VPN enables you to send data between two hosts across a shared or public network in a manner that emulates the properties of a point to point private link There are two types of VPN connections remote dial in access and LAN to LAN connection The Remote dial In Access facility allows a remote access node a NAT router or a single computer to dial into a VPN ro...

Page 168: ...d for other security associations such as AH and ESP for the IPsec DOI 4 6 1 IPSec The IPSec services can provide access control connectionless integrity data origin authentication rejection of replayed packets that is a form of partial sequence integrity and confidentiality by encryption These objectives are met through the use of two traffic security protocols the Authentication Header AH and th...

Page 169: ... page information Edit Configure an entry Clicking this button can guide you accessing into editing page for that IPSec tunnel For detailed information refer to the following section of For Default Configuration Delete Delete a designated entry Delete All Delete all entries in the table To edit or add a policy table please click one of the radio buttons and click Edit ...

Page 170: ...omatically by the system for every 30 seconds Disable Choose this one to inactivate this profile Name The name for VPN connection ex VPN1 The maximum length of name is 20 characters including spaces Authentication The authentication to be used by PreShared Key or RSA Signature PreShared Key The shared key for peer identification The maximum length is 40 characters including spaces Security Protoco...

Page 171: ...file Security Gateway The IP address of the local gateway s public network interface The keyword default can be used to represent the IP Address of the selected WAN Interface Network IP Subnet Mask The subnet behind the local gateway Next Hop The IP address of the next hop The keyword default can be used to represent the gateway IP address of the selected WAN Interface Remote ID The identification...

Page 172: ...ode Peer ID is on behalf of the IP address while identity authenticating with remote VPN server The length of the ID is limited to 47 characters Key Lifetime main The rekey renegotiated period of the IKE Phase1 keying channel of a connection The acceptable range is from 5 to 480 minutes 8 hours Proposal main The proposed encryption and or authentication algorithms for IKE Phase1 negotiation There ...

Page 173: ... Accept all supported proposal all the proposals supported by this device will be accepted and applied PFS Enables the PFS Perfect Forward Secrecy function A new Diffie Hellman Key Exchange is included every time an encryption and or authentication key are computed on PFS Status Enables or Disables the dead peer detection function Delay The keep alive timer A Hello message will be emitted periodic...

Page 174: ...s sm m VPN TRUNK Management is a backup mechanism which can set multiple VPN tunnels as backup tunnel It can assure the network connection not to be cut off due to network environment blocked by any reason VPN TRUNK VPN Backup mechanism can judge abnormal situation for the environment of VPN server and correct it to complete the backup of VPN Tunnel in real time VPN TRUNK VPN Backup mechanism is c...

Page 175: ...licy for VPN Trunk click the Policy Table option under the IPSec VPN Trunk menu Refresh Refresh the page information Edit Configure an entry Clicking this button can guide you accessing into editing page for that IPSec tunnel For detailed information refer to the following section of For Default Configuration Delete Delete a designated entry Delete All Delete all entries in the table ...

Page 176: ...s profile Name The name for VPN connection ex VPN1 The maximum length of name is 20 characters including spaces Authentication The authentication to be used by PreShared Key or RSA Signature PreShared Key The shared key for peer identification The maximum length is 40 characters including spaces Security Protocol AH Specify the IPSec protocol for the Authentication Header protocol The data will be...

Page 177: ...public network interface The keyword default can be used to represent the IP Address of the selected WAN Interface Local GRE IP The virtual IP address of the router specified for this tunnel Next Hop The IP address of the next hop The keyword default can be used to represent the gateway IP address of the selected WAN Interface Remote ID The identification number for the remote gateway Security Gat...

Page 178: ...gressive mode is faster The default value in Vigor router is Main mode Peer ID In Aggressive mode Peer ID is on behalf of the IP address while identity authenticating with remote VPN server The length of the ID is limited to 47 characters Key Lifetime main The renegotiated period of the IKE Phase1 keying channel of a connection The acceptable range is from 5 to 480 minutes 8 hours Proposal main Th...

Page 179: ...able this function The recommended value is 2 seconds if enabled Timeout The timeout timer The peer will be declared dead once no acknowledge message is received after timeout value Use the value 0 to disable this function The recommended value is 4 seconds if enabled Auto GRE Key Check this box to automatically generate GRE key Or type the GRE key on the fields below manually GRE Key In This valu...

Page 180: ...on it also allows users to combine several policies into one group for VPN usage Each group can combine four policies for fitting different requirement of VPN application Simply click VPN VPN Trunk Group Table to access into the following page There are ten groups offered for users to configure Edit Configure an entry Clicking this button can guide you accessing into editing page for that group Fo...

Page 181: ...w many flow rates can pass through on this tunnel For example type 1 for tunnel 1 and type 4 for tunnel 2 If such device has 5 packets needing to send to the remote subnet it will send 4 packets through tunnel 2 and 1 packet through tunnel 1 Active Check this box to enable VPN tunnel backup Master Slave Choose the master and salve roles for this backup configuration After finish the configuration ...

Page 182: ...o set up the CA configuration Click the VPN IPSec Trust CA option It can make users loading double key certificate issued by trusted CA server To upload a new Trust CA please select any one of the entry and click the Upload button The following page will appear Use the Browse button to locate the file you want to upload and click Apply U Us se er r C Ce er rt ti if fi ic ca at te e This page allow...

Page 183: ...ew Show configuration of the assigned entry z To generate a user certificate please click one radio button to select the entry and click the Generate button Certification Name The name of the certification entry ID Type The ID type for this entry There are three types Domain Name Certificated by domain name IP Certificated by IP address Email Certificated by email address ID Value The ID value for...

Page 184: ...ou finish the configuration please click Apply to invoke it z To download a user certificate please click index number one with the status of Request Generated and click the Download button If not you might see the following dialog to warn you After you click the Download button the system will guide you to save the downloaded file newreq_RD computer_1 pem to a place that you assign z To import a ...

Page 185: ...on z To view a user certificate please click the index number that you want to view the detailed information of the certificate and click the View button The following page will be shown for your reference S St ta at tu us s This page will show the VPN connection status Name Display the name of the IPSec tunnel Status Display the status of the tunnel up or down Algorithm Display the algorithm used...

Page 186: ...P P PP PT TP P G Ge en ne er ra al l S Se et tu up p To configure the general setup please click VPN PPTP L2TP General Setup PPTP General Setup Status Set the function to Active or Inactive PPTP Authentication Allow you to choose an authentication mode to be used The default setting is CHAP PPTP Encryption Allow you to choose an encryption mode to be used If PPTP authentication mode is set to CHAP...

Page 187: ... IP address for secondary DNS When you finish the configuration please click Apply to invoke it L L2 2T TP P G Ge en ne er ra al l S Se et tu up p To configure the general setup please click VPN PPTP L2TP General Setup L2TP General Setup Status Set the function to Active or Inactive L2TP Authentication Allow you to choose an authentication mode to be used The default setting is CHAP User Authentic...

Page 188: ...IP address for secondary DNS G Gr ro ou up p T Ta ab bl le e To create a VPN PPTP L2TP group table click VPN PPTP L2TP Group Table Start IP Type the starting IP address The default group value is 192 168 1 224 28 Subnet Mask Select the value of subnet mask for the Start IP Accessed IP Type the accessed IP address Subnet Mask Select the value of subnet mask for the Accessed IP U Us se er r P Pr ro ...

Page 189: ...lick Apply to invoke it S St ta at tu us s This page displays some relevant information about PPTP connection It will refresh automatically every 10 seconds Index Display the index number of the tunnel Remote IP Display remote IP address of the tunnel Assigned IP Display IP address assigned by Vigor3300 User Display user account of this tunnel Byte In Display the bytes count received by this tunne...

Page 190: ...ad of a regular or analog phone line 4 7 1 Protocol You have to choose suitable protocol and specify SIP accounts for using VoIP S Se el le ec ct t P Pr ro ot to oc co ol l There are two protocols can be used for VoIP SIP and MGCP You should click either one of buttons to set corresponding settings for VoIP phones Be aware that both sides local end and remote end should use same protocol for VoIP ...

Page 191: ...the SIP proxy server Proxy Address Type the IP address of the SIP proxy server Proxy Port Type the port number of the SIP proxy server Registrar Address Type the IP address or domain name of the SIP registrar server Registrar Port Type the port number of the SIP registrar server Expires Type the register expire time for SIP protocols The default value is 3600 Domain Type the IP address or domain n...

Page 192: ...1 in this filed the endpoint name will be aaln 1 aaln 2 aaln 8 If you type 11 in this field the endpoint name will be aaln 11 aaln 12 aaln 18 etc Simply keep the default value 1 Wild carded RSIP For VoIP phone call with MGCP configuration each port will send RSIP to call agent for notifying that port is initiated or restarted Each endpoint sends its own RSIP Each port must send one RSIP message e ...

Page 193: ...ter with Registrar using AccountName Domain Realm After that your call will be bypassed by SIP Proxy to the destination using AccountName Domain Realm as identity You can set up to 32 SIP accounts To edit an existing SIP Accounts simple click the radio button for the one you want to modify ...

Page 194: ...isable forwarding function Call forwarding all calls Forward all incoming calls to the specified SIP URL site Call forwarding busy Forward incoming calls to the specified SIP URL site when this line is busy Call forwarding no answer after Range 1 10 rings Forward incoming calls to the specified SIP URL site after ringing the times that you set here SIP URL Assign a SIP URL site e g aaa draytel org...

Page 195: ... Call Park Dial Number is 700 IncomingCall Rings Rings all ports in the group Click this radio button to make all ports in the same SIP account ringing while receiving incoming calls Rings the first available port Click this radio button to make the first available port in the same SIP account ringing while receiving incoming calls Rings by round robin Click this radio button to make the phone por...

Page 196: ...splay the type of the VoIP connection e g ISDN NT ISDN TE FXO and FXS It depends on the modules you have installed to the router Active Display the status active or not for the VoIP connection SIP Account Display the SIP account index number and username Supplemental Service Display the supplemental service mode for the VoIP connection Hotline Display the hotline is established or not Mic Spk Gain...

Page 197: ...choose one item as the default SIP account VoIP IP Address The interface is used to apply VoIP traffics There are two options WAN and LAN VPN If LAN VPN is selected VoIP can be applied through a VPN tunnel to create a high security voice phone Hotline Hotline Number to Internet Pre set a phone number to make the port dialing out to Internet automatically ...

Page 198: ... transmitting voice The default value is 0 The range is from 32 to 31 Speaker Gain The gain value while receiving voice The default value is 0 The range is from 32 to 31 FAX FAX Mode The FAX function mode There are several options Transparent FAX will be transmitted via voice channel no fax relay and no Codec change will be involved This is the default value T 38 Relay Using T 38 Fax Relay Bypass ...

Page 199: ...e number is set the greater the sound is Supplemental Service If you want to use call waiting or call transfer function you have to enable supplemental service mode by clicking Normal or CHT Click Disable to close this service Under Normal mode call waiting and call transfer function will be Call Waiting You can hear waiting tone while a new phone call is incoming then you can do 1 Flash hook and ...

Page 200: ...hone A 4 Phone C is on hook to disconnect with phone A Phone A presses flash hook to resume the call with Phone B 5 Phone A presses flash hook again phone A will play dialtone yet phone B will hold Phone A dials 4 and press immediately and then phone A will transfer phone B to C 6 When phone C picks up the phone then phone C can talk with phone B The call transfer is done now Attended mode 1 At th...

Page 201: ... router is able to accept only number matched incoming calls In addition local ISDN network provider should support MSN services The router provides ten fields for MSN numbers Note that MSN service must be acquired from your local telecom operators 1 10 fields Fill in the portion that is different with the own number If the MSN number of ISDN phone matches with the configured MSN number the ISDN p...

Page 202: ...ns WAN and LAN VPN If LAN VPN is selected VoIP can be applied through a VPN tunnel to create a high security voice phone Hotline Hotline Number to Internet Pre set a phone number to make the port dialing out to Internet automatically Hotline Number to PBX Pre set a phone number to make the port dialing out to PBX automatically FXO Manual Disconnection Click Disconnect to disconnect this phone line...

Page 203: ...detected the Codec will automatically switch to a high bit rate type G 711a u or G 726 to make sure FAX can transmit successfully If this option is selected the Vigor3300 will apply these two following settings FAX Bypass Codec and FAX Bypass Codec Rate FAX Bypass Codec Select one option to be applied if FAX mode is configured as Bypass mode FAX Bypass Codec Rate Select one option 20 or 40 to be a...

Page 204: ...Click Enable to activate this function Apply When you finish all the configurations please click this button to activate them 4 7 3 Speed Dial This page allows you to set a simple way to dial a specific number Up to 150 numbers can be stored in Vigor3300V Speed Dial Phone Number Type the phone number to be used as quick dial Speed Dial Destination Type the destination address of the dial Memo Type...

Page 205: ...ts to strip of the entry Prefix Add Display the prefix string to be added of the entry SIP IP Address Display the IP address of the destination of the entry Time Out Display the inter digits timeout value of the entry Memo Description for this entry Click Edit to modify the dial plan Below shows an example Match String Set the pattern of a dialplan entry It is composed by digits 0 9 and special sy...

Page 206: ... example if you set 1 here Vigor3300V will delete the first digit of the phone number If you set a number in Prefix Add Vigor3300V will use that one instead Prefix Add Set the Prefix string to be added 1 none maximum 63 char For example if you set 886 here Vigor3300V will delete the digit of the phone number based on the setting on Prefix Strip and use 886 instead SIP IP Address Set the Remote SIP...

Page 207: ...mber 8862111199999 draytek com will be dialed out From the above figure we know the Max Length is set with 10 Therefore if the caller dials 035972727 only 9 digits he must dial immediately or wait for 4 seconds to send the call out Vigor3300V will change the number with 88635972727 yet the caller still dials 035972727 In addition when the caller dials 035 and is in a daze more than 4 seconds the p...

Page 208: ...le the phone number is 03654321 and the dialing completion timeout is set to 4 secs The user dials with 036 and stops to dial After passing through 4 seconds the router will send out that phone call automatically VoIP ToS The ToS value in VoIP protocol packet The default setting is 0xa0 Line Polarity Reversal as Callee Answer Check this box to generate line polarity reversal while the remote user ...

Page 209: ... can adjust tone settings manually if you choose User Defined TOn1 TOff1 TOn2 and TOff2 mean the cadence of the tone pattern TOn1 and TOn2 represent sound on TOff1 and TOff2 represent the sound off Region Choose the country area that the Vigor3300 located for using VoIP feature Or select User Defined for proprietary settings Caller ID Type If User Defined is selected in the Region field users can ...

Page 210: ...h Frequency Hz Type the high frequency number in Hertz TOn1 10msec Type the duration of the first ring TOff1 10msec Type the silence duration after the first ring TOn2 10msec Type the duration of the next continuous ring TOff2 10msec Type the silence duration after the next continuous ring Tone Timer Determine the timeout for the tone invoked ...

Page 211: ...oughput will be higher Enable Click this button to invoke QoS function The voice quality can be good and the data throughput will be lower Link Fragmentation and Interleaving Each packet size is determined by the bandwidth of WAN interface The smaller the bandwidth is the smaller the packet will be Such activity can reduce the time delay of packet transmitting Meanwhile the VoIP packets will be in...

Page 212: ...NAT router and the NAT router uses a static WAN IP address This value is the same as the WAN IP of the front NAT router Auto Discovery NAT IP Address It is used when Vigor3300 is behind a NAT router and the NAT router uses a dynamic WAN IP address such as a DHCP or PPPoE client The Vigor3300 requires a STUN server for this option The STUN Simple Traversal of UDP through NATs server is an implement...

Page 213: ...e default setting is Allow all incoming calls S Se et t This page allows you to choose a barring class match method and set a range for speed dial entries for the incoming call barring Barring Class There are five options for incoming calls from remote ends Choose either one of them to set the barring class Allow all incoming calls All incoming calls from remote ends are accepted by this router Al...

Page 214: ...n the allow list IP Domain The IP address or domain name to be allowed If the peer is registered in SIP proxy server use the domain name of the SIP proxy server Otherwise use the static IP address or DDNS domain name D De en ny y L Li is st t The Vigor3300 Series supports up to 30 entries in the Deny List table When you choose Deny only calls from deny list as the Barring Class people listed in th...

Page 215: ... you choose No Refresh the system will not refresh this page until you click Refresh button Port Number The port number of VoIP Call Type The dialing direction for this call Incoming Outgoing Caller Number The phone number of the caller Callee Number The phone number of the receiver Start Time The starting time of the call End Time The ending time of the call Duration The duration of the call Rele...

Page 216: ...us of VAD DTMF Relay The status of DTMF 4 7 11 Tone Upload This page allows you to upload tone settings such as G 711a Pin Prompt G 711a Pin Error G 729 Pin Prompt and G 729 Pin Error to Vigor3300 series Click Browse to choose the file and click Apply to upload it When a user wants to dial out via FXO port a sound would be played to ask the user typing PIN code first If the PIN code is correct the...

Page 217: ...No Refresh the system will not refresh this page until you click Refresh button Call Status The calling status Call Type The dialing direction for this call Incoming Outgoing Caller Number The phone number of the caller Callee Number The phone number of the receiver Start Time The starting time of the call Remote RTP Address The IP address of the remote voice site Remote RTP Port The used port num...

Page 218: ... set the time interval of refreshing Use the drop down list of Refresh Option to choose an automatic refreshing setting If you choose No Refresh the system will not refresh this page until you click Refresh button Register Status The status of registering in proxy server 4 7 13 Config Activate After configuring VoIP settings please open VoIP Config Activate to access into the following page Then c...

Page 219: ...Vigor3300V Series User s Guide 211 ...

Page 220: ...OK or not z Backing to factory default setting if necessary If all above stages are done and the router still cannot run normally it is the time for you to contact your dealer for advanced help 5 5 1 1 C Ch he ec ck ki in ng g I If f t th he e H Ha ar rd dw wa ar re e S St ta at tu us s I Is s O OK K o or r N No ot t Follow the steps below to verify the hardware status 1 Check the power line and W...

Page 221: ...ter trying the above section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Windows XP As to the examples for other operation systems please refer to the similar steps or find support notes in www draytek com 1 Go to Control Panel and then double click on Network Connections 2...

Page 222: ...matically and Obtain DNS server address automatically F Fo or r M Ma ac cO Os s 1 Double click on the current used MacOs on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop down list of Configure IPv4 ...

Page 223: ...outer correctly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista The DOS command dialog will appear 3 Type ping 192 168 1 1 and press Enter If the link is OK the line of Reply from 192 168 1 1 bytes 32 time 1ms TTL 255 will appear 4 If the line does not appear please check the IP address set...

Page 224: ...r IP modes 2 Make sure the Active check box has been selected 3 Click the Edit icon to open the WAN setting page There are four IP modes Static DHCP PPPoE and PPTP provided by the router Each mode will guide different web page F Fo or r P PP PP Po oE E M Mo od de e 1 Check if Username and Password are entered with correct values that you got from your ISP 2 Check if the setting of Authentication i...

Page 225: ...e settings go to System Status page and click WAN Status You will get a correct web page of WAN settings F Fo or r S St ta at ti ic c M Mo od de e 1 Check if the values of IP Address Subnet Mask Gateway IP Address and Primary DNS that you got from ISP are set properly or not If you forget please contact with ISP for getting new ones ...

Page 226: ... get a correct web page of WAN settings F Fo or r D DH HC CP P M Mo od de e 1 Check if Host Name optional and Domain Name optional are correct or not Both them are required for some ISPs 2 If anything wrong please check and retype correct values Then try the network connection again 3 After finishing the settings go to System Status page and click WAN Status You will get a correct web page of WAN ...

Page 227: ... or not 2 Check if the setting of Authentication is correct or not You may need to try both PAP and CHAP 3 Check if the value of PPTP Local Address PPTP Subnet Mask and PPTP Remote Address are correct or not 4 After finishing the settings go to System Status page and click WAN Status You will get a correct web page of WAN settings ...

Page 228: ...age The following screen will appear Choose Reset to factory default and click Apply After few seconds the router will return all the settings to the factory settings H Ha ar rd dw wa ar re e R Re es se et t While the router is running ACT LED blinking press the Factory Reset button and hold for more than 5 seconds When you see the ACT LED blinks rapidly please release the button Then the router w...

Page 229: ...Vigor3300V Series User s Guide 221 This page is left blank ...

Page 230: ...pp pe en nd di ix x H Ha ar rd dw wa ar re e S Sp pe ec ci if fi ic ca at ti io on ns s Operating 0 C 45 C Temperature Storage 25 C 65 C Humidity 10 90 non condensing Max Power Consumption 60 Watt Dimension L440 W280 H44 mm Power 100 240 V AC ...

Search results

Summary of Contents for Vigor3300V+

Reviews:

Related manuals for Vigor3300V+

Brands by name

Popular brands

Draytek Vigor3300V+, User Manual

Search results

Summary of Contents for Vigor3300V+

Reviews:

Related manuals for Vigor3300V+

Brands by name

Popular brands