Draytek VIGOR3300V+ User Manual
  1. Manuals
  2. Brands
  3. Draytek Manuals
  4. Network Router
  5. Vigor3300V+
  6. User manual
Draytek VIGOR3300V+ User Manual

Draytek VIGOR3300V+ User Manual

Multi wan security router
Hide thumbs Also See for VIGOR3300V+:
Table of Contents

Advertisement

Quick Links

Download this manual

Advertisement

Table of Contents
loading

Related Manuals for Draytek VIGOR3300V+

Summary of Contents for Draytek VIGOR3300V+

  • Page 2 Vigor3300V+ Series User’s Guide...
  • Page 3 Vigor3300 V+ Multi-WAN Security Router User’s Guide Version: 1.0 Date: 19/10/2009 Vigor3300V+ Series User’s Guide...

  • Page 4: Copyright Information

    Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.

  • Page 5: European Community Declarations

    No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu County, Taiwan Product: Vigor3300V+ DrayTek Corp. declares that Vigor3300V+ of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class A and EN55024/Class A.

  • Page 6: Table Of Contents

    Chapter 1: Preface ......................1 1.1 Web Configuration Buttons Explanation ..................1 1.2 LED Indicators and Connectors ....................2 1.2.1 For Vigor3300V+ ........................3 1.3 Hardware Installation........................6 1.3.1 Network Connection ........................6 1.3.2 ISDN Phone Adapter Installation.....................7 1.3.3 Rack-Mounted Installation .......................9 Chapter 2: Configuring Basic Settings ................11 2.1 Changing Password ........................11 2.2 Quick Setup..........................
  • Page 7 4.1.1 Status ..........................85 4.1.2 Time ..........................89 4.1.3 Syslog ..........................90 4.1.4 Access Control........................92 4.1.5 Configuration Setup .......................93 4.1.6 Firmware Upgrade Setup ......................94 4.1.7 Reboot ..........................97 4.1.8 Diagnostic Tools ........................98 4.2 Network Setup.......................... 101 4.2.1 WAN ..........................102 4.2.2 Load Balance Policy ......................109 4.2.3 Auto Load Balance ......................112 4.2.4 LAN ..........................112...
  • Page 8 Chapter 5: Trouble Shooting..................212 5.1 Checking If the Hardware Status Is OK or Not................. 212 5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ...... 213 5.3 Pinging the Router from Your Computer .................. 215 5.4 Checking If the ISP Settings are OK or Not ................

  • Page 9: Chapter 1: Preface

    Intranet. A VPN enables you to send data between two computers across a shared public Internet network in a manner that emulates the properties of a point-to-point private link. The DrayTek Vigor3300 Series VPN router supports Internet-industry standards technology to provide customers with open, interoperable VPN solutions such as X.509, DHCP over Internet Protocol Security (IPSec)

  • Page 10: Led Indicators And Connectors

    Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed explanation. Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. The displays of LED indicators and connectors for the routers are different slightly.

  • Page 11: For Vigor3300V

    1.2.1 For Vigor3300V+ Status Explanation PWR (Power) The router is powered on. The router is powered off. ACT (Activity) Blinking The router is powered on and running normally. The router is not ready or failed. The WAN connection is ready. Blinking It will blink while transmitting data.
  • Page 12 For the router supports functions of FXS, FXO, ISDN S0/TE, ISDN ALL TE modules that are optional, users can purchase them and installed them into the router according to the real requirement. The LED description for there four modules are different slightly. Please read the following for detailed explanation.
  • Page 13 Interface Description Console Provided for technician use. LAN (P1 ~ P4) Connecter for local networked devices. WAN/DMZ (P1 ~ Connecter for remote networked devices. Connecter for telephone set. Connecter for FXS interface of PABX. ISDN S0/TE Connecter for ISDN phone/ISDN line. ISDN ALL TE Connecter for ISDN line.

  • Page 14: Hardware Installation

    1.3.1 Network Connection Before starting to configure the router, you have to connect your devices correctly. In this case, we suppose you have FXS/FXO module inserted into the router. Connect the power cord to Vigor3300V+’s power port on the rear panel, and the other side into a wall outlet.

  • Page 15: Isdn Phone Adapter Installation

    1.3.2 ISDN Phone Adapter Installation ISDN NT is always fixed to connect ISDN phone. However, ISDN S0/TE is configurable as NT or TE mode. It can be adjusted in VoIP>> Port Settings. Note: When NT or TE port is dedicated with TE mode, the Green LED will flash while data transmission.
  • Page 16 Such interface is used for connecting ISDN line. Each port is dedicated to TE mode only. Therefore, you cannot use such interface to connect to any ISDN phone. For the connection, refer to the following figure for reference. Note: When data transmission through this interface, the Green LED will flash. Vigor3300V+ Series User’s Guide...

  • Page 17: Rack-Mounted Installation

    1.3.3 Rack-Mounted Installation The Vigor3300V+ Series can be mounted on a rack by using standard brackets in a 19-inch rack or optional larger brackets on 23-inch rack (not included). The bracket for 19- and 23-inch racks are shown below. Attach the brackets to the chassis of a 19- or a 23-inch rack. The second bracket attaches the other side of the chassis as above procedure.
  • Page 18 Vigor3300V+ Series User’s Guide...

  • Page 19: Chapter 2: Configuring Basic Settings

    Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type default values on the window for the first time accessing. The default value for user name is draytek and the password is 1234. Next, click OK.
  • Page 20 Now, the Main Screen will pop up. Go to System page and choose Change Password. Enter the login password (1234) on the field of Old Password. Type a new one in the field of New Password and retype it on the field of Confirm Password. Then click Apply to continue.

  • Page 21: Quick Setup

    Quick Setup is designed for configuring your broadband router accessing Internet with simply steps. There are two phases of quick setup, one is WAN configuration and the other is LAN configuration. In the Quick Setup group, you can configure the router to access the Internet with different modes such as Static, DHCP, PPPoE, or PPTP modes.

  • Page 22: Static Mode

    Use the default Mac address stored originally in router. User Defined MAC- Use a MAC address defined by the user. Downstream Rate Assign the downstream rate for this WAN interface. The default value is 102400 kbps (100 Megabit). This setting is very important for Vigor3300 Series incoming buffer adjustment.
  • Page 23 IP Address Type a private IP address to the WAN interface. Subnet Mask Type a subnet mask value to the WAN interface. Default Gateway Type a private IP address to the gateway. Primary DNS Type a private IP address to the primary DNS. Secondary DNS Type a private IP address to the secondary DNS.
  • Page 24 WAN Interface Choose the WAN interface for such connection. DHCP Server IP Address Type an IP address for the DHCP server. Next, click IP Routing tab to set routing path for each WAN interface if required. When you finished the above required settings, please click Finish. A system reboot page will appear.

  • Page 25: Dhcp Mode

    2.2.2 DHCP Mode DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP address for Vigor3300 automatically. It is not necessary for you to assign any setting. (Host Name and Domain Name are required for some ISPs).

  • Page 26: Pppoe

    WAN Interface Choose the WAN interface for such connection. DHCP Server IP Address Type an IP address for the DHCP server. Next, click IP Routing tab to set routing path for each WAN interface if required. When you finished the above settings, please click Finish. A system reboot page will appear. Click Apply to activate the DHCP mode configuration.
  • Page 27 User Name Type a specific valid user name provided by the ISP. Password Type a valid password provided by the ISP. Authentication Select PAP, CHAP, MS-CHAP or MS-CHAP-V2 protocol for PPP authentication. The default value is PAP. Service Name Type a service name required from ISP service. After setting up the PPPoE, click Next to setup the LAN interface continuously.
  • Page 28 Primary DNS Type the IP address for primary DNS. Secondary DNS Type a private IP address to the secondary DNS. Lease Time (Min) Set a lease time for the DHCP server. The time unit is minute. Gateway IP (Optional) Set a gateway IP address for the DHCP server. Next, click DHCP Relay Agent tab to set DHCP server if required.

  • Page 29: Pptp

    2.2.4 PPTP This mode lets user get the IP group information by a DSL modem with PPTP service from ISP. Your service provider will give you user name, password, and authentication mode for a PPTP setting. Click PPTP as the protocol. Type in all the information that your ISP provides for this protocol.
  • Page 30 Start IP Type the start IP address of the IP pool that DHCP server can use for clients in LAN. End IP Type the end IP address of the IP pool that DHCP sever can use for clients in LAN. Primary DNS Type the IP address for primary DNS.

  • Page 31: Chapter 3: Applications

    3.1.1 Block LAN-to-LAN Communication To control the communication of PCs among different network segments effectively, please adjust firewall setting to deny LAN to LAN communication from Firewall >IP Filter Group Table. Thus, PCs that belong to various LANs will not connect with each other through the router.

  • Page 32: How To Check/Edit Vlan Id On Your Pc

    Now you will get the following page. 3.1.2 How to Check/Edit VLAN ID on Your PC? Not all the network cards support VLAN features. If you cannot sure if the network card of your computer supports tagged VLAN or not, please do the following steps to check (or edit) VLAN ID on your PC.
  • Page 33 Right-click on Local Area Connection and click on Status. On the following dialog, click Properties. Click Configure to access into next screen. Vigor3300V+ Series User’s Guide...
  • Page 34 On this dialog box, locate VLANs tag and click on it. If you cannot find out VLANs tag, that means your network card does not support VLAN feature. In this screen, there is no VALN existed. You can create a new one. Please click the New…button.
  • Page 35 In New VLAN dialog, please type a number in the box of VLAN ID. Here, “5” is entered. The corresponding VLAN Name will appear automatically. Next, click OK to create it. After you click OK, the system will configure for the VLAN settings. Please wait for several seconds.
  • Page 36 When the configuration is finished, the new VLAN settings with ID number and name will appear on previous dialog, Desktop Adapter Properties. Click OK to exit this dialog. 10. Now, the Desktop Adapter – VLAN dialog will appear as follows. Please click OK. Vigor3300V+ Series User’s Guide...
  • Page 37 11. Next time, if you want to check VLAN setting again, please open Settings tag to modify it. Vigor3300V+ Series User’s Guide...

  • Page 38: Four Vlans For Different Departments In A Company

    3.1.3 Four VLANs for Different Departments in A Company A company wants to separate the Engineer Department, Sales Department, Marketing Department and Other Department to limit their communication with each other to ensure the security. In this case, we can define four VLANs that are VLAN5, VLAN6, VLAN7 and VLAN8.
  • Page 39 After applying the settings, the web page will be redirected to “reboot” web page. You can ignore it and continue to configure the Network setting. After finishing Network setting, you can execute the reboot procedure. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only. In the Network setting, type the subnet 192.168.1.0 to LAN.

  • Page 40: Two Vlans For Different Departments In A Company

    3.1.4 Two VLANs for Different Departments in A Company A company wants to separate the Engineer Department and Other Departments to limit their communication to protect the engineering data. In this case, we can define two VLANs that are VLAN5 and VLAN6. The subnet of VLAN5 is 192.168.1.0, and the subnet of VLAN6 is 192.168.2.0.
  • Page 41 After applying the settings, the web page will be redirected to “reboot” web page. User can it and continue to configure the Network setting. After finishing Network setting, you can execute the reboot procedure. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only. In the Network setting, type the subnet 192.168.1.0 to LAN.

  • Page 42: Example For The Companies In The Same Building

    3.1.5 Example for the Companies in the Same Building There are four companies in the same building. They share the broadband network and use the Vigor3300V+ router to achieve the load balance, security, and VoIP features. In this case, we can define four VLANs including VLAN5, VLAN6, VLAN7 and VLAN8. The subnet of VLAN5 is 192.168.1.0;...
  • Page 43 In the VLAN8, type “8” to VLAN ID. In the Member field, choose p4. Then choose the “Tagged” for Frame Tag Operation in p4. We can ignore the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from company D. After applying the settings, the web page will be redirect to “reboot”...

  • Page 44: Example For A Company And Guest

    3.1.6 Example for A Company and Guest A company wants to separate the Engineer Department, Sales Department, Marketing Department and guest to limit their communication with any department to ensure the security. In this case, we can define four VLANs that are VLAN5, VLAN6, VLAN7 and VLAN8.
  • Page 45 In the VLAN8, type “8” to VLAN ID. In the Member field, choose p4. Then choose the “Untagged” for Frame Tag Operation in p4. We should configure the PVID to “8”, because the device does not support 802.1Q VLAN. After applying the settings, the web page will be redirected to “reboot” web page. User can ignore it and continue to configure the Network setting.

  • Page 46: Example For Trunk Usage

    3.1.7 Example for Trunk Usage A company wants to separate the Engineer Department, Sales Department, Marketing Department and other departments to limit their communication with each other to ensure the security. Many employees of the company use some switches supported 802.1Q VLAN to expand the network.
  • Page 47 ignore the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from the switch. In the VLAN8, type “8” to VLAN ID. In the Member field, choose p1, p2, p3 and p4. Then choose the “Tagged” for Frame Tag Operation in p1, p2, p3 and p4. We can ignore the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from some users.

  • Page 48: Application For Voip

    3300V+ has two expansion slots; each slot can be plugged into 4-port VoIP card, ISDN-NTTE or ISDN-TE card. The VoIP card involves two kinds of interface: FXS and FXO. The ISDN-NTTE card involves two kinds of interface: NT for port 1 and 3; TE or NT (user configurable) for port 2 and 4.
  • Page 49 FXS equipment PSTN or inside lines of PBX FXO equipment Telephones, FAX machines and outside lines of PBX. Based on the characteristics described above that the FXS equipment and the FXO equipment must connect with each other, please pay special attention when you use FXS card and FXO card.

  • Page 50: Practical Application Of Fxs Card With Pbx

    3.2.2 Practical Application of FXS card with PBX By combining the FXS with headquarters’ PBX, it allows the internal telephones in headquarters to communicate with branch's telephones through the Internet. (For detailed configuration, please refer to VoIP and ISDN examples.) 3.2.3 Practical Application of FXO card with PBX By combining the FXO with headquarters’...

  • Page 51: Isdn Nt And Te

    3.2.4 ISDN NT and TE NT means Network Terminal. The ISDN port in NT mode is a port that used to connect general ISDN phones. And TE means Terminal Equipment. The ISDN port in TE mode is a port that used to connect ISDN line or ISDN PBX. As for the Private Branch Exchange (PBX), it is more special because it has both ISDN-NT and ISDN-TE devices at the same time.

  • Page 52: Practical Application Of Isdn-Nt With Pbx

    3.2.5 Practical Application of ISDN-NT with PBX By combining the ISDN-NT with headquarters’ PBX, it allows the internal telephones in headquarters to communicate with branch's telephones through the Internet. (For detailed configuration, please refer to VoIP and ISDN examples.) 3.2.6 Practical Application of ISDN-TE with PBX By combining the ISDN-TE with headquarters’...

  • Page 53: Voip Basic

    3.2.7 VoIP Basic Protocol – Select Protocol Select the communication protocol (SIP or MGCP) and the IP Address (WAN or LAN/VPN) used by VoIP. You need to configure relative settings at first. Please refer to the figure below as an example of Vigor 3300V+. Protocol –...
  • Page 54 Port Settings - Port – Edit Configure related VoIP settings for each port respectively. Vigor3300V+ Series User’s Guide...
  • Page 55 Speed Dial Setup the Speed Dial Phone numbers, this function is more convenient to dial extension number or IP address. There are 150 entries available at most. Dial Plan It can simplify the dial process. There are 60 dial plan entries available at most. Vigor3300V+ Series User’s Guide...
  • Page 56 Miscellaneous Other related VoIP settings. Tone Settings There are optional built-in 15 groups of tone for different regions, and a group of tone (User Defined) can be configured by users. Vigor3300V+ Series User’s Guide...
  • Page 57 Enable this function to ensure the quality of VoIP conversation. The default value is Enable. NAT Traversal When the WAN interface of Vigor3300+ is a private IP address, the VoIP traffics must pass through the upper-layer NAT router. User can enable STUN function in order to make VoIP function can work smoothly.
  • Page 58 Incoming Call Barring – Set This function can receive or reject the specific VoIP calling via Internet. The rules are based on the speed dial number or IP/Domain. Call History It can display 50 groups of calling information. Status Display current VoIP registering status and calling status. Vigor3300V+ Series User’s Guide...

  • Page 59: Voip And Isdn Examples

    There are many different kinds of applications about VoIP function. Most of VoIP callings must be via a VoIP Server by registering, except we can dial VoIP number by the IP address directly. We will set up a basic configuration and registration as an example 1. The other examples might be revised based on this example.
  • Page 60 Enter VoIP - Protocol page and configure related settings on SIP Configuration. Set SIP accounts (e.g., username and proxy server) by referring to the table “Basic settings in Vigor 3300V+ and 2910V” on last page. Enter VoIP - Port Settings page, click the Edit icon of port 1. Enter the Port 1 page.
  • Page 61 Set Port 2 ~ Port 8 one by one in turn. Type: Port 1 ~Port 4 are FXS, Port 5 ~Port 8 are FXO. Active: Port 1 ~Port 8 are all active (v=Enable). SIP Account: Accounts of Port 1 ~ Port 8. Codec: Port 1 ~Port 8 all prior use G.729A - 8kbps.

  • Page 62: C O N F I G U R A T I O N E X A M P L E F O R V I G O R

    Note: This page will automatically refresh based on the setting configured in Refresh Option. You may click Refresh button to renew immediately. Open the Web interface of the router and open VoIP menu. Click SIP Account. Configure Port1 and Port2 by clicking Index number 1 and 2. Vigor3300V+ Series User’s Guide...
  • Page 63 Type relevant SIP Servers used for registration respectively. After configuration, please click OK to save the settings. 2910 series will go to VoIP >>SIP Account page automatically. Open VoIP>>Status. Wait one or two minutes (The time depends on SIP Server's response speed and the network condition).

  • Page 64: Example 2 - Basic Configuration And Registration For Isdn

    3.3.2 Example 2 - Basic Configuration and Registration for ISDN In this case, Vigor3300V+ uses an ISDN-NT card and an ISDN-TE card with four groups of “iptel” numbers and “fwd” numbers respectively. The Codec is G.729A. WAN IP address is 220.135.240.207.

  • Page 65: Set Sip Accounts (E.g., Username And Proxy Server) By Referring To The Table "Basic Settings In Vigor 3300V+ And 2910V" On

    Set SIP accounts (e.g., username and proxy server) by referring to the table “Basic settings in Vigor 3300V+ and 2910V” on last page. Enter VoIP - Port Settings page, click the Edit icon of port 1. Enter the Port 1 page. This page falls into six sections. Port1 (ISDN-NT) Display the port type, enable or disable the port, choose the SIP account, and etc.
  • Page 66 Check the VoIP Status. Please enter the VoIP – Status - SIP Status page first and wait one or two minutes (The time depends on SIP Server's response speed and the network condition). OK means the registration is successful; Failed means the registration is failed.
  • Page 67 Open the Web interface of the router and open VoIP menu. Click SIP Account. Configure Port1 and Port2 by clicking Index number 1 and 2. Type relevant SIP Servers used for registration respectively. Vigor3300V+ Series User’s Guide...
  • Page 68 After configuration, please click OK to save the settings. 2910 series will go to VoIP >>SIP Account page automatically. Open VoIP>>Status. Wait one or two minutes (The time depends on SIP Server's response speed and the network condition). Channel: R means Port 1 and Port 2 register successfully. Status: IDLE means there is no conversations on Port 1~ Port 8.

  • Page 69: Example 3 - Basic Calling Method

    3.3.3 Example 3 - Basic Calling Method We will introduce three basic VoIP calling methods, involving Direct IP Call, Intercommunication with one SIP Proxy Server and Intercommunication with different SIP Proxy Servers. All the settings are based on the VoIP Example 1(Basic Configuration and Registration).
  • Page 70 Configuration table WAN IP Port Number Phone Proxy Codec Number 3300V+ 220.135.240.207 Port1(FXS) 888833 iptel G.729A 2910V 61.31.167.135 Port1(FXS) 888829 iptel G.729A Furthermore, do NOT enable the Outbound Proxy feature when you set up 3300V+ and 2910V to use Direct IP Call. (It is not active in the Example 1; please see Figure 30-2 shown below) Otherwise, even if you dial the IP address, the call will be sent to the SIP Proxy Server still.
  • Page 71 Open the Web interface of the router and open VoIP menu. Open VoIP>>DialPlan and click Phone Book Click Index 1. Enter relevant settings for 3300V+'s Port 1. Click OK to save the settings. Enable: click (√) to activate the entry. Phone Number: type 3301.
  • Page 72 Confirm the settings are correct, and then finish the configuration. Start to dial by using telephones. Phone 1 calls Phone 2 --->Press 2901# or 888829*61*31*167*135#. Phone 2 calls Phone 1--->Press 3301#. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out.
  • Page 73 Connect telephones into 3300V+'s Port 1 & Port 3 and 2910V's Port 1 & Port 2 respectively. Each port needs to register in the SIP Server. Below shows a scenario architecture graph: Configurations between Vigor 3300V+ and 2910V WAN IP Port Number Phone Number Proxy...
  • Page 74 Enter the VoIP - Speed Dial page and add the second and third group of Speed Dial number. Then click Apply to save the settings and finish the configuration. Start to dial by using telephones. Phone 1 call Phone 3---> Press 888829# or 291#. Phone 2 call Phone 4--->Press 660529# or 292#.
  • Page 75 Connect telephones into 3300V+'s Port 1 & Port 3 and 2910V's Port 1 & Port 2 respectively. Each phone registers to the SIP Server. The settings and scenario are the same as the above example. But they must be set up in conjunction with the Speed Dial. Configuration Example for Vigor3300+ Enter the VoIP - Speed Dial page and add the 4th and 5th group of Speed Dial number.

  • Page 76: Example 4 - Voip Over Vpn

    3.3.4 Example 4 - VoIP over VPN Based on the VoIP Example 1(Basic Configuration and Registration), we will introduce how to dial the VoIP call through an encrypted VPN tunnel. In this example Vigor3300V+ acts as a bridge accepting incoming VPN connections from the other two routers (Vigor2910V and Vigor2200V).
  • Page 77 Configuration table 2910V Branch Offices 2200V Teleworker 3300V+ Headquarters 220.135.240.207 61.31.167.135 PPPoE, fixed IP PPPoE, dynamic IP WAN IP 219.81.160.206 61.230.207.146 PPPoE, fixed IP PPPoE, dynamic IP LAN IP 192.168.33.1 192.168.29.1 192.168.22.1 Internal network 192.168.33.X 192.168.29.X 192.168.22.X Encryption DES-SHA1 method 3300 Preshared Key 1234...
  • Page 78 Or, open VoIP>>SIP Accounts and click radio button 1. Click Edit. Set LAN/VPN as VoIP IP Address. Enter the VoIP - Speed Dial page and input the first and second group of Speed Dial Phone Number. Click Apply to save the settings. Vigor3300V+ Series User’s Guide...
  • Page 79 Open the Web interface of the router and open VoIP menu. Click SIP Account. Configure Port1 and Port2 by clicking Index number 1 and 2. Note: Do not set Stun Server when calling through VPN. Vigor3300V+ Series User’s Guide...
  • Page 80 Type relevant SIP Servers used for registration respectively. Set LAN/VPN as Register via for Port1 and Port2. After configuration, please click OK to save the settings. Vigor2910 series will go to VoIP >>SIP Account page automatically. Open VoIP>>DialPlan and click Phone Book. Add the first and second group of Speed Dial Phone Number.
  • Page 81 Enter 2200V's Web and click VoIP - SIP Related Function page. SIP related function of 2200V Setup Port 1. This page falls into two sections, SIP: Set up the SIP Server used for registration. Ports: Set up the account details. After configuration, please click OK to save the settings.
  • Page 82 Enter VoIP - DialPlan page and the first and second group of Speed Dial Phone Number. After configuration, please confirm that the VPNs are established and they can communicate with each other. (Please refer to VPN - IPSec - LAN to LAN Usage Example 2). Start to dial by using telephones.

  • Page 83: Example 5 - Practical Application Of Fxs

    3.3.5 Example 5 - Practical Application of FXS Based on the VoIP Example 1(Basic Configuration and Registration), we will introduce the practical application of FXS. Generally, the practical application of FXS falls into the following two sections. Connect the telephones (Please refer to VoIP Example 1). Two VoIP equipments call with each other.
  • Page 84 Example of lines connections Phone Number Line3(3) Outside Lines 888833 Phone1 Inside Lines Start to dial by using telephones. Phone 1 calls Phone 2---->Press 3, after hearing the dial tone press VoIP number 888829#. Phone 2 calls Phone 1---->Press 888833#, after getting through you will hear the auto reply from the PBX.

  • Page 85: Example 6 - Practical Application Of Fxo

    3.3.6 Example 6 - Practical Application of FXO Based on the VoIP Example 1(Basic Configuration and Registration), we will introduce the practical application of FXO. Generally the practical application of FXO falls into the following two sections: Connect to PSTN line By connecting 3300V+'s FXO Port 5 to a PSTN line, VoIP is seamlessly integrated to PSTN line and allows you to call not only the remote VoIP user, but also the remote PSTN user.
  • Page 86 Phone 3 calls Phone 1---->Press 12345678. After getting through you will hear the Dial tone, then press the VoIP number 888833#. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out. Or, you may wait 3 seconds if you do not press #. Connect PBX's Inside Lines.
  • Page 87 Configuration table between 3300V+ and 2910V WAN IP Port Number Phone Number Proxy Codec Port1(FXS) 888833 iptel G.729A 3300V+ 220.135.240.207 Port5(FXO) 888835 iptel G.729A 2910V 61.31.167.135 Port1(FXS) 888829 iptel G.729A Suppose the number of PBX's Outside Line is 12345678. One Inside Line is connected to a telephone with the extension 101.

  • Page 88: Example 7: Practical Application Of Isdn-Nt

    3.3.7 Example 7: Practical Application of ISDN-NT Based on Example 2 - Basic Configuration and Registration for ISDN, we will introduce the practical application of ISDN-NT. Generally, the practical application of ISDN-NT falls into the following two sections. Connect the telephones (Please refer to VoIP Example 1). Two VoIP equipments call with each other.
  • Page 89 Example of lines connections Phone Number Line3(3) Outside Lines 888833 Phone1 Inside Lines Start to dial by using telephones. Phone 1 calls Phone 2---->Press 3, after hearing the dial tone press VoIP number 888829#. Phone 2 calls Phone 1---->Press 888833#, after getting through you will hear the auto reply from the PBX.

  • Page 90: Example 8: Practical Application Of Isdn-Te

    3.3.8 Example 8: Practical Application of ISDN-TE Based on the Example 2 - Basic Configuration and Registration for ISDN, we will introduce the practical application of ISDN-TE. Generally the practical application of ISDN-TE falls into the following two sections: Connect to ISDN line By connecting 3300V+'s ISDN-TE Port 5 to a ISDN line, VoIP is seamlessly integrated to ISDN line and allows you to call not only the remote VoIP user, but also the remote ISDN user.
  • Page 91 Phone 3 calls Phone 1---->Press 12345678. After getting through you will hear the Dial tone, then press the VoIP number 888833#. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out. Or, you may wait 3 seconds if you do not press #. Connect PBX's Inside Lines.
  • Page 92 Configuration table between 3300V+ and 2910V WAN IP Port Number Phone Number Proxy Codec Port1(ISDN-NT) 888833 iptel G.729A 3300V+ 220.135.240.207 Port5(ISDN-TE) 888835 iptel G.729A 2910V 61.31.167.135 Port1(ISDN-NT ) 888829 iptel G.729A Suppose the number of PBX's Outside Line is 12345678. One Inside Line is connected to a telephone with the extension 101.

  • Page 93: Chapter 4: Reference - Advanced Web Configuration

    After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suiting his/her request, please refer to this chapter for getting detailed information about the advanced configuration of this router. As for other examples of application, please refer to chapter 3.
  • Page 94 Every 10 Seconds: Refreshes the page every 10 seconds. Every 20 Seconds: Refreshes the page every 20 seconds. Every 30 Seconds: Refreshes the page every 30 seconds. General status of this router will be displayed in this page. Model Display the model name of the router. Hardware Version Display the hardware version of the router.
  • Page 95 The status of LAN connection will be displayed in this page. Simply click LAN Status tag to get the detailed. IP Address Display the IP address of the LAN interface. MAC Address Display the MAC address of the LAN Interface. High Availability Status The High Availability Status is shown when it is enabled in Network>>...
  • Page 96 The status of WAN interface (Static, DHCP, PPPoE, PPTP or DMZ) is shown in this page. Simply click WAN Status tag to get the detailed. There are four sets of WAN status can be shown in this page at one time. The sample below just lists one set of WAN status for only WAN1 interface is used.

  • Page 97: Time

    4.1.2 Time As an NTP (Network Time Protocol) client, the router gets standard time from the time server. Some time-based functions, such as Call Schedule and URL Content filtering, cannot work properly until the system time functions run successfully. Typically, NTP achieves high accuracy and reliability with multiple redundant servers and diverse network paths.

  • Page 98: Syslog

    4.1.3 Syslog The Vigor3300V+ Series supports a Syslog function to keep a record of abnormal conditions. The router will send Syslog packets to a Syslog server on the remote site. The administrator can observe any abnormal events from the router. Open System>> Syslog. The Syslog web page is shown below: Disable/Enable Click Enable to activate this function.
  • Page 99 Syslog Severity Such feature is used to determine which types of error logs recorded under different conditions. There are eight levels representing different severities. For example, if you choose Debug as the severity, the VoIP syslog will record log including Debug, Informational, Notice, Warning, Error, Critical, Alert and Emergency.

  • Page 100: Access Control

    4.1.4 Access Control This page allows you to determine which services (HTTP/Telnet/SSH) is used for the user to access Vigor router. In addition, you can also limit some hosts to access router Series with specified IP address. Open System>> Access Control. You will get the following page: Management Method There are several servers provided by the system to allow you managing the router from Internet.

  • Page 101: Configuration Setup

    4.1.5 Configuration Setup Most of the settings can be saved locally as a configuration file, and can be applied to another router. The Vigor3300V+ Series supports the restore and upload functions of the configuration files. Open System>>Configuration. You can see the following page. Select a Configuration File Please click the Browse…...

  • Page 102: Firmware Upgrade Setup

    Firmware upgrade can be done from a console port, too. The following example was run on a Windows environment. 1. Download the newest firmware from the DrayTek Website (www.draytek.com.tw) or FTP site (ftp.draytek.com) on your computer first. 2. Connect the RJ45 connector of console cable to the console port on Vigor3300 and the DB9 connector of the console cable to the RS232 port on the PC.
  • Page 103 4. Open Hyper Terminal on the PC. Now, Vigor3300V+ can accept a TFTP download and will display the following message: **************************** * DrayTek V3300 Bootloader * **************************** Press [ENTER] key within 5 sec. to download image...2 Current LAN IP is 192.168.1.1 New IP: Prepare downloading.
  • Page 104 Now in the Console you will find the following information. When Updating flash block at bfXXXXXX appears, it means the firmware is under downloading. 7. When set flash0_0 "780000:800000:general" appears, it means the firmware downloading has been completed. The router will reboot itself and you will see the Firmware version: V2.X.X.

  • Page 105: Reboot

    4.1.7 Reboot The Vigor router system can be restarted from a Web browser. Reboot screen can appear after you finish the changing of WAN and LAN settings. You have to reboot the router to invoke the configured settings that you made before. Besides, you can select Reset to factory default to reboot the device and retrieve the default settings.

  • Page 106: Diagnostic Tools

    4.1.8 Diagnostic Tools In some cases, a user may need to know some information about the router, such as static or dynamic databases, or other routing information. The Vigor3300V+ supports five functions, Routing Table, ARP Cache Table, DHCP Assignment Table, NAT Active Sessions Table and Data Flow Monitor for the user to review such information.
  • Page 107 Select View ARP Cache Table to get the following page: IP Address Display the IP address for different ARP cache. MAC Address Display the MAC address for different ARP cache. Interface Denoted by eth0 if it is a LAN interface and eth1 if it is a WAN interface.
  • Page 108 Select View NAT Active Sessions Table to get the following page. This table can display about 30000 sessions with 20 pages. Type Display the protocol used for the active session. Expire in Display the remaining time (second) of this session. State Display the condition of this session.

  • Page 109: Network Setup

    Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column.

  • Page 110: Wan

    via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP. Below shows the menu items for Network. 4.2.1 WAN The Vigor3300V+ Series supports four WAN interfaces (Static, DHCP, PPPoE and PPTP), which share the same setting page.
  • Page 111 Load Balance Adds this WAN interface to the load balance group. Weight Set the weight load (10-90%) for this WAN interface for load balance. This selection is available only when Auto Weight is unchecked. Backup-Master Set this WAN interface as a master interface. WAN1 must be assigned as Master interface if Backup function is enabled.
  • Page 112 It means that the IP group information for WAN interface is manually assigned by the user. IP Address Set the private IP address of WAN interface. Subnet Mask Set the subnet mask value of WAN interface. Default Gateway Set the private IP address of gateway. Primary DNS Set the private IP address of primary DNS.
  • Page 113 received by the router, the connection of WAN interface will be regarded as breaking down. Detect Destination Host Assign an IP address or Domain name as a destination to be (IP or Domain Name) detected whether the host is active (sending reply to the router) or not.
  • Page 114 connection of the WAN. After passing the times you set in this field and no reply received by the router, the connection of WAN interface will be regarded as breaking down. Detect Destination Host (IP or Domain Name) - Assign an IP address or Domain name as a destination to be detected whether the host is active (sending reply to the router) or not.
  • Page 115 Service Name Assign a service name required for some ISP services. PPPoE IP Alias Set other IP addresses binding in this interface. You can set up to 32 sets of IP alias settings. If you have typed addresses here, you can see and choose it in later web page settings (e.g., Advanced >>...
  • Page 116 provided for widest compatibility. The default value is PAP. The password will be encrypted in CHAP but not in PAP. Service Name Assign a service name required for some ISP services. PPTP Local Address Assign a local IP address. PPTP Subnet Mask Assign a subnet mask value of IP address.

  • Page 117: Load Balance Policy

    IP Address Set the private IP address of WAN interface. Subnet Mask Set the subnet mask value of WAN interface. DMZ Host Type Choose NAT Mode or Routing Mode as the DMZ host type. Outgoing Interface This setting is available when Routing Mode selected as DMZ host type.
  • Page 118 Protocol Display the protocol used for this entry. Source IP Display the source IP address specified for this entry. Subnet Mask Display the subnet mask address specified for the source IP of this entry. Dest IP Display the destination IP address specified for this entry. Subnet Mask Display the subnet mask address specified for the destination IP of this entry.
  • Page 119 Protocol Select the desired protocol for the selected entry. Source IP/Subnet Mask Assign a source IP address and subnet of certain host in LAN for applying load balance policy. Dest IP/Subnet Mask Assign a destination IP address and subnet of certain host in LAN for applying load balance policy.

  • Page 120: Auto Load Balance

    4.2.3 Auto Load Balance Because the network between China Telecom and China CNC are disconnected, such function is designed to do auto load balance and separate the packets among China Telecom, China CNC and other regions via different WAN interfaces. For example, if you check WAN1 and WAN4 for China Telecom, packets belong to China Telecom will pass through the specified WAN interfaces only;...
  • Page 121 In the Vigor3300V+ router, there are some IP address settings for the LAN interface. The IP address/subnet mask is for private users or NAT users. The IP address of the default gateway on other local PCs should be set as the Vigor3300 Series’ server IP address. When the DSL connection between the DSL and the ISP has been established, each local PC can directly route to the Internet.
  • Page 122 This page allows users to specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to. WAN Interface Choose the WAN interface for applying relay agent. DHCP Server IP Address Type the IP address for the DHCP server. This page allows users to type in secondary IP address for connecting to a subnet.

  • Page 123: High Availability

    LAN Interface Select a proper LAN interface for WAN interface (WAN1/WAN2/WAN3/WAN4). Note: Vigor3300V supports four WAN interfaces, yet Vigor3300/Vigor3300B+ support three WAN interfaces. That is, #WAN4 will be disabled for Vigor3300/Vigor3300B+. 4.2.5 High Availability The High Availability (HA) feature refers to the awareness of component failure and the availability of backup resources.
  • Page 124 High Availability Disables or enables this function. When the master device fails down, the slave device will take its work over. Group Number Assign a group number. The range is from 1 to 255. PCs on the same group (in LAN) can support for each other. Role Select a role for this device as Master or Slave.

  • Page 125: Rip Configuration

    4.2.6 RIP Configuration The Routing Information Protocol (RIP) is a dynamic routing protocol used in local and wide area networks. The routing information packet will be sent out by web server or router periodically, and can be used to communicate with other routers. It will calculate the number of network nodes on the route to ensure there is no obstruction on the network routine.
  • Page 126 4.2.6 Bandwidth Management This function is used to limit user bandwidth. This function allows users to configure general settings for bandwidth management. Click Network >>Bandwidth Management and then choose General Setup. You will get the following page. Enable/Disable Disables or enables this function. Default TX Limit Define the default speed of the upstream for each computer in LAN.
  • Page 127 Start IP Display the start IP address of bandwidth. End IP Display the End IP address of bandwidth. TX Limit Display the size limit for the transmitted packets. RX Limit Display the size limit for the received packets. Edit Click this button to open the edit page for adjusting the settings.

  • Page 128: Limit Session

    RX Limit Define the limitation for the speed of the downstream. If you do not set the limit in this field, the system will use the default speed for the specific limitation you set for each index. Apply After finishing the configuration, please click this button to invoke these settings.
  • Page 129 Start IP Display the start IP address. End IP Display the end IP address. Session Number Display the session number. Edit Click this button to open the edit page for adjusting the settings. Delete/Delete All Click this button to delete the selected setting or all settings. A confirmation dialog box will appear.

  • Page 130: Advanced Setup

    In the Advanced menu, there are several items offered here for you to adjust for the router. 4.3.1 Static Route Setup When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other methods. You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP.

  • Page 131: Nat Setup

    The system allows users to set up to 10 static routes for the router. To edit static route for certain item, select the radio button of the item and click Edit on the bottom of the page. The following web page will be displayed: Network Interface Select a network interface as a destination to be sent.
  • Page 132 of multiple public IP addresses. It also plays a security role by obscuring the true IP addresses of important machines from potential hackers on the Internet. The Vigor 3300 Series is NAT-enabled by default and gets one globally routable IP addresses from the ISP by Static, PPPoE, or DHCP mechanism.
  • Page 133 Private IP Display the private IP used for this entry. Private Port Start Display the start point in the range of private port. Private Port End Display the end point in the range of private port. Use IP Alias Display the using status for WAN IP alias. WAN Interface Display the WAN interface of this profile.
  • Page 134 WAN Interface It is a pull-down window; user can select one specific WAN interface. IP Alias It is a pull-down window; user can select one specific IP address assigned in IP Alias group of WAN interfaces. Click Apply to reboot the system and apply the settings. Note: The port forwarding function could redirect the Internet traffic, which has the destination port within the public port range and has the same IP address as WAN Interface or IP Alias that you set.
  • Page 135 Protocol Select the transport layer protocol. It could be TCP, UDP, or All for selection. Public IP Select an IP address (the selections provided here are set in IP Alias List of Network >>WAN interface). Local host can use this IP to connect to Internet. If you want to choose any on of the Public IP settings, you must specify some IP addresses in the IP Alias List of the Static/DHCP Configuration page first.
  • Page 136 Click Advanced >> NAT and choose DMZ Host to get the corresponding page. WAN Interface Display the WAN interface chosen for this entry. Private IP Display the private IP address of this entry. Use IP Alias Display the activation status (enable or disable) of this DMZ host.

  • Page 137: Radius Setup

    4.3.3 RADIUS Setup A RADIUS (Remote Authentication Dial-In User Service) is a security authentication client/server protocol widely used by Internet service providers on other remote access service. A RADIUS is the most common means of authenticating and authorizing dial-up and tunneled network users. The built-in RADIUS client function allows you to extend the remote dial-in user accounts to the RADIUS server.

  • Page 138: Port Block

    Enable/Disable Click Disable to disable this function. Click Enable to activate this function. Server IP Address Assign an IP address of a Radius server. Destination Port Assign a destination port number used for Radius function. Shared Secret Assign a code for authentication to server. The RADIUS server and client share a secret which is used to authenticate the messages sent between them.
  • Page 139 Before you set up the Dynamic DNS function, you have to subscribe free domain names from the Dynamic DNS service providers. The router provides up to ten accounts for the function and supports the following providers: www.dynsns.org, www.no-ip.com, www.dtdns.com, www.changeip.com, www.ddns.cn. You should visit their websites for registering your own domain name on the router.
  • Page 140 Server Type Select Static, Dynamic or Custom type for this entry of DDNS settings. Domain Name Assign a private domain name to be accessed. Login Name Assign a name to login into DDNS server. Login Password Assign a password to login into DDNS server. Wild Card If you want anything-here.yourhost.dyndns.org to work (EX.

  • Page 141: Call Schedule Setup

    4.3.6 Call Schedule Setup These call schedule profiles will control the up or down time of the router’s dialer or connection manager. In order to do the proper call schedule function, a user must have to setup time function and arrange schedules for specified Internet access profile or LAN-to-LAN profile.

  • Page 142: Wan Port Mirroring Setup

    Enable/Disable Click Disable to disable this function. Click Enable to activate this function. Start Date Assign a date for starting this profile. Start Time Assign a time for starting this profile. Action Force down means to inactivate the Network Interface. Force up means to activate the Network Interface.
  • Page 143 more ports within a VLAN at the same time. Thirdly, it can transfer all data traffics to be mirrored to one analyzer connect to the mirroring port. Last, it is more convenient and easy to configure in user’s interface. Click Advanced>>WAN Port Mirroring. You will see the following page. Enable/Disable Click Disable to disable this function.

  • Page 144: Lan Port Mirroring Setup

    4.3.8 LAN Port Mirroring Setup Port mirror can be applied for the users in LAN. It has the same mechanism like WAN port mirroring. Click Advanced >> LAN Port Mirroring. Enable/Disable Click Disable to disable this function. Click Enable to activate this function.
  • Page 145 P1 – P4 Check the box to make the computer connecting to the port being grouped in the specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box. For example, if you check the boxes of VLAN0-P1 and VLAN1-P1, you can make P1 to be grouped under VLAN0 and VLAN1 simultaneously.
  • Page 146 Another way to set VLAN is based on 802.1Q. Please choose 802.1Q VLAN to open the following page. This page is available only for the PCs with certain network cards which support 802.1Q VLAN feature. It is useless for general network cards. Active Check this box to activate the settings of this entry.

  • Page 147: Snmp

    operation for each VLAN in this page for obtaining proper control. Use the drop down list to choose a tag operation for each port. Tagged – All the computers behind that port must support VLAN and are tagged with certain VLAN groups with specified ID numbers.
  • Page 148 An NMS executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs must exist on any managed network. There are two items for SNMP – SNMP Community and SNMP Traps. In general, NMSs in the community exist within the same administrative domain.
  • Page 149 Apply Click Apply to save this setting and return the previous page. To delete an item, click the radio button of the item that you want to delete. Then click Delete on the bottom of the page to remove the entry. A dialog will be prompted for you to ask confirmation.

  • Page 150: Firewall Setup

    The firewall controls the allowance and denial of packets through the router. Firewall Setup in the Vigor 3300 Series mainly consists of packet filtering, Denial of Service (DoS) and URL (Universal Resource Locator) content filtering facilities. These firewall filters help to protect your local network against attack from outsiders. A firewall also provides a way of restricting users on the local network from accessing inappropriate Internet content and can filter out specific packets, which may trigger unexpected outgoing connection such as a Trojan.
  • Page 151 Group Table allows you to set definitions for different groups of the filters that will be applied for the function of IP filter. Index Allow you to change current IP filter table or add new rule for current group. Click the number link to get into the IP filter table page for editing.
  • Page 152 Besides, you can add new filter rule for the group. On the edit page of IP Filter Table, click the Add Rule button. The following page will be shown. Source IP It means the source IP address. Placing the symbol “!” before a particular IP address will prevent this rule from being applied to that IP address.
  • Page 153 the port number to be the value of the Start Port column. Otherwise, the port number ranges from the Start Port to the End Port including the Start Port and the End Port. (!=) - If the End Port column is empty, the port number is not equal to the value of the Start Port column.

  • Page 154: Dos

    Block immediately - Block the packet immediately. Pass immediately - Pass the packet immediately. Block if no further match - means to locks the packet if no further rules are matched. Pass if no further match - means to passes the packet if no further rules are matched.
  • Page 155 DoS Defense Enables or disables the DoS Defense function. The default value is Disable. Enable SYN Flood Defense Activates the SYN flood defense function. If the amount of TCP SYN packets from the Internet exceeds the user-defined threshold value, the router will be forced to randomly discard the subsequent TCP SYN packets within the user-defined timeout period.

  • Page 156: Url Filter

    The URL content filter in the series of broadband security routers inspects every URL string in the HTTP requestt. If the entire or part of the URL string (for instance, http://www.draytek.com, as shown above) matches any activated rule, the first and the Vigor3300V+ Series User’s Guide...
  • Page 157 following associate HTTP request will be blocked. The system will discard any request, which tries to retrieve the malicious code. Notice that you must clear your browser cache first so that the URL content filter operates properly on a Web page that you visited before. The URL content filter consists of the following functions: URL Access Control, Content Filter, Restrict Web Feature and Filter Schedule.
  • Page 158 Exception List The list of IP addresses where content filter rules are not applied. Content Filter can help to avoid your employees accessing into improper websites and affecting the work efficiency; protect your children from viewing inappropriate websites and accessing chat rooms; and monitor and control web access from all computers connected to your router.
  • Page 159 Malicious code may be embedded in some executable objects, such as ActiveX, Java Applet, compressed files, executable files, Proxy, and Multimedia. For example, an ActiveX object with malicious code may gain unlimited access to the system. Java Activates the Block Java object function. The router will discard Java objects from the Internet.
  • Page 160 Filter Schedule function controls what times the URL content filter should be active. It can specify what times the URL content filtering facility should be active. Always Block The URL content filtering facility is always active. Block only at The URL content filtering facility is active during the specified times from H1:M1 to H2:M2 in one day, where H1 and H2 indicate the hours and M1 and M2 represent the minutes.

  • Page 161: Bind Ip To Mac

    4.4.4 Bind IP to MAC This function is used to bind the IP and MAC address in LAN to have a strengthen control in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC address, it might cause you not access into the Internet.

  • Page 162: Im/P2P Blocking

    Remove You can remove any item listed in IP Bind List. Simply click and select the one, and click Remove. The selected item will be removed from the IP Bind List. Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC.

  • Page 163: Quality Of Service Setup

    Source IP Specify an IP address for Vigor router to perform IM/P2P blocking. Subnet Mask Type the subnet mask for the IP address specified. Action Choose Allow to make the packet passing through. Choose Disallow to block the packet in or out. IM/VoIP/P2P Check the boxes for different applications filtering by this rule.

  • Page 164: Incoming/Outgoing Class Setup

    For the web pages for incoming class setup and outgoing class setup (incoming class filter and outgoing class filter) are similar, they will be explained in the same sections. 4.5.1 Incoming/Outgoing Class Setup Incoming/Outgoing Class Setup allows you to configure bandwidth percentage for data and voice signals transmission.

  • Page 165: Incoming/Outgoing Class Filter

    4.5.2 Incoming/Outgoing Class Filter Click the QoS option and choose Incoming Class Filter/Outgoing Class Filter. Priority You are allowed to set ten filters. The priority for the filter of number 1 is the highest; and the priority for number 10 is the lowest.
  • Page 166 Source IP Type the source IP address with subnet mask value to be applied for this filter. Destination IP Type the destination IP address with subnet mask value to be applied for this filter. Service Type Status There are three options for you to choose: Basic –...

  • Page 167: Vpn And Remote Access Setup

    configured. Advanced – Only the DiffServ CodePoint field can be configured. None –No field allowed to be configured. DiffServ CodePoint Type There are twenty-one types supported. DiffServ CodePoint The number (by hex mode) to be applied. Class Choose a filtering condition to be applied. All the class names set in Incoming/Outgoing Class Setup page will be displayed in this field.

  • Page 168: Ipsec

    supported for Vigor3300V routers. IPSec is the security architecture for IP networks. IPSec provides security services at the IP layer by enabling a system to select required security protocols. It determines the algorithms to use for the services, and puts in place any cryptographic keys required to provide the requested services.
  • Page 169 To create a VPN IPSec policy, click the Policy Table option under the IPSec menu. Refresh Refresh the page information. Edit Configure an entry. Clicking this button can guide you accessing into editing page for that IPSec tunnel. For detailed information, refer to the following section of For Default Configuration.
  • Page 170 For Default Configuration Click Default tab. The following page of default configuration will be shown: Profile Status Set the initialization of IPSec Tunnel with this profile settings. Enable – Choose this one to invoke this profile manually. In addition to select Enable, you have to click Initiate under the page of VPN-IPSec Tunnel-Policy Table.
  • Page 171 authenticated. NAT Traversal Click Enable to let multi IPSec tunnels passing through this router. Click Disable to close this function. WAN Interface The WAN interface to be used. Netbios Naming Pass – Click it to have an inquiry for data transmission Packet between the hosts located on both sides of VPN Tunnel while connecting.
  • Page 172 Mode Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposals to create a protected secure channel. Main mode is more secure than Aggressive mode since more exchanges are done in a secure channel to set up the IPSec session.
  • Page 173 Key Lifetime (quick) The rekey-renegotiated period of the IKE Phase2 keying channel. The acceptable range is from 5 to 1440 minutes (24 hours). Proposal (quick) The proposed encryption and/or authentication algorithms for IKE Phase2 negotiations. There are 2 options. Encryption algorithms –NULL/DES/3DES/AES. Authentication algorithms - MD5/SHA1 Accepted Proposal If you choose Only accept proposal listed above, only the...
  • Page 174 After finish the configuration, click Apply to apply the IPSec policy setting into the policy table. Significant fields will be summarized in the IPSec Table. Operational Status reflects the current status of the tunnel. UP means the IPSec tunnel has been established. DOWN means no tunnel existing, or termination status of the tunnel.
  • Page 175 setting TCP/UDP Service Port again. The VPN Load Balance function can keep the transmission for internal data on tunnel stably. To create a VPN IPSec policy for VPN Trunk, click the Policy Table option under the IPSec >>VPN Trunk menu. Refresh Refresh the page information.
  • Page 176 For Default Configuration To edit or add a policy, please click one of the radio buttons and click Edit. The following page of default configuration will be shown: Profile Status Set the initialization of IPSec Tunnel with this profile. Enable – Choose this one to active this profile. Disable –...
  • Page 177 NAT Traversal Click Enable to let this IPSec tunnel pass through next router. Click Disable to close this function. WAN Interface The WAN interface to be used. Local Certificate The local certificate is active for authentication if the RSA Signature option is selected in the Authentication field. These options come from the user certificate file.
  • Page 178 For Advanced Configuration Click Advanced tab. This page allows you to set advanced configuration for the specified policy. The following page of default configuration will be shown: Mode Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposals to create a protected secure channel.
  • Page 179 Key Lifetime (quick) The renegotiated period of the IKE Phase2 keying channel. The acceptable range is from 5 to 1440 minutes (24 hours). Proposal (quick) The proposed encryption and/or authentication algorithms for IKE Phase2 negotiations. There are 2 options. Encryption algorithms –NULL/DES/3DES/AES. Authentication algorithms - MD5/SHA1 Accepted Proposal If you choose Only accept proposal listed above, only the...
  • Page 180 If user expects the local gateway to act as the IKE initiator, i.e., emit the first IKE main mode message, user can click the hyperlink Initiate to start the IKE negotiation or set admin status to be always on to automatically restart IKE negotiation. During the negotiation, you can press Refresh to show the latest status of all policies.
  • Page 181 Profile Status Set the initialization of IPSec Tunnel with this profile. Enable – Choose this one to activate this profile. Disable – Choose this one to inactivate this profile. Name Type a name for this group. Local Subnet LAN subnet of this device. Remote Subnet LAN subnet of the remote client.
  • Page 182 Date/Time It displays the date and time for the operation of IPSec. Description It displays the results of the IPSec operation. Refresh It allows you to refresh the whole table. Clear It allows you to clear all the table information. This page allows you to set up the CA configuration.
  • Page 183 Generate Generate a new entry for user certification. Download Download a certification file generated from router to be stored in local host. Import Import a certificated file from the local host. Delete Delete an assigned entry. View Show configuration of the assigned entry. To generate a user certificate, please click one radio button to select the entry and click the Generate button.
  • Page 184 Organization The value of this organization. Locality (City) The local city name of this entry. State/Province The state name of this entry. Common Name The common name for this entry. Country The country name of this entry. E-mail The email address of this entry. Key Size The key size for this entry.
  • Page 185 After you click the Import button, the system will guide you to import a saved file to a place that you want. To delete a user certificate, please click the index number that you want to delete and click the delete button. A dialog box will appear to ask your confirmation. Click OK to delete it or click Cancel to leave the dialog without deletion.

  • Page 186: Pptp & L2Tp

    Byte In Display the bytes count received by this tunnel. Packet Out Display the packets count sent out by this tunnel. Byte Out Display the bytes count sent out by this tunnel. Uptime Display the time duration since the tunnel is established. Refresh Allow you to refresh current VPN status.
  • Page 187 User Name Type the user name that the other side provides for carrying out mutual authentication whenever you want. Password Type the password that the other side provides for carrying out mutual authentication whenever you want. Use DNS setting of LAN configuration. Get DNS Server from LAN Setting Get DNS Server by...
  • Page 188 Get DNS Server from LAN Use DNS setting of LAN configuration. Setting Get DNS Server by If you click this radio button, please type the primary DNS Manual Setting and secondary DNS IP address manually in the following fields. Primary DNS Type the IP address for primary DNS.
  • Page 189 User Name The user name for this entry. Group The group for this entry. Edit Allow you to edit the selected group. Type in user name and password, then choose a proper group (A, B, C or D that configured in VPN>>PPTP & L2TP>>Group Table) for this entry.

  • Page 190: Voip Setup

    Voice over Internet Protocol (VoIP) is a technology that allows you to make telephone calls using a broadband Internet connection instead of a regular (or analog) phone line. 4.7.1 Protocol You have to choose suitable protocol and specify SIP accounts for using VoIP. There are two protocols can be used for VoIP - SIP and MGCP.
  • Page 191 SIP Local Port Type the port number for SIP protocol. The default value is 5060. Active Click this box to activate this SIP proxy server setting. Outbound Proxy Check this box to enable this function for sending SIP protocol packets to an SIP proxy server. Proxy Name Type the name of the SIP proxy server.
  • Page 192 - ex: aaln/1@[1.1.1.1] mac_addr/#@[ip_addr]- ex: 000504030201/1@[1.1.1.1] aaln/#@mac_addr- ex: aaln/1@000504030201 aaln/#@ - ex: aaln/1@v3300.draytek.com Logic ID Starting Number Determine the starting number for the endpoint name. There are eight ports in Vigor3300 series. The default name for endpoint will be “aaln”. If you type “1” in this filed, the endpoint name will be “aaln/1, aaln/2…,aaln/8”.
  • Page 193 As Vigor VoIP Router is turned on, it will first register with Registrar using AccountName@Domain/Realm. After that, your call will be bypassed by SIP Proxy to the destination using AccountName@Domain/Realm as identity. You can set up to 32 SIP accounts. To edit an existing SIP Accounts, simple click the radio button for the one you want to modify.
  • Page 194 Disable/Enable Click the radio button to enable or disable the SIP account. Username Define the account name or number. Password Define the password for this account. You can change it if required. Display Name Define the name recognized by the remote end. Authentication ID Type the name or number used for SIP Authorization with SIP Registrar.
  • Page 195 calls will be displayed on the phone set. OutgoingCall CLIP display – If you choose No hidden, then the name and number of the outgoing calls will be displayed on remote end. If you choose Hidden name only, just the number of the outgoing call will be displayed.

  • Page 196: Port Settings

    4.7.2 Port Settings Port Settings page allows users to set phone number for different call receivers. Note: Users might have ISDN module or VoIP Module inserted into Vigor router. Different modules will have different web page configurations. Therefore this page will change slightly based on the modules installed on your router.
  • Page 197 Port 1 Click Enable to activate this port or Disable to close this port. Default SIP Accounts – Use the drop down list to choose one item as the default SIP account. VoIP IP Address - The interface is used to apply VoIP traffics.
  • Page 198 Hotline Number to PBX - Pre-set a phone number to make the port dialing out to PBX automatically. Manual Disconnection - Click Disconnect to disconnect this phone line manually. Codec Preferred Codec - It can be applied on this port. Vigor3300 supports five Codecs.
  • Page 199 tone as audio directly when you press the keypad on the phone. OutBand (RFC2833): Choose this one then the Vigor will capture the keypad number you pressed and transform it to digital form then send to the other side; the receiver will generate the tone according to the digital form it receive.
  • Page 200 Unattended mode – 1. At the first, phone A and phone B talk on the phone. 2. Phone A presses flash hook. (phone A will play dialtone, yet phone B will hold and wait) Next, phone A dials "4" and presses "#" immediately (phone A still plays dial tone) Phone A dials the phone number of phone C for phone A wants to transfer phone B to Phone C.
  • Page 201 Under CHT mode, call waiting and call transfer function will Call Waiting - You can hear waiting tone while a new phone call is incoming, then you can do: (1) Flash hook: This procedure always holds the current connection and connect with the second connection. (2) On hook: This procedure disconnects the current connection and connects with the new phone call.
  • Page 202 When you click Edit, the following page will appear for you to configure. (Such page is available for FXO module) Port Click Enable to activate this port or Disable to close this port. Default SIP Accounts – Use the drop down list to choose one item as the default SIP account.
  • Page 203 Single Codec - If you checked this box, only preferred codec will be used for outgoing and incoming calls. And if the remote end does not support such Codec, the VoIP communication will be failed. Codec Rate - Type the rate value to be applied on this port. Codec VAD- Enable or Disable VAD (Voice Activity Detection).

  • Page 204: Speed Dial

    DTMF tone and transfer it into SIP form. Then it will be sent to the remote end with SIP message. DTMF Volume – Determine the volume of DTMF voice signal. The more the number is set, the greater the sound is. PIN Code On-Net PIN Service - If the phone call is from PSTN to Internet via FXO port, the caller should input 4-digit PIN...
  • Page 205 Match String Display the pattern of a dial plan entry. Min Length Display the minimum length of digits. Max Length Display the maximum length of digits. Prefix Strip Display the number of prefix digits to strip of the entry. Prefix Add Display the prefix string to be added of the entry.
  • Page 206 hyphen, letter "X", and letter "T". The letter "X" means any digit. The dot symbol means repeat of the previous symbol. The brackets and hyphen are used for a range of digits. The letter "T" means waiting for timeout value while matches this pattern.
  • Page 207 Match String: 0x.T. Next, Vigor3300V+ will delete the first digit number “0” and add “886” instead. At last, the new number “8862111199999@draytek.com” will be dialed out. From the above figure, we know the Max Length is set with “10”. Therefore, if the caller dials “035972727” (only 9 digits), he must dial “#”...

  • Page 208: Miscellaneous

    4.7.5 Miscellaneous This page includes RTP and T.38 Starting Port, T.38 Redundancy Number, VoIP ToS, and FAX Ringing settings. RTP Starting Port The starting port number for RTP protocol packet. The default setting is 13456. T.38 Starting Port The starting port number for T.38 protocol packet. The default setting is 49170.

  • Page 209: Tone Settings

    Ringing Cadence - Off Determine the length for the incoming calls to stop ringing. 4.7.6 Tone Settings This setting is provided for fitting the telecommunication custom for the local area of the router installed. Wrong tone settings might cause inconvenience for users. To set the sound pattern of the phone set, simply choose a proper region to let the system find out the preset tone settings and caller ID type automatically.
  • Page 210 Congestion tone A tone means the network is busy. Low Frequency (Hz) Type the low frequency number in Hertz. High Frequency (Hz) Type the high frequency number in Hertz. TOn1 (10msec) Type the duration of the first ring. TOff1 (10msec) Type the silence duration after the first ring.

  • Page 211: Qos

    4.7.7 QoS This Quality of Service (QoS) function is only for the VoIP feature. When this function is enabled, the Vigor 3300 Series will set rate limitation for incoming and outgoing transmissions to ensure the best quality of service in VoIP. Disable Click this button to disable QoS function.

  • Page 212: Nat Traversal

    4.7.8 NAT Traversal NAT traversal is a challenge that all Service Providers looking to deliver public IP-based voice and multimedia services must solve. The goal of this function is to provide secure connection to subscribers behind NAT (Network Address Translation) devices and Firewalls. Overcoming this traversal problem will lead to widespread deployment of profitable voice and multimedia over IP services to any subscriber with broadband connection.

  • Page 213: Incoming Call Barring

    STUN Server Port - Type the port number of the STUN server. Symmetric Media Disable symmetric RTP and T.38 – Click this button to make RTP and T.38 being not symmetrical. Enable symmetric RTP and T.38 - Click this button to make RTP and T.38 being symmetrical.
  • Page 214 IP/Domain - Enable or Disable this function to take the value of Speed Dial Destination to be checked. Speed Dial Entries Type the range to be checked. The default value is from 1 to 150. The Vigor3300 Series supports up to 30 entries in the Allow List table. When you choose Allow only calls from allow list as the Barring Class, only the people listed in this list can call this router.

  • Page 215: Call History

    4.7.10 Call History This page lists the call history through Vigor3300. You can click Refresh to get the latest history information for these VoIP phones. Besides, this page refreshes automatically every 10 seconds. Refresh Option You can click Refresh to get the latest status information for these VoIP phones.

  • Page 216: Tone Upload

    Received; OR: Octets Received; PL: Packets Lost; JI: Interarrival Jitter Estimate (ms); LA: Average TX Delay(ms)). Codec Type The Codec mode used for this phone calling. Packet Period The period of time for sampling on voice signal. The status of VAD. DTMF Relay The status of DTMF.

  • Page 217: Status

    4.7.12 Status This page displays the connection status for VoIP phone calls. Refresh Option You can click Refresh to get the latest status information for these VoIP phones. In addition, you can set the time interval of refreshing. Use the drop down list of Refresh Option to choose an automatic refreshing setting.

  • Page 218: Config Activate

    This page displays the registration status for SIP accounts. Refresh Option You can click Refresh to get the latest status information for these VoIP phones. In addition, you can set the time interval of refreshing. Use the drop down list of Refresh Option to choose an automatic refreshing setting.
  • Page 219 Vigor3300V+ Series User’s Guide...

  • Page 220: Chapter 5: Trouble Shooting

    This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. Checking if the hardware status is OK or not. Checking if the network connection settings on your computer are OK or not.
  • Page 221 The example is based on Windows XP. As to the examples for other operation systems, please refer to the similar steps or find support notes in www.draytek.com. Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties.
  • Page 222 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used MacOs on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4.

  • Page 223: Pinging The Router From Your Computer

    The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most important thing is that the computer will receive a reply from 192.168.1.1. If not, please check the IP address of your computer.

  • Page 224: Checking If The Isp Settings Are Ok Or Not

    Go to the web configuration GUI (http://192.168.1.1), click Network >> WAN to check your ISP settings for IP modes. Make sure the Active check box has been selected. Click the Edit icon to open the WAN setting page. There are four IP modes, Static, DHCP, PPPoE and PPTP provided by the router.
  • Page 225 Check if Service Name (optional) is correct or not. It is required by some ISPs. After finishing the settings, go to System - Status page and click WAN Status. You will get a correct web page of WAN settings. Check if the values of IP Address, Subnet Mask, Gateway IP Address and Primary DNS that you got from ISP are set properly or not.
  • Page 226 If anything wrong, please retype correct values and try the network connection again. After finishing the settings, go to System - Status page and click WAN Status. You will get a correct web page of WAN settings. Check if Host Name (optional) and Domain Name (optional) are correct or not. Both them are required for some ISPs.
  • Page 227 Check if the settings of Username and Password are correct or not. Check if the setting of Authentication is correct or not. You may need to try both PAP and CHAP. Check if the value of PPTP Local Address, PPTP Subnet Mask, and PPTP Remote Address are correct or not.

  • Page 228: Backing To Factory Default Setting If Necessary

    After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor3300V+ Series User’s Guide...
  • Page 229 This page is left blank. Vigor3300V+ Series User’s Guide...

  • Page 230: Appendix: Hardware Specifications

    Temperature Operating : 0°C ~ 45°C Storage : -25°C ~ 65°C Humidity 10% ~ 90% ( non-condensing ) Max. Power Consumption 60 Watt Dimension L440 * W280 * H44 ( mm ) Power 100 ~ 240 V AC Vigor3300V+ Series User’s Guide...

Table of Contents