Comtrend Corporation VI-3223u User Manual
  1. Manuals
  2. Brands
  3. Comtrend Corporation Manuals
  4. Gateway
  5. VI-3223u
  6. User manual

Comtrend Corporation VI-3223u User Manual

Multi-dsl wlan iad
Hide thumbs
Table of Contents

Advertisement

Quick Links

VI-3223u
Multi-DSL WLAN IAD

User Manual

Version B1.0, July 19, 2013
261099-020

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the VI-3223u and is the answer not in the manual?

Questions and answers

Related Manuals for Comtrend Corporation VI-3223u

Summary of Contents for Comtrend Corporation VI-3223u

  • Page 1: User Manual

    VI-3223u Multi-DSL WLAN IAD User Manual Version B1.0, July 19, 2013 261099-020...
  • Page 2 Preface This manual provides information related to the installation and operation of this device. The individual reading this manual is presumed to have a basic understanding of telecommunications terminology and concepts. If you find the product to be inoperable or malfunctioning, please contact technical support for immediate service by email at INT-support@comtrend.com For product update, new product release, manual revision, or software upgrades,...
  • Page 3 Copyright Copyright© 2013 Comtrend Corporation. All rights reserved. The information contained herein is proprietary to Comtrend Corporation. No part of this document may be translated, transcribed, reproduced, in any form, or by any means without the prior written consent of Comtrend Corporation.

  • Page 4: Table Of Contents

    Table of Contents CHAPTER 1 INTRODUCTION ......................5 1.1 F ............................5 EATURES 1.2 A ........................... 6 PPLICATION CHAPTER 2 INSTALLATION ......................7 2.1 H ........................... 7 ARDWARE ETUP 2.2 LED I ..........................9 NDICATORS CHAPTER 3 WEB USER INTERFACE .................... 11 3.1 D ........................
  • Page 5 5.14 DLNA ............................69 5.15 S ........................70 TORAGE ERVICE 5.15.1 Storage Device Info ......................71 5.16 I ......................... 72 NTERFACE ROUPING 5.17 IPS ............................75 5.18 C ..........................79 ERTIFICATE 5.18.1 Local ..........................79 5.18.2 Trusted CA ........................82 5.19 M ..........................

  • Page 6: Chapter 1 Introduction

    Chapter 1 Introduction The VI-3223u Multi-DSL WLAN IAD provides wired and wireless access for high-bandwidth applications in the home or office. It includes four RJ-45 Ethernet LAN ports and supports ADSL2+ and VDSL2 connections through one RJ-11 port. ADSL2+ connections support multiple simultaneously Internet connections while VDSL2 connections are suitable for triple play (Video + Voice + Data) applications.

  • Page 7: Application

    1.2 Application The following diagram depicts a typical application of the VI-3223u.

  • Page 8: Chapter 2 Installation

    Chapter 2 Installation 2.1 Hardware Setup Follow the instructions below to complete the hardware setup. Non-stackable This device is not stackable – do not place units on top of each other, otherwise damage could occur. BACK PANEL The figure below shows the back panel of the device. DSL Port Connect the ADSL2+/VDSL line to this port with a RJ-11 (telephone) cable.

  • Page 9: Led Indicators

    2.2 LED Indicators). NOTE: If pressed down for more than 20 seconds, the VI-3223u will go into a firmware update state (CFE boot mode). The firmware can then be updated using an Internet browser pointed to the default IP address.
  • Page 10 2.2 LED Indicators The front panel LED indicators are shown below and explained in the following table. This information can be used to check the status of the device and its connections. Color Mode Function The device is powered up. Green The device is powered down.
  • Page 11 FXS phone line is on hook. The DSL link is established. DSL is not ready / modem is still booting. Green Blink Slow(2Hz) The DSL link is ready for connection. Fast(4Hz) DSL Link is training. IP connected and no traffic detected. If an IP or PPPoE session is dropped due to an idle timeout, the light will remain green if an ADSL connection is still present.

  • Page 12: Chapter 3 Web User Interface

    3.2 IP Configuration DHCP MODE When the VI-3223u powers up, the onboard DHCP server will switch on. Basically, the DHCP server issues and reserves IP addresses for LAN devices, such as your PC. To obtain an IP address from the DCHP server, follow the steps provided below.
  • Page 13 STEP 4: Click OK to submit these settings. If you experience difficulty with DHCP mode, you can try static IP mode instead.
  • Page 14 STATIC IP MODE In static IP mode, you assign IP settings to your PC manually. Follow these steps to configure your PC IP address to use subnet 192.168.1.x. NOTE: The following procedure assumes you are running Windows XP. However, the general steps involved are similar for most operating systems (OS).

  • Page 15: Login Procedure

    3.3 Login Procedure Perform the following steps to login to the web user interface. NOTE: The default settings can be found in 3.1 Default Settings. STEP 1: Start the Internet browser and enter the default IP address for the device in the Web address field.
  • Page 16 STEP 3: After successfully logging in for the first time, you will reach this screen.

  • Page 17: Chapter 4 Device Information

    Chapter 4 Device Information The web user interface window is divided into two frames, the main menu (at left) and the display screen (on the right). The main menu has several options and selecting each of these options opens a submenu with more selections. NOTE: The menu items shown are based upon the configured connection(s) and user account privileges.

  • Page 18: Wan

    4.1 WAN Select WAN from the Device Info submenu to display the configured PVC(s). Heading Description Interface Name of the interface for WAN Description Name of the WAN connection Type Shows the connection type VlanMuxId Shows 802.1Q VLAN ID IPv6 Shows WAN IPv6 address IGMP Shows Internet Group Management Protocol (IGMP) status...

  • Page 19: Statistics

    4.2 Statistics This selection provides LAN, WAN, ATM/PTM and xDSL statistics. NOTE: These screens are updated automatically every 15 seconds. Click Reset Statistics to perform a manual update. 4.2.1 LAN Statistics This screen shows data traffic statistics for each LAN interface. Heading Description Interface...

  • Page 20: Wan Statistics

    4.2.2 WAN Statistics This screen shows data traffic statistics for each WAN interface. Heading Description Interface WAN interfaces Description WAN service label Received/Transmitted - Bytes Number of Bytes - Pkts Number of Packets - Errs Number of packets with errors - Drops Number of dropped packets...

  • Page 21: Xtm Statistics

    4.2.3 xTM Statistics The following figure shows Asynchronous Transfer Mode (xTM) statistics. ATM Interface Statistics Heading Description Port Number ATM PORT (0-3) In Octets Number of octets received over the interface Out Octets Number of octets transmitted over the interface In Packets Number of packets received over the interface Out Packets...

  • Page 22: Xdsl Statistics

    4.2.4 xDSL Statistics The xDSL Statistics screen displays information corresponding to the xDSL type. The ADSL example is shown below.
  • Page 23 Click the Reset Statistics button to refresh this screen. Field Description Mode G.Dmt, G.lite, T1.413, ADSL2, ADSL2+,VDSL, VDSL2 Traffic Type Channel type Interleave or Fast Status Lists the status of the DSL link Link Power State Link output power state.
  • Page 24 Line Coding (Trellis) Trellis On/Off SNR Margin (0.1 dB) Signal to Noise Ratio (SNR) margin Attenuation (0.1 dB) Estimate of average loop attenuation in the downstream direction. Output Power Total upstream output power (0.1 dBm) Attainable Rate (Kbps) The sync rate you would obtain. Rate (Kbps) Current sync rates downstream/upstream In VDSL mode, the following section is inserted.
  • Page 25 OH Frames Total number of OH frames OH Frame Errors Number of OH frames received with errors RS Words Total number of Reed-Solomon code errors RS Correctable Errors Total Number of RS with correctable errors RS Uncorrectable Total Number of RS words with uncorrectable errors Errors HEC Errors Total Number of Header Error Checksum errors...
  • Page 27 xDSL TONE GRAPH Click Draw Tone Graph on the xDSL Statistics screen and a pop-up window will display the xDSL bits per tone status, as shown below.

  • Page 28: Route

    4.3 Route Choose Route to display the routes that the VI-3223u has found. Field Description Destination Destination network or destination host Gateway Next hub IP address Subnet Mask Subnet Mask of Destination Flag U: route is up !: reject route...

  • Page 29: Arp

    4.4 ARP Click ARP to display the ARP information. Field Description IP address Shows IP address of host pc Flags Complete, Incomplete, Permanent, or Publish HW Address Shows the MAC address of host pc Device Shows the connection interface...

  • Page 30: Dhcp

    4.5 DHCP Click DHCP to display all DHCP Leases. Field Description Hostname Shows the device/host/PC network name MAC Address Shows the Ethernet MAC address of the device/host/PC IP Address Shows IP address of device/host/PC Expires In Shows how much time is left for each DHCP Lease...

  • Page 31: Nat Session

    4.6 NAT Session Click the “Show All” button to display the following. Field Description Source IP The source IP from which the NAT session is established Source Port The source port from which the NAT session is established Destination IP The IP which the NAT session was connected to Destination Port The port which the NAT session was connected to...

  • Page 32: Chapter 5 Advanced Setup

    Chapter 5 Advanced Setup The following screen shows the advanced menu options.

  • Page 33: Layer 2 Interface

    5.1 Layer 2 Interface The ATM interface screen is described here. 5.1.1 ATM Interface Add or remove ATM interface connections here. Click Add to create a new ATM interface (see Appendix G - Connection Setup). NOTE: Up to 8 ATM interfaces can be created and saved in flash memory. To remove a connection, select its Remove column radio button and click Remove.

  • Page 34: Ptm Interface

    5.1.2 PTM Interface Add or remove PTM interface connections here. Click Add to create a new connection (see Appendix G - Connection Setup). To remove a connection, select its Remove column radio button and click Remove. 5.1.3 ETH Interface This screen displays the Ethernet WAN Interface configuration. NOTE: This option only applies to models with an Ethernet WAN port.

  • Page 35: Wan Service

    5.2 WAN Service This screen allows for the configuration of WAN interfaces. Click the Add button to create a new connection. For connections on ATM or PTM WAN interfaces see Appendix G - Connection SetupAppendix G - Connection Setup. NOTE: ATM and PTM service connections cannot coexist.

  • Page 36: Lan

    5.3 LAN Configure the LAN interface settings and then click Apply/Save. Consult the field descriptions below for more details. GroupName: Select an Interface Group. LAN INTERFACE IP Address: Enter the IP address for the LAN port. Subnet Mask: Enter the subnet mask for the LAN port. Enable IGMP Snooping: Enable by ticking the checkbox Standard Mode: In standard mode, multicast traffic will flood to all bridge ports when no client subscribes to a multicast...
  • Page 37 Static IP Lease List: A maximum of 32 entries can be configured. To add an entry, enter MAC address and Static IP and then click Save/Apply. To remove an entry, tick the corresponding checkbox in the Remove column and then click the Remove Entries button, as shown below. DHCP Server Relay: Enable with checkbox and enter DHCP Server IP address.

  • Page 38: Nat

    5.4 NAT To display this option, NAT must be enabled in at least one PVC shown on the Chapter 5 Advanced Setup . NAT is not an available option in Bridge mode. 5.4.1 Virtual Servers Virtual Servers allow you to direct incoming traffic from the WAN side (identified by Protocol and External port) to the Internal server with private IP addresses on the LAN side.

  • Page 39: Port Triggering

    Consult the table below for field and header descriptions. Field/Header Description Use Interface Select a WAN interface from the drop-down box. Select a Service User should select the service from the list. Custom Service User can enter the name of their choice. Server IP Address Enter the IP address for the server.
  • Page 40 Consult the table below for field and header descriptions. Field/Header Description Use Interface Select a WAN interface from the drop-down box. Select an Application User should select the application from the list. Custom Application User can enter the name of their choice. Trigger Port Start Enter the starting trigger port number (when you select custom application).

  • Page 41: Dmz Host

    5.4.3 DMZ Host The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer. To Activate the DMZ host, enter the DMZ host IP address and click Save/Apply. To Deactivate the DMZ host, clear the IP address field and click Save/Apply.

  • Page 42: Ip Address Map

    5.4.4 IP Address Map Mapping Local IP (LAN IP) to some specified Public IP (WAN IP). It allows you to forward all requests directed to public IP addresses provided by ISP through the IAD's NAT interfaces. Once configured, all traffics to those public IP addresses will be forwarded to a specific host or server behind this IAD.
  • Page 43 One to One: mapping one local IP to a specific public IP Many to One: mapping a range of local IP to a specific public IP Many to Many(Overload): mapping a range of local IP to a different range of public IP Many to Many(No Overload): mapping a range of local IP to a same range of public IP...

  • Page 44: Security

    5.5 Security To display this function, you must enable the firewall feature in WAN Setup. For detailed descriptions, with examples, please consult Appendix A - Firewall 5.5.1 IP Filtering This screen sets filter rules that limit IP traffic (Outgoing/Incoming). Multiple filter rules can be set and each applies at least one limiting condition.
  • Page 45 Consult the table below for field descriptions. Field Description Filter Name The filter rule label. IP Version IPv4 selected by default. Protocol TCP, TCP/UDP, UDP, or ICMP. Source IP address Enter source IP address. Source Port (port or port:port) Enter source port number or range. Destination IP address Enter destination IP address.
  • Page 46 On the following screen, enter your filter criteria and then click Apply/Save. Consult the table below for field descriptions. Field Description Filter Name The filter rule label IP Version IPv4 selected by default. Protocol TCP, TCP/UDP, UDP, or ICMP. Source IP address Enter source IP address.

  • Page 47: Mac Filtering

    Each network device has a unique 48-bit MAC address. This can be used to filter (block or forward) packets based on the originating device. MAC filtering policy and rules for the VI-3223u can be set according to the following procedure. The MAC Filtering Global Policy is defined as follows. FORWARDED means that all MAC layer frames will be FORWARDED except those matching the MAC filter rules.
  • Page 48 Consult the table below for detailed field descriptions. Field Description Protocol Type PPPoE, IPv4, IPv6, AppleTalk, IPX, NetBEUI, IGMP Destination MAC Address Defines the destination MAC address Source MAC Address Defines the source MAC address Frame Direction Select the incoming/outgoing packet interface WAN Interfaces Applies the filter to the selected bridge interface.

  • Page 49: Parental Control

    5.6 Parental Control This selection provides WAN access control functionality. 5.6.1 Time Restriction This feature restricts access from a LAN device to an outside network through the device on selected days at certain times. Make sure to activate the Internet Time server synchronization as described in 9.5 Internet Time, so that the scheduled...

  • Page 50: Url Filter

    5.6.2 URL Filter This screen allows for the creation of a filter rule for access rights to websites based on their URL address and port number. Tick the Exclude radio button to deny access to the websites listed. Tick the Include radio button to restrict access to only those listed websites. Click Add to display the following screen.

  • Page 51: Quality Of Service (Qos)

    5.7 Quality of Service (QoS) NOTE: QoS must be enabled in at least one PVC to display this option. (See Appendix G - Connection SetupAppendix G - Connection Setup for detailed PVC setup instructions). 5.7.1 Queue Management Configuration To Enable QoS tick the checkbox and select a Default DSCP Mark.
  • Page 52 The diagrams in this section show a comparison between the ToS byte defined by RFC 791 and the DiffServ field. ToS Byte P2 P1 P0 T2 T1 T0 CU1 CU0 ‧IP precedence—three bits (P2 to P0) ‧Delay, Throughput and Reliability—three bits (T2 to T0) ‧CU (Currently Unused)—two bits(CU1-CU0) DiffServ Field DS5 DS4 DS3 DS2 DS1 DS0 ECN ECN...

  • Page 53: Queue Configuration

    5.7.2 Queue Configuration This function follows the Differentiated Services rule of IP QoS. You can create a new Queue entry by clicking the Add button. Enable and assign an interface and precedence on the next screen. Click Save/Reboot on this screen to activate it. Click Enable to activate the QoS Queue.
  • Page 54 Name: Identifier for this Queue entry. Enable: Enable/Disable the Queue entry. Interface: Assign the entry to a specific network interface (QoS enabled).

  • Page 55: Qos Classification

    5.7.3 QoS Classification The network traffic classes are listed in the following table. Click Add to configure a network traffic class rule and Enable to activate it. To delete an entry from the list, click Remove. This screen creates a traffic class rule to classify the upstream traffic, assign queuing priority and optionally overwrite the IP header DSCP byte.
  • Page 56 Field Description Traffic Class Name Enter a name for the traffic class. Rule Order Last is the only option. Rule Status Disable or enable the rule. Classification Criteria Class Interface Select an interface (i.e. Local, eth0-4, wl0) Ether Type Set the Ethernet type (e.g. IP, ARP, IPv6). Source MAC Address A packet belongs to SET-1, if a binary-AND of its source MAC address with the Source MAC Mask is equal to the...

  • Page 57: Routing

    5.8 Routing This following routing functions are accessed from this menu: Default Gateway, Static Route, Policy Routing and RIP. NOTE: In bridge mode, the RIP menu option is hidden while the other menu options are shown but ineffective. 5.8.1 Default Gateway Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the highest and the last one the lowest priority if the WAN interface is...

  • Page 58: Static Route

    5.8.2 Static Route This option allows for the configuration of static routes by destination IP. Click Add to create a static route or click Remove to delete a static route. After clicking Add the following screen will display. Input the Destination IP Address, select the interface type, Input the Gateway IP, (and the Metric number if required).

  • Page 59: Policy Routing

    5.8.3 Policy Routing This page allows users configure the outgoing WAN interface (depending on source IP or LAN port). Click Add to create an entry or click Remove to delete an entry. Input a Policy Name and select the Physical LAN Port. Then, input the Source IP, select which Interface to use and input the Default Gateway IP.

  • Page 60: Rip

    5.8.4 RIP To activate RIP, select the Enabled radio button for Global RIP Mode. To configure an individual interface (PVC), select the desired RIP Version and Operation, and then select the Enabled checkbox for that interface (PVC). Click Apply/Save to save the configuration and start/stop RIP (based on the Global RIP mode selected).

  • Page 61: Dns

    5.9 DNS 5.9.1 DNS Server Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses must be entered. Click Apply/Save to save the new configuration.

  • Page 62: Dynamic Dns

    Dynamic DNS The Dynamic DNS service allows you to map a dynamic IP address to a static hostname in any of many domains, allowing the VI-3223u to be more easily accessed from various locations on the Internet. To add a dynamic DNS service, click Add. The following screen will display.
  • Page 63 Field Description D-DNS provider Select a dynamic DNS provider from the list Hostname Enter the name of the dynamic DNS server Interface Select the interface from the list Username Enter the username of the dynamic DNS server Password Enter the password of the dynamic DNS server...

  • Page 64: Dsl

    5.10 DSL The DSL Settings screen allows for the selection of DSL modulation modes. For optimum performance, the modes selected should match those of your ISP. DSL Mode Data Transmission Rate - Mbps (Megabits per second) G.Dmt Downstream: 12 Mbps Upstream: 1.3 Mbps G.lite Downstream:...
  • Page 65 DSL Mode Data Transmission Rate - Mbps (Megabits per second) Inner/Outer Pair Select the inner or outer pins of the twisted pair (RJ11 cable) Bitswap Enable Enables adaptive handshaking functionality SRA Enable Enables Seamless Rate Adaptation (SRA) VDSL2 is quite a complex protocol. The standard defines a wide range of profiles that can be used in different VDSL deployment architectures;...
  • Page 66 Advanced DSL Settings Click Advanced Settings to reveal additional options. On the following screen you can select a test mode or modify tones by clicking Tone Selection. Click Apply to implement these settings and return to the previous screen. On this screen you select the tones you want activated, then click Apply and Close.

  • Page 67: Upnp

    5.11 UPnP Select the checkbox provided and click Apply/Save to enable UPnP protocol.

  • Page 68: Dns Proxy

    5.12 DNS Proxy DNS proxy receives DNS queries and forwards DNS queries to the Internet. After the CPE gets answers from the DNS server, it replies to the LAN clients. Configure DNS proxy with the default setting, when the PC gets an IP via DHCP, the domain name, Home, will be added to PC’s DNS Suffix Search List, and the PC can access route with “Tele2.box”.

  • Page 69: Print Server

    5.13 Print Server The VI-3223u can provide printer support through an optional USB2.0 host port. If your device has this port, refer to Appendix F - Printer Server for detailed setup instructions.

  • Page 70: Dlna

    5.14 DLNA Enabling DLNA allows users to share digital media, like pictures, music and video, to other LAN devices from the digital media server.

  • Page 71: Storage Service

    5.15 Storage Service The Storage service allows you to use Storage devices with modem to be more easily accessed. Click the Enable button and the following window will pop up. Click OK to enable the Samba Service. The Samba Security mode can also be enabled by clicking the Enable button. The following window will pop up.

  • Page 72: Storage Device Info

    5.15.1 Storage Device Info Display after storage device attached (for your reference).

  • Page 73: Interface Grouping

    5.16 Interface Grouping Interface Grouping supports multiple ports to PVC and bridging groups. Each group performs as an independent network. To use this feature, you must create mapping groups with appropriate LAN and WAN interfaces using the Add button. The Remove button removes mapping groups, returning the ungrouped interfaces to the Default group.
  • Page 74 Automatically Add Clients With Following DHCP Vendor IDs:...
  • Page 75 Add support to automatically map LAN interfaces to PVC's using DHCP vendor ID (option 60). The local DHCP server will decline and send the requests to a remote DHCP server by mapping the appropriate LAN interface. This will be turned on when Interface Grouping is enabled.

  • Page 76: Ipsec

    5.17 IPSec You can add, edit or remove IPSec tunnel mode connections from this page. Click Add New Connection to add a new IPSec termination rule. The following screen will display.
  • Page 77 IPSec Connection Name User-defined label Tunnel Mode Select tunnel protocol, AH (Authentication Header) or ESP (Encapsulating Security Payload) for this tunnel. Remote IPSec Gateway Address The location of the Remote IPSec Gateway. IP address or domain name can be used. Tunnel access from local IP Specify the acceptable host IP on the local addresses...
  • Page 78 IP Address/Subnet Mask for VPN If you chose Single, please enter the host IP address for VPN. If you chose Subnet, please enter the subnet information for VPN. Key Exchange Method Select from Auto(IKE) or Manual For the Auto(IKE) key exchange method, select Pre-shared key or Certificate (X.509) authentication.
  • Page 79 The Manual key exchange method options are summarized in the table below. Manual Key Exchange Method Encryption Algorithm DES / 3DES / AES (aes-cbc) Encryption Key DES: 16 digit Hex, 3DES: 48 digit Hex Authentication Algorithm MD5 / SHA1 Authentication Key MD5: 32 digit Hex, SHA1: 40 digit Hex SPI (default is 101) Enter a Hex value from 100-FFFFFFFF...

  • Page 80: Certificate

    5.18 Certificate A certificate is a public key, attached with its owner’s information (company name, server name, personal real name, contact e-mail, postal address, etc) and digital signatures. There will be one or more digital signatures attached to the certificate, indicating that these entities have verified that this certificate is valid.
  • Page 81 The following table is provided for your reference. Field Description Certificate Name A user-defined name for the certificate. Common Name Usually, the fully qualified domain name for the machine. Organization Name The exact legal name of your organization. Do not abbreviate. State/Province Name The state or province where your organization is located.
  • Page 82 IMPORT CERTIFICATE Click Import Certificate to paste the certificate content and the private key provided by your vendor/ISP/ITSP into the corresponding boxes shown below. Enter a certificate name and click Apply to import the local certificate.

  • Page 83: Trusted Ca

    5.18.2 Trusted CA CA is an abbreviation for Certificate Authority, which is a part of the X.509 system. It is itself a certificate, attached with the owner information of this certificate authority; but its purpose is not encryption/decryption. Its purpose is to sign and issue certificates, in order to prove that these certificates are valid.

  • Page 84: Multicast

    5.19 Multicast Input new IGMP protocol configuration fields if you want modify default values shown. Then click Apply/Save.

  • Page 85: Chapter 6 Wireless

    Chapter 6 Wireless The Wireless menu provides access to the wireless options discussed below. 6.1 Basic The Basic option allows you to configure basic features of the wireless LAN interface. Among other things, you can enable or disable the wireless LAN interface, hide the network from active scans, set the wireless network name (also known as SSID) and restrict the channel set based on country requirements.
  • Page 86 Option Description Hide Access Select Hide Access Point to protect the access point from detection Point by wireless active scans. To check AP status in Windows XP, open Network Connections from the start Menu and select View Available Network Connections. If the access point is hidden, it will not be listed there.

  • Page 87: Security

    6.2 Security The following screen appears when Wireless Security is selected. The options shown here allow you to configure security features of the wireless LAN interface. Click Apply/Save to implement new configuration settings. WIRELESS SECURITY Wireless security settings can be configured according to Wi-Fi Protected Setup (WPS) or Manual Setup.
  • Page 88 6.2.1 WPS) while the Manual Setup method requires that the user configure these settings using the Web User Interface (see the table below). Select SSID Select the wireless network name from the drop-down box. SSID stands for Service Set Identifier. All stations must be configured with the correct SSID to access the WLAN.
  • Page 89 The settings for WPA-PSK authentication are shown next. WEP Encryption This option specifies whether data sent over the network is encrypted. The same network key is used for data encryption and network authentication. Four network keys can be defined although only one can be used at any one time. Use the Current Network Key list box to select the appropriate network key.
  • Page 90 hexadecimal numbers. Each key contains a 24-bit header (an initiation vector) which enables parallel decoding of multiple streams of encrypted data.

  • Page 91: Wps

    Every WPS certified device has both a PIN number and a push button, located on the device or accessed through device software. The VI-3223u has both a WPS button on the device and a virtual button accessible from the web user interface (WUI).
  • Page 92 II. NETWORK AUTHENTICATION Step 3: Select Open, WPA-PSK, WPA2-PSK, or Mixed WPA2/WPA-PSK network authentication mode from the Manual Setup AP section of the Wireless Security screen. The example below shows WPA2-PSK mode. Step 4: For the Pre-Shared Key (PSK) modes, enter a WPA Pre-Shared Key. You will see the following dialog box if the Key is too short or too long.
  • Page 93 NOTE: The wireless AP on the router searches for 2 minutes. If the router stops searching before you complete Step 7, return to Step 6. Step 6: First method: WPS button Press the WPS button on the rear panel of the router. The WPS LED will blink to show that the router has begun searching for the client.
  • Page 94 then click the Add Enrollee button (see below). B - For Unconfigured mode, click the Config AP button. Step 7: Activate the PIN function on the wireless client. For Configured mode, the client must be configured as an Enrollee. For Unconfigured mode, the client must be configured as the Registrar.

  • Page 95: Mac Filter

    6.3 MAC Filter This option allows access to the router to be restricted based upon MAC addresses. To add a MAC Address filter, click the Add button shown below. To delete a filter, select it from the MAC Address table below and click the Remove button. Option Description Select...

  • Page 96: Wireless Bridge

    6.4 Wireless Bridge This screen allows for the configuration of wireless bridge features of the WLAN interface. See the table beneath for detailed explanations of the various options. Click Apply/Save to implement new configuration settings. Feature Description AP Mode Selecting Wireless Bridge (aka Wireless Distribution System) disables Access Point (AP) functionality, while selecting Access Point enables AP functionality.

  • Page 97: Advanced

    6.5 Advanced The Advanced screen allows you to configure advanced features of the wireless LAN interface. You can select a particular channel on which to operate, force the transmission rate to a particular speed, set the fragmentation threshold, set the RTS threshold, set the wakeup interval for clients in power-save mode, set the beacon interval for the access point, set XPress mode and set whether short or long preambles are used.
  • Page 98 Click Apply/Save to set new advanced wireless options.
  • Page 99 Field Description Band Set to 2.4 GHz for compatibility with IEEE 802.11x standards. The new amendment allows IEEE 802.11n units to fall back to slower speeds so that legacy IEEE 802.11x devices can coexist in the same network. IEEE 802.11g creates data-rate parity at 2.4 GHz with the IEEE 802.11a standard, which has a 54 Mbps rate at 5 GHz.
  • Page 100 Field Description Fragmentation A threshold, specified in bytes, that determines whether Threshold packets will be fragmented and at what size. On an 802.11 WLAN, packets that exceed the fragmentation threshold are fragmented, i.e., split into, smaller units suitable for the circuit size. Packets smaller than the specified fragmentation threshold value are not fragmented.

  • Page 101: Station Info

    6.6 Station Info This page shows authenticated wireless stations and their status. Click the Refresh button to update the list of stations in the WLAN. Consult the table below for descriptions of each column heading. Heading Description Lists the MAC address of all the stations. Associated Lists all the stations that are associated with the Access Point, along with the amount of time since packets were transferred...

  • Page 102: Chapter 7 Voice

    Chapter 7 Voice This chapter first describes the various options for configuration of the SIP voice service. It then provides detailed instructions for making telephone calls using VoIP (Voice over IP) or PSTN (Public Switched Telephone Network) services. Session Initiation Protocol (SIP) is a peer-to-peer protocol used for Internet conferencing, telephony, events notification, presence and instant messaging.

  • Page 103: Sip Basic Setting

    SIP Basic Setting 7.1.1 Global Parameters A common parameter setting.

  • Page 104: Service Provider

    7.1.2 Service Provider This screen contains basic SIP configuration settings.
  • Page 105 Once settings are configured click Save and Apply to begin using the service. Field Description Locale Selection Sets tone, ring type and physical characteristics for specific countries. SIP domain name Provided by your VoIP provider. Max Digits Setting Provides the maximum numbers that can be dialed.

  • Page 106: Sip Advanced

    SIP Advanced This screen contains the advanced SIP configuration settings.

  • Page 107: Global Parameters

    7.2.1 Global Parameters A common parameter setting.

  • Page 108: Service Provider

    7.2.2 Service Provider Configure your settings based on your service provider. These settings are described in the tables below. Once configuration is complete, click Save and Apply to begin using the service. NOTE: Some of these options can also be set using telephone keypad commands, as described in the call command list in section 7.2 Telephone Calls.
  • Page 109 Line 1 & 2 Ports FXS1 & FXS2 Call waiting Tick the checkbox to enable this option Call forwarding number Enter the forwarding phone number Forward unconditionally Tick the checkbox to enable this option Tick the checkbox to enable this option Forward on “busy”...

  • Page 110: Sip Debug

    SIP Debug This screen contains SIP configuration settings used for debugging. 7.3.1 Global Parameters A common parameter setting.

  • Page 111: Service Provider

    7.3.2 Service Provider Configure your settings based on your service provider. Once settings are configured click Save and Apply to begin using the service. Checkbox Description SIP log server Enter the IP address and port of the SIP log server. IP address &...

  • Page 112: Telephone Calls

    7.4 Telephone Calls To make a call, simply dial the number. The dial plan (i.e. the dialed digits) is normally customized for each installation. The default dial plan allows for dialing of 24-digit extensions or direct IP addresses. For shorter extension numbers (e.g. 3-digits) adding a “#”...
  • Page 113 Call Waiting If call waiting is enabled on a line, and you hear the call waiting tone during a call, press flash to answer the second call. The first call is automatically placed on hold. To switch between calls, press flash again. •...

  • Page 114: Chapter 8 Diagnostics

    Chapter 8 Diagnostics The first Diagnostics screen is a dashboard that shows overall connection status. If a test displays a fail status, click the button to retest and confirm the error. If a test continues to fail, click Help and follow the troubleshooting procedures.

  • Page 115: Fault Management

    8.1 Fault Management IEEE 802.1ag Connectivity Fault Management (CFM) enabling service providers to detect, analyze and isolate faults in bridged LANs thus reducing support costs and improving service uptime. Maintenance Domain (MD) Maintenance Domains are management space on a Level: network, typically owned and operated by a single entity MD are configured with Names and Levels, where the eight levels range from 0 to 7...
  • Page 116 Linktrace Message (LTM): Link Trace messages otherwise known as Mac Trace Route are Multicast frames that a MEP transmits to track the path (hop-by-hop) to a destination MEP which is similar in concept to User Datagram Protocol (UDP) Trace Route. Each receiving MEP sends a Trace route Reply directly to the Originating MEP, and regenerates the Trace route Message Click the Set MD Level button to apply/save the Maintenance Domain (MD) Level.

  • Page 117: Chapter 9 Management

    Chapter 9 Management 9.1 Settings This includes 9.1.1 Backup Settings, 9.1.2 Update Settings, and 9.1.3 Restore Default screens. 9.1.1 Backup Settings To save the current configuration to a file on your PC, click Backup Settings. You will be prompted for backup file location. This file can later be used to recover settings on the Update Settings screen, as described below.

  • Page 118: Restore Default

    PC IP configuration to match any new settings. NOTE: This entry has the same effect as the Reset button. The VI-3223u board hardware and the boot loader support the reset to default. If the Reset button is continuously pressed for more than 5 seconds, the boot loader...

  • Page 119: System Log

    9.2 System Log This function allows a system log to be kept and viewed upon request. Follow the steps below to configure, enable, and view the system log. STEP 1: Click Configure System Log, as shown below (circled in Red). STEP 2: Select desired options and click Apply/Save.
  • Page 120 “Emergency” down to this configured level will be recorded to the log buffer on the VI-3223u SDRAM. When the log buffer is full, the newer event will wrap up to the top of the log buffer and overwrite the old event.

  • Page 121: Snmp Agent

    9.3 SNMP Agent Simple Network Management Protocol (SNMP) allows a management application to retrieve statistics and status from the SNMP agent in this device. Select the Enable radio button, configure options, and click Save/Apply to activate SNMP.

  • Page 122: Client

    9.4 TR-069 Client WAN Management Protocol (TR-069) allows an Auto-Configuration Server (ACS) to perform auto-configuration, provision, collection, and diagnostics to this device. Select desired values and click Apply/Save to configure TR-069 client options. The table below is provided for ease of reference. Option Description Inform...
  • Page 123 Password used to authenticate an ACS making a Connection Request to the CPE. IP address and port the ACS uses to connect to VI-3223u. The Get RPC Methods button forces the CPE to establish an immediate connection to the ACS. This may be used to discover the set of methods supported by the ACS or CPE.

  • Page 124: Internet Time

    9.5 Internet Time This option automatically synchronizes the router time with Internet timeservers. To enable time synchronization, tick the corresponding checkbox , choose your preferred time server(s), select the correct time zone offset, and click Reboot/Apply. NOTE: Internet Time must be activated to use Parental Control.

  • Page 125: Access Control

    9.6.1 Passwords This screen is used to configure the user account access passwords for the device. Access to the VI-3223u is controlled through the following three user accounts: • root - unrestricted access to change and view the configuration. •...

  • Page 126: Services

    9.6.2 Services The Services option limits or opens the access services over the LAN or WAN. These access services available are: FTP, HTTP, ICMP, SNMP, TELNET and TFTP. Enable a service by selecting its dropdown listbox. Click APPLY/SAVE to activate.
  • Page 127 9.6.3 Services The IP Address Access Control mode, if enabled, permits access to local management services from IP addresses contained in the Access Control List. If the Access Control mode is disabled, the system will not validate IP addresses for incoming packets.
  • Page 128 Enter the IP address of the management station permitted to access the local management services, and click the Save/Apply button.

  • Page 129: Update Software

    9.7 Update Software This option allows for firmware upgrades from a locally stored file. STEP 1: Obtain an updated software image file from your ISP. STEP 2: Enter the path and filename of the firmware image file in the Software File Name field or click the Browse button to locate the image file.

  • Page 130: Reboot

    9.8 Reboot To save the current configuration and reboot the router, click Reboot. NOTE: You may need to close the browser window and wait for 2 minutes before reopening it. It may also be necessary, to reset your PC IP configuration.

  • Page 131: Appendix A - Firewall

    Appendix A - Firewall STATEFUL PACKET INSPECTION Refers to an architecture, where the firewall keeps track of packets on each connection traversing all its interfaces and makes sure they are valid. This is in contrast to static packet filtering which only examines a packet based on the information in the packet header.
  • Page 132 Example 1: Filter Name : In_Filter1 Protocol : TCP Policy : Allow Source IP Address : 210.168.219.45 Source Subnet Mask : 255.255.0.0 Source Port : 80 Dest. IP Address : NA Dest. Subnet Mask : NA Dest. Port : NA Selected WAN interface : br0 This filter will ACCEPT all TCP packets coming from WAN interface “br0”...
  • Page 133 DAYTIME PARENTAL CONTROL This feature restricts access of a selected LAN device to an outside Network through the VI-3223u, as per chosen days of the week and the chosen times. Example: User Name : FilterJohn Browser's MAC Address : 00:25:46:78:63:21...

  • Page 134: Appendix B - Pin Assignments

    Appendix B - Pin Assignments ETHERNET Ports (RJ45) Definition Definition Transmit data+ Transmit data- Receive data- Receive data+...

  • Page 135: Appendix C - Ssh Client

    Appendix C – SSH Client Unlike Microsoft Windows, Linux OS has a ssh client included. For Windows users, there is a public domain one called “putty” that can be downloaded from here: http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html To access the ssh client you must first enable SSH access for the LAN or WAN from the Management Access Control Services menu in the web user interface.

  • Page 136: Appendix D - Specifications

    Appendix D - Specifications Hardware Interface RJ-11 X1 for ADSL2+/VDSL2, RJ-45 X 4 for LAN, RJ-45 X 1 for GigaWAN, FXS X2, Reset Button X 1, WPS button x1, Wi-Fi On/Off button x 1, Wi-Fi Antennas X 2, Power switch X 1, USB Host X2 ADSL standard ITU-T G.992.5, ITU-T G.992.3, ITU-T G.992.1, ANSI T1.413 Issue 2, AnnexM ADSL2+...
  • Page 137 Relative humidity ........5 ~ 95% (non-condensing) Dimensions ..............256.2 x 166 x 47.9 Kit Weight = 1.1 kg (1*VI-3223u, 1* RJ-11 cable, 1* RJ-45 cable, 1* USB cable, 1* Power Adapter, 1* CD-ROM) Certifications ..................CE NOTE: Specifications are subject to change without notice...

  • Page 138: Appendix E - Wps External Registrar

    Appendix E - WPS External Registrar Follow these steps to add an external registrar using the web user interface (WUI) on a personal computer running the Windows Vista operating system: Step 1: Enable UPnP on the Advanced Setup. Step 2: Open the Network folder and look for the BroadcomAP icon.
  • Page 139 Step 3: On the Wireless Security screen, enable WPS by selecting Enabled from the drop down list box and set the WPS AP Mode to Unconfigured. Click the Apply/Save button at the bottom of the screen Step 3 Step 4 Step 4: Click the Apply/Save button at the bottom of the screen.
  • Page 140 Step 5: Now return to the Network folder and click the BroadcomAP icon. A dialog box will appear asking for the Device PIN number. Enter the Device PIN as shown on the Wireless Security screen. Click Next. Step 6: Windows Vista will attempt to configure the wireless security settings. Step 7: If successful, the security settings will match those in Windows Vista.

  • Page 141: Appendix F - Printer Server

    Appendix F - Printer Server These steps explain the procedure for enabling the Printer Server. NOTE: This function only applies to models with an USB host port. STEP 1: Enable Print Server from Web User Interface. Select Enable on-board print server checkbox and enter Printer name and Make and model NOTE: The Printer name can be any text string up to 40 characters.
  • Page 142 STEP 2: Go to the Printers and Faxes application in the Control Panel and select the Add a printer function (as located on the side menu below). STEP 3: Click Next to continue when you see the dialog box below.
  • Page 143 STEP 4: Select Network Printer and click Next. STEP 5: Select Connect to a printer on the Internet and enter your printer link. (e.g. http://192.168.1.1:631/printers/hp3845) and click Next. NOTE: The printer name must be the same name entered in the ADSL modem WEB UI “printer server setting”...
  • Page 144 STEP 6: Click Have Disk and insert the printer driver CD. STEP 7: Select driver file directory on CD-ROM and click OK.
  • Page 145 STEP 8: Once the printer name appears, click OK. STEP 9: Choose Yes or No for default printer setting and click Next. STEP 10: Click Finish.
  • Page 146 STEP 11: Check the status of printer from Windows Control Panel, printer window. Status should show as Ready.

  • Page 147: Appendix G - Connection Setup

    Appendix G - Connection Setup Creating a WAN connection is a two-stage process. 1 - Setup a Layer 2 Interface (ATM, PTM or Ethernet). 2 - Add a WAN connection to the Layer 2 Interface. The following sections describe each stage in turn. G1 ~ Layer 2 Interfaces Every layer2 interface operates in one of three modes: Default, VLAN Mux or MSC.
  • Page 148 G1.1 ATM Interfaces Follow these procedures to configure an ATM interface. NOTE: The VI-3223u supports up to 16 ATM interfaces. STEP 1: Go to Advanced Setup Layer2 Interface ATM Interface. This table is provided here for ease of reference. Heading...
  • Page 149 There are many settings here including: VPI/VCI, DSL Latency, DSL Link Type, Encapsulation Mode, Service Category, Connection Mode and Quality of Service. The table below shows xDSL Link Type availability with each Connection Mode. xDSL Link Type Connection Mode EoA* PPPoA IPoA Default Mode...
  • Page 150 G2 ~ WAN Connections G1.2 PTM Interfaces Follow these procedures to configure a PTM interface. NOTE: The VI-3223u supports up to four PTM interfaces. STEP 4: Go to Advanced Setup Layer2 Interface PTM Interface. This table is provided here for ease of reference.
  • Page 151 There are many settings that can be configured here including: DSL Latency, PTM Priority, Connection Mode and Quality of Service. STEP 6: Click Apply/Save to confirm your choices. On the next screen, check that the PTM interface is added to the list. For example, an PTM interface in Default Mode is shown below.
  • Page 152 G1.3 Ethernet WAN Interface Some models of the VI-3223u support a single Ethernet WAN interface over the ETH WAN port. Follow these procedures to configure an Ethernet WAN interface. NOTE: To add WAN connections to one interface type, you must delete existing connections from the other interface type using the remove button.
  • Page 153 STEP 4: Click Apply/Save to confirm your choice. The figure below shows an Ethernet WAN interface configured in Default Mode. To add a WAN connection go to G2 ~ WAN Connections.
  • Page 154 G2 ~ WAN Connections In Default Mode, the VI-3223u supports one WAN connection for each interface, up to a maximum of 8 connections. VLAN Mux can support up to 16 connections. To setup a WAN connection follow these instructions. STEP 1: Go to the Advanced Setup WAN Service screen.
  • Page 155 STEP 3: Choose a layer 2 interface from the drop-down box and click Next. The WAN Service Configuration screen will display as shown below. NOTE: The WAN services shown here are those supported by the layer 2 interface you selected in the previous step. If you wish to change your selection click the Back button and select a different layer 2 interface.
  • Page 156 G2.4 PPP over ATM (PPPoA), go to page 166. (5) For G2.5 IP over ATM (IPoA), go to page 171. The subsections that follow continue the WAN service setup procedure.
  • Page 157 F2.1 PPP over ETHERNET (PPPoE) STEP 1: Select the PPP over Ethernet radio button and click Next. You can also enable IPv6 by ticking the checkbox at the bottom of this screen. Heading Description Enable IPv6 for this service Enable/Disable IPv6 function Bounding other Interface For this service, select an interface Enter Other bounded Service...
  • Page 158 The settings shown above are described below. PPP SETTINGS The PPP Username, PPP password and the PPPoE Service Name entries are dependent on the particular requirements of the ISP. The user name can be a maximum of 256 characters and the password a maximum of 32 characters in length.
  • Page 159 DIAL ON DEMAND The VI-3223u can be configured to disconnect if there is no activity for a period of time by selecting the Dial on demand checkbox . You must also enter an inactivity timeout period in the range of 1 to 4320 minutes.
  • Page 160 When Enabled, this creates local PPPoE connections to the WAN side. Enable this option only if all LAN-side devices are running PPPoE clients, otherwise disable it. The VI-3223u supports pass-through PPPoE sessions from the LAN side while simultaneously running a PPPoE client from non-PPPoE LAN devices.
  • Page 161 Click Next to continue or click Back to return to the previous step. STEP 5: The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them. After clicking Apply/Save, the new service should appear on the main screen.
  • Page 162 G2.2 IP over ETHERNET (IPoE) STEP 1: Select the IP over Ethernet radio button and click Next. You can also enable IPv6 by ticking the checkbox at the bottom of this screen. Enable IPv6 for this service: Click button to enable IPv6 service. STEP 2: The WAN IP settings screen provides access to the DHCP server settings.
  • Page 163 Click Next to continue or click Back to return to the previous step. STEP 3: This screen provides access to NAT, Firewall and IGMP Multicast settings. Enable each by selecting the appropriate checkbox . Click Next to continue or click Back to return to the previous step. ENABLE NAT If the LAN is configured with a private IP address, the user should select this checkbox...
  • Page 164 Click Next to continue or click Back to return to the previous step. STEP 5: Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses must be entered.
  • Page 165 STEP 6: The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them.
  • Page 166 After clicking Apply/Save, the new service should appear on the main screen. To activate it you must reboot. Go to Management Reboot and click Reboot.
  • Page 167 G2.3 Bridging NOTE: This connection type is not available on the Ethernet WAN interface. STEP 1: Select the Bridging radio button and click Next. You can also enable IPv6 by ticking the checkbox at the bottom of this screen. Enable IPv6 for this service: Click button to enable IPv6 service.
  • Page 168 After clicking Apply/Save, the new service should appear on the main screen. To activate it you must reboot. Go to Management Reboot and click Reboot. NOTE: If this bridge connection is your only WAN service, the VI-3223u will be inaccessible for remote management or technical support from the WAN.
  • Page 169 G2.4 PPP over ATM (PPPoA) STEP 1: Click Next to continue. STEP 2: On the next screen, enter the PPP settings as provided by your ISP. Click Next to continue or click Back to return to the previous step.
  • Page 170 DIAL ON DEMAND The VI-3223u can be configured to disconnect if there is no activity for a period of time by selecting the Dial on demand checkbox . You must also enter an inactivity timeout period in the range of 1 to 4320 minutes.
  • Page 171 Maximum Transmission Unit. The size (in bytes) of largest protocol data unit which the layer can pass onwards. This value is 1500 for PPPoA. ENABLE PPP MANUAL MODE Use this button to manually connect/disconnect PPP sessions. ENABLE PPP DEBUG MODE When this option is selected, the system will put more PPP connection information into the system log.
  • Page 172 Click Next to continue or click Back to return to the previous step.
  • Page 173 STEP 5: The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them. After clicking Apply/Save, the new service should appear on the main screen. To activate it you must reboot.
  • Page 174 G2.5 IP over ATM (IPoA) STEP 1: Click Next to continue. STEP 2: Enter the WAN IP settings provided by your ISP. Click Next to continue. STEP 3: This screen provides access to NAT, Firewall and IGMP Multicast settings. Enable each by selecting the appropriate checkbox .
  • Page 175 ENABLE NAT If the LAN is configured with a private IP address, the user should select this checkbox . The NAT submenu will appear in the Advanced Setup menu after reboot. On the other hand, if a private IP address is not used on the LAN side (i.e. the LAN side is using a public IP), this checkbox should not be selected, so as to free up system resources for improved performance.
  • Page 176 Click Next to continue or click Back to return to the previous step. STEP 6: The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them. After clicking Apply/Save, the new service should appear on the main screen.

Table of Contents

Save PDF