Draytek Vigor3100i manuale d’uso

[...]

Vigor3100 Series User’s Guide ii Vigor 3100 Series G.SHDSL Security Router User’s Guide Version: 2.01 Date: 23/12/2009[...]

Vigor3100 Series User’s Guide iii Copyright Information Copyright Declarations Copyright 2009 All rights reserved. This pub lication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stor ed in a retrieval system, or translated into any language withou t written permission from the copyright[...]

Vigor3100 Series User’s Guide iv European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town ship, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor3100 Ser ies G.SHDSL Routers DrayTek Corp. declares that Vigor3100 se ries of ro uters are in compliance with the following essential requirements[...]

Vigor3100 Series User’s Guide v T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 Panel De script ion ...........................................................................................................[...]

Vigor3100 Series User’s Guide vi 3.3.1 Port Re direction ......................................................................................................... ..... 48 3.3.2 DM Z Host ................................................................................................................. ....... 50 3.3.3 Open Ports ..................[...]

Vigor3100 Series User’s Guide vii 3.11.8 Station Ra te Control ................................................................................................... 1 34 3.12 VLAN ...................................................................................................................... ........... 134 3.12.1 Wir ed VLAN ................[...]

Vigor3100 Series User’s Guide viii 5.4 Checking If the ISP Sett ings are OK or No t ........................................................................ 187 5.5 Problems for 3G Ne twork Conn ection ................................................................................ 188 5.6 Backing to Factory Default Setting If Ne cessary ........[...]

Vigor3100 Series User’s Guide 1 1 P P r r e e f f a a c c e e Targeting requirement for residential, SOHO (Small Office and Home Office) and business users, the Vigor3100 series are G.SHDSL enab led integrated access device. G.SHDSL is going to be a prevailing standard for business and residential SDSL (Symmetrical DSL) in the rapidly growing wor[...]

Vigor3100 Series User’s Guide 2 1 1 . . 1 1 P P a a n n e e l l D D e e s s c c r r i i p p t t i i o o n n 1 1 . . 1 1 . . 1 1 V V i i g g o o r r 3 3 1 1 0 0 0 0 F F r r o o n n t t P P a a n n e e l l LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. VPN On The VPN tunnel is launched. QoS On The QoS [...]

Vigor3100 Series User’s Guide 3 1 1 . . 1 1 . . 2 2 V V i i g g o o r r 3 3 1 1 0 0 0 0 G G F F r r o o n n t t P P a a n n e e l l LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. VPN On The VPN tunnel is launched. QoS On The QoS function is active. PRN On The USB interface printer is ready. On The wi[...]

Vigor3100 Series User’s Guide 4 1 1 . . 1 1 . . 3 3 V V i i g g o o r r 3 3 1 1 0 0 0 0 i i F F r r o o n n t t P P a a n n e e l l LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. VPN On The VPN tunnel is launched. QoS On The QoS function is active. PRN On The USB interface printer is ready. On The IS[...]

Vigor3100 Series User’s Guide 5 1 1 . . 1 1 . . 4 4 V V i i g g o o r r 3 3 1 1 0 0 0 0 V V F F r r o o n n t t P P a a n n e e l l LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. VPN On The VPN tunnel is launched. QoS On The QoS function is active. PRN On The USB interface printer is ready. On The ph[...]

Vigor3100 Series User’s Guide 6 1 1 . . 1 1 . . 5 5 V V i i g g o o r r 3 3 1 1 2 2 0 0 F F r r o o n n t t P P a a n n e e l l LED Status Explanation ACT (Activity) Blinking The router is powered on and running properly. VPN On The VPN tunnel is launched. QoS On The QoS function is active. PRN On The USB interface printer is ready. DSL On The G.[...]

Vigor3100 Series User’s Guide 7 1 1 . . 2 2 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 3 3 1 1 0 0 0 0 / / V V i i g g o o r r 3 3 1 1 0 0 0 0 G G / / V V i i g g o o r r 3 3 1 1 0 0 0 0 V V / / V V i i g g o o r r 3 3 1 1 0 0 0 0 i i Before starting to confi[...]

Vigor3100 Series User’s Guide 8 1 1 . . 2 2 . . 2 2 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n f f o o r r V V i i g g o o r r 3 3 1 1 2 2 0 0 Vigor3120 provides Flat Module Cable (RJ-45, 4x4) for bon ding bandwidth for data transmission. Please apply two-pair of circuit fro m your ISP first for hardware conne[...]

Vigor3100 Series User’s Guide 9 1 1 . . 2 2 . . 3 3 P P i i n n D D e e f f i i n n i i t t i i o o n n f f o o r r F F l l a a t t M M o o d d u u l l e e C C a a b b l l e e Below shows the pin definition of flat module cable. One pair is composed by Pin4 and Pin5. The other pair is composed by Pin3 and Pin6.[...]

Vigor3100 Series User’s Guide 10 1 1 . . 3 3 R R a a c c k k M M o o u u n n t t I I n n s s t t r r u u c c t t i i o o n n The Vigor3100 series can be mounted on a rack by using standard brackets in a 19-inch rack or optional larger brackets on 23-inch rack (not included). The bracket for the racks are shown below. Use brackets to set the Vigor[...]

Vigor3100 Series User’s Guide 11 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for shar ing printing. All the PCs connected this router can print documents via the router. The exam ple provided here is made based on Windows XP/2000. For Windows 98/SE, please visit[...]

Vigor3100 Series User’s Guide 12 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port . Click Next . 6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_[...]

Vigor3100 Series User’s Guide 13 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish . 9. Now, your system will ask you to choose right na me of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next .[...]

Vigor3100 Series User’s Guide 14 10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the new printer you have added. 11. Select " LPR " on Protocol, type p1 (number 1) as Queue Name. Then click OK . Next please refer to the red rectangle for choosing the correct protocol and UPR name. The[...]

Vigor3100 Series User’s Guide 15 Note 1: Some printers with the fax/scanning or othe r additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ ; find out the link of Printer Server and click it; then click the What types of[...]

Vigor3100 Series User’s Guide 16 This page is left blank.[...]

Vigor3100 Series User’s Guide 17 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and [...]

Vigor3100 Series User’s Guide 18 Note: The home page will change slightly in accordance with the rou ter you have. 4. Go to System Maintenance page and choose Administrator Password . 5. Enter the login password (the defa ult is blank) on the field of Old Password . Type a new one in the field of New Password and retype it on the field of Confirm[...]

Vigor3100 Series User’s Guide 19 2 2 . . 2 2 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r r d d If your Vigor router can be under an environment with high speed NA T, the configuration provide here can help you to deploy and use the router quickly. There are two phases of quick setup, one is protocol/encapsulation configura tion; and[...]

Vigor3100 Series User’s Guide 20 travels through the network. A virtual channel is a logical connection between two end devices on the network. Protocol/Encapsulation Select an IP mode for this WAN interface. There are several available modes for Internet access suc h as PPPoE , PPPoA, Bridged IP and Routed IP . Fixed IP Click Yes to specify a fi[...]

Vigor3100 Series User’s Guide 21 Idle Timeout Type in the value (unit is second) as the idle timeout of the connection. Click Next for viewing summary of such connection. Click Finish. The online status of this protocol will be shown as below. 2 2 . . 2 2 . . 3 3 B B r r i i d d g g e e d d I I P P Click 1483 Bridged IP as the protocol. Type in a[...]

Vigor3100 Series User’s Guide 22 Click Finish. The online status of this protocol will be shown as below. 2 2 . . 2 2 . . 4 4 R R o o u u t t e e d d I I P P Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol.[...]

Vigor3100 Series User’s Guide 23 After finishing the settings in this page, click Next to see the following page. Click Finish. The online status of this protocol will be shown as below. 2 2 . . 3 3 S S e e l l e e c c t t i i n n g g C C o o r r r r e e c c t t A A n n n n e e x x T T y y p p e e After finishing Quick Start Wizard , please go to[...]

Vigor3100 Series User’s Guide 24 2 2 . . 4 4 O O n n l l i i n n e e S S t t a a t t u u s s Now, check the online status for your router. The online status shows the system status, WAN status, ADSL Information and other status related to this router within one page. If you select PPPoE or PPPoA as the protocol, you will find out a button of Dial[...]

Vigor3100 Series User’s Guide 25 2 2 . . 5 5 S S a a v v i i n n g g C C o o n n f f i i g g u u r r a a t t i i o o n n Each time you click OK on the web page for saving the configurati on, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your setti[...]

Vigor3100 Series User’s Guide 26 This page is left blank.[...]

Vigor3100 Series User’s Guide 27 3 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suitin g his/her request, please refer to this chapter for getting detailed infor[...]

Vigor3100 Series User’s Guide 28 When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Y our user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will us ually [...]

Vigor3100 Series User’s Guide 29 PPPoE/PPPoA Client Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your ISP. Multi-P[...]

Vigor3100 Series User’s Guide 30 None - Disable the backup function. Packet Trigger - The backup line is not on until a packet from a local host triggers the router to establish a connection. Always On - If the broadband connection is no longer available, the backup line will be activated automa tically and always on until the broadband connectio[...]

Vigor3100 Series User’s Guide 31 only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this filed is blank and the function will always work. ISP Access Setup Enter your allocated username , password and authentication parameters according to the inform ation pro[...]

Vigor3100 Series User’s Guide 32 If you do not check Join NAT IP Pool , you can still use these public IP addresses for other purpose, su ch as DMZ host, Open Ports. Default MAC Address Type in MAC address for the router. You can use Default MAC Address or specify another MAC address for your necessity. MAC Address – Type in the MAC address for[...]

Vigor3100 Series User’s Guide 33 MPoA(RFC1483/2684) Click Enable for activating this function. If you click Disable , thi s function will be closed and all the settings that you adjusted in this page will be invalid. DSL Modem Settings Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your ISP. Multi-P[...]

Vigor3100 Series User’s Guide 34 ISDN - This setting is available for the routers supporting ISDN function only. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click Internet Access Setup > Dialing to a Single ISP to enter the backup profile. Due to the absence of the ISDN interface in some m[...]

Vigor3100 Series User’s Guide 35 Bridge Mode If you choose Bridged IP as the protocol, you can check this box to invoke the function. WAN IP Network Settings This group allows you to obtain an IP address automatically and allows you type in IP address manually. Obtain an IP address automatically – Click this button to obtain the IP address auto[...]

Vigor3100 Series User’s Guide 36 Enable Type in the primary IP address for the router. If necessary, type VPI Type in the value provided by your ISP. VCI Type in the value provided by your ISP. QoS Type Select a proper QoS type for the channel. Protocol Select a proper protocol for this channel. Encapsulation Choose a proper type for this channel[...]

Vigor3100 Series User’s Guide 37 Below shows settings for Vigor3100/Vigor3100G/Vigor3100i. AdaptiveRate Set the connection rate for the network. MaxRate Select the maximum rate for this setting. Use the drop down list to select the one that suits your router. The default value is 2312. MinRate Select the minimum rate for this setting. Use the dro[...]

Vigor3100 Series User’s Guide 38 FixedRate If you select Standard mode or Enhanced mode o n 4-wire bundle mode, only the fixed rate is available for line speed. Please use the drop down list to choose the one that you subscribe. Terminal Type Determine the role of this device as a CPE or CO. Annex Type Choose the correct annex type (A or B) for y[...]

Vigor3100 Series User’s Guide 39 W W h h a a t t i i s s R R o o u u t t i i n n g g I I n n f f o o r r m m a a t t i i o o n n P P r r o o t t o o c c o o l l ( ( R R I I P P ) ) V igor router will exchange routing informati on with neighboring routers using the RIP to accomplish IP routing. This allows users to cha nge the information of the r[...]

Vigor3100 Series User’s Guide 40 3 3 . . 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup . 1st IP Address T ype in private IP address for connecting to a local private network (Default: 192.168.1.1). 1st Subnet Mask T [...]

Vigor3100 Series User’s Guide 41 S tart IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.135.240.1, the starti ng IP address must be 220.135.240.2 or greater , but smaller than 220.135.240.25 4. IP Pool Counts: Enter the number of IP addresses[...]

Vigor3100 Series User’s Guide 42 the DHCP server you are going to use so the Relay Agent can help to forward the DHCP reques t to the DHCP server . DNS Server Configuration DNS stands for Domain Name System. Every Internet host must have a unique IP address, also they may have a human-friendly, easy to remember name such as www.y ahoo.com. The DN[...]

Vigor3100 Series User’s Guide 43 Viewing Routing Table Displays the routing table for your reference. A A d d d d S S t t a a t t i i c c R R o o u u t t e e r r s s t t o o P P r r i i v v a a t t e e a a n n d d P P u u b b l l i i c c N N e e t t w w o o r r k k s s Here is an example of setting Static Route in Main Router so that user A and B[...]

Vigor3100 Series User’s Guide 44 2. Click the LAN - S tatic Route and click on the Index Number 1. Please add a static route as shown below , which regulates all p ackets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click OK . 3. Return to St a t i c R o u t e Setup page. Click on another Index Number to add another static route as [...]

Vigor3100 Series User’s Guide 45 D D i i s s a a b b l l e e S S t t a a t t i i c c R R o o u u t t e e 1. Click the Index Number that you want to disable from the S tatic Route Configuration page. 2. Select Inactive/Disable from the drop-down menu, and then click the OK button to disable the route. 3 3 . . 2 2 . . 4 4 V V L L A A N N Note: This[...]

Vigor3100 Series User’s Guide 46 To add or remove a VLAN, please refer to the following example. 1. If, VLAN 0 is consisted of hosts linked to P1 and P2 and VLAN 1 is consisted of hosts linked to P3 and P4. 2. After checking the box to enable VLAN func tion, you will check the table according to the needs as shown below. 3. T o remove VLAN, unche[...]

Vigor3100 Series User’s Guide 47 3 3 . . 2 2 . . 5 5 B B i i n n d d I I P P t t o o M M A A C C This function is used to bind the IP and MAC address in LAN to have a strengthen control i n network. When this function is enabled, all the assigned IP a nd MAC address binding together cannot be changed. If you modified the binding IP or MAC address[...]

Vigor3100 Series User’s Guide 48 Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List . Edit It allows you to edit and modify the selected IP address and MAC address that you create before. Remove You can remove any item listed in IP Bind List . Simply click and se[...]

Vigor3100 Series User’s Guide 49 The port redirection can only apply to incoming traffic. The server users inside the LAN can not access public IP address of the server. The co rrect route is to access the server using the local private IP address of the server, or you should set up an alias in a Windows hosts file. Please only redirect the ports[...]

Vigor3100 Series User’s Guide 50 WAN IP will be transferred to the IP address specified in this web page. Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host. Private IP Specify the private IP address of the internal host providing the service. Private Port Specify the private port number of [...]

Vigor3100 Series User’s Guide 51 The inherent security properties of NA T are somewhat bypassed if you set up DMZ host. W e suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: Enable Check to enable the DMZ Host function. Private IP Enter the private IP address of the DMZ host, or click C[...]

Vigor3100 Series User’s Guide 52 3 3 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application [...]

Vigor3100 Series User’s Guide 53 However, if you previously have set up WAN Alias in Internet Access>>PPPoE/PPPoA or Internet Access>>MPoA, you will find that WAN IP appeared for your selection. Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. Local Computer Enter the priva[...]

Vigor3100 Series User’s Guide 54 3 3 . . 4 4 F F i i r r e e w w a a l l l l 3 3 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand more bandwidth f or multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor[...]

Vigor3100 Series User’s Guide 55 I I P P F F i i l l t t e e r r s s Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter . z Call Filter - When there is no existing Internet connection, Call Fi[...]

Vigor3100 Series User’s Guide 56 I I n n s s t t a a n n t t M M e e s s s s e e n n g g e e r r ( ( I I M M ) ) a a n n d d P P e e e e r r - - t t o o - - P P e e e e r r ( ( P P 2 2 P P ) ) A A p p p p l l i i c c a a t t i i o o n n B B l l o o c c k k i i n n g g As the popularity of all kinds of instant messenger application arises, communi[...]

Vigor3100 Series User’s Guide 57 ActiveX control object is usually used for provi ding in teractive web feature. If malicious code hides inside, it may occupy user’s system. W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r i i n n g g We all know that the content on the Internet just like other types of media may be inappropriate[...]

Vigor3100 Series User’s Guide 58 Block - All blocked packets will be logged. Pass - All passed packets will be logged. No Match - The log function will record all packets that are not matched. Note that the filter log will be displayed on the T elnet terminal when you type the log -f command. Some on-line games (for example: Half Life) will use l[...]

Vigor3100 Series User’s Guide 59 Comment Enter filter set comments/description. Maximum length is 23–character long Next Filter Set Set the link to the next filter set to be executed after the current filter set. Do not make many filter sets a loop. To edit Filter Rule , click the Filter Rule index button to enter the Filter Rule setup page. Co[...]

Vigor3100 Series User’s Guide 60 Subnet Mask Select the Subnet Mask for the IP Address column for this filter r ule to apply from the drop-down menu. Operator, Start Port and End Port The operator column specifies the port number settings. If the Start Port is empty, the Start Port and the End Port column will be ignored. The filter rule will fil[...]

Vigor3100 Series User’s Guide 61 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is co mposed by 7 filter rules, which can be[...]

Vigor3100 Series User’s Guide 62 3 3 . . 4 4 . . 5 5 P P 2 2 P P B B l l o o c c k k i i n n g g P2P is the short name of peer to peer. Click Firewall and click P2P Blocking to open the setup page. You will see a list of common P2P applications. Check Enable P2P Blocking and select the one(s) to block. To block selected P2P applications during sp[...]

Vigor3100 Series User’s Guide 63 3 3 . . 4 4 . . 6 6 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense [...]

Vigor3100 Series User’s Guide 64 detecting this malicious exploration behavior by monitoring the port-scanning Threshold rate, the Vigor router will send out a warning. By default, the Vigor router sets the threshold as 150 packets per second. Block IP options Check the box to activate the Block IP options function. The Vigor router will ignore a[...]

Vigor3100 Series User’s Guide 65 indicate the protocol type running over the upper layer. However, the protocol types greater than 100 are reserved and undefined at this time. Therefore, the router should have ability to detect and reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor rou[...]

Vigor3100 Series User’s Guide 66 3 3 . . 4 4 . . 7 7 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r Based on the list of user defined keywords, the URL Content Filter facility in Vigor router inspects the URL string in every outgoing HTTP request. No matter the URL string is found full or partial matched with a keyword, th e Vigo[...]

Vigor3100 Series User’s Guide 67 addition, the maximal length of each frame is 32-character long. After specifying keywords, the Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noti ced that the more simplified the blocking keyword list, the more efficiently the Vi[...]

Vigor3100 Series User’s Guide 68 3 3 . . 4 4 . . 8 8 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r Click Firewall and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide.[...]

Vigor3100 Series User’s Guide 69 3 3 . . 5 5 B B a a n n d d w w i i d d t t h h M M a a n n a a g g e e m m e e n n t t 3 3 . . 5 5 . . 1 1 S S e e s s s s i i o o n n s s L L i i m m i i t t A PC with private IP address can access to the Internet via NAT router. The router will generate the records of NAT sessions for such c onnection. The P2P [...]

Vigor3100 Series User’s Guide 70 Remove Remove the selected settings existing on the limitation list. Index (1-15) in Schedule Setup You can type in four sets of time schedule for your request. All the schedules can be set previously in Application – Schedule web page and you can use the number that you have set in that web page. 3 3 . . 5 5 . [...]

Vigor3100 Series User’s Guide 71 TX limit Define the limitation for the speed of the upstream. If you do not set the limit in this field, the system will use the default speed for the specific limitation you set for each index. RX limit Define the limitation for the speed of the downstream. If you do not set the limit in this field, the system wi[...]

Vigor3100 Series User’s Guide 72 Best Effort (BE). AF defines the four classes of delivery (or forwarding) classes and three levels of drop precedence in each class. Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic, thus to allocate certain amount of resource execute appropriate po[...]

Vigor3100 Series User’s Guide 73 Setup There are two-level of settings: Basic - setup Reserved Bandwidth Ratio according to the traffic service type. We provide a list of common service types. Advance - custom setting of Reserved Bandwidth Ratio based on the source address, destination address, DiffServ CodePoint, and service type. Enable UDP Ban[...]

Vigor3100 Series User’s Guide 74 on the right box. To remove the selected on fro m the right box, simply choose the one again and click <<Remove. A A d d v v a a n n c c e e d d S S e e t t t t i i n n g g s s f f o o r r Q Q o o S S Click this button to open advanced configuration for each index number . You can insert, move, edit or delet[...]

Vigor3100 Series User’s Guide 75 DiffServ CodePoint All the packets of data will be divided with different levels and will be processed according to the level type by the system. Please assign one of the levels of the data for processing with QoS control. Service Type It determines the service type of the data for processing with QoS control. It [...]

Vigor3100 Series User’s Guide 76 Service Name – Type in a new service for your request. Service Typ e – Choose the type (TCP, UDP or TCP/UDP) for the new service. Type for Port Configuration – Click Single or Range . If you select Range, you have to type in the starting p ort number and the end porting number on the boxes belo w. Port Numbe[...]

Vigor3100 Series User’s Guide 77 3. Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account, and choose correct Service Provider: dyndns.org, t ype the registered hostname: hostname and domain name suffix: dyndns.org in the Dom ain Name block. The following two blocks should be typed your account Login Nam e: test[...]

Vigor3100 Series User’s Guide 78 You have to set your time before set schedule. In System Maintenance>> Time and Date menu, press Inquire Time button to set the Vigor router’s clock to current time of your PC. The clock will reset once if you power down or reset the router. There is another way to set up time. You can inquiry an NTP serve[...]

Vigor3100 Series User’s Guide 79 when it has traffic on the line. Once there is no traffic over idle timeout, the connection will be down and never up again durin g the schedule. Idle Timeout Specify the duration (or period) for the schedule. How often - Specify how often the schedule will be applied Once - The schedule will be applied just once [...]

Vigor3100 Series User’s Guide 80 Enable Check to enable RADIUS client feature Server IP Address Enter the IP address of RADIUS server Destination Port The UDP port number that the RADIUS server is using. The default value is 1812 , based on RFC 2138. Shared Secret The RADIUS server and client share a secret that is used to authenticate the messag[...]

Vigor3100 Series User’s Guide 81 The UPnP facility on the router enables UPnP awar e applications such as MSN Messenger to discover what are behind a NA T router . The application will also l earn the external IP address and configure port mappings on the rout er . Subse quently , such a facility forwards packets from the external ports of the ro[...]

Vigor3100 Series User’s Guide 82 The UPnP function dynamically adds port m appings on behalf of some UPnP-aware applications. W hen the applications term inate abnormally, these mappings may not be removed. 3 3 . . 6 6 . . 5 5 W W a a k k e e o o n n L L A A N N A PC client on LAN can wake up specified PC through the router. Yet the specified PC [...]

Vigor3100 Series User’s Guide 83 3 3 . . 7 7 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Intern et. In short, by VPN technolog y, you can send data between two computers across a shared[...]

Vigor3100 Series User’s Guide 84 3 3 . . 7 7 . . 2 2 P P P P P P G G e e n n e e r r a a l l S S e e t t u u p p This submenu only applies to PPP-related VP N connections, such as PPTP, L2TP, L2TP over IPSec. Dial-In PPP Authentication PAP Only Select this option to force the router to authenticate dial-in users with the PAP protocol. PAP or CHAP[...]

Vigor3100 Series User’s Guide 85 3 3 . . 7 7 . . 3 3 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration. There are two phases of IKE/IPSec. ¾ Phase 1: negotiation of IKE parameters including encryption, hash, Diffie-Hellman parameter values, and lifetime to prote[...]

Vigor3100 Series User’s Guide 86 active. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. 3 3 . . 7 7 . . 4 4 I I P P S S e e c c P P e e e e r r I I d d e e n n t t i i t t y y To use digital c[...]

Vigor3100 Series User’s Guide 87 Accept Subject Alternative Name Click to check one specific field of digital signature to accept the peer with matching value. The field can be IP Address, Domain, or E-mail Address . The box under the Type will appear according to the type you select and ask you to fill in corresponding setting. Accept Subject Na[...]

Vigor3100 Series User’s Guide 88 Enable this account Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds. ISDN Allow the remote ISDN dial-in connection. You can further set up Callback function be[...]

Vigor3100 Series User’s Guide 89 further specify the corresponding security methods on the right side. Uncheck the checkbox- This means the connection type you select above will apply the authentication methods and security methods in the general settings . User Name This field is applicable when you select PPTP or L2TP w/ or w/out IPSec policy a[...]

Vigor3100 Series User’s Guide 90 3 3 . . 7 7 . . 6 6 L L A A N N t t o o L L A A N N Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including specified c onnection direction (dial-in or dial-out), connection peer ID, connection type (ISDN, VPN including PPTP, IPSec Tunnel, and L2TP[...]

Vigor3100 Series User’s Guide 91 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. Call Direction Specify the allowed call direction of this LAN-to-LAN profile. Both :-initiator/responder Dial-Out - initiator only Dial-In- responder only. Always On or Idle Timeout Al[...]

Vigor3100 Series User’s Guide 92 procedure to inform each other. However, if the remote peer disconnect without notice, Vigor router will by no where to know this situation. To resolve this dilemma, by continuously sending PING packets to the remote host, the Vigor router can know the true existence of this VPN connection and react accordingly. I[...]

Vigor3100 Series User’s Guide 93 High Encapsulating Security Payload (ESP)- means payload (data) will be encrypted and authenticated. Select from below: DES without Authentication -Use DES encryption algorithm and not apply any authentication scheme. DES with Authentication- Use DES encryption algorithm and apply MD5 or SHA-1 authentication algor[...]

Vigor3100 Series User’s Guide 94 reused to avoid the computation complexity in phase 2. The default value is inactive this function. Local ID - In Aggressive mode, Local ID is on behalf of the IP address while identity authenticating with remote VPN server. For Main mode, the length of the ID is limited to 47 characters. Callback Function (for i [...]

Vigor3100 Series User’s Guide 95 L2TP Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: None- Do not apply the IPSec policy. Accordingly, the VPN connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Ha[...]

Vigor3100 Series User’s Guide 96 Callback Function The callback function provides a callback service only for the ISDN dial-in user. The router owner will be charged the connection fee by the telecom. Check to enable Callback function -Enables the callback function. Callback number -The option is for extra security. Once enabled, the router will [...]

Vigor3100 Series User’s Guide 97 packets with the router’s public IP address. Change default route to this VPN tunnel Check this box to change the default route with this VPN tunnel. Be aware that this setting is available only for one WAN interface is enabled. It is not available when both WAN interfaces are enabled. 3 3 . . 7 7 . . 7 7 C C o [...]

Vigor3100 Series User’s Guide 98 3 3 . . 8 8 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name , a serial number, expiration dates etc., and the digital signature of the ce[...]

Vigor3100 Series User’s Guide 99 Refresh Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. After clicking Generate, the generated information will be displayed on the window below: 3 3 . . 8 8 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f [...]

Vigor3100 Series User’s Guide 100 3 3 . . 9 9 V V o o I I P P ( ( f f o o r r V V m m o o d d e e l l o o n n l l y y ) ) Voice over IP network (VoIP) enables you to use your broadband Internet connection to ma ke toll quality voice calls over the Internet. There are many different call signaling protocols, methods by which VoIP devices can talk [...]

Vigor3100 Series User’s Guide 101 The major benefit of this mode is that you don ’t have to memorize your friend’s IP address, which might change very frequently if it’s dynamic. Instead of that, you will only have to using dial plan or directly dial your friend’s account name if you are with the same SIP Registrar. Please refer to the Ex[...]

Vigor3100 Series User’s Guide 102 total 60 index entries in the DialPlan for you to store all your friends and family members’ SIP addresses. Click any index number to display the dial plan setup page. Enable Click this to enable this entry. Phone Number The speed-dial number of this index. This can be any number you choose, using digits 0- 9 a[...]

Vigor3100 Series User’s Guide 103 D D i i g g i i t t M M a a p p For the convenience of user, this page allows users to edit prefix number for the SIP account with adding number, stripping number or replacing number. It is used to help user having a quick and easy way to dial out through VoIP interface. Enable Check this box to invoke this setti[...]

Vigor3100 Series User’s Guide 104 replaced by the prefix number for calling out through the specific VoIP interface. Take the above picture (Prefix Table Setup web page) as an example, the prefix number of 03 will be replaced by 8863. For example: dial number of “031111111” will be changed to “886311111 11” and sent to SIP server. OP Numb[...]

Vigor3100 Series User’s Guide 105 Index Click this link to access into next page for setting SIP account. Profile Display the profile name of the account. Domain/Realm Display the domain name or IP address of the SIP registrar server. Proxy Display the domain name or IP address of the SIP proxy server. Account Name Display the account name of SIP[...]

Vigor3100 Series User’s Guide 106 VoIP call. SIP Port Set the port number for sending/receiving SIP message for building a session. The default value is 5060. Your peer must set the same value in his/her Registrar. Domain/Realm Set the domain name or IP address of the SIP Registrar server. Proxy Set domain name or IP address of SIP proxy server. [...]

Vigor3100 Series User’s Guide 107 Ring Pattern Choose a ring tone type for the VoIP phone call. Below shows successful SIP accounts for your reference. 3 3 . . 9 9 . . 3 3 P P h h o o n n e e S S e e t t t t i i n n g g s s This page allows user to set phone settings for VoIP 1 and VoIP 2 respectively. RTP Symmetric RTP – Check this box to invo[...]

Vigor3100 Series User’s Guide 108 RTP TOS – It decides the level of VoIP package. Use the drop down list to choose any one of them. Click the number 1 or 2 link under Index column, you can access into the following page for configuring Phone settings. Hotline Check the box to enable it. Type in the SIP URL in the field for dialing automatically[...]

Vigor3100 Series User’s Guide 109 the incoming calls will be forwarded into SIP URL only when the local system is busy. No answer means if the incoming calls do not receive any response, they will be forwarded to the SIP URL by the time out. SIP URL – Type in the SIP URL (e.g., aaa@draytel.org or abc@iptel.org) as the site for call forwarded. T[...]

Vigor3100 Series User’s Guide 110 Voice Active Detector - This function can detect if the voice on both sides is active or not. If not, the router will do something to save the bandwidth for other using. Click On to invoke this function; click off to close the function. Default SIP Account There are six groups of SIP accounts that you can set. Us[...]

Vigor3100 Series User’s Guide 111 Region Select the proper region which you are located. The common settings of Caller ID Type , Dial tone , Ringing tone , Busy tone and Congestion tone will be shown automatically on the page. If you cannot find out a suitable one, please choose User Defined and fill out the corresponding values for dial tone, ri[...]

Vigor3100 Series User’s Guide 112 the dial tone is. It is recommended for you to use the default setting. DTMP DTMF mode – There are four selections provided here: InBand: Choose this one then the Vigor will send the DTMF tone as audio directly when you press the keypad on the phone OutBand: Choose this one then the Vigor will capture the keypa[...]

Vigor3100 Series User’s Guide 113 when the Refresh button is clicked. Port It shows current connection status for the port of VoIP1, VoIP2, ISDN1 and ISDN2. Status of ISDN is available for VGi model only. Status It shows the VoIP connection status. IDLE - Indicates that the VoIP function is idle. HANG_UP - Indicates that the connection is not est[...]

Vigor3100 Series User’s Guide 114 ISDN Port Click Enable to open the ISDN port and Disable to close it. Country Code For proper operation on your local ISDN network, you should choose the correct country code. Own Number Enter your ISDN nu mber. Every outgoing call will carry the number to the receiver. Blocked MSN Numbers for the router Enter th[...]

Vigor3100 Series User’s Guide 115 3 3 . . 1 1 0 0 . . 2 2 D D i i a a l l i i n n g g t t o o a a S S i i n n g g l l e e I I S S P P If you access the Internet via a single ISP, press this link. ISP Name Enter your ISP name. Dial Number Enter the ISDN access number provided by your ISP. Username Enter the username provided by your ISP. Password [...]

Vigor3100 Series User’s Guide 116 this function and enter the IP address in the field of Fixed IP Address . Fixed IP Address Type the IP address. 3 3 . . 1 1 0 0 . . 3 3 D D i i a a l l i i n n g g t t o o D D u u a a l l I I S S P P s s If you have more than one ISP, press this link to confi gure two ISP dialup profiles. You will be able to dial[...]

Vigor3100 Series User’s Guide 117 As depicted in the above application scenario, the V irtual T A client can make an outgoing call or accept an incoming call to/from a peer F AX machi ne or ISDN T A, etc. Before describing the configuration of Virtua l TA in the Vigor routers, please heed the following limitations. z The Virtual TA client only su[...]

Vigor3100 Series User’s Guide 118 from your telecom. Specify the MSN numbers for a specific client. If you have no MSN services, leave this field blank. Active - Check it to enable the client to access the server. I I n n s s t t a a l l l l a a V V i i r r t t u u a a l l T T A A C C l l i i e e n n t t 1. Insert the CD-ROM bundled with your V i[...]

Vigor3100 Series User’s Guide 119 Click the V irtual T A Login tab to launch the login box. Enter the Username/Password and then click OK . After a short time, the VT icon text will tur n green. M M S S N N C C o o n n f f i i g g u u r r a a t t i i o o n n If you have applied to an MSN number service, th e V irtual T A server can assign which c[...]

Vigor3100 Series User’s Guide 120 3 3 . . 1 1 0 0 . . 5 5 C C a a l l l l C C o o n n t t r r o o l l Some applications require that the router (onl y for the I SDN models) be remotely activated, or be able to dial up to the ISP via the ISDN in terface. Vigor routers provide this feature by allowing user to make a phone call to the router and the[...]

Vigor3100 Series User’s Guide 121 utilization. Idle Timeout Because our ISDN link type is “Dial On De mand”, the connection will be initiated only when needed. High Water Mark and High Water Time BOD stands for bandwidth-on-demand for Multiple-Link PPP (ML-PPP or MP). High Water Mark/ High Water Time/ Low Water Mark/Low Water Time par ameters[...]

Vigor3100 Series User’s Guide 122 Note : * The actual data throughput will vary ac co rding to the network conditions and environmental factors, including volume of network traffic, network overhead and building m aterials. In an Infrastructure Mode of wireless network, Vigor wireless router plays a role as an Access Point (AP) connecting to lots[...]

Vigor3100 Series User’s Guide 123 Example 1 Example 2 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quaran tine or limit access reasons. To isolate means neither of the parties can access each other. To elaborate an example for business use, you may set up a wi[...]

Vigor3100 Series User’s Guide 124 3 3 . . 1 1 1 1 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Check the box to enable wireless funct[...]

Vigor3100 Series User’s Guide 125 SSID The default SSID is "default". We suggest you change it to a particular name. It is the identification of the wireless LAN. SSID can be any text numbers or various special characters. Channel The channel of frequency of the wireless LAN. The default channel is 6. You may switch channel if the selec[...]

Vigor3100 Series User’s Guide 126 3 3 . . 1 1 1 1 . . 3 3 S S e e c c u u r r i i t t y y By clicking the Security Settings , a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP Only - Accept only WEP clients a[...]

Vigor3100 Series User’s Guide 127 auto-negotiated during authentication, the field of ke y setting below will be not available for input. WPA The WPA encrypts each frame transmitted from the radio using the key, which either PSK entered manually in this field below or automatically negotiated via 802.1x authentication. Type - Select from Mixed (W[...]

Vigor3100 Series User’s Guide 128 3 3 . . 1 1 1 1 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wire less LAN MAC address of client. Only the valid MAC address that has been configured can access[...]

Vigor3100 Series User’s Guide 129 3 3 . . 1 1 1 1 . . 5 5 W W D D S S WDS means Wireless Distribution System. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air. y Extend the coverage range of a WLAN. To meet the above [...]

Vigor3100 Series User’s Guide 130 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. Howe ver, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Mode Choos[...]

Vigor3100 Series User’s Guide 131 following WEP or Pre-shared key field valid or not. Choose one of the types for the router. WEP Check this box to use the same key set in Security Settings page. If you did not set any key in Security Settings page, this check box will be dimmed. Encryption Mode - If you checked the box of Use the same WEP key ?[...]

Vigor3100 Series User’s Guide 132 3 3 . . 1 1 1 1 . . 6 6 A A P P D D i i s s c c o o v v e e r r y y Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know which channel is clean for usage. Also, it can be used to facilitate finding an AP for a WDS li nk. Notice that [...]

Vigor3100 Series User’s Guide 133 3 3 . . 1 1 1 1 . . 7 7 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of connecting wire less clients now along with its status code. There is a code summary belo w for explanation. For convenient Access C ontrol , you can select a WLAN station and click Add to Access Control bel[...]

Vigor3100 Series User’s Guide 134 3 3 . . 1 1 1 1 . . 8 8 S S t t a a t t i i o o n n R R a a t t e e C C o o n n t t r r o o l l This page allows you to control the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting. The range for the rate is between 100 ~ 30,000 kbps. 3 3 . . 1 1 2 [...]

Vigor3100 Series User’s Guide 135 Enable Check this box to enable this function (for VLAN Configuration). P1 – P4 Check the box to make the com puter connecting to the port being grouped in specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box. For example, if you check the boxes of [...]

Vigor3100 Series User’s Guide 136 7890 in the boxes of W_VLAN1. Users can confi gure fifteen groups of wireless VLAN in this page. Enable Check this box to invoke wireless VLAN function. Login ID Type Login ID for different groups of W_VLAN with 1 to 1 1 characters. Password Type password for different groups of W_VLAN with 1 to 11 characters. De[...]

Vigor3100 Series User’s Guide 137 Disable broadcast and multicast traffic Check this box to prevent br oadcast and multicast traffic forwarding to all W_VLAN. H H o o w w c c a a n n y y o o u u ( ( w w i i r r e e l l e e s s s s c c l l i i e e n n t t ) ) a a c c c c e e s s s s i i n n t t o o I I n n t t e e r r n n e e t t ? ? After finishi[...]

Vigor3100 Series User’s Guide 138 5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want. 3 3 . . 1 1 2 2 . . 3 3 V V L L A A N N C C r r o o s s s s S S e e t t u u p p This function allows the router to integr ate VLAN and W_VLAN for managing different computers (notebooks). See the [...]

Vigor3100 Series User’s Guide 139 Enable Check this box to invoke VLAN Cross Setup function. VLAN0-3 It represents the groups of virtual LAN connected by Ethernet interface. W_VLAN0-15 It represents the groups of wireless VLAN communicated by wireless interface.[...]

Vigor3100 Series User’s Guide 140 3 3 . . 1 1 2 2 . . 4 4 W W i i r r e e l l e e s s s s R R a a t t e e C C o o n n t t r r o o l l Rate Control manages the transmission rate of data in and out throu gh the router. You can also manage the in/out rate of each wireless VLAN. Go to VLAN menu and select Wireless Rate Control . The following page wi[...]

Vigor3100 Series User’s Guide 141 Model Name Displays the model name of the router. Firmware Version Displays the firmware version of the router. Build Date/Time Displays the date and time of the current firmware build. MAC Address Displays the MAC address of the LAN Interface. 1 st IP Address Display s the IP address of the LAN interface. 1 st S[...]

Vigor3100 Series User’s Guide 142 Retype New Password Type in the new password again. When you click OK, the login window will a ppear. Please use the new password to access into the web configurator again. 3 3 . . 1 1 3 3 . . 3 3 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p B B a a c c k k u u p p t t h h e e C C o[...]

Vigor3100 Series User’s Guide 143 4. Click Save button, the configuration will download autom atically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating exam ples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available. R R e e s s t t o o r r[...]

Vigor3100 Series User’s Guide 144 3 3 . . 1 1 3 3 . . 4 4 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided to help users to monitor router. There is no bot her to directly get into the Web Configurator of the router or borrow de bug equipments. Enable Click “ Enable ” to activate this function. Serve[...]

Vigor3100 Series User’s Guide 145 3 3 . . 1 1 3 3 . . 5 5 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to use the browser time fro m the remote administrator PC host as r[...]

Vigor3100 Series User’s Guide 146 Automatically Update Interval Select a time interval for updating from the NTP server. Click OK to save these settings. 3 3 . . 1 1 3 3 . . 6 6 M M a a n n a a g g e e m m e e n n t t The port number used to send/receive SIP messag e for building a session. The default value is 5060 and this must match with the p[...]

Vigor3100 Series User’s Guide 147 Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as the manager to execute SNMP function. Please type in IP address to specify certain host. Trap Community Set trap community by typing a proper name. The default setting i s public. Notification Host[...]

Vigor3100 Series User’s Guide 148 3 3 . . 1 1 4 4 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of you Vigor router. 3 3 . . 1 1 4 4 . . 1 1 W W A A N N C C o o n n n n e e c c t t i i o o n n Click Diagnostics and click WAN Connection to open the web page. Such page will be diffe[...]

Vigor3100 Series User’s Guide 149 3 3 . . 1 1 4 4 . . 3 3 R R o o u u t t i i n n g g T T a a b b l l e e Click Diagnostics and click Routing Table to open t he web page. Refresh Click it to reload the page. 3 3 . . 1 1 4 4 . . 4 4 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content [...]

Vigor3100 Series User’s Guide 150 3 3 . . 1 1 4 4 . . 5 5 D D H H C C P P T T a a b b l l e e The facility provides information on IP address as signments. This information is helpful in diagnosing network problems, such as IP address conflicts, etc. Click Diagnostics and click DHCP Table to open the web page. Index It displays the connection ite[...]

Vigor3100 Series User’s Guide 151 Ifno It indicates the interface of the WAN connection. Refresh Click it to reload the page. 3 3 . . 1 1 4 4 . . 7 7 W W i i r r e e l l e e s s s s V V L L A A N N O O n n l l i i n n e e S S t t a a t t i i o o n n T T a a b b l l e e This function is available for G model onl y. Click Diagnostics and click Wire[...]

Vigor3100 Series User’s Guide 152 Enable Data Flow Monitor Check this box to enable this function. Order by Use the drop down list to c hoose the order of data arranging. Refresh Seconds Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically. Refresh Click this link to refr esh thi[...]

Vigor3100 Series User’s Guide 153 Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column. 3 3 . . 1 1 4 4 . . 9 9 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth or Session[...]

Vigor3100 Series User’s Guide 154 3 3 . . 1 1 4 4 . . 1 1 0 0 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Ping to Use the drop down list to choose the destination that you would like to ping. IP Address Type in the IP address of the Host/IP that you want to ping. Run Click th[...]

Vigor3100 Series User’s Guide 155 4 A A p p p p l l i i c c a a t t i i o o n n a a n n d d E E x x a a m m p p l l e e s s 4 4 . . 1 1 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N c c o o n n n n e e c c t t i i o o n n b b e e t t w w e e e e n n r r e e m m o o t t e e o o f f f f i i c c e e a a n n d d h h e e a a d d [...]

Vigor3100 Series User’s Guide 156 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dia[...]

Vigor3100 Series User’s Guide 157 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service is selected, y ou may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in[...]

Vigor3100 Series User’s Guide 158 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: 1. Go to Remote Access Control to enable the necessary VPN service. 2. Then, for using PPP b[...]

Vigor3100 Series User’s Guide 159 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dia[...]

Vigor3100 Series User’s Guide 160 connection. 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, y ou may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the setting[...]

Vigor3100 Series User’s Guide 161 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection.[...]

Vigor3100 Series User’s Guide 162 4 4 . . 2 2 C C r r e e a a t t e e a a r r e e m m o o t t e e d d i i a a l l - - i i n n u u s s e e r r c c o o n n n n e e c c t t i i o o n n b b e e t t w w e e e e n n t t h h e e t t e e l l e e w w o o r r k k e e r r a a n n d d h h e e a a d d q q u u a a r r t t e e r r The other common case is that [...]

Vigor3100 Series User’s Guide 163 3. Go to Remote Dial-In Users . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to a llow the remote user dial-in to build VPN connection. If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security [...]

Vigor3100 Series User’s Guide 164 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel to Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. Yo[...]

Vigor3100 Series User’s Guide 165 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should fu rther specify the remote VPN server IP address, Username, Password, and[...]

Vigor3100 Series User’s Guide 166 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. 4 4 . . 3 3 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he woul[...]

Vigor3100 Series User’s Guide 167 HTTPS. And click Basic button on the right. 5. Select HTTPS in the list on the left colu mn and click on ADD to add to right column. Click OK to exit. 6. Check the Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of V oIP influent other application. 7. If the worker has connected to the [...]

Vigor3100 Series User’s Guide 168 4 4 . . 4 4 L L A A N N – – C C r r e e a a t t e e d d b b y y U U s s i i n n g g N N A A T T An example of default setting and the corr esponding deplo yment are shown below . The default V igor router private IP address/Subne t Mask is 192.168.1.1/ 255.255.255.0. The built-in DHCP server is enabled so it [...]

Vigor3100 Series User’s Guide 169 Y ou can just set the settings wrapped inside the red rectangles to fit the request of NA T usage.[...]

Vigor3100 Series User’s Guide 170 4 4 . . 5 5 C C a a l l l l i i n n g g S S c c e e n n a a r r i i o o f f o o r r V V o o I I P P f f u u n n c c t t i i o o n n 4 4 . . 5 5 . . 1 1 C C a a l l l l i i n n g g v v i i a a S S I I P P S S e e v v e e r r Example 1: Both John and David have SIP Addresses from different servi ce providers. John?[...]

Vigor3100 Series User’s Guide 171 Example 2: Both John and David have SIP Addresses from the same servi ce provider. John’s SIP URL: 1234@draytel.org , David ’s SIP URL: 4321@draytel.org Settings for John DialPlan index 1 Phone Number: 1111 Display Name: David SIP URL: 4321@draytel.org SIP Accounts Settings --- Profile Name: draytel 1 Registe[...]

Vigor3100 Series User’s Guide 172 4 4 . . 5 5 . . 2 2 P P e e e e r r - - t t o o - - P P e e e e r r C C a a l l l l i i n n g g Example 3: Arnor and Paulin have Vigor rout ers respectively, they can call each other without SIP Registrar. First they must have each ot her’s IP address and assign an Account Name for the port used for calling. Ar[...]

Vigor3100 Series User’s Guide 173 4 4 . . 6 6 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r Before upgrading your router firmware, you need to i nstall the Router Tools. The Firmware Upgrade Utility is included in the tools. 1. Insert CD of the router to your CD ROM. 2. From the we[...]

Vigor3100 Series User’s Guide 174 9. Double click on the icon of router tool. The setup wizard will appear. 10. Follow the onscreen instructions to install the tool. Finally , click Finish to end the installation. 11. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 12. Type in your router IP, usu[...]

Vigor3100 Series User’s Guide 175 14. Click Send . 15. Now the firmware update is finished.[...]

Vigor3100 Series User’s Guide 176 4 4 . . 7 7 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Go to Certificate Management and choose Local Certificate .[...]

Vigor3100 Series User’s Guide 177 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. 4. Connect to CA server via web browser. Follo w the instruction to subm it the request. Below we [...]

Vigor3100 Series User’s Guide 178 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Then you have done the request and the ser ver[...]

Vigor3100 Series User’s Guide 179 you will find the below window showin g “------BEGINE CERTIFICATE------.....” 6. You may review the detail informati on of the certificate by clicking View button. 4 4 . . 8 8 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t [...]

Vigor3100 Series User’s Guide 180 1. Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certifi cate or certificate recoring list . 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor[...]

Vigor3100 Series User’s Guide 181 4. You may review the detail informati on of the certificate by clicking View button.[...]

Vigor3100 Series User’s Guide 182[...]

Vigor3100 Series User’s Guide 183 5 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow below sections to check your basic installation stage by stage. ¾ Checking [...]

Vigor3100 Series User’s Guide 184 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong network[...]

Vigor3100 Series User’s Guide 185 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP fro m the drop down list of Configu[...]

Vigor3100 Series User’s Guide 186 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most import[...]

Vigor3100 Series User’s Guide 187 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Click Internet Access Setup group and then check whether the ISP settings are set correctly. F F o o r r P P P P P P o o E E / / P P P P P P o o A A U U s s e e r r s[...]

Vigor3100 Series User’s Guide 188 F F o o r r M M P P o o A A ( ( R R F F C C 1 1 4 4 8 8 3 3 / / 2 2 6 6 8 8 4 4 ) ) U U s s e e r r s s 1. Check if the Enable option is selected. 2. Check if all parameters of DSL Modem Settings are entered with correct values that you got from your ISP . 3. Check if IP Address, Subnet Mask and Gateway are set c[...]

Vigor3100 Series User’s Guide 189 T T r r a a n n s s m m i i s s s s i i o o n n R R a a t t e e i i s s n n o o t t f f a a s s t t e e n n o o u u g g h h Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor3100. In addition, please refer to the manual of 3G USB Modem for LED S[...]

Vigor3100 Series User’s Guide 190 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the RST button and hold for more than 5 seconds. When you see the ACT LED blinks ra pidly, please release the button. Then, the router will restart with the default configuration. After restore the factory de[...]