Draytek Vigor3200 manuale d’uso

[...]

Vigor3200 Series User’s Guide ii Vigor3200 Series Multi-WAN Security Router User’s Guide Version: 1.5 Firmware Version: V3.3.7.2 (for future updat e, contact Dray Tek) Date: 17/09/2012[...]

Vigor3200 Series User’s Guide iii Copyright Information Copyright Declarations Copyright 2012 All rights reserved. This pub lication contains information th at is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language withou t written permission from the copyright[...]

Vigor3200 Series User’s Guide iv European Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Town ship, HsinChu Industrial Park, Hsin-Chu, Taiwan 303 Product: Vigor3200 Ser ies Router DrayTek Corp. declares that Vigor3200 Series of ro uters are in compliance with the following essential requirements and other[...]

Vigor3200 Series User’s Guide v[...]

Vigor3200 Series User’s Guide vi T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s Introduction ................................................................................................. 1 1.1 Web Conf iguration Bu ttons Explanation ................................................................................. 1 1.2 LED Indica[...]

Vigor3200 Series User’s Guide vii 3.11.1 Creating an Account via Vigor Router .......................................................................... 80 3.11.2 Creating an Account via MyVigor Web Site.................................................................. 83 3.12 How can I get the files from USB stor age device connecting to Vigor r[...]

Vigor3200 Series User’s Guide viii 4.8.1 Sessio ns Limit ........................................................................................................... .... 201 4.8.2 Bandwid th Limit .......................................................................................................... .. 203 4.8.3 Quality of Service ............[...]

Vigor3200 Series User’s Guide ix 4.15.2 TR-069 .................................................................................................................. ...... 313 4.15.3 Administra tor Password .............................................................................................. 314 4.15.4 User Password ........................[...]

[...]

Vigor3200 Series User’s Guide 1 I I n n t t r r o o d d u u c c t t i i o o n n Vigor3200 Series, a broadband router, integrates IP layer QoS, NAT session/b andwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performanc[...]

Vigor3200 Series User’s Guide 2 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. 1 1 . . 2 2 . . 1 1 F F o o r r V V i i g g o o r r 3 3 2 2 0 0 0 0 LED Status Explanation Blinking[...]

Vigor3200 Series User’s Guide 3 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is blin king). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapid ly than usual, re lease the button. Then the router will restart with the factory default confi guration[...]

Vigor3200 Series User’s Guide 4 1 1 . . 2 2 . . 2 2 F F o o r r V V i i g g o o r r 3 3 2 2 0 0 0 0 n n LED Status Explanation Blinking The router is powere d on and running normal ly. ACT (Activity) Off The router is powe red off. On USB device is connected and ready for use. USB Blinking The data is transmitting. On Wireless access point is rea[...]

Vigor3200 Series User’s Guide 5 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" butt on once to wait for client device making net work connection t hrough WPS. Press "Wireless LAN ON/OFF/WPS" butt on twice to enable (WLAN LED on) or disable ( WLAN LED off) wirel ess connect ion. Factory Reset Rest[...]

Vigor3200 Series User’s Guide 6 1 1 . . 3 3 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router with Ethernet cable (RJ-45). 2. Connect one end of an Ethern[...]

Vigor3200 Series User’s Guide 7 1 1 . . 4 4 P P r r i i n n t t e e r r I I n n s s t t a a l l l l a a t t i i o o n n You can install a printer onto the router for shar ing printing. All the PCs connected this router can print documents via the router. The exam ple provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please [...]

Vigor3200 Series User’s Guide 8 3. Open File->Add Printer . A welcome dialog will appear. Please click Next . 4. Click Local printer attached to this computer and click Next. 5. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port . Click Next .[...]

Vigor3200 Series User’s Guide 9 6. In the following dialog, type 192.168.1.1 (router’ s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next . 7. Click Standard and choose Generic Network Card. 8. Then, in the following dialog, click Finish .[...]

Vigor3200 Series User’s Guide 10 9. Now, your system will ask you to choose right na me of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When y ou finish the selection, click Next . 10. For the final stage, you need to go back to Control Panel-> Printers and edit the property of the new [...]

Vigor3200 Series User’s Guide 11 The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router. Note 1: Some printers with the fax/scanning or other additional fun ctions are not supported. If you do not know whether your pr inter is supported or not, please vi sit www.DrayTek.com to [...]

Vigor3200 Series User’s Guide 12 This page is left blank.[...]

Vigor3200 Series User’s Guide 13 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For using the router properly, it is necessar y for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password for accessing into the we[...]

Vigor3200 Series User’s Guide 14 2 2 . . 2 2 C C h h a a n n g g i i n n g g P P a a s s s s w w o o r r d d No matter user mode operation or admin mode opera tion, please change the password for the original security of the router. 1. Open a web browser on your PC and type http://192. 168.1.1. A pop-up window will open to ask for username and pa[...]

Vigor3200 Series User’s Guide 15 Enter the login password on the field of Old Password . Type New Password and confirm the password. Then click OK to continue. 5. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. 2 2 . . 3 3 Q Q u u i i c c k k S S t t a a r r t t W W i i z z a a r[...]

Vigor3200 Series User’s Guide 16 Note: There are five WAN selections available for you to choose. In which, WAN5 is selected for 3G USB modem connection. Refer to the following for detailed information. 2 2 . . 3 3 . . 1 1 F F o o r r W W A A N N 1 1 – – W W A A N N 4 4 Choose WAN1/WAN2/WAN3/WAN4 and click Next . On the next page as shown bel[...]

Vigor3200 Series User’s Guide 17 2. Click PPPoE as the Internet Access Type. Then click Next to open the following page. Available settings are explained as follows: Item Description User Name Assign a specific valid user name provided by the ISP. Password Assign a valid password provided by the ISP. Confirm Password Retype the password. Back Cli[...]

Vigor3200 Series User’s Guide 18 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet.[...]

Vigor3200 Series User’s Guide 19 2 2 . . 3 3 . . 1 1 . . 2 2 P P P P T T P P / / L L 2 2 T T P P 1. Choose WAN1/WAN2/WAN3/WAN4 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. 2. Click PPTP/L2TP as the Internet Access Type. Then click Next to continue. Available settings are [...]

Vigor3200 Series User’s Guide 20 WAN IP Configuration Obtain an IP address automatically – the router will get an IP address automatically from DHCP server. Specify an IP address – you have to type relational settings manually. IP Address - Type the IP address. Subnet Mask –Type the subnet mask. Gateway – Type the IP address of the gatewa[...]

Vigor3200 Series User’s Guide 21 2 2 . . 3 3 . . 1 1 . . 3 3 S S t t a a t t i i c c I I P P 1. Choose WAN1/WAN2/WAN3/WAN4 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. 2. Click Static IP as the protocol. Type in all the information that your ISP provides for this protocol[...]

Vigor3200 Series User’s Guide 22 Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard. 3. After finishing the settings in this page, click Next to see the following page. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the [...]

Vigor3200 Series User’s Guide 23 2 2 . . 3 3 . . 1 1 . . 4 4 D D H H C C P P 1. Choose WAN1/WAN2/WAN3/WAN4 as the WAN Interface and click the Next button. The following page will be open for you to specify Internet Access Type. 2. Click DHCP as the protocol. Type in all the information that your ISP provi des for this protocol. Available settings[...]

Vigor3200 Series User’s Guide 24 Cancel Click it to give up the quick start wizard. 3. After finishing the settings in this page, click Next to see the following page. 4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 5. Now, you can enjoy surfing on the Internet. 2 2 . [...]

Vigor3200 Series User’s Guide 25 2. Then, click Next to continue. 3. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. 4. Now, you can enjoy surfing on the Internet.[...]

Vigor3200 Series User’s Guide 26 2 2 . . 4 4 S S e e r r v v i i c c e e A A c c t t i i v v a a t t i i o o n n W W i i z z a a r r d d Service Activation Wizard can guide you to set WCF (Web Content Feature) with a quick and easy way. For the Service Activation Wizard is only available for admin operation, therefore, please type “admin/admin?[...]

Vigor3200 Series User’s Guide 27 3. In the following page, you can activate the Web content filter service at the same tim e or individually. When you finish the selection, please click Next . 4. Setting confirmation page will be displayed as follows, please click Next . 5. Wait for a moment till the following page appears. When such page appears[...]

Vigor3200 Series User’s Guide 28 6. Now, the web page will display the service th at you have activated according to your selection(s). The valid time for the free trial of these services is one month. Later, if you need to extend the licen se valid time, you can also use the Service Activation Wizard again to reach your goal by clicking the radi[...]

Vigor3200 Series User’s Guide 29 2 2 . . 5 5 O O n n l l i i n n e e S S t t a a t t u u s s The online status shows the system status, WAN st atus, and other status related to this router within one page. If you select PPPoE as the protocol, you will fi nd out a link of Dial PPPoE or Drop PPPoE in the Online Status web page. Detailed explanation[...]

Vigor3200 Series User’s Guide 30 Item Description interface. WAN 1 Status ~ WAN 5 Status Line - Displays the physical connection of this interface. Name - Displays the name set in WAN1/WAN web page. Mode - Displays the type of WAN connection (e.g., PPPoE). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the W[...]

Vigor3200 Series User’s Guide 31 Click Support Area>>Application Note , the following web page will be displayed. Click Support Area>>FAQ , the following web page will be displayed. Click Support Area>>Product Registration , the following web page will be displayed.[...]

Vigor3200 Series User’s Guide 32 2 2 . . 8 8 R R e e g g i i s s t t e e r r i i n n g g V V i i g g o o r r R R o o u u t t e e r r You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the st[...]

Vigor3200 Series User’s Guide 33 3. A Login page will be shown on the screen. Please type the account and password that you created previously. And click Login . 4. The following page will be displayed after you logging in MyVigor. From this page, please click Add or Product Registration . Note: Below the field of Y our Device List, all the V igo[...]

Vigor3200 Series User’s Guide 34 5. When the following page appears, please t ype in Nickname (for the router) and choose the right registration date from the popup calendar (it appears when you click o n the box of Registration Date). After adding the basic information for the router, please click Submit . 6. When the following page appears, you[...]

Vigor3200 Series User’s Guide 35 T T u u t t o o r r i i a a l l s s a a n n d d A A p p p p l l i i c c a a t t i i o o n n s s 3 3 . . 1 1 H H o o w w t t o o I I m m p p l l e e m m e e n n t t t t h h e e A A D D / / L L D D A A P P A A u u t t h h e e n n t t i i c c a a t t i i o o n n f f o o r r U U s s e e r r M M a a n n a a g g e e m m[...]

Vigor3200 Series User’s Guide 36 3. Create LDAP server profiles. Click the Active Directory /LDAP tab to open the profile web page and click any one of the index number link. If we have two groups “ RD1 ” and “ SHRD ” on LDAP server, we can configure two LDAP server profiles with different Group Distinguished Name. 4. Click OK to save the[...]

Vigor3200 Series User’s Guide 37 6. Then open User Management>>User Profile to create the user profile that will authenticate with LDAP server. 7. After above configurations, users belong to either “rd1” or “shrd” group can access Internet after inputting their credentials on LDAP server.[...]

Vigor3200 Series User’s Guide 38 3 3 . . 2 2 H H o o w w t t o o i i m m p p l l e e m m e e n n t t t t h h e e A A D D / / L L D D A A P P a a u u t t h h e e n n t t i i c c a a t t i i o o n n f f o o r r S S S S L L A A p p p p l l i i c c a a t t i i o o n n ? ? Below shows the configuration steps: 1. Access into the web configur ator of th[...]

Vigor3200 Series User’s Guide 39 3. Click the Active Directory /LDAP tab to open the profile web page. 4. Click any one of the index numb er link to configure the proper Base Distinguished Name and Group Distinguished Name . Suppose that there are several departments in your company, e.g., RD1 and RD2. Here, create a profile for RD1 first. Someti[...]

Vigor3200 Series User’s Guide 40 Press the button on this page to ke ep searching its sub-tree. In addition, means this item is an organization; means this item is an account. 5. Press certain item , its Base Distinguished Name (BDN) will be shown automatically in the AD/LDAP Disti nguished Nam e field box. Then, press OK to save the profile and [...]

Vigor3200 Series User’s Guide 41 6. After finishing the AD/LDAP configuration, go to VPN and Remote Access >> PPP General Setup . Check the box of LDAP that you’ve enabled in Application >> Active Directory / LDAP . Note : Group Distinguished Name is not a MUST required option for the AD/LDAP configuration. However, you may need, so[...]

Vigor3200 Series User’s Guide 42 9. Setup two applications profiles (n amed PC1 and PC2) for SSL VPN. 10. Setup two SSL Web Proxy Servers prof iles (named google and baidu) for SSL VPN. 11. Go to SSL VPN >>User Group to setup two separate groups (named with g1 and g2) with different authorities and different authentication methods. Differen[...]

Vigor3200 Series User’s Guide 43 Set the user group profile (nam ed g2) for RD2 department:[...]

Vigor3200 Series User’s Guide 44 12. Once you’ve finished the configuration on Vigor router, try to login SSL portal with https://<IPAddress>/ . 13. Please type in the user name and password, and select the group that the account belongs to (In this case, the username is Caesar and the group it belongs to is g1 ). You may also leave this [...]

Vigor3200 Series User’s Guide 45[...]

Vigor3200 Series User’s Guide 46 3 3 . . 3 3 H H o o w w t t o o C C o o n n f f i i g g u u r r e e M M u u l l t t i i - - S S u u b b n n e e t t By identifying the tagged message, Vigor3200 can divide the LAN Port into several VLAN groups. Such LAN port with tagged informati on will accept the packets only with VLAN ID number. For example, Vi[...]

Vigor3200 Series User’s Guide 47 Configuration for Vigor3200 1. In the page of LAN >> VLAN Configuration , check the box of Enab le to enable the function of VLAN Configuration. 2. Untag VLAN0 and set LAN4 as the Subnet . 3. To activate the function of VLAN Tag for VLAN1 setting, check the box of Enable and type the value (10) for VID setti[...]

Vigor3200 Series User’s Guide 48 After finishing the above configuration, the equipm en t connecting to Vigor3200 LAN Port can get the corresponding IP address of the network segment. The equipment connecting to Vigor3200 L AN Port (LAN1) can get the IP address of 192.168.1.0/2 4. The equipment connecting to Vigor3200 L AN Port (LAN2) can get the[...]

Vigor3200 Series User’s Guide 49 7. To make any two of VLAN groups linked with each other, just check the boxes of the ones in the field of Inter-LAN Routing in the page of LAN >> General Setup . Refer to the following figure. LAN2 and LAN3 are linked. Configuration for VigorSwitch G2240 1. Open Vlan>>Tag-based Group . 2. Add four VID[...]

Vigor3200 Series User’s Guide 50 4. After finishing the above configuration, the equipment connecting to VigorSwitch Port 15 , 16, 17 and 18 can get the corresponding IP address(es) of the network segment. The equipment connecting to VigorSwitch Port 15 can get the IP address of 192.168.1.0/2 4 The equipment connecting to VigorSwitch Port 16 can [...]

Vigor3200 Series User’s Guide 51 3 3 . . 4 4 H H o o w w t t o o C C u u s s t t o o m m i i z z e e Y Y o o u u r r L L o o g g i i n n P P a a g g e e Login page can be customized to fit the request of the adm inistrator. 1. Open User Management>>General Setup . Set User-Based as the Mode and click OK to save teh settings. 2. Open User Ma[...]

Vigor3200 Series User’s Guide 52 4. Open System Maintenance>>Login Customization . Check the box to enable this function. Type a brief description (e.g., Just for Carrie ) in the field of Login De scription which will be shown on the heading of the login dialog. Next, click OK . Note that do not type URL redirect link in Bulletin bo x. 5. O[...]

Vigor3200 Series User’s Guide 53 3 3 . . 5 5 C C r r e e a a t t e e a a L L A A N N - - t t o o - - L L A A N N C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n R R e e m m o o t t e e O O f f f f i i c c e e a a n n d d H H e e a a d d q q u u a a r r t t e e r r The most common case is that you may want to connect to network[...]

Vigor3200 Series User’s Guide 54 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection.[...]

Vigor3200 Series User’s Guide 55 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based servi[...]

Vigor3200 Series User’s Guide 56 6. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in[...]

Vigor3200 Series User’s Guide 57 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: 1. Go to VPN and Remote Access and select Remote Access Cont rol to enable the necessary VPN [...]

Vigor3200 Series User’s Guide 58 3. Go to LAN-to-LAN . Click on one index number to edit a profile. 4. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. 5. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial[...]

Vigor3200 Series User’s Guide 59 If a PPP-based service is selected, y ou should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection.[...]

Vigor3200 Series User’s Guide 60 6. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, y ou may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in[...]

Vigor3200 Series User’s Guide 61 7. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection.[...]

Vigor3200 Series User’s Guide 62 3 3 . . 6 6 C C r r e e a a t t e e a a R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r C C o o n n n n e e c c t t i i o o n n B B e e t t w w e e e e n n t t h h e e T T e e l l e e w w o o r r k k e e r r a a n n d d H H e e a a d d q q u u a a r r t t e e r r The other common case is that y[...]

Vigor3200 Series User’s Guide 63 3. Go to Remote Dial-In User . Click on one index number to edit a profile. 4. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is sele cted, you may further specify the remote peer IP Address, IKE Authentication Method and I PSec Security M[...]

Vigor3200 Series User’s Guide 64 Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel t o Vigor router. For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. Yo[...]

Vigor3200 Series User’s Guide 65 3. In Step 2. Connect to VPN Server , click Insert button to add a new entry. If an IPSec-based service is selected as shown below, You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VP[...]

Vigor3200 Series User’s Guide 66 then forwarded to Internet. This will make the remote host seem to be working i n the enterprise network. 4. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner.[...]

Vigor3200 Series User’s Guide 67 3 3 . . 7 7 Q Q o o S S S S e e t t t t i i n n g g E E x x a a m m p p l l e e Assume a teleworker someti mes works at hom e and takes care of children. When working time, he would use V igor router at home to connect to the server in the headquarter of fice downtown via either HTTPS or VPN to check email and acc[...]

Vigor3200 Series User’s Guide 68 4. Return to previous page. Enter th e Name of Index Class 1 by clicking Edit link. T ype the name “ E-m ail ” for Class 1. 5. For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP . 6. Return to previous page. Enter th e Name of Index Class 2 by clicking Edit[...]

Vigor3200 Series User’s Guide 69 7. Click Setup link for one of the W AN interface. 8. Check Enable UDP Bandwidth Control on t he bottom to prevent enormous UDP traf fic of influent other application. Click OK .[...]

Vigor3200 Series User’s Guide 70 9. If the worker has connected to the headquart er using host to host VPN tunnel. (Please refer to Chapter 3 VPN for detail instruction), he m ay set up an index for it. Enter the Class Name of Index 3. In this index, he will set reserved bandwidth for 1 VPN tunnel. 10. Click Edit to open a new window . 11. Click [...]

Vigor3200 Series User’s Guide 71 3 3 . . 8 8 U U p p g g r r a a d d e e F F i i r r m m w w a a r r e e f f o o r r Y Y o o u u r r R R o o u u t t e e r r U U s s i i n n g g F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e U U t t i i l l i i t t y y Before upgrading your router firmware, you need to install the Router Tools. The Fi[...]

Vigor3200 Series User’s Guide 72 5. Double click on the icon of router tool. The setup wizard will appear. 6. Follow the onscreen instructions to install the tool. Finally, click Finish to end the installation. 7. From the Start menu, open Programs and choose Router Tools XXX >> Firmware Upgrade Utility . 8. Type in your router IP, usually [...]

Vigor3200 Series User’s Guide 73 10. Click Send . 11. Now the firmware update is finished. U U s s i i n n g g W W e e b b P P a a g g e e The web page also can guide you to upgrade firm ware. Note that this example is running over Windows OS (Operating System). 1. Download the newest firmware from DrayTe k's web site or FTP site. The DrayTe[...]

Vigor3200 Series User’s Guide 74 3 3 . . 9 9 R R e e q q u u e e s s t t a a c c e e r r t t i i f f i i c c a a t t e e f f r r o o m m a a C C A A s s e e r r v v e e r r o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Go to Certificate Management and choose Local Certificate .[...]

Vigor3200 Series User’s Guide 75 2. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. 3. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. 4. Connect to CA server via web browser. Follo w the instruction to submit the request. Below we ta[...]

Vigor3200 Series User’s Guide 76 Select Advanced request . Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Then you have done the request and the ser ver [...]

Vigor3200 Series User’s Guide 77 you will find the below window showin g “------BEGINE CERTIFICATE------.....” 6. You may review the detail informati on of the certificate by clicking View button.[...]

Vigor3200 Series User’s Guide 78 3 3 . . 1 1 0 0 R R e e q q u u e e s s t t a a C C A A C C e e r r t t i i f f i i c c a a t t e e a a n n d d S S e e t t a a s s T T r r u u s s t t e e d d o o n n W W i i n n d d o o w w s s C C A A S S e e r r v v e e r r 1. Use web browser connecting to the CA server that you would like to retrieve its CA c[...]

Vigor3200 Series User’s Guide 79 2. In Choose file to download , click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer. file. 3. Back to Vigor router, go to Trusted CA Certificate . Click IMPORT button and browse the file to import the certificate (.cer file) in to Vigor router. When finished, click refres[...]

Vigor3200 Series User’s Guide 80 3 3 . . 1 1 1 1 C C r r e e a a t t i i n n g g a a n n A A c c c c o o u u n n t t f f o o r r M M y y V V i i g g o o r r The website of MyVigor (a server located on http://myvigor.draytek.com ) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filter the web p[...]

Vigor3200 Series User’s Guide 81 4. Check to confirm that you accept the Agreement and click Accept . 5. Type your personal information in this page and then click Continue . 6. Choose proper selection for your computer and click Continue .[...]

Vigor3200 Series User’s Guide 82 7. Now you have created an account successfully. Click START. 8. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the re gister [...]

Vigor3200 Series User’s Guide 83 10. When you see the following page, please type in the account and password (that y ou just created) in the fields of UserName and Password . 11. Now, click Login . Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 3 3 . . 1 1 1 1 . . 2 2 C C r [...]

Vigor3200 Series User’s Guide 84 2. Check to confirm that you accept the Agreement and click Accept . 3. Type your personal information in this page and then click Continue . 4. Choose proper selection for y our computer and click Continue .[...]

Vigor3200 Series User’s Guide 85 5. Now you have created an account successfully. Click START. 6. Check to see the confirmation email with the title of New Account Confirmation Letter from myvigor.draytek.com . 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the re gister [...]

Vigor3200 Series User’s Guide 86 8. When you see the following page, please type in the account and password (that you just created) in the fields of UserName and Password . Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login . Your account has been activated. You can access into M[...]

Vigor3200 Series User’s Guide 87 3 3 . . 1 1 2 2 H H o o w w c c a a n n I I g g e e t t t t h h e e f f i i l l e e s s f f r r o o m m U U S S B B s s t t o o r r a a g g e e d d e e v v i i c c e e c c o o n n n n e e c c t t i i n n g g t t o o V V i i g g o o r r r r o o u u t t e e r r ? ? Files on USB storage device can be reviewed by open[...]

Vigor3200 Series User’s Guide 88 3. Setup a user account for the FTP service by using USB Application >>USB User Management. Click Enable to enable FTP/Samba User account. Here we add a new account "user1" and assign authorities “Read”, “Write” and “List” to it. Click OK to save the configuration. 4. Make sure the FTP [...]

Vigor3200 Series User’s Guide 89 5. When the following screen appears, it means the FTP service is running properly. 6. Return to USB Application >> USB Disk Status . The information for FTP server will be shown as below. 7. Now, users in LAN of Vigor3200 can access into the USB storage device by typing ftp://192.168.1.1 on any browser . Th[...]

Vigor3200 Series User’s Guide 90 3 3 . . 1 1 3 3 V V P P N N T T r r u u n n k k L L o o a a d d - - B B a a l l a a n n c c e e b b e e t t w w e e e e n n V V i i g g o o r r 3 3 2 2 0 0 0 0 a a n n d d O O t t h h e e r r V V i i g g o o r r R R o o u u t t e e r r This section will discuss how to build VPN Tr unk with load-balance between Vig[...]

Vigor3200 Series User’s Guide 91 Settings for Vigor 3200: 1. Open VPN and Remote Access>>>LAN to LAN . Choose Index number 1 for configuring a VPN LAN to LAN profile. 2. In the following page, please configure the settings as the following figure.[...]

Vigor3200 Series User’s Guide 92 3. Click OK to save the configuration and return to previous page. Choose Index n u mber 2 for configuring another VPN LAN to LAN profile. 4. In this page, please configure the settings as the following figure.[...]

Vigor3200 Series User’s Guide 93 5. Click OK to save the configuration. 6. Open VPN and Remote Access>>VPN TRUNK Management . Add these VPN profiles to the VPN Trunk and set Load Balance as the Attribute Mode . 7. Click Advanced for specifying Load Balance Algorithm .[...]

Vigor3200 Series User’s Guide 94 8. When the VPN trunk is successfully connected , you may check the connection status by viewing the page of VPN and Remote Access >>Connection Management . Transferred packets (Tx Pkts) will keep increasing through bot h tunnels when outgoing packets sent to the remote VPN network. Settings for Vigor3300: 1[...]

Vigor3200 Series User’s Guide 95 2. In this page, please configure the settings as the following figure. 3. Click Apply to save the configuration and return to previous page. Choose Index 2 for configuring another VPN Trunk policy. 4. In this page, please configure the settings as the following figure.[...]

Vigor3200 Series User’s Guide 96 5. Click Apply to save the configuration. 6. Open VPN>>VPN Trunk>>Group Table to group these two VPN policies. 7. Choose Index 1 and click Edit . Add these two VPN profiles (wan1 and wan2) to a VPN Trunk. Now, one-pair VPN trunk between Vigor3200 (192.168.1. 0/24) and Vigor3300 (192.168.33.0/24) has be[...]

Vigor3200 Series User’s Guide 97 S S c c e e n n a a r r i i o o 2 2 : : T T w w o o - - p p a a i i r r V V P P N N T T r r u u n n k k Vigor3200 as VPN client (dial out site) LAN: 192.168.1.0/24 WAN 1 IP: 202.211.110.30 (My GRE IP, 10.0.0. 1, Peer GRE IP, 10.0.0.2) WAN 2 IP: 202.211.120.30 (My GRE IP, 10.0.0. 3, Peer GRE IP, 10.0.0.4) WAN 3 IP:[...]

Vigor3200 Series User’s Guide 98 3. Open VPN and Remote Access>>VPN TRUNK Management . Add these VPN profiles to the VPN Trunk and set Load Balance as the Attribute Mode . Setting configuration is the same as Scenario 1. Profile 1 and Profile 2 are one pair; Profile 3 and Profile 4 are the other pair. 4. When the VPN trunk is successfully c[...]

Vigor3200 Series User’s Guide 99 Settings for Vigor3300: 1. Open Advanced>>LAN VLAN . Choose the tab of 802.1Q VLAN . Configure the settings as the following figure. 2. Next, open Network>>LAN . Set two LAN subnet: LAN1 192.168.33.0/24 and LAN2 192.168.10.0/ 24. 3. Click Apply . 4. Open VPN>>IPSec>>VPN Trunk>>Policy [...]

Vigor3200 Series User’s Guide 100 to configure the setting is the same as Scenario 1. 5. Open VPN>>VPN Trunk>>Group Table to group these VPN policies. Group two VPN policies as the following figure and then click Apply . The way to configure the setting is the same as Scenario 1. Now, two-pair VPN trunk between Vigor3200 (192.168.1. 0[...]

Vigor3200 Series User’s Guide 101 A A d d v v a a n n c c e e d d W W e e b b C C o o n n f f i i g g u u r r a a t t i i o o n n This chapter will guide users to execute adva nced (full) configuration thr ough admin mode operation. As for other examples of application, please refer to chapter 5. 1. Open a web browser on your PC and type http://1[...]

Vigor3200 Series User’s Guide 102 has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 W W h h a a t t a a r r e e P P u u b b l l i i c c I I P P [...]

Vigor3200 Series User’s Guide 103 router. Besides, 3G USB Modem also can be used as backup device. Therefore, when other Ethernet WAN ports are not available, the r outer will use 3.5G for supporting automatically. The supported 3G USB Modem will be listed on DrayTek web site. Please visit www.DrayTek.com for more detailed information. Below show[...]

Vigor3200 Series User’s Guide 104 Index Click the WAN interface link under Index to access into the WAN configuration page. Enable V means such WAN interface is enabled and ready to be used. Physical Mode / Type Display the physical mode and physical type of such WAN interface. Line Speed Display the downstream and upstream rate of such WAN inter[...]

Vigor3200 Series User’s Guide 105 Item Description Enable Choose Yes to invoke the settings for this WAN interface. Choose No to disable the settings for this WAN interface. Display Name Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. Physical type You can change the physical type for WA[...]

Vigor3200 Series User’s Guide 106 When any WAN disconnect – WAN1 will be activated when any WAN interface disconnects. When all WAN disconnect – WAN1 will be activated when all the WAN interfaces disconnect. After finished the above settings, click OK to save the settings. F F o o r r W W A A N N 5 5 ( ( U U S S B B ) ) To use 3G network conn[...]

Vigor3200 Series User’s Guide 107 Active Mode Determine the WAN interface will be active for always ( Always On ) or be treated as a backup WAN interface ( Backup ). Backup Type - Determine the role of such WAN interface. It will be changed according to the Active Mode specified. If you choose Always On as Active Mode , such interface will be use[...]

Vigor3200 Series User’s Guide 108 Each item is explained as follows: Item Description Index Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3/WAN4/WAN5 that entered in general setup. Physical Mode It shows the physical connection for WAN1-WAN4 (Ethernet) /WAN5 (3G USB Modem) according to the real network connection. [...]

Vigor3200 Series User’s Guide 109 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P o o E E i i n n W W A A N N 1 1 ~ ~ W W A A N N 4 4 To choose PPPoE as the accessing protocol of the internet, please select PPPoE from the Internet Access menu. The following web page will be shown. Available settings are explained as follows: I[...]

Vigor3200 Series User’s Guide 110 Item Description have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. MTU It means Max Transmit Unit for packet. The default setting is 1442. PPPoE Pass-through The router offers PPPoE dial-up connection. Besides, you also[...]

Vigor3200 Series User’s Guide 111 Item Description Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address . Default MAC Address – You can use Default MAC Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address f[...]

Vigor3200 Series User’s Guide 112 Available settings are explained as follows: Item Description Static or Dynamic IP Click Enable for activating this function. If you click Disable , this function will be closed and all the settings that you adjusted in this page will be invalid. Keep WAN Connection Normally, this function is designed for Dynamic[...]

Vigor3200 Series User’s Guide 113 Item Description MTU It means Max Transmit Unit for packet. The default setting is 1442. RIP Protocol Routing Information Protoc ol is abbreviated as RIP(RFC1058) specifying how routers exchange routing tables information. Click Enable RIP for activating this function. Bridge Mode If you check this box to invoke [...]

Vigor3200 Series User’s Guide 114 Item Description MAC address for the router. Specify a MAC Address : Some Cable service providers specify a specific MAC address fo r acc ess authentication. In such cases you need to click the Specify a MAC Address and enter the MAC address in the MAC Address field. DNS Server IP Address - Type in the pri mary I[...]

Vigor3200 Series User’s Guide 115 D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P T T P P / / L L 2 2 T T P P i i n n W W A A N N 1 1 ~ ~ W W A A N N 4 4 To use PPTP/L2TP as the accessing protocol of the internet, please choose PPTP/L2TP from Internet Access menu. The following web page will be shown. Available settings are explai[...]

Vigor3200 Series User’s Guide 116 Item Description after passing through the time without any action. IP Address Assignment Method(IPCP) Fixed IP - Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In thi[...]

Vigor3200 Series User’s Guide 117 After finishing all the settings here, please click OK to activate them. D D e e t t a a i i l l s s P P a a g g e e f f o o r r P P P P P P i i n n W W A A N N 5 5 To use PPP (for 3G USB Modem) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select PPP mode for WAN5.[...]

Vigor3200 Series User’s Guide 118 Item Description ISP. PPP Username Type the PPP username (optional). PPP Password Type the PPP password (optional). Index (1-15) in Schedule Setup Set the PCs on LAN to work at certain time interval only. You can type in four sets of time schedule for your request. All the schedules can be set previously in Appli[...]

Vigor3200 Series User’s Guide 119 4 4 . . 1 1 . . 4 4 L L o o a a d d - - B B a a l l a a n n c c e e P P o o l l i i c c y y This router supports the function of load balanci ng. It can assign traffic with protocol t y pe, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN interface. The user can assign traffi[...]

Vigor3200 Series User’s Guide 120 Click any Index number link to access into the following page for configuring load-balance policy. Each item is explained as follows: Item Description Enable Check this box to enable this policy. Protocol Use the drop-down menu to choose a proper protocol for the WAN interface. Binding WAN interface Choose the WA[...]

Vigor3200 Series User’s Guide 121 passed through the WAN interface. After finishing all the settings here, please click OK to activate them. 4 4 . . 2 2 L L A A N N Local Area Network (LAN) is a group of subnets regulated and rul ed by router . The design of network structure is related to what type of public IP addresses coming from your ISP . 4[...]

Vigor3200 Series User’s Guide 122 In some special case, you may have a public IP subnet from y our ISP such as 220.135.240.0/24. This m e ans th at you can set up a public subnet or call second subnet that each host is equipped with a public IP address. As a part of the public subnet, the V igor router will serve for IP routing to help hosts in t[...]

Vigor3200 Series User’s Guide 123 W W h h a a t t a a r r e e V V i i r r t t u u a a l l L L A A N N s s a a n n d d R R a a t t e e C C o o n n t t r r o o l l Y ou can group local hosts by physical port and create up to 4 virtual LANs. T o manage the communication between different groups, please set up rules in V irtual LAN (VLAN) function an[...]

Vigor3200 Series User’s Guide 124 Each item is explained as follows: Item Description General Setup----- Allow to configure settings for each subnet respectively. Index - Display all of the LAN items, DMZ and IP Routed Subnet. Status- Check the box to enable such LAN configuration. Basically, LAN1 status is enabled in default. LAN2, LAN3, LAN4 an[...]

Vigor3200 Series User’s Guide 125 Inter-LAN Routing LAN 1 ~ LAN 4, DMZ PORT - Check the box to make the routing among LANs. After finishing all the settings here, please click OK to save the configuration. To configure LAN 1 ~ LAN 4, DMZ or IP Routed Subnet, simply click Details Page to open the settings page. D D e e t t a a i i l l s s P P a a [...]

Vigor3200 Series User’s Guide 126 Item Description in the LAN. Disable Server - Let you manually assign IP address to every host in the LAN. Relay Agent - Specify which subnet that DHCP server is located the relay agent should redirect the DHCP requ est to. S tart IP Address - Enter a value of the IP address pool for the DHCP server to start with[...]

Vigor3200 Series User’s Guide 127 Item Description external DNS server by establishing a W AN (e.g. DSL/Cable) connection. After finishing all the settings here, please click OK to save the configuration. D D e e t t a a i i l l s s P P a a g g e e f f o o r r L L A A N N 2 2 , , L L A A N N 3 3 , , L L A A N N 4 4 With the multi-subnet feature o[...]

Vigor3200 Series User’s Guide 128 DHCP Server Configuration DHCP stands for Dynamic Host Configuration Protocol. The router by factory default acts a DHCP server for your network so it automatically dispatch related IP settings to any local user configured as a DHCP client. It is highly recommended that you leave the router enabled as a DHCP serv[...]

Vigor3200 Series User’s Guide 129 For NAT Usage - Click this item to invoke NAT usage. For Routing Usage - Click this item to invoke Routing usage. IP Addr ess - T ype in private IP address for connecting to a local private network (Default: 192.168.9.1). Subnet Mask - T y pe in an address code that determines the size of the network. (Default: 2[...]

Vigor3200 Series User’s Guide 130 I I P P R R o o u u t t e e d d S S u u b b n n e e t t V igor router can serve as a DHCP server to route the request coming from LAN PC. Available settings are explained as follows: Item Description Network Configuration Enable/Disable - Click Enable to enable such configuration; click Disable to disable such co[...]

Vigor3200 Series User’s Guide 131 IP Pool Counts - Ente r the maxi mu m nu mber o f PC s t hat you want the DHCP server to assign IP addresses to. The default is 10. Use LAN Port – Specify an IP for IP Ro ute Subnet. If it is enabled, DHCP server will assign IP address automa tically for the clients coming from P1 and/or P2. Please check the bo[...]

Vigor3200 Series User’s Guide 132 A A d d d d S S t t a a t t i i c c R R o o u u t t e e s s t t o o P P r r i i v v a a t t e e a a n n d d P P u u b b l l i i c c N N e e t t w w o o r r k k s s Here is an example of setting Static Route in Main Router so that user A and B locating in different subnet can talk to each other via th e router . A[...]

Vigor3200 Series User’s Guide 133 2. Click the LAN>> S tatic Route and click on the Index number 1. Please add a static route as shown below , which regulates all p ackets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click OK . 3. Return to St a t i c R o u t e Setup page. Click on another Index Number to add another static ro[...]

Vigor3200 Series User’s Guide 134 4 4 . . 2 2 . . 4 4 V V L L A A N N Virtual LAN function provides you a very conve nient way to ma nage subnets by grouping them. Go to LAN page and select VLAN . The following page will appear. Click Enable to invoke VLAN function. Available settings are explained as follows: Item Description VLAN Tag Enable –[...]

Vigor3200 Series User’s Guide 135 Subnet Choose one of them to make the selected VLAN mapping to the specified subnet only . For example, LAN1 is specified for VLAN0. It means that PCs grouped under VLAN0 can get the IP address (es) that specified by the subnet. After finishing all the settings here, please click OK to save the configuration. Not[...]

Vigor3200 Series User’s Guide 136 Strict Bind Click this radio button to block the connection of the I P/MAC which is not listed in IP Bind List. ARP Table This table is the LAN ARP table of this router. The information for IP and MAC will be displayed in this field. Each pair of IP and MAC address listed in ARP table can be selected and added to[...]

Vigor3200 Series User’s Guide 137 Available settings are explained as follows: Item Description Port Mirror Check Enable to activate this function. Or, check Disable to close this function. Mirror Port Select a port to view traffic sent from mirrored ports. At present, only WAN4 will be treated as mirror port. When Port Mirror is enabled, the Mir[...]

Vigor3200 Series User’s Guide 138 4 4 . . 3 3 N N A A T T Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that one or more private IP a ddresses can be mapped into a single public one. Public IP address is usually assigned by your ISP, for which you may get charged. Private IP addresses are recognized[...]

Vigor3200 Series User’s Guide 139 4 4 . . 3 3 . . 1 1 P P o o r r t t R R e e d d i i r r e e c c t t i i o o n n Port Redirection is usually set up for server related service inside the local network (LAN), such as web servers, FTP servers, E-mail servers etc. Most of the case, you need a public IP address for each server and this public IP addr[...]

Vigor3200 Series User’s Guide 140 Each item is explained as follows: Item Description Index Display the number of the profile. Service Name Display the description of the specific network service. Protocol Display the transport layer protocol (TCP or UDP). Public Port Display the port number which will be redirected to the specified Private IP an[...]

Vigor3200 Series User’s Guide 141 Private IP Specify the private IP address of the internal host providing the service. If you choose Range as the port redirection mode, you will see two boxes on this field. Type a complete IP address in the first box (as the starting point) and the fourth digit s in the second box (as the end point). Private Por[...]

Vigor3200 Series User’s Guide 142 4 4 . . 3 3 . . 2 2 D D M M Z Z H H o o s s t t As mentioned above, Port Redirection can redirect incoming TCP/UDP or othe r traffic on particular ports to the specific private IP address/port of host in the LAN. However, other IP protocols, for example Protocols 50 (ESP) and 51 (A H), do not travel on a fixed po[...]

Vigor3200 Series User’s Guide 143 Choose Private IP or Active True IP first. Active True IP selection is available for WAN1 only. Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this button and then a window will autom atically pop up, as depicted below. The window consists of a list of p[...]

Vigor3200 Series User’s Guide 144 If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN2/WAN3/WAN4/WAN5 interface , you will find them in Aux. WAN IP for your selection. Available settings are explained as follows: Item Description Enable Check to enable the DMZ Host function. Private IP Enter the private IP addres[...]

Vigor3200 Series User’s Guide 145 4 4 . . 3 3 . . 3 3 O O p p e e n n P P o o r r t t s s Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2 P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the appl icatio[...]

Vigor3200 Series User’s Guide 146 Available settings are explained as follows: Item Description Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN Interface Specify the WAN interface that w ill be used for this entry. Local Computer Enter the private IP address of the local host or c[...]

Vigor3200 Series User’s Guide 147 Internet. You can use address mapping functi on to achieve this demand. Sim ply type 192.168.1.10 as the Private IP; and t ype 86.123.123.2 as the WAN IP. Available settings are explained as follows: Item Description Index Indicate the relative number for the particular entry that you want to configure You should[...]

Vigor3200 Series User’s Guide 148 Item Description Enable Check to enable this entry. Protocol Specify the transport layer protocol. It could be TCP , UDP , or ALL for selection. WAN Interface Choose the WAN interface for such address mapping profile. WAN IP Select an IP address. Local host can use this IP to connect to Internet. If you want to c[...]

Vigor3200 Series User’s Guide 149 Available settings are explained as follows: Item Description Comment Display the text which memorizes the application of this rule. Triggering Protocol Display the protocol of the triggering packets. Triggering Port Display the port of the triggering packets. Incoming Protocol Display the protocol for the incomi[...]

Vigor3200 Series User’s Guide 150 Service Choose the predefined service to apply for such trigger profile. Comment Type the text to memorize the application of this rule. Triggering Protocol Select the protocol (TCP, UDP or TCP/UDP) for such triggering profile. Triggering Port Type the port or port range for such trigger profile. Incoming Protoco[...]

Vigor3200 Series User’s Guide 151 4 4 . . 4 4 F F i i r r e e w w a a l l l l 4 4 . . 4 4 . . 1 1 B B a a s s i i c c s s f f o o r r F F i i r r e e w w a a l l l l While the broadband users demand m ore bandwidth for multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigo[...]

Vigor3200 Series User’s Guide 152 S S t t a a t t e e f f u u l l P P a a c c k k e e t t I I n n s s p p e e c c t t i i o o n n ( ( S S P P I I ) ) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a packet based on the information in its header, stateful inspec[...]

Vigor3200 Series User’s Guide 153 4 4 . . 4 4 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p General Setup allows you to adjust setti ngs of IP Filter and common options. Here you can enable or disable the Call Filter or Data Filter . Under some circumstance, your filter set can be linked to work in a serial manner. So here you assign th[...]

Vigor3200 Series User’s Guide 154 Enable S trict Security Firewall For the sake of security , the router will execute strict security checking for data transmission. Such feature is enabled in de fault. All the packets, while transmitting through Vigor router , will be filtered by firewall. If the firewall system (e.g., content filter server) doe[...]

Vigor3200 Series User’s Guide 155 Item Description section later . Load-Balance Policy Choose the W AN interface for applying Load-Balance Policy . User Management Such item is available only when Rule-Based is selected in User Management>>General Setup . The general firewall rule will be applied to the user/user group/all users specified h[...]

Vigor3200 Series User’s Guide 156 Item Description in CSM>> W eb Content Filter ) for applying with this router . Please set at least one profile for anti-virus in CSM>> W eb Content Filter web page first. Or choose [Cr eate New] from the drop down list in this pa ge to create a new profile. For troubleshooting needs, you can specify [...]

Vigor3200 Series User’s Guide 157 Item Description best utilization of network resources. After finishing all the settings here, please click OK to save the configuration.[...]

Vigor3200 Series User’s Guide 158 4 4 . . 4 4 . . 3 3 F F i i l l t t e e r r S S e e t t u u p p Click Firewall and click Filter Setup to open the setup page. To edit or add a filter, click on the set numbe r to edit the individual set. The following page will be shown. Each filter set contains up to 7 rules. Click on the rule num ber button to [...]

Vigor3200 Series User’s Guide 159 To edit Filter Rule , click the Filter Rule index button to enter the Filter Rule setup page. After finishing all the settings here, please click OK to save the configuration. Item Description Check to enable the Filter Rule Check this box to enable the filter rule. Comments Enter filter set comments/description.[...]

Vigor3200 Series User’s Guide 160 Item Description Note: RT means routing domain for 2nd subnet. Source/Destination IP Click Edit to access into the follo wing dialog to choose the source/destination IP or IP ranges. To set the IP address manually, please choose Any Address/Single Address/ Range Address/Subnet Address as the Address Type and type[...]

Vigor3200 Series User’s Guide 161 Item Description Type. Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port – (=) – when the first and last value are the same, it indicates one port; when the first and last values are different, it indicates a range for the port and available for this service type[...]

Vigor3200 Series User’s Guide 162 Item Description configured in IP Object for Source IP and Destination IP be bound for applying such filter rule. No-Strict - no limitation. Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting Qo S, please refer to the related section later . Load-Bal[...]

Vigor3200 Series User’s Guide 163 Item Description Content Filter web page first. Or choose [Cr eate New] from the drop down list in this pa ge to create a new profile. For troubleshooting needs, you can specify to record inform ation for W eb Content Filter by checking the Log box. It w ill be sent to Syslog server . Please refer to section Sysl[...]

Vigor3200 Series User’s Guide 164 Item Description will be. However , if the network is not stable, small value will be proper . Session timeout –Setting timeout for sessions can make the best utilization of network resources. However , Queue timeout is configured for TCP protoc ol only; session timeout is configured for the data flow which mat[...]

Vigor3200 Series User’s Guide 165 E E x x a a m m p p l l e e As stated before, all the traffic will be separate d and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is co mposed by 7 filter rules, which can b[...]

Vigor3200 Series User’s Guide 166 4 4 . . 4 4 . . 4 4 D D o o S S D D e e f f e e n n s s e e As a sub-functionality of IP Filter/Firewall, th ere are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Available settings[...]

Vigor3200 Series User’s Guide 167 Item Description defense Similar to the UDP flood defense function, once if the Threshold of ICMP packets fro m Internet has exceeded the defined value, the router will discard the ICMP echo requests coming from the Internet. The default setting for threshold and timeout are 50 packets per second and 10 seconds, [...]

Vigor3200 Series User’s Guide 168 Item Description fragmented ICMP packets with a length greater than 1024 octets. Block Ping of Death Check the box to activate the Block Ping of Death function. This attack involves the perpetrator sending overlapping packets to the target hosts so that those target hosts will hang once they re-construct the pack[...]

Vigor3200 Series User’s Guide 169 4 4 . . 5 5 U U s s e e r r M M a a n n a a g g e e m m e e n n t t User Management is a security feature which disallows any IP traffic (except DHCP-related packets) from a particular host until that host has correctly supplied a valid username and password. Instead of managing with IP a ddress/MAC address, User[...]

Vigor3200 Series User’s Guide 170 Item Description the filter rules configured in User Management>>User Profile to the users. Rule-Based –If you choose such mode, the router will apply the filter rules configured in Firewall>>General Setup and Filter Rule to the users. After finishing all the settings here, please click OK to save t[...]

Vigor3200 Series User’s Guide 171 Available settings are explained as follows: Item Description Enable this account Check this box to enable such user profile. User Name Type a name for such user profile (e.g., LAN_User_Group_1, WLAN_User_Group_A, WLAN_User_Group_B, etc). When a user tries to access Internet through this router, an authentication[...]

Vigor3200 Series User’s Guide 172 Item Description Default – If you choose such item, the filter rules pre-configured in Firewall can be adopted for such user profile. Create New Policy – If you choose such item, the following page will be popped up for you t o de fine another filter rule as a new policy. For the detailed configuration, simpl[...]

Vigor3200 Series User’s Guide 173 Item Description first. There are three ways offered by the router for the user to choose for authentication. Web – If it is selected, the use can type the URL of the router from any browser. Then, a login window will be popped up and ask the user to type the user name and password for authentication. If succee[...]

Vigor3200 Series User’s Guide 174 Please click any index number link to open the following page. Available settings are explained as follows: Item Description Name Type a name for this user group. Available User Objects You can gather user profiles (objects) from User Profile page within one user group. All the available user objects that you hav[...]

Vigor3200 Series User’s Guide 175 3 3 . . 5 5 . . 4 4 U U s s e e r r O O n n l l i i n n e e S S t t a a t t u u s s This page displays the user(s) connected to the router and refreshes the connection status in an interval of several seconds. Available settings are explained as follows: Item Description Refresh Seconds Use the drop down list to [...]

Vigor3200 Series User’s Guide 176 4 4 . . 6 6 O O b b j j e e c c t t s s S S e e t t t t i i n n g g s s For IPs in a range and service ports in a limited range usually will be applied in configuri ng router’s settings, therefore we can define them with objects and bind them with groups for using conveniently. Later, we can select that object/[...]

Vigor3200 Series User’s Guide 177 Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface. For example, the Direction setting in Edit Filter Rule will ask you specify IP or IP range for WAN or LAN or any IP address. If you choose LAN as[...]

Vigor3200 Series User’s Guide 178 Item Description Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the IP addresses except the ones listed[...]

Vigor3200 Series User’s Guide 179 Click the number under Index colu mn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose WAN, LAN or Any to display all the available IP objects with the specified interface. Available IP Objec[...]

Vigor3200 Series User’s Guide 180 4 4 . . 6 6 . . 3 3 S S e e r r v v i i c c e e T T y y p p e e O O b b j j e e c c t t You can set up to 96 sets of Service Type Objects with different conditions. Available settings are explained as follows: Item Description Name Display a name for this profile. Set to Factory Default Clear all profiles. Click [...]

Vigor3200 Series User’s Guide 181 Item Description Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. (=) – when the first and last value are the same, it indicates one port; when the first and last values[...]

Vigor3200 Series User’s Guide 182 4 4 . . 6 6 . . 4 4 S S e e r r v v i i c c e e T T y y p p e e G G r r o o u u p p This page allows you to bind several service types into one group. Available settings are explained as follows: Item Description Name Display a name for this profile. Set to Factory Default Clear all profiles.[...]

Vigor3200 Series User’s Guide 183 Click the number under Index co lumn for settings in detail. Available settings are explained as follows: Item Description Name Type a name for this profile. Available Service Type Objects All the available service objects that you have added on Objects Setting>>Service Type Object will be shown in this box[...]

Vigor3200 Series User’s Guide 184 4 4 . . 6 6 . . 5 5 K K e e y y w w o o r r d d O O b b j j e e c c t t You can set 200 keyword object profiles for choosing as black /white list in CSM >>U RL Web Content Filter Profile. Available settings are explained as follows: Item Description Name Display a name for this profile. Set to Factory Defau[...]

Vigor3200 Series User’s Guide 185 Item Description Name Type a name for this profile, e.g., game. Contents Type the content for such profile. For example, type gambling as Contents. When you browse th e web page, the page with gambling information will be watched out and be passed/blocked based on the conf iguration on Firewall settings. After fi[...]

Vigor3200 Series User’s Guide 186 Available settings are explained as follows: Item Description Name Type a name for this group. Available Keyword Objects You can gather keyword objects from Keyword Object page within one keyword group. All the available Keyword objects that you have created will be shown in this box. Selected Keyword Objects Cli[...]

Vigor3200 Series User’s Guide 187 Click the number under Profile column for configuration in details. Available settings are explained as follows: Item Description Profile Name Type a name for this profile. Type a name for such profile and check all the ite ms of file extension that will be processed in the router. Finally, click OK to save this [...]

Vigor3200 Series User’s Guide 188 4 4 . . 7 7 C C S S M M P P r r o o f f i i l l e e C C o o n n t t e e n n t t S S e e c c u u r r i i t t y y M M a a n n a a g g e e m m e e n n t t ( ( C C S S M M ) ) CSM is an abbreviation of Content Security Management which is used to control IM/P2P usage, filter the web content and URL conten t to reach [...]

Vigor3200 Series User’s Guide 189 4 4 . . 7 7 . . 1 1 A A P P P P E E n n f f o o r r c c e e m m e e n n t t P P r r o o f f i i l l e e You can define policy profiles for IM (Instan t Messenger)/P2P (Peer to Peer)/Protocol/Misc application. This page allows you to set 32 profiles for different requirements. The APP Enforcement Profile will be a[...]

Vigor3200 Series User’s Guide 190 Below shows the items which are categorized under IM . Available settings are explained as follows: Item Description Profile Name Type a name for the CSM profile. Select All Click it to choose all of the items in this page. Clear All Uncheck all the selected boxes. After finishing all the settings here, please cl[...]

Vigor3200 Series User’s Guide 191 Below shows the items which are categorized under Protocol .[...]

Vigor3200 Series User’s Guide 192 The items categorized under Misc.[...]

Vigor3200 Series User’s Guide 193 4 4 . . 7 7 . . 2 2 U U R R L L C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter not only to limit illegal traffic from/to the ina ppropriate web sites but also prohibit other web feature wher[...]

Vigor3200 Series User’s Guide 194 Default Message You can type the message manually for your necessity or click this button to get the default message which will be displayed on the field of Administration Message . You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Availa[...]

Vigor3200 Series User’s Guide 195 Item Description will process the packages with the conditions set below for web feature first, then URL second. Log None – There is no log file will be recorded for this profile. Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All –[...]

Vigor3200 Series User’s Guide 196 Item Description decline the connection request to the website whose URL string matched to any user-defined ke y word. It should be noticed that the more simplified the blocking ke y word list is, the more efficiently the Vigor router performs. Web Feature Enable Restrict Web Feature - Check this box to make the [...]

Vigor3200 Series User’s Guide 197 Item Description After finishing all the settings here, please click OK to save the configuration.[...]

Vigor3200 Series User’s Guide 198 4 4 . . 7 7 . . 3 3 W W e e b b C C o o n n t t e e n n t t F F i i l l t t e e r r P P r r o o f f i i l l e e There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation . Service Activation[...]

Vigor3200 Series User’s Guide 199 Item Description searching when you type URL in browser based on the web content filter profile. Setup Test Server It is recommended for you to use the default setting, auto-selected. Find more Click it to open http://myvigor.draytek.com for searching another qualified and suitable server. Set to Factory Default [...]

Vigor3200 Series User’s Guide 200 Available settings are explained as follows: Item Description Black/White List Enable – Activate white/black list function for such profile. Group/Object Selections – Click Edit to choose the group or object profile as the content of white/black list. Pass - allow accessing into the corresponding webpage with[...]

Vigor3200 Series User’s Guide 201 Item Description Pass – Only the log about Pass w ill be recorded in Syslog. Block – Only the log about Block will be recorded in Syslog. All – All the actions (Pass and Block) will be recorded in Syslog. After finishing all the settings here, please click OK to save the configuration. 4 4 . . 8 8 B B a a n[...]

Vigor3200 Series User’s Guide 202 To activate the function of limit session, simply click Enable and set the default session limit. Available settings are explained as follows: Item Description Enable Click this button to activate the function of limit session. Disable Click this button to close the function of limit session. Default session limi[...]

Vigor3200 Series User’s Guide 203 Item Description Delete Remove the selected settings existing on the limitation list. Administration Message Type the words which will be displayed when reaches the maximum number of Internet sessions permitted. Default Message Click this button to apply the default message offered by the router. Index (1-15) in [...]

Vigor3200 Series User’s Guide 204 Bandwidth Limit Enable - Click this button to activate the function of li mit bandwidth. IP Routed Subnet – Check this box to apply the bandwidth limit to the second subnet specified in LAN>>General Setup . Disable - Click this button to close the function of limit bandwidth. Default TX limit - Define the[...]

Vigor3200 Series User’s Guide 205 4 4 . . 8 8 . . 3 3 Q Q u u a a l l i i t t y y o o f f S S e e r r v v i i c c e e Deploying QoS (Quality of Service) management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise net[...]

Vigor3200 Series User’s Guide 206 However, each node may take different attitude toward packets with high priority marking since it may bind with the business deal of SLA among different DS domain owners. It’s not easy to achieve deterministic and consistent high-priority QoS traffic throughout the whole network with merely Vigor router’s eff[...]

Vigor3200 Series User’s Guide 207 Item Description SIP UDP Port – Set a port number used for SIP. This page displays the QoS settings result of the WAN interface. Click the Setup link to access into next page for the general setup of W AN interface. As to class rule, simply click the Edit link to access into next for configuration. You can conf[...]

Vigor3200 Series User’s Guide 208 G G e e n n e e r r a a l l S S e e t t u u p p f f o o r r W W A A N N I I n n t t e e r r f f a a c c e e When you click Setup , you can configure the bandwidth ratio for QoS of the WAN interface. There are four queues allowed for QoS control. The first three (Class 1 to Class 3) class rules can be adjusted for[...]

Vigor3200 Series User’s Guide 209 Item Description Reserved Bandwidth Ratio It is reserved for the group index in the form of ratio of reserved bandwidth to upstream speed and reserve d bandwidth to downstream speed . Enable UDP Bandwidth Control Check this and set the limited bandwidth ratio on the right field. This is a protection of TCP applic[...]

Vigor3200 Series User’s Guide 210 Available settings are explained as follows: Item Description ACT Check this box to invoke these settings. Ethernet Type Please specify which protocol (IPv4 or IPv6) will be used for this rule. Local Address Click the Edit button to set the local IP address (on LAN) for the rule. Remote Address Click the Edit but[...]

Vigor3200 Series User’s Guide 211 4. After finishing all the settings here, please click OK to save the configuration. By the way, you can set up to 20 rules for one Class. If you want to edit an existed rule, please select the radio button of that one and clic k Edit to open the rule edit page for modification. E E d d i i t t t t h h e e S S e [...]

Vigor3200 Series User’s Guide 212 After you click the Edit link, you will see the following page. For adding a new service type, click Add to open the following pag e. E E d d i i t t t t h h e e S S e e r r v v i i c c e e T T y y p p e e f f o o r r C C l l a a s s s s R R u u l l e e 1. To add a new service type, edit or delete an existed serv[...]

Vigor3200 Series User’s Guide 213 3. For adding a new service type, click Add to open the following pag e. Available settings are explained as follows: Item Description Service Name Type in a new service for your request. Service Type Choose the type (TCP, UDP or TCP/UDP) for the new service. Port Configuration Click Single or Range as the Type .[...]

Vigor3200 Series User’s Guide 214 4 4 . . 9 9 A A p p p p l l i i c c a a t t i i o o n n s s Below shows the menu items for Applications. 4 4 . . 9 9 . . 1 1 D D y y n n a a m m i i c c D D N N S S The ISP often provides you with a dynamic IP address when you c onnect to the Internet via your ISP. It means that the public IP address assigned to [...]

Vigor3200 Series User’s Guide 215 Item Description Auto-Update interval Set the time for the router to perform auto update for DDNS service. View Log Display DDNS log status. Force Update Force the router updates its information to DDNS server. Index Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN[...]

Vigor3200 Series User’s Guide 216 Item Description Service Provider Select the service provider for the DDNS account. Service Type Select a service type (Dynamic, Custom or Static). If you choose Custom, you can modify the domain that is chosen in the Domain Name field. Domain Name Type in one domain name that y ou applied previously. Use the dro[...]

Vigor3200 Series User’s Guide 217 time. You can inquiry an NTP server (a time serv er) on the Internet to synchronize the router’s clock. This method can only be applied when the WAN connection has been built up. Each item is explained as follows: Item Description Set to Factory Default Clear all profiles and recover to factory settings. Index [...]

Vigor3200 Series User’s Guide 218 2. The detailed settings of the call sche dule with index 1 are shown below . Available settings are explained as follows: Item Description Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedule. Start Time (hh:mm) Specify the starting time of the sch[...]

Vigor3200 Series User’s Guide 219 Suppose you want to control the PPPoE Internet acce ss connection to be always on (Force On) from 9:00 to 18:00 for whole week. Other time the Internet access connection should be disconnected (Force Down). Office Hour: (Force On) Mon - Sun 9:00 am to 6:00 pm 1. Make sure the PPPoE connection and T ime Setup is w[...]

Vigor3200 Series User’s Guide 220 4 4 . . 9 9 . . 3 3 R R A A D D I I U U S S Remote Authentication Dial-In User Servi ce (RADIUS) is a security authentication client/server protocol that supports authenti cation, authorization and accounting, which is widely used by Internet service providers. It is the most common method of authenticating and a[...]

Vigor3200 Series User’s Guide 221 4 4 . . 9 9 . . 4 4 L L D D A A P P / / A A c c t t i i v v e e D D i i r r e e c c t t o o r r y y Lightweight Directory Access Protocol (LDAP) is a communication protocol for using in TCP/IP network. It defines the methods to access distributing directory server by clients, work on directory and share the infor[...]

Vigor3200 Series User’s Guide 222 The different is that, the server will firstly check if you have the search authority. For the regular mode, you’ll need to type in the Regular DN and Regular Password . Server IP Address Enter the IP address of LDAP server. Destination Port Type a port number as the destination port for LDAP server. Use SSL Ch[...]

Vigor3200 Series User’s Guide 223 Item Description Name Type a name for such profile. Common Name Identifier Type or edit the common name identifier for the LDAP server. The common name identifier for most LDAP server is “cn”. Base Distinguished Name / Group Distinguished Name Type or edit the distinguished name used to look up e ntries on th[...]

Vigor3200 Series User’s Guide 224 your applications to operate. This has to manually set up port mappings or use other similar methods. The screenshots below show examples of this facility . The UPnP facility on the router enables UPnP awar e applications such as MSN Messenger to discover what are behind a NA T router . The application will also [...]

Vigor3200 Series User’s Guide 225 The UPnP function dynamically adds port ma ppings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. 4 4 . . 9 9 . . 6 6 I I G G M M P P IGMP is the abbreviation of Internet Group Management Protocol . It is a communication protocol which is m[...]

Vigor3200 Series User’s Guide 226 4 4 . . 9 9 . . 7 7 W W a a k k e e o o n n L L A A N N A PC client on LAN can be woken up by the router it connects. When a user wants to wake up a specified PC through the router, he/she must type correct MAC address of the specified PC on this web page of Wake on LAN of this router. In addition, such PC must h[...]

Vigor3200 Series User’s Guide 227 4 4 . . 1 1 0 0 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Intern et. In short, by VPN technolog y, y ou can send data between two computers across a [...]

Vigor3200 Series User’s Guide 228 Please choose a LAN-to-LAN Profile There are 32 VPN profiles for users to set. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. Th ere are six types provided here. Different type will lead t[...]

Vigor3200 Series User’s Guide 229 choices for the client profile, please click Next . You will see different configurations based on the selection(s) you made. z When you choose PPTP (None Encryption) or PPTP (Encryption) , you will see the following graphic: z When you choose IPSec , you will see the following graphic:[...]

Vigor3200 Series User’s Guide 230 z When you choose L2TP , you will see the following graphic: z When you choose L2TP over IPSec (Nice to Have), you will see the following graphic:[...]

Vigor3200 Series User’s Guide 231 z When you choose L2TP over IPSec (Must), you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. VPN Dial-Out Through Use the drop down menu to choose a proper WAN interface fo[...]

Vigor3200 Series User’s Guide 232 Digital Signature (X.509) Click Digital Signature to invoke this function. Use the drop down list to choose one of the certificates for using. You have to configure one certificate at least previously in Certificate Management >> Local Certificate. Otherwise, the setting you choose here will not be effectiv[...]

Vigor3200 Series User’s Guide 233 Available settings are explained as follows: Item Description Go to the VPN Connection Management Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN Connection status. Do another VPN Server Wizard Setup Click this radio button to set another profile of VPN Server [...]

Vigor3200 Series User’s Guide 234 Item Description Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN tunnels for users to set. Allowed Dial-in Type This item is available after you choose any one of dial-in user account profiles. Next, you have to sel[...]

Vigor3200 Series User’s Guide 235 1. Here we take the example of choosing Remote-Dial-in User as the VPN Server Mode . 2. Check the Allowed Dial-in Type for the VPN server profile 3. After making the choices for the server profile, please click Next . You will see different configurations based on the selec tion (dial-in type) you m ade. z When y[...]

Vigor3200 Series User’s Guide 236 z When you check IPSec , you will see the following graphic: Available settings are explained as follows: Item Description Profile Name Type a name for such profile. The length of the file is limited to 10 characters. User Name This field is used to authenticate for connection when you select PPTP or L2TP with or[...]

Vigor3200 Series User’s Guide 237 Item Description of the remote host) for building VPN connection. Remote Network Mask Please type the network mask (according to the real location of the remote host) for building VPN connection. 4. After finishing the configuration, please click Next. The confirmation page will be shown as follows. Available set[...]

Vigor3200 Series User’s Guide 238 4 4 . . 1 1 0 0 . . 3 3 R R e e m m o o t t e e A A c c c c e e s s s s C C o o n n t t r r o o l l Enable the necessary VPN service as you need. If you intend to run a VPN server inside your LAN, you should disable the VPN service (e.g., PPTP VPN, IPSec VPN, L2TP VPN, SSL VPN, etc.) of Vigor Router to allow VPN [...]

Vigor3200 Series User’s Guide 239 Item Description fall back to use the PAP protocol for authentication. Dial-In PPP Encryption (MPPE Optional MPPE Optional MPPE - This option represents that the MPPE encryption method will be optionally employed in the router for the remote dial-in user. If the remote dial-in user does not support the MPPE encry[...]

Vigor3200 Series User’s Guide 240 4 4 . . 1 1 0 0 . . 5 5 I I P P S S e e c c G G e e n n e e r r a a l l S S e e t t u u p p In IPSec General Setup, there are two major parts of configuration. There are two phases of IPSec. ¾ Phase 1: negotiation of IKE parameters including encryption, hash, Diffie-Hellman parameter values, and lifetime to prot[...]

Vigor3200 Series User’s Guide 241 Item Description Pre-Shared Key - Currently only suppor t Pre-Shared Key authentication. Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but[...]

Vigor3200 Series User’s Guide 242 Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary fi eld to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Available settings are explained as follows: Item Descr[...]

Vigor3200 Series User’s Guide 243 4 4 . . 1 1 0 0 . . 7 7 R R e e m m o o t t e e D D i i a a l l - - i i n n U U s s e e r r You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via VPN connecti on. You may set parameters including specified connection peer ID, connection type [...]

Vigor3200 Series User’s Guide 244 Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding fields on the right. If the fields gray out, it means you may leave it untouched. The following explanation will gui de you to fill all the necessary fields. Available settings are explained as fol[...]

Vigor3200 Series User’s Guide 245 Item Description policy can be viewed as one pure L2TP connection. z Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. z Must - Specify the IPSec policy to be definitely applied on the L2TP connection. SSL T[...]

Vigor3200 Series User’s Guide 246 Item Description Draytek SSL VPN portal interface. From the web page, you will see the message to indicate that you have the privilege for the SSL Web Proxy. If you haven’t set any SSL VPN web proxy profiles, you will a link here. Click this link to acce ss into the configuration page of SSL VPN. Note: SSL VPN [...]

Vigor3200 Series User’s Guide 247 Item Description High-Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. Local ID - Specify a local ID to be used for Dial-in setting in the LAN-to-LAN Profile setup. Th[...]

Vigor3200 Series User’s Guide 248 Item Description View All – Click it to show all of profiles. Online/Offline – Click it to show the active/inactive profiles Trunk - Click it to show the prof ile which VPN tunnel is up. Name Indicate the name of the LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Active Check the box[...]

Vigor3200 Series User’s Guide 249 Available settings are explained as follows: Item Description Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activate this profile. VPN Dial-Out Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for[...]

Vigor3200 Series User’s Guide 250 Item Description any one of VPN peers wants to disconnect the connection, it should follow a serial of packet exchange procedure to inform each other. However, if the remote peer disconnect without notice, Vigor router will by no where to know this situation. To resolve this dilemma, by continuously sending PING [...]

Vigor3200 Series User’s Guide 251 Item Description mode. Local Certificate – Select one of the profiles set in Certificate Management>>Local Certificate . IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy. Medium AH (Authentication Header) means data will be authenticated, but not be encrypt[...]

Vigor3200 Series User’s Guide 252 Item Description suggest you select the combination that covers the most algorithms. IKE phase 1 key lifetime- For security reason, the lifetime of key should be defined. The default value is 28800 seconds. You may specify a value in between 900 and 86400 seconds. IKE phase 2 key lifetime- For security reason, th[...]

Vigor3200 Series User’s Guide 253 Item Description connection through the Internet. You should set the U ser Name and Password of remote dial-in user below. IPSec Tunnel- Allow the remote dial-in user to trigger an IPSec VPN connection through Internet. L2TP with IPSec Policy - Allow the remote dial-in user to make a L2TP VPN connection through t[...]

Vigor3200 Series User’s Guide 254 Item Description Certificate Management>>Local Certificate ) will be inspected first. IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node. Medium- Authentication Header (AH) means data will be authenticated, but not be encrypte d[...]

Vigor3200 Series User’s Guide 255 Item Description Local Network IP / Local Network Mask - Add a static route to direct all traffic destined to Local Network IP Address/Local Network Mask through the VPN connection. More - Add a static route to direct all traffic destined to more Remote Network IP Addresses/ Remote Network Mask through the VPN co[...]

Vigor3200 Series User’s Guide 256 ¾ Dial-out connection types contain IPSec, PPTP, L2TP, L2TP over IPSec and ISDN (depends on hardware specification) ¾ The web page is simple to understand and easy to configure ¾ Filly compliant with VPN Server LAN Sit Single/Multi Network ¾ Mail Alert support, please refer to System Maintenance >> SysL[...]

Vigor3200 Series User’s Guide 257 Available settings are explained as follows: Item Description Backup Profile List Set to Factory Default - Click to clear all VPN TRUNK-VPN Backup mechanism profile. No – The order of VPN TRUNK-VPN Backup mechanism profile. Status (on Backup Profile field) - “v” means such profile is enabled; “x” means [...]

Vigor3200 Series User’s Guide 258 Type (on Backup Profile field) - Display the connection type for that profile, such as IPSec, PPTP, L2TP, L2TP over IPSec (NICE), L2TP over IPSec(MUST) and so on. Member2 (on Backup Profile field) - Display the dial-out profile selected from the Member2 drop down list below. Advanced – This button is available [...]

Vigor3200 Series User’s Guide 259 Detailed information for this dialog, see later section - Advanced Load Balance and Backup . General Setup Status - After choosing one of the profile listed above, please click Enable to activate this profile. If you click Disable , the selected or current used VP N TRUNK-Backup/Load Balance mechanism profile wil[...]

Vigor3200 Series User’s Guide 260 Edit Click this button to save the changes to the Status (Enable or Disable), profile name, member1 or member2. Delete Click this button to delete the selected VPN TRUNK profile. The corresponding members (LAN-to-LAN profiles) grouped in the deleted VPN TRUNK profile will be released and that profiles in LAN-to-L[...]

Vigor3200 Series User’s Guide 261 to indicate that they are fixed. If you delete the VPN TRUNK – VPN Backup/Load Balance mechanism profile, the selected LAN-to-LAN profiles will be released and expressed in black. H H o o w w c c a a n n y y o o u u s s e e t t a a G G R R E E o o v v e e r r I I P P S S e e c c p p r r o o f f i i l l e e ? ? [...]

Vigor3200 Series User’s Guide 262 A A d d v v a a n n c c e e d d L L o o a a d d B B a a l l a a n n c c e e a a n n d d B B a a c c k k u u p p After setting profiles for load balance, you can choose any one of t h em and click Advance for more detailed configuration. The windows for advanced load balance and backup are different. Refer to the [...]

Vigor3200 Series User’s Guide 263 VPN Load Balance Policy Below shows the algorithm for Load Balance. Edit – Click this radio button for assign a blank table for configuring Binding Tunnel. After insert – Click this radio button to adding a new bindi ng tunnel table. Tunnel Bind Table Index - 128 Binding tunnel tables are provided by this dev[...]

Vigor3200 Series User’s Guide 264 Detail Information This field will display detailed information for Binding Tunnel Policy. Below shows a successf ul binding tunnel policy for load balance: Note : To configure a successful binding tunnel, you have to: Type Binding Src IP range (Start and End) and Binding Des IP range (Start and End). Choose TCP/[...]

Vigor3200 Series User’s Guide 265 Item Description Member 1 will be the top priority for the system to do VPN connection. Detail Information This field will display detailed information for Environment Recovers Detection. 4 4 . . 1 1 0 0 . . 1 1 0 0 C C o o n n n n e e c c t t i i o o n n M M a a n n a a g g e e m m e e n n t t You can find the s[...]

Vigor3200 Series User’s Guide 266 Dial - Click this button to execute dial out function. Refresh Seconds Choose the time for refresh the dial inform ation among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. VPN Connection Status Display current connected VPN status. VPN – Display the name of the VPN profile. T[...]

Vigor3200 Series User’s Guide 267 4 4 . . 1 1 1 1 C C e e r r t t i i f f i i c c a a t t e e M M a a n n a a g g e e m m e e n n t t A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name , a serial number, expiration dates etc., and the digital signature of t[...]

Vigor3200 Series User’s Guide 268 Note: Please be noted that “Common Name” must be configured with rotuer’s WAN IP or domain name. After clicking GENERATE , the generated information w ill be displayed on the window below: IMPORT Vigor router allows you to generate a certificate request and submit it the CA server, then import it as “Loca[...]

Vigor3200 Series User’s Guide 269 Available settings are explained as follows: Item Description Upload Local Certificate It allows users to import the certificate which is generated by vigor router and signed by CA server. If you have done well in certificate generation, the Status of the certificate will be shown as “ OK ”. Upload PKCS12 Cer[...]

Vigor3200 Series User’s Guide 270 REFRESH Click this button to refresh the information listed below. View Click this button to view the detailed settings for certificate request. Note: You have to copy the certificate request information from above window. Next, access your CA server and enter the page of certificate request, copy the information[...]

Vigor3200 Series User’s Guide 271 4 4 . . 1 1 1 1 . . 2 2 T T r r u u s s t t e e d d C C A A C C e e r r t t i i f f i i c c a a t t e e Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse… to find out the saved text file. [...]

Vigor3200 Series User’s Guide 272 4 4 . . 1 1 1 1 . . 3 3 C C e e r r t t i i f f i i c c a a t t e e B B a a c c k k u u p p Local certificate and Trusted CA certificate for this router can be saved within one file. Please click Backup on the following screen to save them. If you want to set encryption password for these certificates, please typ[...]

Vigor3200 Series User’s Guide 273 M M u u l l t t i i p p l l e e S S S S I I D D s s Vigor router supports four SSID settings for wireless connections. Each SSID can be defined with different name and download/upload rate for selecting by stations connected to the route r wirelessly. S S e e c c u u r r i i t t y y O O v v e e r r v v i i e e w [...]

Vigor3200 Series User’s Guide 274 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quaran tine or limit access reasons. To isolate means neither of the parties can access each other. To elaborate an example for business use, you may set up a wireless LAN for visitors only s[...]

Vigor3200 Series User’s Guide 275 4 4 . . 1 1 2 2 . . 2 2 G G e e n n e e r r a a l l S S e e t t u u p p By clicking the General Settings , a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Available settings are explained as follows: Item Descript[...]

Vigor3200 Series User’s Guide 276 Item Description In which, 802.11b/g operates on 2.4G ba nd, 802.11a operates on 5G band, and 802.11n operates on either 2.4G or 5G band. Index(1-15) Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule s[...]

Vigor3200 Series User’s Guide 277 Item Description Long Preamble This option is to define the length of t h e sync field in an 802.11 packet. Most modern wireless network uses short preamble with 56 bit sync field instead of lon g preamble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Che[...]

Vigor3200 Series User’s Guide 278 Item Description environment of the network. Rate Control It controls the data transmission rate through wireless connection. Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbp[...]

Vigor3200 Series User’s Guide 279 4 4 . . 1 1 2 2 . . 3 3 S S e e c c u u r r i i t t y y This page allows you to set security with diffe rent modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invoke it. Default Pre-Shared Key (PSK) is provided and stated on the label pasted on the bott[...]

Vigor3200 Series User’s Guide 280 Available settings are explained as follows: Item Description Mode There are several modes provided for you to choose. Note: You should also set RADIUS Server simultaneously if 802.1x mode is selected. Disable - Turn off the encryption mechanism. WEP- Accepts only WEP clients and the encryption key shoul d be ent[...]

Vigor3200 Series User’s Guide 281 Item Description as "0x321253abcde..."). WEP 64-Bit - For 64 bits WEP key, either 5 ASCII characters, such as 12345 (or 10 hexadecimal digitals leading by 0x, s uch as 0x4142434445.) 128-Bit - For 128 bits WEP key, either 13 ASCII characters, such as ABCDEFGHIJKLM (or 26 hexadecimal digits leading by 0x[...]

Vigor3200 Series User’s Guide 282 Item Description Enable Mac Address Filter Select to enable the MAC Address filter for wireless LAN identified with SSID 1 to 4 respectively. All the clients (expressed by MAC addresses) listed in the box can be grouped under different wireless LAN. For example, they can be grouped under SSID 1 and SSID 2 at the [...]

Vigor3200 Series User’s Guide 283 There are two methods to do network conn ection through WPS between AP and Stations: pressing the Start PBC button or using PIN Code . z On the side of Vigor 3200 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of [...]

Vigor3200 Series User’s Guide 284 Available settings are explained as follows: Item Description Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Configured’ message here. SSID Display the SSI[...]

Vigor3200 Series User’s Guide 285 4 4 . . 1 1 2 2 . . 6 6 W W D D S S WDS means Wireless Distribution System. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: y Provide bridge traffic between two LANs through the air. y Extend the coverage range of a WLAN. To meet the above [...]

Vigor3200 Series User’s Guide 286 The major difference between these two modes is that: while in Repeater mode, the packets received from one peer AP can be repeated to another peer AP through WDS links. Yet in Bridge mode, packets received from a WDS link will only be for warded to local wired or wireless hosts. In other words, only Repeater mod[...]

Vigor3200 Series User’s Guide 287 Available settings are explained as follows: Item Description Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulfill the first type of application. Repeat er mode is for the second one. Security There are three types for security, Disable , WEP and P[...]

Vigor3200 Series User’s Guide 288 Item Description Key - Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Bridge If you choose Bridge as the connecting mode, please type in the peer MAC address in these fields. Four peer MAC addresses are allowed to be entered in this page at one time. Yet please disable the unused link [...]

Vigor3200 Series User’s Guide 289 Item Description 20/40 – the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability. Such channel can increase the performance for data transit. Guard Interval It is to assure the safety of propagation delays and reflections for the sensitive digital data. If you [...]

Vigor3200 Series User’s Guide 290 Item Description APSD Capable The default setting is Disable . Aifsn It controls how long the client waits for each data transmission. Please specify the value ranging from 1 to 15. Such parameter will influence the time delay for WMM accessing categories. For the service of voice or video image, please set small[...]

Vigor3200 Series User’s Guide 291 4 4 . . 1 1 2 2 . . 9 9 A A P P D D i i s s c c o o v v e e r r y y Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know which channel is clean for usage. Also, it can be used to facilitate finding an AP for a WDS li nk. Notice that [...]

Vigor3200 Series User’s Guide 292 4 4 . . 1 1 2 2 . . 1 1 0 0 S S t t a a t t i i o o n n L L i i s s t t Station List provides the knowledge of connecting wire less clients now along with its status code. There is a code summary belo w for explanation. For convenient Access C ontrol , you can select a WLAN station and click Add to Access Control[...]

Vigor3200 Series User’s Guide 293 4 4 . . 1 1 2 2 . . 1 1 1 1 W W e e b b P P o o r r t t a a l l This page allows you to specify an URL fo r accessing into or display a message when a wireless user connects to Internet through this router. No matter what purpose of the wireless client is, he/she will be forced into the UR L configured here while[...]

Vigor3200 Series User’s Guide 294 4 4 . . 1 1 3 3 S S S S L L V V P P N N An SSL VPN (Secure Sockets Layer virtual private network) is a form of VPN that can be used with a standard Web browser. There are two benefits that SSL VPN provides: ¾ It is not necessary for users to preinstall VPN client software for executing SSL VPN connection. ¾ The[...]

Vigor3200 Series User’s Guide 295 After finishing all the settings here, please click OK to save the configuration. 4 4 . . 1 1 3 3 . . 2 2 S S S S L L W W e e b b P P r r o o x x y y SSL Web Proxy will allow the remote users to access the internal we b sites over SSL. Available settings are explained as follows: Item Description Name Display the[...]

Vigor3200 Series User’s Guide 296 Disable – the profile will be inactive. If you choose Disable , all the web proxy profile appeared under VPN remote dial-in web page will disappear. Secured Port Redirection – such technique applies private port mapping to random WAN port. There are two restrictions for proxy web server for such selection: 1)[...]

Vigor3200 Series User’s Guide 297 4 4 . . 1 1 3 3 . . 3 3 S S S S L L A A p p p p l l i i c c a a t t i i o o n n It provides a secure and flexible solution fo r network resources, including VNC (Virtual Network Computer) /RDP (Remote Desktop Protoc ol) /SAMBA, to any remote user with access to Internet and a web browser. Each item is explained a[...]

Vigor3200 Series User’s Guide 298 this profile. Different application type will lead different web pages. Refer to the following: z Virtual Network Computing – Choose this item for accessing and controlling a rem ote PC through VNC protocol. IP Address - Type the IP address for this protocol. Port - Specify the port used for this protocol. The [...]

Vigor3200 Series User’s Guide 299 z Samba Application - Any remote user can upload/download/delete certain files on a local samba server through web browser with this application Samba Path - Specify the path for this application. 4 4 . . 1 1 3 3 . . 4 4 U U s s e e r r A A c c c c o o u u n n t t For SSL VPN, identity authentication and po wer m[...]

Vigor3200 Series User’s Guide 300 However, if you have set several SSL Web Proxy Profiles in SSL VPN>> SSL Web Proxy web page: The SSL Web Proxy profile names will be disp layed (together with check box) as shown below.[...]

Vigor3200 Series User’s Guide 301 4 4 . . 1 1 3 3 . . 5 5 U U s s e e r r G G r r o o u u p p There are 10 user group profiles which can be created for authentication by LDAP server. Such profiles will be used by applications such as User Manageme nt, VPN and etc. Each item is explained as follows: Item Description Index Display the number of the[...]

Vigor3200 Series User’s Guide 302 Available settings are explained as follows: Item Description Enable Check this box to enable such profile. Group Name Type a name for such profile. Access Authority Specify the authority for such profile. Authentication Methods It can determine the authentication method used for such profile. Local User DataBase[...]

Vigor3200 Series User’s Guide 303 Next, users can open SSL VPN>> Online Status to view logging status of SSL VPN. Each item is explained as follows: Item Description Active User Display current user who visit SSL VPN server. Host IP Display the IP address for the host. Time out Display the time remain ing for logging out. Action You can cli[...]

Vigor3200 Series User’s Guide 304 4 4 . . 1 1 4 4 U U S S B B A A p p p p l l i i c c a a t t i i o o n n USB diskette connected on Vigor router can be regarded as a server. By way of Vigor router, clients on LAN/WAN can access, write and read data stored in USB diskette with different applications. After setting the configuration in USB Applicat[...]

Vigor3200 Series User’s Guide 305 Item Description Samba Service Settings Click Enable to invoke samba service via the router. Access Mode LAN Only – Users coming from internet cannot connect to the samba server of the router. LAN And WAN - Both LAN and WAN users can access samba server of the router. NetBios Name Service For the NetBios servic[...]

Vigor3200 Series User’s Guide 306 Home Folder Display the home folder of this entry. Click index number to access into configuration page. Available settings are explained as follows: Item Description FTP/Samba User Enable – Click this button to activate this profile (account) for FTP service or Samba User service. Later, the user can use the u[...]

Vigor3200 Series User’s Guide 307 Item Description ON , you cannot type any new folder name in this field. Only “/” can be used in such case. You can click to open the following dialog to add any new folder which can be specified as the Home Folder. Access Rule It determines the authority for such profile. Any user, who uses such profile for [...]

Vigor3200 Series User’s Guide 308 4 4 . . 1 1 4 4 . . 3 3 F F i i l l e e E E x x p p l l o o r r e e r r File Explorer offers an easy way for users to review and manage the content of USB diskette connected on Vigor router. Available settings are explained as follows: Item Description Refresh Click this icon to refresh files list. Back Click thi[...]

Vigor3200 Series User’s Guide 309 Each item is explained as follows: Item Description Connection Status If there is no USB storage disk connected to Vigor router, “ No Disk Connected ” will be shown here. Disk Capacity Display the total capacity of the USB storage disk. Free Capacity Display the free space of the USB storage disk. Click Refr [...]

Vigor3200 Series User’s Guide 310 Item Description Stop record when fulls – when the capacity of syslog is full, the system will stop recording. Always record the new event – only the newest events will be recorded by the system. Time Display the time of the event occurred. Message Display the information for each event. F F o o r r U U S S B[...]

Vigor3200 Series User’s Guide 311 4 4 . . 1 1 5 5 S S y y s s t t e e m m M M a a i i n n t t e e n n a a n n c c e e For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items fo[...]

Vigor3200 Series User’s Guide 312 Item Description Build Date/Time Display the date and time of the current firmware build. LAN MAC Address - Display the MAC address of the LAN Interface. IP Address - Display the IP address of the LAN interface. Subnet Mask - Display the subnet mask address of the LAN interface. DHCP Server - Display the current [...]

Vigor3200 Series User’s Guide 313 4 4 . . 1 1 5 5 . . 2 2 T T R R - - 0 0 6 6 9 9 This device supports TR-069 standard. It is very convenient for an administrator to m anage a TR-069 device through an Auto Configuration Server, e.g., VigorACS. Available parameters are explained as follows: Item Description ACS Server On Choose the interface for t[...]

Vigor3200 Series User’s Guide 314 Item Description click Disable to close the mechanism of notification. STUN Settings The default is Disable . If you click Enable , please type the relational settings listed below: Server IP – Type the IP address of the STUN server. Server Port – Type the port number of the STUN server. Minimum Keep Alive Pe[...]

Vigor3200 Series User’s Guide 315 4 4 . . 1 1 5 5 . . 4 4 U U s s e e r r P P a a s s s s w w o o r r d d Sometimes, you may want to access into User Mode to configure the web settings for some reason. Vigor router allows you to set new user password to login into the WUI t o fit your request. Simply open System Maintenance>>User Password .[...]

Vigor3200 Series User’s Guide 316 3. The following screen will appear. Simply click OK . 4. Log out Vigor router Web Configurator. 5. The following window will be open to ask for username and password. Type the new user password in the filed of Password and click Login . 6. The main screen with User M ode will be shown as follows.[...]

Vigor3200 Series User’s Guide 317 Settings to be configured in User Mode will be less than settings in Admin Mode. Only basic configuration settings will be available in User Mode. Setting in User Mode can be configured as same as in Admin Mode 4 4 . . 1 1 5 5 . . 5 5 L L o o g g i i n n C C u u s s t t o o m m i i z z a a t t i i o o n n When yo[...]

Vigor3200 Series User’s Guide 318 Available settings are explained as follows: Item Description Enable Check this box to enable the login customization function. Login Description Type a brief description (e.g., Welcome to DrayTek) which will be shown on the heading of the login dialog. Bulletin Type words or sentences here. It will be displayed [...]

Vigor3200 Series User’s Guide 319 4 4 . . 1 1 5 5 . . 6 6 C C o o n n f f i i g g u u r r a a t t i i o o n n B B a a c c k k u u p p B B a a c c k k u u p p t t h h e e C C o o n n f f i i g g u u r r a a t t i i o o n n Follow the steps below to backup your configuration . 1. Go to System Maintenance >> Configuration Backup . The followin[...]

Vigor3200 Series User’s Guide 320 4. Click Save button, the configuration will download a utomatically to your computer as a file named config.cfg . The above example is using W indows platform for demonstrating examples. The Mac or Linux platform will appear dif ferent windows, but the backup function is still available. Note: Backup for Certifi[...]

Vigor3200 Series User’s Guide 321 4 4 . . 1 1 5 5 . . 7 7 S S y y s s l l o o g g / / M M a a i i l l A A l l e e r r t t SysLog function is provided for users to monitor router. There is no bother to directly get into the Web Configurator of the router or borrow debug equipm ents. Available parameters are explained as follows: Item Description S[...]

Vigor3200 Series User’s Guide 322 Item Description Mail Alert Setup Check “ Enable ” to activate function of mail alert. Send a test e-mail Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail address is available or not. SMTP Server [...]

Vigor3200 Series User’s Guide 323[...]

Vigor3200 Series User’s Guide 324 4 4 . . 1 1 5 5 . . 8 8 T T i i m m e e a a n n d d D D a a t t e e It allows you to specify where the time of the router should be inquired from. Available parameters are explained as follows: Item Description Current System Time Click Inquire Time to get the current time. Use Browser Time Select this option to [...]

Vigor3200 Series User’s Guide 325 4 4 . . 1 1 5 5 . . 9 9 M M a a n n a a g g e e m m e e n n t t This page allows you to manage the setti ngs for access control, access list, port setup, and SMP setup. For example, as to management access control, the port number is used to send/receive SIP message for building a session. Available parameters ar[...]

Vigor3200 Series User’s Guide 326 Management Port Setup User Defined Ports - Check to specify user-defined port numbers for the Telnet, HTTP and FTP servers. Default Ports - Check to use standard port numbers for the Telnet and HTTP servers. SNMP Setup Enable SNMP Agent - Check it to enable this function. Get Community - Set the name for getting [...]

Vigor3200 Series User’s Guide 327 4 4 . . 1 1 5 5 . . 1 1 1 1 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e Before upgrading your router firmware, you need to install the Router Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an exam ple. Note that this[...]

Vigor3200 Series User’s Guide 328 4 4 . . 1 1 5 5 . . 1 1 2 2 A A c c t t i i v v a a t t i i o o n n There are three ways to activate WCF on vigor router, using Service Activation Wizard , by means of CSM>>Web Content Filter Profile or via System Maintenance>>Activation . After you have finished the setting profiles for WCF (refer to[...]

Vigor3200 Series User’s Guide 329 Below shows the successful activation of Web Content Filter: 4 4 . . 1 1 6 6 D D i i a a g g n n o o s s t t i i c c s s Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics.[...]

Vigor3200 Series User’s Guide 330 4 4 . . 1 1 6 6 . . 1 1 D D i i a a l l - - o o u u t t T T r r i i g g g g e e r r Click Diagnostics and click Dial-out Trigger to open the web pag e. The internet connection (e.g., PPPoE) is triggered by a package sending from the source IP address. Each item is explained as follows: Item Description Decoded Fo[...]

Vigor3200 Series User’s Guide 331 4 4 . . 1 1 6 6 . . 3 3 A A R R P P C C a a c c h h e e T T a a b b l l e e Click Diagnostics and click ARP Cache Table to view the content of the ARP (Address Resolution Protocol) cache held in the router. Th e table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address. Each item [...]

Vigor3200 Series User’s Guide 332 IP Address It displays the IP address assigned by this router for specified PC. MAC Address It displays the MAC address for the specified PC that DHCP assigned IP address for it. Leased Time It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified PC. Refresh Click it[...]

Vigor3200 Series User’s Guide 333 4 4 . . 1 1 6 6 . . 6 6 D D a a t t a a F F l l o o w w M M o o n n i i t t o o r r This page displays the running procedure for the IP address monitored and refreshes the data in an interval of several seconds. The IP address listed here is configured in Bandwidth Management. You have to enable IP bandwidth limi[...]

Vigor3200 Series User’s Guide 334 Item Description automatically. Refresh Click this link to refr esh this page manually. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. TX rate (kbps) Display the transmission speed of the monitored device. RX rate (kbps) Display the receiving speed of the mon[...]

Vigor3200 Series User’s Guide 335 4 4 . . 1 1 6 6 . . 7 7 T T r r a a f f f f i i c c G G r r a a p p h h Click Diagnostics and click Traffic Graph to open the web page. Choose WAN1/WAN2/WN3/WAN4/WAN5 Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Refresh to renew the graph at any time. The horizontal axis represe[...]

Vigor3200 Series User’s Guide 336 4 4 . . 1 1 6 6 . . 8 8 P P i i n n g g D D i i a a g g n n o o s s i i s s Click Diagnostics and click Ping Diagnosis to pen the web page. Each item is explained as follows: Item Description Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be [...]

Vigor3200 Series User’s Guide 337 4 4 . . 1 1 6 6 . . 9 9 T T r r a a c c e e R R o o u u t t e e Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run . The result of route trace will be shown on the screen. E[...]

Vigor3200 Series User’s Guide 338 4 4 . . 1 1 7 7 E E x x t t e e r r n n a a l l D D e e v v i i c c e e s s Vigor router can be used to connect with many ty pes of external devices. In order to control or manage the external devices conveniently, open External Devices to make detailed configuration. From this web page, check the box of External[...]

Vigor3200 Series User’s Guide 339 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the we b configuration. Please follow sections below to check your basic installation status stage by stage. z Chec[...]

Vigor3200 Series User’s Guide 340 5 5 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong netw or[...]

Vigor3200 Series User’s Guide 341 4. Select Obtain an IP address automatically and Obtain DNS server address automatically . F F o o r r M M a a c c O O S S 1. Double click on the current used Mac OS on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configu[...]

Vigor3200 Series User’s Guide 342 5 5 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most import[...]

Vigor3200 Series User’s Guide 343 5 5 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s a a r r e e O O K K o o r r N N o o t t Open WAN >> Internet Access page and then check whether the ISP settings are set correctly. Click Details Page of each WAN interface to review the settings that[...]

Vigor3200 Series User’s Guide 344 5 5 . . 5 5 P P r r o o b b l l e e m m s s f f o o r r 3 3 G G N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n When you have trouble in using 3G network transm ission, please check the following: C C h h e e c c k k i i f f U U S S B B L L E E D D l l i i g g h h t t s s o o n n o o r r o o f[...]

Vigor3200 Series User’s Guide 345 S S o o f f t t w w a a r r e e R R e e s s e e t t You can reset the router to factory default via Web page. Such function is available in Admin Mode only. Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Using factory default configuration and click OK [...]

Vigor3200 Series User’s Guide 346 5 5 . . 7 7 C C o o n n t t a a c c t t i i n n g g Y Y o o u u r r D D e e a a l l e e r r If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com.[...]