Draytek VIGOR 3300 инструкция обслуживания

Vigor 3300 Series Broadband VoIP/Security/Load Balance Router User’s Guide Version: 2.1 Date: 2006/08/02[...]

Vigor3300 Series User’s Guide ii Copyright Information Copyright Declarations Copyright 2006 All rights reserved. This publicatio n contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission fr om the copyri ght [...]

Vigor3300 Series User’s Guide iii T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s 1 Pref ace ............................................................................................................... 1 1.1 LED Indicators and Connection .............................................................................................. [...]

Vigor3300 Series User’s Guide iv 3.3.8 LAN Port Mi rroring Se tup................................................................................................ 6 8 3.3.9 LAN VL AN Setup ........................................................................................................... .6 8 3.3.10 SNMP....................................[...]

Vigor3300 Series User’s Guide 1 1 P P r r e e f f a a c c e e The Vigor3300 Series integrates a rich suite of functions, including NAT, firewall, VPN, load balance, bandwidth management, and VoIP cap ability. These products are very suitable for providing multi-integrated solutions to SME markets. An application scenario for the Vigor3300 Series [...]

Vigor3300 Series User’s Guide 2 T.38 fax relay. By enabling and configuring fax rate on a dial peer, the originating and the terminating V3300V can enter fax relay transfer mode. By using t he T.38 function, customers can also save on fax expenses. Lastly, by enab ling the load balance feature on multiple WAN ports, lease lines can be replaced to[...]

Vigor3300 Series User’s Guide 3 LED Status Explanation On The Ethernet link is established on corresponding port. L N K Off No Ethernet link is established. On It means that a normal 100 Mbps connection is through its corresponding port. 100 Off It means that a normal 10 Mbps connection is through its corresponding port. On It means a full duplex[...]

Vigor3300 Series User’s Guide 4 1 1 . . 1 1 . . 2 2 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s f f o o r r V V i i g g o o r r 3 3 3 3 0 0 0 0 LED Status Explanation On The router is powered on. PWR Off The router is powered off. On/Blinking The system is active. ACT Off The system is h[...]

Vigor3300 Series User’s Guide 5 LED Status Explanation On It means that a normal 100Mbps connection is through its corresponding port. 100M Off It means that a normal 10Mbps connection is through its corresponding port. On It means a full duplex connection on corresponding port. F DX Off It means a half duplex connection on corresponding port. In[...]

Vigor3300 Series User’s Guide 6 1 1 . . 1 1 . . 3 3 L L E E D D I I n n d d i i c c a a t t o o r r s s a a n n d d C C o o n n n n e e c c t t o o r r s s f f o o r r V V i i g g o o r r 3 3 3 3 0 0 0 0 B B + + LED Status Explanation On The router is powered on. PWR Off The router is powered off. On/Blinking The system is active. ACT Off The sys[...]

Vigor3300 Series User’s Guide 7 LED Status Explanation On It means a full duplex connection on corresponding port. F DX Off It means a half duplex connection on corresponding port. Interface Description Console Provided for technician use. LAN (P1 ~ P4) Connecter for local networked devices. WAN1 ~ WAN3 Connecter for remote networked devices. C C[...]

Vigor3300 Series User’s Guide 8 1 1 . . 2 2 H H a a r r d d w w a a r r e e I I n n s s t t a a l l l l a a t t i i o o n n Before starting to configure the router, you have to connect your devices correctly. 1. Connect the power cord to the power port of Vigor3300 router on the rear panel, and the other side into a wall outlet. 2. Power on the d[...]

Vigor3300 Series User’s Guide 9 1 1 . . 2 2 . . 1 1 D D e e t t a a i i l l e e d d E E x x p p l l a a n n a a t t i i o o n n f f o o r r t t h h e e C C o o n n n n e e c c t t o o r r Here provides you detailed explanation for so me specific connectors that you have to be familiar. T T h h e e R R S S 2 2 3 3 2 2 C C o o n n n n e e c c t t o[...]

Vigor3300 Series User’s Guide 10 X Y After the bracket installation, the V igor3300 Seri es chassis can be installed in a rack by using four screws for each side of the rack. D D e e s s k k t t o o p p T T y y p p e e I I n n s s t t a a l l l l a a t t i i o o n n Rubber pads are included with the Vigor3300 Series. These rubber pads improve the[...]

Vigor3300 Series User’s Guide 11 2 C C o o n n f f i i g g u u r r i i n n g g B B a a s s i i c c S S e e t t t t i i n n g g s s For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password fo r an administrator and [...]

Vigor3300 Series User’s Guide 12 3. Now, the Main Screen will pop up. 4. Go to System page and choose Change Password . 5. The following screen will appear. 6. Enter the login password (1234) on the field of Old Password. Type a new one in the field of New Password and retype it on the field of Confirm Password. Then click Apply to continue.[...]

Vigor3300 Series User’s Guide 13 7. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. 8. Next, you will see the login screen after clicking Apply . Please use new password to re-enter the system configuration. 2 2 . . 2 2 Q Q u u i i c c k k S S e e t t u u p p Quick Setup is desig[...]

Vigor3300 Series User’s Guide 14 MAC Address Router Default- Use the default Mac address stored originally in router. User Definition- Use a MAC address defined by the user. Downstream Rate Assign the downstream rate for this WAN interface. The default value is 102400 kbps (100 Megabit) . This setting is very important for Vigor3300 Series incomi[...]

Vigor3300 Series User’s Guide 15 2 2 . . 2 2 . . 2 2 S S t t a a t t i i c c M M o o d d e e You can manually assign a static IP address to the WAN interface and complete the configuration by applying the setti ngs and rebooti ng your router. Choosing Static as the IP mode, you will see the following page: All the settings here are set by private[...]

Vigor3300 Series User’s Guide 16 IP Address Assign an IP address for the LAN interface. Subnet Mask Assign the subnet mask for the LAN interface. Status Click Enable to use DHCP server; click Disable to close DHCP server; click Relay Agent to activate relay agent function. Start IP Assign the start IP address of the IP pool that DHCP server can u[...]

Vigor3300 Series User’s Guide 17 2 2 . . 2 2 . . 3 3 D D H H C C P P M M o o d d e e DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP address for Vigor3300 automatically. It is not necessary fo r you to assign any setting. (Ho[...]

Vigor3300 Series User’s Guide 18 End IP Assign the end IP address of the IP pool that DHCP sever can use for clients in LAN. Primary DNS Type the IP address for primary DNS. When you finished the above required settings, please click Finish . A system reboot page will appear. Click Apply to activate the DHCP mode configuration. 2 2 . . 2 2 . . 4 [...]

Vigor3300 Series User’s Guide 19 IP Address Assign an IP address for the LAN interface. Subnet Mask Assign the subnet mask for the LAN interface. Status Click Enable to use DHCP server; click Disable to close DHCP server; click Relay Agent to activate relay agent function. Start IP Assign the start IP address of the IP pool that DHCP server can u[...]

Vigor3300 Series User’s Guide 20 2 2 . . 2 2 . . 5 5 P P P P T T P P This mode lets user get the IP group information by a DSL modem with PPTP service from ISP. Your service provider will give you user name, password, and authentication mode for a PPTP setting. If your ISP offers you PPTP (Point-to-Point Tunneling Protocol) mode, please select PP[...]

Vigor3300 Series User’s Guide 21 IP Address Assign an IP address for the LAN interface. Subnet Mask Assign the subnet mask for the LAN interface. Status Click Enable to use DHCP server; click Disable to close DHCP server; click Relay Agen t to activate relay agent function. Start IP Assign the start IP address of the IP pool that DHCP server can [...]

Vigor3300 Series User’s Guide 22 3 A A d d v v a a n n c c e e d d C C o o n n f f i i g g u u r r a a t t i i o o n n After finished basic configuration of the router , you can access Internet with ease. For the user who wants to adjust more setting for suiting hi s/her request, please refer to this chapter for getting detailed information about[...]

Vigor3300 Series User’s Guide 23 B B a a s s i i c c S S t t a a t t u u s s General status of this router will be displayed on Basic Status page. Model Displays the model name of the router. Hardware Version Displays the hardware version of the router. Firmware Version Displays the firmware version of the router. Build Date&Time Displays the[...]

Vigor3300 Series User’s Guide 24 High Available Status The High Av ailable Status is shown when the function is enabled. When there are two Vigor3300 devices in the same LAN, one can be set as Master device and the other can be set as Slave device. Master - It means that Vigor3300 plays the Master role in high availability feature. Slave - It mea[...]

Vigor3300 Series User’s Guide 25 W W A A N N S S t t a a t t u u s s The status of WAN interface (Static, DHCP, PPPo E, PPTP or DMZ) is shown in this page. Simply click WAN Status tag to get the detailed. There are four sets of WAN status can be shown in this page at one time. The sample be low just lists one set of WAN status for only WAN1 inter[...]

Vigor3300 Series User’s Guide 26 3 3 . . 1 1 . . 2 2 T T i i m m e e As an NTP (Network Time Protocol) client, the router gets standard time from the time server. Some time-based functions, such as Call Schedule and URL Content filtering , cannot work properly until the system time functions run successfully. Ty pically, NTP achieves high accurac[...]

Vigor3300 Series User’s Guide 27 3 3 . . 1 1 . . 3 3 S S y y s s l l o o g g The Vigor3300 Series supports a Syslog function to keep a record of abnormal conditions. The router will send Syslog packets to a Syslog server on the remote site. The administrator can observe any abnormal events from Vigor3300. In the System group, click the Syslog opt[...]

Vigor3300 Series User’s Guide 28 3 3 . . 1 1 . . 4 4 A A c c c c e e s s s s C C o o n n t t r r o o l l This page allows you to determine which servi ces (HTTP/Telnet/SSH) is used for the user to access Vigor3300 Series. In addition, you can also limit some hosts to access Vigor3300 Series with specified IP address. In the System group, click th[...]

Vigor3300 Series User’s Guide 29 User Defined Ports - Or you can assign new port numbers for HTTP, Telnet and SSH respectively. PING Restriction Disable PING from the LAN - Choose this function to reject all ICMP packets from LAN side. Disable PING from the WAN - Choose this function to reject all ICMP packets from WAN side. 3 3 . . 1 1 . . 5 5 C[...]

Vigor3300 Series User’s Guide 30 3 3 . . 1 1 . . 6 6 F F i i r r m m w w a a r r e e U U p p g g r r a a d d e e S S e e t t u u p p Vigor3300 Series allows users to upgrade firmware through a Web interface. In the System group, click the Firmware Upgrade option. You can see the following page then. Before you execute the firmware upgrade, please[...]

Vigor3300 Series User’s Guide 31 The default setting of the console port is “baud rate 57600, no parit y, and 8 bit with 1 stop bit.” 3. Power on Vigor3300, then press ENTER before the system reboots completely . 4. Open Hyper Terminal on the PC. Now, Vigor3300 can accept a TFTP download and will display the following message: ***************[...]

Vigor3300 Series User’s Guide 32 6. Now in the Console you will find the following inform ation. When Updating flash block at bfXXXXXX app ears, it means the firmware is under downloading. 7. When set flash0_0 "780000:80000 0:general" appears, it means the firmware downloading has been completed. The router will reboot itself and you wi[...]

Vigor3300 Series User’s Guide 33 3 3 . . 1 1 . . 7 7 R R e e b b o o o o t t The Vigor3300 Series system can be restarted from a Web browser. Reboot screen can appear after you finish the changing of WAN and LAN settings. You have to reboot th e router to invoke the configured settings that you made before. Besides, you can select Reset to factor[...]

Vigor3300 Series User’s Guide 34 3 3 . . 1 1 . . 8 8 D D i i a a g g n n o o s s t t i i c c T T o o o o l l s s In some cases, a user may need to know some information about the router, such as static or dynamic databases, or other routing inform ation. The Vigor3300 Series supports four functions, Routing Table , ARP Cache Table , DHCP Assignme[...]

Vigor3300 Series User’s Guide 35 z Select View ARP Cache Table to get the following page: IP Address Displays the IP address for different ARP cache. MAC Address Displays the MAC address for different ARP cache. Interface Denoted by eth0 if it is a LAN interface and eth1 if it is a WAN interface. Refresh Click Refresh to re-display this web page [...]

Vigor3300 Series User’s Guide 36 z Select View NAT Active Sessions Table to get the following page. This table can display about 30000 sessions with 20 pages. Type Displays the protocol used for the active session. Expire in Displays the remaining time (second) of this session. State Displays the condition of this session. Source IP Displays the [...]

Vigor3300 Series User’s Guide 37 3 3 . . 2 2 N N e e t t w w o o r r k k S S e e t t u u p p For Internet access, it is necessary for you to set WAN and LAN interfaces for the router. 3 3 . . 2 2 . . 1 1 W W A A N N a a n n d d I I n n t t e e r r n n e e t t A A c c c c e e s s s s S S e e t t u u p p The Vigor3300 Series supports four WAN inte [...]

Vigor3300 Series User’s Guide 38 Edit Open the configuration page of this WAN interface. IP Mode Displays current mode of this WAN interface. There are five options: Static, DHCP, PPPoE, PPTP and DHCP. Active Activates/closes this WAN interface. Default Route Sets this WAN interface as default route interface. Load Balance Adds this WAN interface[...]

Vigor3300 Series User’s Guide 39 IP Mode Sets an IP Mode with Static (fixed IP) , DHCP (dynamic IP address), PPPoE, PPTP or DMZ and creates the IP group information. Most cable modem users will use DHCP to get a globally reachable IP address from the cable head-end system. Different mode will lead differe nt configuration and will be explained in[...]

Vigor3300 Series User’s Guide 40 Host Name Some ISP may ask you to t ype your host name. Please type in if necessary. Domain Name Some ISP may ask you to type your domain name. Please type in if necessary. Detect Type Select a detecting type for this WAN interface. There are three ways Send ARP to Gateway , Send PING and Send HTTP Request support[...]

Vigor3300 Series User’s Guide 41 D D H H C C P P C C l l i i e e n n t t S S e e t t u u p p If the WAN interface is set as a DHCP client, the Vigor3300 Series will ask for IP network settings from the DHCP server or DSL modem auto matically. It is not necessary for users to manually configure the router. Detect Type Select a detecting type for t[...]

Vigor3300 Series User’s Guide 42 Apply Click Apply to go back to the WAN Interface Configuration page. To apply all settings, click Apply on the WAN Interface Configuration page and reboot your rou ter. Reset Click this button to clear all the configurations for this page. P P P P P P o o E E w w i i t t h h a a D D S S L L M M o o d d e e m m S [...]

Vigor3300 Series User’s Guide 43 P P P P T T P P w w i i t t h h a a D D S S L L M M o o d d e e m m S S e e t t u u p p The service provider must provide the exact settings for this mode. User Name Assign a specific valid user name provided by local ISP. Password Assign a valid password provided by local ISP. Authentication Select PAP or CHAP pr[...]

Vigor3300 Series User’s Guide 44 3 3 . . 2 2 . . 2 2 L L A A N N In the Network group, select LAN option. The following page for LAN IP/DHCP will be shown. F F o o r r L L A A N N I I P P / / D D H H C C P P In the Vigor3300 Series router, there are some IP address settings for the LAN interface. The IP address/subnet mask is for private users or[...]

Vigor3300 Series User’s Guide 45 Secondary DNS Sets the private IP address of the secondary DNS. Lease Time (Min) Sets a lease time for the DHCP server. The time unit is minute. Gateway IP (Optional) Sets a gateway IP address for the DHCP server. Click Apply to reboot the system and apply the settings. Note: If both the Primary and Secondary DNS [...]

Vigor3300 Series User’s Guide 46 F F o o r r I I P P R R o o u u t t i i n n g g This page allows users to type in secondary IP address for connecting to a subnet. You can set IP routing for each WAN interface respectively. Status Click Enable or Disable to activate or close the IP routing of specific WAN interface. IP Address Type an IP address [...]

Vigor3300 Series User’s Guide 47 3 3 . . 2 2 . . 3 3 L L o o a a d d B B a a l l a a n n c c e e P P o o l l i i c c y y Vigor3300 Series supports a load balancing function. It can assign traffic with protocol type, IP address for specific host, a subnet of hosts, a nd port range to be allocated in WAN interface. User can assign traffic category [...]

Vigor3300 Series User’s Guide 48 Delete/Delete All Click this button to delete the selected setting or all settings. A confirmation dialog box will appear. Click OK to delete this entry from the Load Balance Po licy table. In addition, click Delete All in the Load Balance Policy page to delete all of 10 entries on this page. To edit an entry, sel[...]

Vigor3300 Series User’s Guide 49 “Master”) to the backup component (the “S lave”). This process remains system-wide resources, recovers partial of failed transactions , and restores the system to normal within a matter of microseconds. Take the following picture as an example. The le ft V3300 Series is regarded as Master device, the right[...]

Vigor3300 Series User’s Guide 50 High Availability Disables or enables this function. When the master device fails down, the slave device will take its work over. Group Number Assign a group num ber. The range is from 1 to 255. PCs on the same group (in LAN) can support for each other. Role Select a role for this device as Master or Slave. Virtua[...]

Vigor3300 Series User’s Guide 51 Edit Click this button to open the ed it page for adjusting t he settings. Delete/Delete All Click this button to delete the selected setting or all settings. A confirmation dialog box will appear. Click OK to delete this entry from the Load Balance Po licy table. In addition, click Delete All in the Load Balance [...]

Vigor3300 Series User’s Guide 52 3 3 . . 3 3 . . 1 1 S S t t a a t t i i c c R R o o u u t t e e S S e e t t u u p p When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the St a t i c r o u t e s function rather than other methods. Y ou may simply set rules to forward data from one specifie d su[...]

Vigor3300 Series User’s Guide 53 Network Interface Select a network interface as a destination to be sent. It includes LAN , and WAN1~WAN4 . Gateway IP Assign an IP address of the gateway for the interface selected above. Destination IP Assign the IP address of the destination that data will be transferred to. Packets ready to destination will be[...]

Vigor3300 Series User’s Guide 54 3 3 . . 3 3 . . 2 2 N N A A T T S S e e t t u u p p NAT (Network Address Translation) is a method of mapping one or more IP addresses and/or service ports into different specified services. It allows the internal IP addresses of many computers on a LAN to be translated to one public address to save costs and resou[...]

Vigor3300 Series User’s Guide 55 Comment Displays the name of the entry. Protocol Displays the protocol used for the entry. Public Port Start Displays the start point in the range of public port. Public Port End Displays the end point in the range of public port. Private IP Displays the private IP used for this entry. Private Port Start Display s[...]

Vigor3300 Series User’s Guide 56 Protocol Assign the transport layer protocol with TCP or UDP . Public Port Range Assign a port range from starting to end public port number. The port range is from 1 to 65535. Private IP Assign a local IP address to be transferred into. Private Port Range Assign a port range from starting to end private port num [...]

Vigor3300 Series User’s Guide 57 A A d d d d r r e e s s s s M M a a p p p p i i n n g g If you have a group of static IP addresses, then you can use the address-mapping feature to multiple open ports hosts in the Vigor3300 Series of broadband security routers. The following session will show you how to setup address-mapping feature. In the Advan[...]

Vigor3300 Series User’s Guide 58 Protocol Select the transport layer protocol. It could be TCP , UDP , or All for selection. Public IP Select an IP address (the selections provided here are set in IP Alias List of Network >>WAN interface). Local host can use this IP to connect to Internet. If you want to choose any on of the Public IP setti[...]

Vigor3300 Series User’s Guide 59 In the Advanced group, move to NAT option and choose DMZ Host to get the corresponding page. WAN Interface Display the WAN interface chosen for this entry . Private IP Display the private IP address of this entry . Use IP Alias Display the activation status (enable or disable) of this DMZ host. IP Alias Display th[...]

Vigor3300 Series User’s Guide 60 Use IP Alias Disable option uses WAN interface, Enable option uses IP Alias addresses. IP Alias Select an IP address which are set within the list of IP Alias configured in Network >>WAN interface. Apply Click Apply to reboot the system and apply the settings. C C o o m m m m o o n n P P o o r r t t s s L L [...]

Vigor3300 Series User’s Guide 61 Enable/Disable Click Disable to disable this function. Click Enable to activate this function. Server IP Address Assign an IP address of a Radius server. Destination Port Assign a destination port number used for Radius function. Shared Secret Assign a code for authentication to server. The RADIUS server and clien[...]

Vigor3300 Series User’s Guide 62 3 3 . . 3 3 . . 4 4 P P o o r r t t B B l l o o c c k k The Port Block function provides a user to set lots of proprietary port numbers. Packets will be dropped if destination ports (both TCP and UCP) of packets with these assigned port numbers are on WAN and LAN. The advantage of this feature is to filter some un[...]

Vigor3300 Series User’s Guide 63 In the Advanced group, click DDNS option. You will get the following page. Domain Name Display the domain name set for the entry. Service Provider Display the service provider that supports DDNS. Service Type Display the service type for the entry . Active Display the activation status (di sable or enable) for thi[...]

Vigor3300 Series User’s Guide 64 Server Provider Assign a provider name to support DDNS server. The Vigor3300 supports 7 domain server providers as default. Server Type Select Static , Dynamic or Custom type for this entry of DDNS settings. Domain Name Assign a private domain name to be accessed. Login Name Assign a name to login into DDNS server[...]

Vigor3300 Series User’s Guide 65 3 3 . . 3 3 . . 6 6 C C a a l l l l S S c c h h e e d d u u l l e e S S e e t t u u p p These call schedule profiles will control the up or down tim e of the router’s dialer or connection manager. In order to do the proper call schedule function, a user m ust have to setup time function and arrange schedules for[...]

Vigor3300 Series User’s Guide 66 Enable/Disable Click Disable to disable this function. Click Enable to activate this function. Start Date Assign a date for starting this profile. Start Time Assign a time for starting this profile. Action Force down means to inactivate the Network Interface. Force up means to activate the Network Interface. How o[...]

Vigor3300 Series User’s Guide 67 Also, users can click Delete All to remove all entries in the table. 3 3 . . 3 3 . . 7 7 W W A A N N P P o o r r t t M M i i r r r r o o r r i i n n g g S S e e t t u u p p Vigor 3300 Series supports port mirroring functio n in WAN interfaces. Generally speaking, this function copies traffic from one or more sp ec[...]

Vigor3300 Series User’s Guide 68 3 3 . . 3 3 . . 8 8 L L A A N N P P o o r r t t M M i i r r r r o o r r i i n n g g S S e e t t u u p p Port mirror can be applied for the users in LAN. It has the same mechanism like WAN port mirroring. In the Advanced group, click the LAN Port Mirroring option. Enable/Disable Click Disable to disable this functi[...]

Vigor3300 Series User’s Guide 69 F F o o r r P P o o r r t t B B a a s s e e V V L L A A N N In the Advanced group, click the LAN VLAN option. There are two VLAN settings offered here for you to configure. If you click Disable, no configuration can be completed. Please choose Port Base VLAN to open the following page. P1 – P4 Check the box to m[...]

Vigor3300 Series User’s Guide 70 F F o o r r 8 8 0 0 2 2 . . 1 1 Q Q V V L L A A N N Another way to set VLAN is based on 802.1Q. Please choose 802.1Q VLAN to open the following page. This page is available only fo r the PCs with certain network cards which support 802.1Q VLAN feature. It is useless for general network cards. Active Check this box[...]

Vigor3300 Series User’s Guide 71 Frame Tag Operation Basically, the default settings for tagged or untagged VLAN will be shown automatically when you type VLAN ID/Name and check the Active box. By the way, you can modify the tag operation for each VLAN in this page for obtaining proper control. Use the drop down list to choose a tag operation for[...]

Vigor3300 Series User’s Guide 72 information available to NMSs by using SN MP. Managed devices, sometimes called network elements, can be routers and access servers, switches and bridges, computers hosts, or printers. This function is to define a community stri ng name. An agent is a network-m anagement software module that resides in a managed d[...]

Vigor3300 Series User’s Guide 73 Community Type the community string (e.g., public) for SNMP. Host/mask Assign a value of subnet mask for host IP address.[...]

Vigor3300 Series User’s Guide 74 Max Access Select the authority as Read only or Read/Write . Read only means user only can monitor managed devices. Read/Write means user can control managed devices including change the values of variable stored within managed devices. Apply Click Apply to save this setting and return the previous page. To delete[...]

Vigor3300 Series User’s Guide 75 Trap server Assign an IP address of tra p server. Trap community Assign a co mmunity string for Trap packet using. Trap server port Assign a port number for Trap server using. Apply Click Apply to save this setting and return the previous page.[...]

Vigor3300 Series User’s Guide 76 3 3 . . 4 4 F F i i r r e e w w a a l l l l S S e e t t u u p p The firewall controls the allowance a nd denial of packets through the router. The Firewall Setup in the Vigor 3300 Series mainly consists of packet filtering, Denial of Service (DoS) and URL (Universal Resource Locator) content filtering facilities. [...]

Vigor3300 Series User’s Guide 77 Data Filter Disable or Enable the firewall function. This firewall can only be enabled if at least one filter group exists. The default is Disable . Start Filter Group Default group names provide d here are Pass and Block. Select the first filter group to begin filtering mechanism . The group in this list must exi[...]

Vigor3300 Series User’s Guide 78 Delete Allows you to delete selected IP filter table configuration. If this entry is assigned as the started filter group already, it cannot be deleted. To add a new group, please click Add on the Group Table page to access into the following page. In this page, you can type in new group name and decide the next g[...]

Vigor3300 Series User’s Guide 79 Source IP It means the source IP address. Placing the symbol “ ! ” before a particular IP address will prevent this rule from being applied to that IP address. It is equal to the logical NOT operator. Subnet Mask It means the subnet mask for the source IP. Source Port It means the port for the source IP . Ty p[...]

Vigor3300 Series User’s Guide 80 Between - Specifies the port number is between the Start Port and End Port . Destination IP It means the destination IP address for this filter rule. Placing the symbol “ ! ” before a particular IP address will prevent this rule from being applied to that IP address. It is equal to the logical NOT operator. De[...]

Vigor3300 Series User’s Guide 81 Pass immediately - Pass the packet immediately. Block if no further match - means to locks the packet if no further rules are matched. Pass if no further match - means to passes the packet if no further rules are matched. Note: It is recommended placing pass rules in “pass” group and block ones be in “block?[...]

Vigor3300 Series User’s Guide 82 DoS Defense Enables or disables the DoS Defense function. The default value is Disable . Enable SYN Flood Defense Activates the SYN flood defense function. If the amount of TCP SYN packets from the Intern et exceeds the user-defined threshold value, the router will be forced to randomly discard the subsequent TCP [...]

Vigor3300 Series User’s Guide 83 Enable Block IP Options Activates the Block IP options function. The router will ignore any IP packets with IP option field appearing in the datagram header. Enable Block Land Activates the Block Land function. A La nd attack occurs when an attacker sends spoofed SYN packets with identical source address, destin a[...]

Vigor3300 Series User’s Guide 84 rating a site as objectionable, and refusing to di splay it on user' s browser, URL content filter can prevent employee on SME from accessing inappropriate Internet resources. Instead of traditional firewall inspects packets ba sed on the fields of TCP/IP headers, the URL content filter checks the URL strings[...]

Vigor3300 Series User’s Guide 85 Enable/Disable Disable or Enable URL Filter function. Keyword The keyword(s) used to filter URLs. Keywords can be partial words or complete URLs. The router will reject any Website which whole or partial URL matches any keywords. Keyword List The list of keywords. Block Direct IP Web Access Deny any Web surfing ac[...]

Vigor3300 Series User’s Guide 86 CPA Server Enable or Disable URL Access Control. Select a CPA Server The domain name is used to as a CPA server. The name should be filled when enable CPA Server, otherwise it will impact performance. Permitted Categories List The permitted categories are obtained from the selected CPA server. Forbidden Categories[...]

Vigor3300 Series User’s Guide 87 Malicious code may be embedde d in some executable objects, such as ActiveX, Java Applet, compressed files, executable files, Proxy, and Multimedia. For example, an ActiveX object with malicious code may gain unlimited access to the system. Java Activates the Block Java object function. The router will discard Jav[...]

Vigor3300 Series User’s Guide 88 Always Block The URL content filtering facility is always active. Block only at The URL content filtering facility is active during the specified times from H1:M1 to H2:M2 in one day, where H1 and H2 indicate the hours and M1 and M2 represent the minutes. Days of Week - The URL content filtering facility is active[...]

Vigor3300 Series User’s Guide 89 users/services or guarantee allocation of finite bandwidth resources to network or servers for supporting timing-sensitive and mission-critical ne twork applications, such as VoIP (Voice over IP) and online gaming applications. Differentiated quality of service is therefore one of the m ost important issues over t[...]

Vigor3300 Series User’s Guide 90 3 3 . . 5 5 . . 1 1 I I n n c c o o m m i i n n g g / / O O u u t t g g o o i i n n g g C C l l a a s s s s S S e e t t u u p p Incoming/Outgoing Class Setup allows you to configure bandwidth per centage for data and voice signals transmission. Click the QoS option and choose Incoming Class Setup/Outgoing Class Se[...]

Vigor3300 Series User’s Guide 91 Priority You are allowed to set ten filters. The priority for the filter of number 1 is the highest; and the priority for num ber 10 is the lowest. Source IP Displays the source IP address for the filter. Destination IP Displays the destination IP address for the filter. Service Type Status Displays the service ty[...]

Vigor3300 Series User’s Guide 92 Service Type Select the service type that you want to use. There are thirty-five service types provided. Protocol There are three options: TCP , UDP , and TCP/UDP . Choose the one you need. Port Type the port number for this filter. DiffServ CodePoint Status There are three options: Basic – Only the DiffServ Cod[...]

Vigor3300 Series User’s Guide 93 3 3 . . 6 6 V V P P N N a a n n d d R R e e m m o o t t e e A A c c c c e e s s s s S S e e t t u u p p This page allows you to setup the configurati on of VPN and Remote Access to create a virtual private network for security in the Internet. A Virtual Private Network (VPN) is an extension of a private network th[...]

Vigor3300 Series User’s Guide 94 keying material for use with ISAKMP, and for other security associations such as AH and ESP for the IPsec DOI. 3 3 . . 6 6 . . 1 1 I I P P S S e e c c The IPSec services can provide access control, connectionless integrity, data origin authentication, rejection of replayed packets th at is a form of partial sequen[...]

Vigor3300 Series User’s Guide 95 z For Default Configuration To edit or add a policy table, please clic k one of the radio buttons and click Edit . The following page of default c onfiguration will be shown: Profile Status Set the initialization of IPSec Tunnel with this profile settings. Enable – Choose this one to invoke this profile ma nuall[...]

Vigor3300 Series User’s Guide 96 Security Protocol AH - Specify the IPSec protocol for the Authentication Header protocol. The data will be authenticated but not be encrypted. ESP - Specify the IPSec protocol for the Encapsulating Security Payload protocol. The data will be encrypted and authenticated. NAT Traversal Click Enable to let multi IPSe[...]

Vigor3300 Series User’s Guide 97 Click Advanced tab. The following page of defa ult configuration will be shown: Key Lifetime (main) The rekey-renegotiated period of the IKE Phase1 keying channel of a connection. The acceptable range is from 5 to 480 minutes (8 hours). Proposal (main) The proposed encryption and/or authentication algorithms for I[...]

Vigor3300 Series User’s Guide 98 Proposal (quick) The proposed encryption and/or authentication algorithms for IKE Phase2 negotiations. There are 2 options. Encryption algorithms – NULL/DES/3DES/AES. Authentication algorithms - MD5/SHA1 Accepted Proposal If you choose Only accept proposal listed above , only the selected proposal will be accept[...]

Vigor3300 Series User’s Guide 99 If user expects the local gateway to act as the IKE initiator, i.e., emit the first IKE main mode message, user can click the hyperlink Initiate to start the IKE negotiation or set admin status to be always on to automatically restart IKE negotiation. During the negotiation, you can press Refresh to show the lates[...]

Vigor3300 Series User’s Guide 100 U U s s e e r r C C e e r r t t i i f f i i c c a a t t e e This page allows you to set up the CA configur ation to generate user’s certificate. Click the VPN>>IPSec >>User Certificate option. Generate Generate a new entry for user certification. Download Download a certification file generated from[...]

Vigor3300 Series User’s Guide 101 z To generate a user certificate, please click one radio button to select the entry and click the Generate button. Certification Name The name of the certification entry . ID Type The ID type for this entry. There are three types: Domain Name : Certificated by domain name. IP: Certificated by IP address. Email : [...]

Vigor3300 Series User’s Guide 102 After you click the Download button, the system will guide you to save the downloaded file (newreq_RD-computer_1.pem) to a place that you assign. z To import a user certificate that you saved previously, please click index number one (with the status of Request Generated) and click the Import button. If not, you [...]

Vigor3300 Series User’s Guide 103 delete it or click Cancel to leave the dialog without deletion. z To view a user certificate, please click the index number that you want to view the detailed information of the certificate and click the View button. The following page will be shown for your reference. S S t t a a t t u u s s This page will show [...]

Vigor3300 Series User’s Guide 104 3 3 . . 6 6 . . 2 2 P P P P T T P P G G e e n n e e r r a a l l S S e e t t u u p p To configure the general setup, please click VPN -> PPTP->General Setup. Status Sets the function to Active or Inactive . PPTP Authentication Allows you to choose an authentication mode to be used. The default setting is CHA[...]

Vigor3300 Series User’s Guide 105 Start IP Type the starting IP address. The default group value is 192.168.1.224/28. Subnet Mask Select the value of subnet mask for the Start IP. Accessed IP Type the accessed IP address. Subnet Mask Select the value of subnet mask for the Accessed IP. A A u u t t h h e e n n t t i i c c a a t t i i o o n n This [...]

Vigor3300 Series User’s Guide 106 Type username, password and choose proper group for this entry. When you finish it, click Apply . Delete Allows you to remove the selected group. Delete All Allows you to remove all of the groups. When you finish the configuration, please click Apply to invoke it. S S t t a a t t u u s s This page displays some r[...]

Vigor3300 Series User’s Guide 107 3 3 . . 7 7 V V o o I I P P S S e e t t u u p p Voice over Internet Protocol (VoIP) is a tec hnology that allows you to make telephone calls using a broadband Internet connection instead of a regular (or analog) phone line. The Vigor3300/Vigor3300V provides cost effec tive voice solution for SME customers which c[...]

Vigor3300 Series User’s Guide 108 F F o o r r S S I I P P C C o o n n f f i i g g u u r r a a t t i i o o n n SIP Local Port Type the port number for SIP protocol. The default value is 5060. Active Click this box to activate this SIP proxy server setting. Outbound Proxy Check this box to enable this function for sending SIP protocol packets to an[...]

Vigor3300 Series User’s Guide 109 F F o o r r M M G G C C P P C C o o n n f f i i g g u u r r a a t t i i o o n n MGCP Local Port The UDP port num ber in MGCP local terminal. MGCP Call Agent Address The IP address of the Call Agent server in MGCP. MGCP Call Agent Port The UDP port number for the Call Agent server. EndPoint Name Style Choose a pro[...]

Vigor3300 Series User’s Guide 110 3 3 . . 7 7 . . 2 2 P P o o r r t t S S e e t t t t i i n n g g s s Port Settings page allows users to set phone number and p hone groups for different call receivers. F F o o r r P P h h o o n n e e N N u u m m b b e e r r Edit Click this button to access into the Edit page for each phone number. Type Display s [...]

Vigor3300 Series User’s Guide 111 Port 1 (FXS) Click Enable to activate this port or Disable to close this port. User Name – Type the user name (a number) for each phone line. Password - Type the user password for each phone line. Display Name - Type the user name to be displayed on another phone terminal. Authentication ID - Type the character[...]

Vigor3300 Series User’s Guide 112 Hotline Number to PBX / PSTN- Pre-set a phone number to make the port dialing out to PBX/PSTN automatically. FXO Manual Disconnection - Click Disconnect to disconnect this phone line by manual. Codec Preferred Codec - It can be applied on this port. Vigor3300 supports five Codecs. The default setting is G.729A. Y[...]

Vigor3300 Series User’s Guide 113 FAX Bypass Codec Rate - Select one option (20 or 40) to be applied if FAX mode is configured as Bypass mode. The stability for the faxing result of documents with codec rate 20ms is higher than 40ms. Yet, the bandwidth request for 40m s is less than 20ms. DTMF DTMF Mode - InBand : Choose this one then the Vigor w[...]

Vigor3300 Series User’s Guide 114 Rings all ports in the group Click this radio button to make all ports in the sam e group ringing while receiving incoming calls. Rings the first available port Click this radio button to make the first available port in the same group ringing while receiving incoming calls. Default Group Click this button to ret[...]

Vigor3300 Series User’s Guide 115 3 3 . . 7 7 . . 4 4 A A d d v v a a n n c c e e d d S S p p e e e e d d D D i i a a l l Speed dial allows users to call out with simple buttons instead of dialing long n umbers. To set a speed dial with specified settings, please open the following page. Prefix Displays the prefix number of the entry. Strip Lengt[...]

Vigor3300 Series User’s Guide 116 numbers of 03654321 and 0455 6890. In which, 03654321 is suitable for this speed dial rule. Strip Length Assign the length of digit to be removed from the original phone number. For example, suppose the original ph one number is 03654321 and the strip lengt h is 2. The first two numbers (03) will be removed and t[...]

Vigor3300 Series User’s Guide 117 Timeout several seconds but not finish the complete dialing. The system will force to dial the incomplete number after the time you set in this field to finish that call. For exam ple, the phone number is 03654321 and the dialing co mpletion timeout is set to 4 (secs). The user dials with 036 and stops to dial. A[...]

Vigor3300 Series User’s Guide 118 Region Choose the country area that the Vigor3300 located for using VoIP feature. Or, select User Defined for proprietary settings. Caller ID Type If User Defined is selected in the Region field, users can select one of the supported values. If a country is selected, this field will display ID type value automati[...]

Vigor3300 Series User’s Guide 119 3 3 . . 7 7 . . 7 7 Q Q o o S S This Quality of Service (QoS) function is only for the VoIP feature. When this function is enabled, the Vigor 3300 Series will set rate limitation for incoming and outgoing transmissions to ensure the best quality of service in VoIP. Disable Click this button to disable QoS functio[...]

Vigor3300 Series User’s Guide 120 3 3 . . 7 7 . . 8 8 N N A A T T T T r r a a v v e e r r s s a a l l NAT traversal is a challenge that all Servi ce Providers looking to deliver public IP-based voice and multimedia services must solve. The goa l of this function is to provide secure connection to subscribers behind NAT (Network Address Translatio[...]

Vigor3300 Series User’s Guide 121 Full-auto, no need to config NAT (only for SIP)- If you click this function; the user does not configure NAT information. STUN Local Port - Type the port number of the STUN server. STUN Server Address - Type the IP address of the STUN server. STUN Server Port - Type the port number of the STUN server. Symmetric M[...]

Vigor3300 Series User’s Guide 122 Allow all incoming calls – All incoming calls from remote ends are accepted by this router. Allow only calls from allow list – Only the calls listed in the Allow List page will be accepted by this router. Allow only calls from speed dial entries – Only the calls listed in the speed dial entries will be acce[...]

Vigor3300 Series User’s Guide 123 Name The name or number in the deny list. IP/Domain The IP address or domain name to be denied. If the peer is registered in SIP proxy server, use the domain name of the SIP proxy server. Otherwise, use the static IP address or DDNS domain name. 3 3 . . 7 7 . . 1 1 0 0 C C a a l l l l H H i i s s t t o o r r y y [...]

Vigor3300 Series User’s Guide 124 Remote RTP Address The IP address of remote voice site. Remote RTP Port The used port number of remote voice site. RTP Statistic The statistic of RTP with abbr eviation will be shown in this field (e.g., PS: Packets Sent; OS: Octets Sent; PR: Packets Received; OR: Octets Received; PL: Packets Lost; JI: Interarriv[...]

Vigor3300 Series User’s Guide 125 You can click Refresh to get the latest status information for these VoIP phones. In addition, you can set the time interval of refreshing. Use the drop down list of Refresh Option to choose an automatic refres hing setting. If you choose No Refresh , the system will not refresh this page until you click Refresh [...]

Vigor3300 Series User’s Guide 126[...]

Vigor3300 Series User’s Guide 127 4 T T r r o o u u b b l l e e S S h h o o o o t t i i n n g g This section will guide you to solve abnormal s ituations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow below sections to check your basic installation stage by stage. ¾ Checking [...]

Vigor3300 Series User’s Guide 128 4 4 . . 2 2 C C h h e e c c k k i i n n g g I I f f t t h h e e N N e e t t w w o o r r k k C C o o n n n n e e c c t t i i o o n n S S e e t t t t i i n n g g s s o o n n Y Y o o u u r r C C o o m m p p u u t t e e r r I I s s O O K K o o r r N N o o t t Sometimes the link failure occurs due to the wrong network[...]

Vigor3300 Series User’s Guide 129 3. Select Internet Protocol (TCP/IP) and then click Properties . 4. Select Obtain an IP address automatically and Obtain DNS server address automatically .[...]

Vigor3300 Series User’s Guide 130 F F o o r r M M a a c c O O s s 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network . 3. On the Network screen, select Using DHCP from the drop down list of Configure IPv4.[...]

Vigor3300 Series User’s Guide 131 4 4 . . 3 3 P P i i n n g g i i n n g g t t h h e e R R o o u u t t e e r r f f r r o o m m Y Y o o u u r r C C o o m m p p u u t t e e r r The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most import[...]

Vigor3300 Series User’s Guide 132 4 4 . . 4 4 C C h h e e c c k k i i n n g g I I f f t t h h e e I I S S P P S S e e t t t t i i n n g g s s A A r r e e O O K K o o r r N N o o t t 1. Go to the web configuration GUI (http://192.168.1.1), click Network >> WAN to check your ISP settings for IP modes. 2. Make sure the Active check box has bee[...]

Vigor3300 Series User’s Guide 133 3. Check if Service Name (optional) is correct or not. It is required by some ISPs. After finishing the settings, go to System - Status page and click WAN Status . You will get a correct web page of WAN settings. F F o o r r S S t t a a t t i i c c M M o o d d e e 1. Check if the values of IP Address , Subnet Mas[...]

Vigor3300 Series User’s Guide 134 F F o o r r D D H H C C P P M M o o d d e e 1. Check if Host Name (optional) and Domain Name (optional) are correct or not. Both them are required for some ISPs. 2. If anything wrong, please check and retype correct values. Then try the network connection again. 3. After finishing the settings, go to System - Sta[...]

Vigor3300 Series User’s Guide 135 F F o o r r P P P P T T P P M M o o d d e e 1. Check if the settings of Username and Password are correct or not. 2. Check if the setting of Authentication is correct or not. You may need to try both PAP and CHAP. 3. Check if the value of PPTP Local Address , PPTP Subnet Mask , and PPTP Remote Address are correct[...]

Vigor3300 Series User’s Guide 136 H H a a r r d d w w a a r r e e R R e e s s e e t t While the router is running (ACT LED blinking), press the RST button and hold for more than 5 seconds. When you see the ACT LED blinks ra pidly, please release the button. Then, the router will restart with the default configuration. After restore the factory de[...]

Vigor3300 Series User’s Guide 137 A A p p p p e e n n d d i i x x A A A A p p p p l l i i c c a a t t i i o o n n f f o o r r 8 8 0 0 2 2 . . 1 1 V V L L A A N N A A . . 1 1 B B l l o o c c k k L L A A N N - - t t o o - - L L A A N N C C o o m m m m u u n n i i c c a a t t i i o o n n To control the communication of PCs am ong different network s[...]

Vigor3300 Series User’s Guide 138 4. Now you will get the following page. A A . . 2 2 H H o o w w t t o o C C h h e e c c k k / / E E d d i i t t V V L L A A N N I I D D o o n n Y Y o o u u r r P P C C ? ? Not all the network cards support VLAN features. If you cannot sure if the network card of your computer supports tagged VLAN or not, pl ease [...]

Vigor3300 Series User’s Guide 139 2. Right-click on Local Area Connection and click on Status . 3. On the following dialog, click Properties .[...]

Vigor3300 Series User’s Guide 140 4. Click Configure to access into next screen. 5. On this dialog box, locate VLANs tag and click on it. If you cannot find out VLANs tag, that means your network card does not support VLAN feature.[...]

Vigor3300 Series User’s Guide 141 6. In this screen, there is no VALN existed. You can create a new one. Please click the New… button.[...]

Vigor3300 Series User’s Guide 142 7. In New VLAN dialog, please type a number in the box of VLAN ID. Here, “5” is entered. The corresponding VLAN Name w ill appear automatically. Next, click OK to create it. 8. After you click OK, the system will configure for the VLAN settings. Please wait for several seconds.[...]

Vigor3300 Series User’s Guide 143 9. When the configuration is finished, the ne w VLAN settings with ID number and nam e will appear on previous dialog, Desktop Adapter Properties . Click OK to exit this dialog. 10. Now, the Desktop Adapter – VLAN dialog will appear as follows. Please click OK.[...]

Vigor3300 Series User’s Guide 144 11. Next time, if you want to check VLAN setting again, please open Settings tag to m odify it.[...]

Vigor3300 Series User’s Guide 145 A A . . 3 3 A A p p p p l l i i c c a a t t i i o o n n s s A A . . 3 3 . . 1 1 F F o o u u r r V V L L A A N N s s f f o o r r D D i i f f f f e e r r e e n n t t D D e e p p a a r r t t m m e e n n t t s s i i n n A A C C o o m m p p a a n n y y A company wants to separate the Engineer Department, Sales Departm[...]

Vigor3300 Series User’s Guide 146 7. After applying the settings, the web page w ill be redirected to “reboot” web page. You can ignore it and continue to configure th e Network setting. After finishing Network setting, you can execute the reboot procedure. 8. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only.[...]

Vigor3300 Series User’s Guide 147 A A . . 3 3 . . 2 2 T T w w o o V V L L A A N N s s f f o o r r D D i i f f f f e e r r e e n n t t D D e e p p a a r r t t m m e e n n t t s s i i n n A A C C o o m m p p a a n n y y A company wants to separate the Engineer Department and Other Departments to limit their communication to protect the engineering [...]

Vigor3300 Series User’s Guide 148 5. After applying the settings, the web page will be redirected to “reboot” web page. User can it and continue to configure the Networ k setting. After finishing Network setting, you can execute the reboot procedure. 6. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only. 7. In [...]

Vigor3300 Series User’s Guide 149 A A . . 3 3 . . 3 3 E E x x a a m m p p l l e e f f o o r r t t h h e e C C o o m m p p a a n n i i e e s s i i n n t t h h e e S S a a m m e e B B u u i i l l d d i i n n g g There are four companies in the same building. They share the broadband network and use the Vigor3300V router to achieve the load balance,[...]

Vigor3300 Series User’s Guide 150 6. In the VLAN8, type “8” to VLAN ID. In the Member field, choose p4. Then choose the “Tagged” for Frame Tag Operation in p4. We can ignore the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from company D. 7. After applying the settings, the web page will be redirect to “reboot?[...]

Vigor3300 Series User’s Guide 151 A A . . 3 3 . . 4 4 E E x x a a m m p p l l e e f f o o r r A A C C o o m m p p a a n n y y a a n n d d G G u u e e s s t t A company wants to separate the Engineer Department, Sales Department, Marketing Department and guest to limit their communication with any department to ensure the security. In this case, w[...]

Vigor3300 Series User’s Guide 152 6. In the VLAN8, type “8” to VLAN ID. In the Member field, choose p4. Then choose the “Untagged” for Frame Tag Operation in p4. We should configure the PVID to “8”, because the device does not support 802.1Q VLAN. 7. After applying the settings, the web page will be redirected to “reboot” web page[...]

Vigor3300 Series User’s Guide 153 A A . . 3 3 . . 5 5 E E x x a a m m p p l l e e f f o o r r T T r r u u n n k k U U s s a a g g e e A company wants to separate the Engineer Department, Sales Department, Marketing Department and other departments to limit thei r communication with each other to ensure the security. Many employees of the company [...]

Vigor3300 Series User’s Guide 154 the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from the switch. 6. In the VLAN8, type “8” to VLAN ID. In the Member field, choose p1, p2, p3 and p4. Then choose the “Tagged” for Frame Tag Oper ation in p1, p2, p3 a nd p4. We can ignore the PVID (Port VLAN ID), because 802.1q tag[...]