Draytek Vigor 3200 Series Betriebsanweisung

Vigor3200 Series User’s Guide x6.5 Problems for 3G Network Connection ...

Vigor3200 Series User’s Guide 90FFoorr WWAANN55 To use 3G network connection through 3G USB Modem, please configure WAN5 interface. Enable Choose

Vigor3200 Series User’s Guide 91be changed into Backup Type. You have to specify which role the WAN interface should play. When any WAN disconnect

Vigor3200 Series User’s Guide 92connection. Access Mode Use the drop down list to choose a proper access mode. The details page of that mode will be

Vigor3200 Series User’s Guide 93execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this

Vigor3200 Series User’s Guide 94DDeettaaiillss PPaaggee ffoorr SSttaattiicc oorr DDyynnaammiicc IIPP iinn WWAANN11 ~~ WWAANN44 For static

Vigor3200 Series User’s Guide 95have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value

Vigor3200 Series User’s Guide 96Subnet Mask: Type the subnet mask. Gateway IP Address: Type the gateway IP address. Default MAC Address : Click this

Vigor3200 Series User’s Guide 97DDeettaaiillss PPaaggee ffoorr PPPPTTPP//LL22TTPP iinn WWAANN11 ~~ WWAANN44 To use PPTP/L2TP as the accessing

Vigor3200 Series User’s Guide 98WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Fixed IP - Usual

Vigor3200 Series User’s Guide 99DDeettaaiillss PPaaggee ffoorr PPPPPP iinn WWAANN55 To use PPP (for 3G USB Modem) as the accessing protocol of

Vigor3200 Series User’s Guide 11 PPrreeffaaccee Vigor3200 Series is a broadband router. It integrates IP layer QoS, NAT session/bandwidth managemen

Vigor3200 Series User’s Guide 100Setup the schedules can be set previously in Application >>Schedule web page and you can use the number that

Vigor3200 Series User’s Guide 10144..11..44 LLooaadd--BBaallaannccee PPoolliiccyy This router supports the function of load balancing. It can assi

Vigor3200 Series User’s Guide 102Click Index 1 to access into the following page for configuring load-balance policy. Enable Check this box to enabl

Vigor3200 Series User’s Guide 10344..22 LLAANN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network

Vigor3200 Series User’s Guide 104In some special case, you may have a public IP subnet from your ISP such as 220.135.240.0/24. This means that you ca

Vigor3200 Series User’s Guide 105WWhhaatt aarree VViirrttuuaall LLAANNss aanndd RRaattee CCoonnttrrooll You can group local hosts by physical

Vigor3200 Series User’s Guide 106 General Setup----- Allow to configure settings for each subnet respectively. Index Display all of the LAN items, DM

Vigor3200 Series User’s Guide 107LLAANN 11 LAN1 is the default configuration for basic host connection. Network Configuration Set IP address and S

Vigor3200 Series User’s Guide 108be 192.168.1.2 or greater, but smaller than 192.168.1.254. IP Pool Counts - Enter the maximum number of PCs that you

Vigor3200 Series User’s Guide 109LLAANN 22,, LLAANN 33,, LLAANN 44 With the multi-subnet feature offered by Vigor router, LAN2 ~ LAN4 are used

Vigor3200 Series User’s Guide 211..22 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss Before you use the Vigor router, please get acquai

Vigor3200 Series User’s Guide 110DDMMZZ DMZ port setting is used for connecting host in DMZ. Network Configuration Set IP address and Subnet Mask

Vigor3200 Series User’s Guide 111IIPP RRoouutteedd SSuubbnneett Vigor router can serve as a DHCP server to route the request coming from LAN PC.

Vigor3200 Series User’s Guide 112 Use LAN Port – Any PC asked for LAN IP address assigned by the DHCP server will send the request through the LAN p

Vigor3200 Series User’s Guide 113AAdddd SSttaattiicc RRoouutteess ttoo PPrriivvaattee aanndd PPuubblliicc NNeettwwoorrkkss Here is an example

Vigor3200 Series User’s Guide 1142. Click the LAN - Static Route and click on the Index Number 1. Check the Enable box. Please add a static route as

Vigor3200 Series User’s Guide 11544..22..44 VVLLAANN Virtual LAN function provides you a very convenient way to manage subnets by grouping them. G

Vigor3200 Series User’s Guide 11644..22..55 BBiinndd IIPP ttoo MMAACC This function is used to bind the IP and MAC address in LAN to have a stre

Vigor3200 Series User’s Guide 117Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the ta

Vigor3200 Series User’s Guide 11844..33 NNAATT Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that o

Vigor3200 Series User’s Guide 11944..33..11 PPoorrtt RReeddiirreeccttiioonn Port Redirection is usually set up for server related service inside t

Vigor3200 Series User’s Guide 3 Interface Description Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is b

Vigor3200 Series User’s Guide 120 Press any number under Index to access into next page for configuring port redirection. Enable Check this box to e

Vigor3200 Series User’s Guide 121service. If you choose Range as the port redirection mode, you will see two boxes on this field. Type a complete IP

Vigor3200 Series User’s Guide 12244..33..22 DDMMZZ HHoosstt As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on

Vigor3200 Series User’s Guide 123to select one. Choose PC Click this button and then a window will automatically pop up, as depicted below. The windo

Vigor3200 Series User’s Guide 124If you previously have set up WAN Alias for PPPoE or Static or Dynamic IP mode in WAN2/WAN3/WAN4/WAN5 interface, you

Vigor3200 Series User’s Guide 12544..33..33 OOppeenn PPoorrttss Open Ports allows you to open a range of ports for the traffic of special applicat

Vigor3200 Series User’s Guide 126 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN

Vigor3200 Series User’s Guide 12744..44 FFiirreewwaallll 44..44..11 BBaassiiccss ffoorr FFiirreewwaallll While the broadband users demand more

Vigor3200 Series User’s Guide 128 SSttaatteeffuull PPaacckkeett IInnssppeeccttiioonn ((SSPPII)) Stateful inspection is a firewall architecture t

Vigor3200 Series User’s Guide 12944..44..22 GGeenneerraall SSeettuupp General Setup allows you to adjust settings of IP Filter and common options.

Vigor3200 Series User’s Guide 411..22..22 FFoorr VViiggoorr33220000nn LED Status Explanation Blinking The router is powered on and running nor

Vigor3200 Series User’s Guide 130router’s firewall will block the packets directly for security. DDeeffaauulltt RRuullee PPaaggee Such page all

Vigor3200 Series User’s Guide 131 User Management Such item is available only when Rule-Based is selected in User Management>>General Setup. T

Vigor3200 Series User’s Guide 132strongly recommended to use the default settings here. Codepage - This function is used to compare the characters

Vigor3200 Series User’s Guide 13344..44..33 FFiilltteerr SSeettuupp Click Firewall and click Filter Setup to open the setup page. To edit or add

Vigor3200 Series User’s Guide 134To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Check to enable the Fi

Vigor3200 Series User’s Guide 135 To set the IP address manually, please choose Any Address/Single Address/Range Address/Subnet Address as the Addr

Vigor3200 Series User’s Guide 136 Protocol - Specify the protocol(s) which this filter rule will apply to. Source/Destination Port – (=) – when t

Vigor3200 Series User’s Guide 137configured in IP Object for Source IP and Destination IP be bound for applying such filter rule. No-Strict - no limi

Vigor3200 Series User’s Guide 138Content Filter web page first. Or choose [Create New] from the drop down list in this page to create a new profile.

Vigor3200 Series User’s Guide 139will be. However, if the network is not stable, small value will be proper. Session timeout–Setting timeout for sess

Vigor3200 Series User’s Guide 5 Interface Description Wireless LAN ON/OFF/WPS Press "Wireless LAN ON/OFF/WPS" button once to wait for

Vigor3200 Series User’s Guide 140EExxaammppllee As stated before, all the traffic will be separated and arbitrated using on of two IP filters: call

Vigor3200 Series User’s Guide 14144..44..44 DDooSS DDeeffeennssee As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defe

Vigor3200 Series User’s Guide 142coming from the Internet. The default setting for threshold and timeout are 50 packets per second and 10 seconds, re

Vigor3200 Series User’s Guide 143once they re-construct the packets. The Vigor routers will block any packets realizing this attacking activity. Bloc

Vigor3200 Series User’s Guide 14444..55 UUsseerr MMaannaaggeemmeenntt User Management is a security feature which disallows any IP traffic (except

Vigor3200 Series User’s Guide 145the filter rules configured in Firewall>>General Setup and Filter Rule to the users. 44..55..22 UUsseerr PPr

Vigor3200 Series User’s Guide 146Enable this account Check this box to enable such user profile. User Name Type a name for such user profile (e.g.,

Vigor3200 Series User’s Guide 147selected in Firewall>>General>>Default rule can be available for use in User Management>>User Prof

Vigor3200 Series User’s Guide 148Refresh – Click this button to recalculate the time quota. Add – Click this box to set the time quota for such profi

Vigor3200 Series User’s Guide 149profiles will be numbered with 3, 4, 5 and so on. Selected Keyword Objects Click button to add the selected user o

Vigor3200 Series User’s Guide 611..33 HHaarrddwwaarree IInnssttaallllaattiioonn Before starting to configure the router, you have to connect you

Vigor3200 Series User’s Guide 150Logout – the user will be logged out forcefully. 44..66 OObbjjeeccttss SSeettttiinnggss For IPs in a range and s

Vigor3200 Series User’s Guide 151 Name Type a name for this profile. Maximum 15 characters are allowed. Interface Choose a proper interface. For e

Vigor3200 Series User’s Guide 152Subnet Mask Type the subnet mask if the Subnet Address type is selected. Invert Selection If it is checked, all the

Vigor3200 Series User’s Guide 153Click the number under Index column for settings in detail. Name Type a name for this profile. Maximum 15 charact

Vigor3200 Series User’s Guide 15444..66..33 SSeerrvviiccee TTyyppee OObbjjeecctt You can set up to 96 sets of Service Type Objects with differe

Vigor3200 Series User’s Guide 155(=) – when the first and last value are the same, it indicates one port; when the first and last values are differen

Vigor3200 Series User’s Guide 156Click the number under Index column for settings in detail. Name Type a name for this profile. Available Service Ty

Vigor3200 Series User’s Guide 157Click the number under Index column for setting in detail. Name Type a name for this profile, e.g., game. Contents

Vigor3200 Series User’s Guide 158 Click the number under Index column for setting in detail. Name Type a name for this group. Available Keyword Obje

Vigor3200 Series User’s Guide 159Click the number under Profile column for configuration in details. Profile Name Type a name for this profile. T

Vigor3200 Series User’s Guide 711..44 PPrriinntteerr IInnssttaallllaattiioonn You can install a printer onto the router for sharing printing. All

Vigor3200 Series User’s Guide 16044..77 CCSSMM PPrrooffiillee CCoonntteenntt SSeeccuurriittyy MMaannaaggeemmeenntt ((CCSSMM)) CSM is an abbrev

Vigor3200 Series User’s Guide 161 44..77..11 AAPPPP EEnnffoorrcceemmeenntt PPrrooffiillee You can define policy profiles for IM (Instant Messeng

Vigor3200 Series User’s Guide 162Below shows the items which are categorized under IM. Profile Name Type a name for the CSM profile. Select All Clic

Vigor3200 Series User’s Guide 163Below shows the items which are categorized under Protocol. The items categorized under Misc.

Vigor3200 Series User’s Guide 16444..77..22 UURRLL CCoonntteenntt FFiilltteerr PPrrooffiillee To provide an appropriate cyberspace to users, Vig

Vigor3200 Series User’s Guide 165 Profile Name Type a name for the CSM profile. Priority It determines the action that this router will apply. Both:

Vigor3200 Series User’s Guide 166Pass – Only the log about Pass will be recorded in Syslog. Block – Only the log about Block will be recorded in Sysl

Vigor3200 Series User’s Guide 167 Web Feature Enable Restrict Web Feature - Check this box to make the keyword being blocked or passed. Action - T

Vigor3200 Series User’s Guide 16844..77..33 WWeebb CCoonntteenntt FFiilltteerr PPrrooffiillee There are three ways to activate WCF on vigor rout

Vigor3200 Series User’s Guide 169another qualified and suitable server. Test a site to verify whether it is categorized Click this link to do the ver

Vigor3200 Series User’s Guide 83. Open File->Add Printer. A welcome dialog will appear. Please click Next. 4. Click Local printer attached

Vigor3200 Series User’s Guide 170 Black/White List Enable – Activate white/black list function for such profile. Group/Object Selections – Click Edit

Vigor3200 Series User’s Guide 171Pass – Only the log about Pass will be recorded in Syslog. Block – Only the log about Block will be recorded in Sysl

Vigor3200 Series User’s Guide 172 To activate the function of limit session, simply click Enable and set the default session limit. Enable Click th

Vigor3200 Series User’s Guide 173maximum number of Internet sessions permitted. Index (1-15) in Schedule Setup You can type in four sets of time sche

Vigor3200 Series User’s Guide 174Limitation List Display a list of specific limitations that you set on this web page. Start IP Define the start IP a

Vigor3200 Series User’s Guide 175headquarter, a teleworker may enforce an index of QoS Control to reserve bandwidth for HTTPS connection while using

Vigor3200 Series User’s Guide 176You can configure general setup for the WAN interface, edit the Class Rule, and edit the Service Type for the Class

Vigor3200 Series User’s Guide 177Reserved Bandwidth Ratio It is reserved for the group index in the form of ratio of reserved bandwidth to upstream s

Vigor3200 Series User’s Guide 178After you click the Edit link, you will see the following page. Now you can define the name for that Class. In this

Vigor3200 Series User’s Guide 179Subnet Mask. DiffServ CodePoint All the packets of data will be divided with different levels and will be processed

Vigor3200 Series User’s Guide 96. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP

Vigor3200 Series User’s Guide 180After you click the Edit link, you will see the following page. For adding a new service type, click Add to open

Vigor3200 Series User’s Guide 18144..99 AApppplliiccaattiioonnss Below shows the menu items for Applications. 44..99..11 DDyynnaammiicc DDNNSS

Vigor3200 Series User’s Guide 182WAN Interface Display the WAN interface used. Domain Name Display the domain name that you set on the setting page o

Vigor3200 Series User’s Guide 183Wildcard and Backup MX The Wildcard and Backup MX features are not supported for all Dynamic DNS providers. You cou

Vigor3200 Series User’s Guide 184 Enable Schedule Setup Check to enable the schedule. Start Date (yyyy-mm-dd) Specify the starting date of the schedu

Vigor3200 Series User’s Guide 185Mon - Sun 9:00 am to 6:00 pm 1. Make sure the PPPoE connection and Time Setup is working properly. 2. Configure

Vigor3200 Series User’s Guide 18644..99..44 UUPPnnPP The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices

Vigor3200 Series User’s Guide 187The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall app

Vigor3200 Series User’s Guide 18844..99..55 IIGGMMPP IGMP is the abbreviation of Internet Group Management Protocol. It is a communication protocol

Vigor3200 Series User’s Guide 18944..99..66 WWaakkee oonn LLAANN A PC client on LAN can be woken up by the router it connects. When a user wants

Vigor3200 Series User’s Guide ii Vigor3200 Series Multi-WAN Security Router User’s Guide Version: 1.0 Firmware Version: V3.3.6_RC

Vigor3200 Series User’s Guide 109. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step c

Vigor3200 Series User’s Guide 19044..1100 VVPPNN aanndd RReemmoottee AAcccceessss A Virtual Private Network (VPN) is the extension of a private

Vigor3200 Series User’s Guide 191 When you finish the mode and profile selection, please click Next to open the following page. In this page, yo

Vigor3200 Series User’s Guide 192 z When you choose IPSec, you will see the following graphic:

Vigor3200 Series User’s Guide 193z When you choose L2TP, you will see the following graphic: z When you choose L2TP over IPSec (Nice to Have), y

Vigor3200 Series User’s Guide 194z When you choose L2TP over IPSec (Must), you will see the following graphic: Profile Name Type a name for such

Vigor3200 Series User’s Guide 195You have to configure one certificate at least previously in Certificate Management >> Local Certificate. Othe

Vigor3200 Series User’s Guide 196Management Access>>Connection Management for viewing VPN Connection status. Do another VPN Server Wizard Setup

Vigor3200 Series User’s Guide 197 Please choose a Dial-in User Accounts This item is available when you choose Remote Dial-in User (Teleworker) as

Vigor3200 Series User’s Guide 198After making the choices for the server profile, please click Next. You will see different configurations based on t

Vigor3200 Series User’s Guide 199z When you check IPSec, you will see the following graphic: Profile Name Type a name for such profile. The length

Vigor3200 Series User’s Guide 11The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor

Vigor3200 Series User’s Guide 200After finishing the configuration, please click Next. The confirmation page will be shown as follows. If there is no

Vigor3200 Series User’s Guide 20144..1100..44 PPPPPP GGeenneerraall SSeettuupp This submenu only applies to PPP-related VPN connections, such as

Vigor3200 Series User’s Guide 202Assigned IP Range Enter a start IP address for the dial-in PPP connection. You should choose an IP address from the

Vigor3200 Series User’s Guide 203IPSec tunnel. Pre-Shared Key -Currently only support Pre-Shared Key authentication. Pre-Shared Key- Specify a key

Vigor3200 Series User’s Guide 204 Profile Name Type the name of the profile. Accept Any Peer ID Click to accept any peer regardless of its identity.

Vigor3200 Series User’s Guide 205 Set to Factory Default Click to clear all indexes. Index Click the number below Index to access into the setting p

Vigor3200 Series User’s Guide 206Click each index to edit one remote user profile. Each Dial-In Type requires you to fill the different corresponding

Vigor3200 Series User’s Guide 207Specify Remote Node Check the checkbox-You can specify the IP address of the remote dial-in user, ISDN number or pee

Vigor3200 Series User’s Guide 208the Medium, DES, 3DES or AES box as the security method. Medium-Authentication Header (AH) means data will be authen

Vigor3200 Series User’s Guide 209 Profile Name Specify a name for the profile of the LAN-to-LAN connection. Enable this profile Check here to activat

Vigor3200 Series User’s Guide 12 This page is left blank.

Vigor3200 Series User’s Guide 210tunnel. Multicast via VPN Some programs might send multicast packets via VPN connection. Pass – Click this button to

Vigor3200 Series User’s Guide 211becomes one pure L2TP connection. Must: Specify the IPSec policy to be definitely applied on the L2TP connection. Us

Vigor3200 Series User’s Guide 212 IKE phase 1 mode -Select from Main mode and Aggressive mode. The ultimate outcome is to exchange security proposa

Vigor3200 Series User’s Guide 213 Allowed Dial-In Type Determine the dial-in connection with different types. PPTP - Allow the remote dial-in user to

Vigor3200 Series User’s Guide 214If you uncheck the checkbox, the connection type you select above will apply the authentication methods and security

Vigor3200 Series User’s Guide 215Network Mask configuration. You can modify the settings if required. More Add a static route to direct all traffic d

Vigor3200 Series User’s Guide 21644..1100..99 CCoonnnneeccttiioonn MMaannaaggeemmeenntt You can find the summary table of all VPN connections. You

Vigor3200 Series User’s Guide 21744..1111 CCeerrttiiffiiccaattee MMaannaaggeemmeenntt A digital certificate works as an electronic ID, which is is

Vigor3200 Series User’s Guide 218 Type in all the information that the window requests. Then click Generate again. Import Click this button to impo

Vigor3200 Series User’s Guide 21944..1111..22 TTrruusstteedd CCAA CCeerrttiiffiiccaattee Trusted CA certificate lists three sets of trusted CA ce

Vigor3200 Series User’s Guide 132 CCoonnffiigguurriinngg BBaassiicc SSeettttiinnggss For using the router properly, it is necessary for you to ch

Vigor3200 Series User’s Guide 22044..1111..33 CCeerrttiiffiiccaattee BBaacckkuupp Local certificate and Trusted CA certificate for this router can

Vigor3200 Series User’s Guide 221 MMuullttiippllee SSSSIIDDss Vigor router supports four SSID settings for wireless connections. Each SSID can be d

Vigor3200 Series User’s Guide 222Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for

Vigor3200 Series User’s Guide 22344..1122..22 GGeenneerraall SSeettuupp By clicking the General Settings, a new web page will appear so that you c

Vigor3200 Series User’s Guide 224 Index(1-15) Set the wireless LAN to work at certain time interval only. You may choose up to 4 schedules out of th

Vigor3200 Series User’s Guide 225Long Preamble This option is to define the length of the sync field in an 802.11 packet. Most modern wireless networ

Vigor3200 Series User’s Guide 22644..1122..33 SSeeccuurriittyy This page allows you to set security with different modes for SSID 1, 2, 3 and 4 res

Vigor3200 Series User’s Guide 227 Disable - Turn off the encryption mechanism. WEP-Accepts only WEP clients and the encryption key should be entered

Vigor3200 Series User’s Guide 22844..1122..44 AAcccceessss CCoonnttrrooll In the Access Control, the router may restrict wireless access to certai

Vigor3200 Series User’s Guide 229OK Click it to save the access control list. Clear All Clean all entries in the MAC address list. 44..1122..55 WWP

Vigor3200 Series User’s Guide 14 22..33 CChhaannggiinngg PPaasssswwoorrdd No matter user mode operation or admin mode operation, please change the

Vigor3200 Series User’s Guide 230z If you want to use PIN code, you have to know the PIN code specified in wireless client. Then provide the PIN cod

Vigor3200 Series User’s Guide 231SSID Display the SSID1 of the router. WPS is supported by SSID1 only. Authentication Mode Display current authentica

Vigor3200 Series User’s Guide 232The application for the WDS-Repeater mode is depicted as below: The major difference between these two modes is t

Vigor3200 Series User’s Guide 233 Mode Choose the mode for WDS setting. Disable mode will not invoke any WDS setting. Bridge mode is designed to fulf

Vigor3200 Series User’s Guide 234Key - Type 8 ~ 63 ASCII characters or 64 hexadecimal digits leading by “0x”. Bridge If you choose Bridge as the conn

Vigor3200 Series User’s Guide 235wireless performance) or long guard interval for data transmit based on the station capability. Aggregation MSDU Agg

Vigor3200 Series User’s Guide 236the time delay for WMM accessing categories. The difference between AC_VI and AC_VO categories must be smaller; howe

Vigor3200 Series User’s Guide 23744..1122..99 AAPP DDiissccoovveerryy Vigor router can scan all regulatory channels and find working APs in the ne

Vigor3200 Series User’s Guide 23844..1122..1100 SSttaattiioonn LLiisstt Station List provides the knowledge of connecting wireless clients now a

Vigor3200 Series User’s Guide 23944..1133..11 UUSSBB GGeenneerraall SSeettttiinnggss This page will determine the number of concurrent FTP connec

Vigor3200 Series User’s Guide 15 Main screen for user mode operation (simple configuration) Note: The home page will change slightly in accordance wi

Vigor3200 Series User’s Guide 240many as 15 characters and the host name can have as many as 23 characters. Both them cannot contain any of the follo

Vigor3200 Series User’s Guide 241into USB storage diskette. Note: “Admin” could not be typed here as username, for the word is specified for accessin

Vigor3200 Series User’s Guide 24244..1133..33 FFiillee EExxpplloorreerr File Explorer offers an easy way for users to review and manage the conten

Vigor3200 Series User’s Guide 243Disk Capacity It displays the total capacity of the USB diskette. Free Capacity It displays the free space of the US

Vigor3200 Series User’s Guide 24444..1144..11 SSyysstteemm SSttaattuuss The System Status provides basic network settings of Vigor router. It incl

Vigor3200 Series User’s Guide 245MAC Address Display the MAC address of the WAN Interface. Connection Display the connection type. IP Address Display

Vigor3200 Series User’s Guide 246such problem, you might change port number for CPE. Periodic Inform Settings The default setting is Enable. Please s

Vigor3200 Series User’s Guide 24744..1144..44 UUsseerr PPaasssswwoorrdd This page allows you to set new password for user operation. Old Password

Vigor3200 Series User’s Guide 2482. Click Backup button to get into the following dialog. Click Save button to open another dialog for saving config

Vigor3200 Series User’s Guide 249RReessttoorree CCoonnffiigguurraattiioonn 1. Go to System Maintenance >> Configuration Backup. The followin

Vigor3200 Series User’s Guide 16 22..44 QQuuiicckk SSttaarrtt WWiizzaarrdd Notice: Quick Start Wizard for user mode operation is the same as f

Vigor3200 Series User’s Guide 25044..1144..66 SSyysslloogg//MMaaiill AAlleerrtt SysLog function is provided for users to monitor router. There is

Vigor3200 Series User’s Guide 251Mail To Assign a mail address for sending mails out. Return-Path Assign a path for receiving the mail from outside.

Vigor3200 Series User’s Guide 25244..1144..77 TTiimmee aanndd DDaattee It allows you to specify where the time of the router should be inquired f

Vigor3200 Series User’s Guide 25344..1144..88 MMaannaaggeemmeenntt This page allows you to manage the settings for access control, access list, por

Vigor3200 Series User’s Guide 254Set Community Set community by typing a proper name. The default setting is private. Manager Host IP Set one host as

Vigor3200 Series User’s Guide 25544..1144..1100 FFiirrmmwwaarree UUppggrraaddee Before upgrading your router firmware, you need to install the R

Vigor3200 Series User’s Guide 25644..1144..1111 AAccttiivvaattiioonn There are three ways to activate WCF on vigor router, using Service Activation

Vigor3200 Series User’s Guide 257Below shows the successful activation of Web Content Filter: 44..1155 DDiiaaggnnoossttiiccss Diagnostic Tools pro

Vigor3200 Series User’s Guide 25844..1155..11 DDiiaall--oouutt TTrriiggggeerr Click Diagnostics and click Dial-out Trigger to open the web page. T

Vigor3200 Series User’s Guide 25944..1155..33 AARRPP CCaacchhee TTaabbllee Click Diagnostics and click ARP Cache Table to view the content of the

Vigor3200 Series User’s Guide 17 Note: There are five WAN selections available for you to choose. In which, WAN5 is selected for 3G USB modem connect

Vigor3200 Series User’s Guide 260Leased Time It displays the leased time of the specified PC. HOST ID It displays the host ID name of the specified P

Vigor3200 Series User’s Guide 261 Enable Data Flow Monitor Check this box to enable this function. Refresh Seconds Use the drop down list to choose t

Vigor3200 Series User’s Guide 262 Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the

Vigor3200 Series User’s Guide 263 The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2/WAN3/WAN4/WAN5 Ban

Vigor3200 Series User’s Guide 264Run Click this button to start the ping work. The result will be displayed on the screen. Clear Click this link to r

Vigor3200 Series User’s Guide 2655 AApppplliiccaattiioonn aanndd EExxaammpplleess 55..11 HHooww ttoo CCoonnffiigguurree MMuullttii--SSuubbnne

Vigor3200 Series User’s Guide 266Configuration for Vigor3200 1. In the page of LAN >> VLAN Configuration, check the box of Enable to enable th

Vigor3200 Series User’s Guide 267After finishing the above configuration, the equipment connecting to Vigor3200 LAN Port can get the corresponding IP

Vigor3200 Series User’s Guide 268Configuration for VigorSwitch G2240 1. Open Vlan>>Tag-based Group. 2. Add four VID groups. In this case, we

Vigor3200 Series User’s Guide 269 4. After finishing the above configuration, the equipment connecting to VigorSwitch Port 15, 16, 17 and 18 can get

Vigor3200 Series User’s Guide 18If your ISP provides you the PPPoE connection, please select PPPoE for this router. The following page will be shown:

Vigor3200 Series User’s Guide 27055..22 CCrreeaattee aa LLAANN--ttoo--LLAANN CCoonnnneeccttiioonn BBeettwweeeenn RReemmoottee OOffffiiccee aa

Vigor3200 Series User’s Guide 271 3. Go to LAN-to-LAN. Click on one index number to edit a profile. 4. Set Common Settings as shown below. You sho

Vigor3200 Series User’s Guide 2725. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out meth

Vigor3200 Series User’s Guide 2736. Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based ser

Vigor3200 Series User’s Guide 2747. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets des

Vigor3200 Series User’s Guide 275 3. Go to LAN-to-LAN. Click on one index number to edit a profile. 4. Set Common Settings as shown below. You sho

Vigor3200 Series User’s Guide 276 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP

Vigor3200 Series User’s Guide 2776. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based ser

Vigor3200 Series User’s Guide 2787. At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets des

Vigor3200 Series User’s Guide 279 For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IKE/IP

Vigor3200 Series User’s Guide 1922..44..22 PPPPTTPP//LL22TTPP Click PPTP/L2TP as the protocol. Type in all the information that your ISP provides f

Vigor3200 Series User’s Guide 280 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and

Vigor3200 Series User’s Guide 281Settings in the remote host: 1. For Win98/ME, you may use "Dial-up Networking" to create the PPTP tunnel

Vigor3200 Series User’s Guide 282 If a PPP-based service is selected, you should further specify the remote VPN server IP address, Username, Passwor

Vigor3200 Series User’s Guide 28355..44 QQooSS SSeettttiinngg EExxaammppllee Assume a teleworker sometimes works at home and takes care of childr

Vigor3200 Series User’s Guide 2844. Return to previous page. Enter the Name of Index Class 1 by clicking Edit link. Type the name “E-mail” for Class

Vigor3200 Series User’s Guide 2857. Click Setup link for one of the WAN interface. 8. Check Enable UDP Bandwidth Control on the bottom to prevent

Vigor3200 Series User’s Guide 2869. If the worker has connected to the headquarter using host to host VPN tunnel. (Please refer to Chapter 3 VPN for

Vigor3200 Series User’s Guide 28755..55 UUppggrraaddee FFiirrmmwwaarree ffoorr YYoouurr RRoouutteerr UUssiinngg FFiirrmmwwaarree UUppggrraadd

Vigor3200 Series User’s Guide 2885. Double click on the icon of router tool. The setup wizard will appear. 6. Follow the onscreen instructions to

Vigor3200 Series User’s Guide 28910. Click Send. 11. Now the firmware update is finished. UUssiinngg WWeebb PPaaggee The web page also can gui

Vigor3200 Series User’s Guide iiiCopyright Information Copyright Declarations Copyright 2010 All rights reserved. This publication contains informat

Vigor3200 Series User’s Guide 2022..44..33 SSttaattiicc IIPP Click Static IP as the protocol. Type in all the information that your ISP provides f

Vigor3200 Series User’s Guide 29055..66 RReeqquueesstt aa cceerrttiiffiiccaattee ffrroomm aa CCAA sseerrvveerr oonn WWiinnddoowwss CCAA SS

Vigor3200 Series User’s Guide 2912. You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate r

Vigor3200 Series User’s Guide 292Select Advanced request. Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request us

Vigor3200 Series User’s Guide 293you will find the below window showing “------BEGINE CERTIFICATE------...” 6. You may review the detail informat

Vigor3200 Series User’s Guide 29455..77 RReeqquueesstt aa CCAA CCeerrttiiffiiccaattee aanndd SSeett aass TTrruusstteedd oonn WWiinnddoowwss

Vigor3200 Series User’s Guide 2952. In Choose file to download, click CA Certificate Current and Base 64 encoded, and Download CA certificate to sav

Vigor3200 Series User’s Guide 29655..88 CCrreeaattiinngg aann AAccccoouunntt ffoorr MMyyVViiggoorr The website of MyVigor (a server located o

Vigor3200 Series User’s Guide 2974. Check to confirm that you accept the Agreement and click Accept. 5. Type your personal information in this pag

Vigor3200 Series User’s Guide 2987. Now you have created an account successfully. Click START. 8. Check to see the confirmation email with the tit

Vigor3200 Series User’s Guide 29910. When you see the following page, please type in the account and password (that you just created) in the fields o

Vigor3200 Series User’s Guide 2122..44..44 DDHHCCPP Click DHCP as the protocol. Type in all the information that your ISP provides for this protoco

Vigor3200 Series User’s Guide 3002. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this pag

Vigor3200 Series User’s Guide 3015. Now you have created an account successfully. Click START. 6. Check to see the confirmation email with the tit

Vigor3200 Series User’s Guide 3028. When you see the following page, please type in the account and password (that you just created) in the fields o

Vigor3200 Series User’s Guide 303 TTrroouubbllee SShhoooottiinngg This section will guide you to solve abnormal situations if you cannot access in

Vigor3200 Series User’s Guide 30466..22 CChheecckkiinngg IIff tthhee NNeettwwoorrkk CCoonnnneeccttiioonn SSeettttiinnggss oonn YYoouurr CCoo

Vigor3200 Series User’s Guide 3054. Select Obtain an IP address automatically and Obtain DNS server address automatically. FFoorr MMaacc OOSS 1.

Vigor3200 Series User’s Guide 30666..33 PPiinnggiinngg tthhee RRoouutteerr ffrroomm YYoouurr CCoommppuutteerr The default gateway IP address o

Vigor3200 Series User’s Guide 307 66..44 CChheecckkiinngg IIff tthhee IISSPP SSeettttiinnggss aarree OOKK oorr NNoott Open WAN >> In

Vigor3200 Series User’s Guide 30866..55 PPrroobblleemmss ffoorr 33GG NNeettwwoorrkk CCoonnnneeccttiioonn When you have trouble in using 3G ne

Vigor3200 Series User’s Guide 309SSooffttwwaarree RReesseett You can reset the router to factory default via Web page. Such function is available i

Vigor3200 Series User’s Guide 2222..55 SSeerrvviiccee AAccttiivvaattiioonn WWiizzaarrdd Service Activation Wizard can guide you to set WCF (Web C

Vigor3200 Series User’s Guide 233. In the following page, you can activate the Web content filter service at the same time or individually. When you

Vigor3200 Series User’s Guide 246. Now, the web page will display the service that you have activated according to your selection(s). The valid time

Vigor3200 Series User’s Guide 2522..66 OOnnlliinnee SSttaattuuss The online status shows the system status, WAN status, and other status related t

Vigor3200 Series User’s Guide 26Up Time Displays the total uptime of the interface. IP Displays the IP address of the WAN interface. GW IP Display

Vigor3200 Series User’s Guide 27 Click Support Area>>Product Registration, the following web page will be displayed.

Vigor3200 Series User’s Guide 28 This page is left blank.

Vigor3200 Series User’s Guide 293 UUsseerr MMooddee OOppeerraattiioonn This chapter will guide users to execute simple configuration through user

Vigor3200 Series User’s Guide ivEuropean Community Declarations Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, HuKou Township, HsinC

Vigor3200 Series User’s Guide 30From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 WWhhaatt aarre

Vigor3200 Series User’s Guide 31automatically. The supported 3G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more d

Vigor3200 Series User’s Guide 32Physical Mode / Type Display the physical mode and physical type of such WAN interface. Line Speed Display the down

Vigor3200 Series User’s Guide 33default setting for down link and up link is 10000Kbps. VLAN Tag insertion Enable – Enable the function of VLAN with

Vigor3200 Series User’s Guide 34FFoorr WWAANN55 To use 3G network connection through 3G USB Modem, please configure WAN5 interface. Enable Choose

Vigor3200 Series User’s Guide 35be changed into Backup Type. You have to specify which role the WAN interface should play. When any WAN disconnect

Vigor3200 Series User’s Guide 36connection. Access Mode Use the drop down list to choose a proper access mode. The details page of that mode will be

Vigor3200 Series User’s Guide 37PPP. If you want to connect to Internet all the time, you can check Always On. Idle Timeout – Set the timeout for bre

Vigor3200 Series User’s Guide 38DDeettaaiillss PPaaggee ffoorr SSttaattiicc oorr DDyynnaammiicc IIPP iinn WWAANN11 ~~ WWAANN44 For static

Vigor3200 Series User’s Guide 39have to type IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value

Vigor3200 Series User’s Guide v

Vigor3200 Series User’s Guide 40Subnet Mask: Type the subnet mask. Gateway IP Address: Type the gateway IP address. Default MAC Address : Click this

Vigor3200 Series User’s Guide 41DDeettaaiillss PPaaggee ffoorr PPPPTTPP//LL22TTPP iinn WWAANN11 ~~ WWAANN44 To use PPTP/L2TP as the accessing

Vigor3200 Series User’s Guide 42 Fixed IP - Usually ISP dynamically assigns IP address to you each time you connect to it and request. In some case

Vigor3200 Series User’s Guide 43DDeettaaiillss PPaaggee ffoorr PPPPPP iinn WWAANN55 To use PPP (for 3G USB Modem) as the accessing protocol of

Vigor3200 Series User’s Guide 44Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Det

Vigor3200 Series User’s Guide 4533..11..44 LLooaadd--BBaallaannccee PPoolliiccyy This router supports the function of load balancing. It can assig

Vigor3200 Series User’s Guide 46Click Index 1 to access into the following page for configuring load-balance policy. Enable Check this box to enable

Vigor3200 Series User’s Guide 4733..22 LLAANN Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network s

Vigor3200 Series User’s Guide 48 WWhhaatt iiss RRoouuttiinngg IInnffoorrmmaattiioonn PPrroottooccooll ((RRIIPP)) Vigor router will exchange rou

Vigor3200 Series User’s Guide 49DDeettaaiillss PPaaggee ffoorr LLAANN11 IP Address Type in private IP address for connecting to a local private

Vigor3200 Series User’s Guide viTTaabbllee ooff CCoonntteennttss 1 Preface ...

Vigor3200 Series User’s Guide 5050 and the maximum is 253. Gateway IP Address - Enter a value of the gateway IP address for the DHCP server. The valu

Vigor3200 Series User’s Guide 5133..33 NNAATT Usually, the router serves as an NAT (Network Address Translation) router. NAT is a mechanism that on

Vigor3200 Series User’s Guide 5233..33..11 PPoorrtt RReeddiirreeccttiioonn Port Redirection is usually set up for server related service inside th

Vigor3200 Series User’s Guide 53 Press any number under Index to access into next page for configuring port redirection. Enable Check this box to en

Vigor3200 Series User’s Guide 54redirection mode, you will see two boxes on this field. Simply type the required number on the first box. The second

Vigor3200 Series User’s Guide 5533..33..22 DDMMZZ HHoosstt As mentioned above, Port Redirection can redirect incoming TCP/UDP or other traffic on

Vigor3200 Series User’s Guide 56Private IP Enter the private IP address of the DMZ host, or click Choose PC to select one. Choose PC Click this butto

Vigor3200 Series User’s Guide 57DMZ Host for WAN2 ~ WAN5 are slightly different with WAN1. See the following figure. If you previously have set up W

Vigor3200 Series User’s Guide 5833..33..33 OOppeenn PPoorrttss Open Ports allows you to open a range of ports for the traffic of special applicati

Vigor3200 Series User’s Guide 59 Enable Open Ports Check to enable this entry. Comment Make a name for the defined network application/service. WAN I

Vigor3200 Series User’s Guide vii3.4.1 Dynamic DNS ...

Vigor3200 Series User’s Guide 6033..44 AApppplliiccaattiioonnss Below shows the menu items for Applications. 33..44..11 DDyynnaammiicc DDNNSS T

Vigor3200 Series User’s Guide 61Active Display if this account is active or inactive. View Log Display DDNS log status. Force Update Force the router

Vigor3200 Series User’s Guide 62 4. Click OK button to activate the settings. You will see your setting has been saved. Disable the Function and Cle

Vigor3200 Series User’s Guide 6333..44..22 UUPPnnPP The UPnP (Universal Plug and Play) protocol is supported to bring to network connected devices

Vigor3200 Series User’s Guide 64The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall appl

Vigor3200 Series User’s Guide 65Note: * The actual data throughput will vary according to the network conditions and environmental factors, including

Vigor3200 Series User’s Guide 66protection and /or privacy on your wireless network. The Vigor wireless router is very flexible and can support multi

Vigor3200 Series User’s Guide 67 SSID Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The

Vigor3200 Series User’s Guide 68 Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join y

Vigor3200 Series User’s Guide 6933..55..33 SSeeccuurriittyy By clicking the Security Settings, a new web page will appear so that you could configu

Vigor3200 Series User’s Guide viii4.5.2 User Profile (Reserved) ...

Vigor3200 Series User’s Guide 70manually in this field below or automatically negotiated via 802.1x authentication. Either 8~63 ASCII characters, suc

Vigor3200 Series User’s Guide 7133..55..44 AAcccceessss CCoonnttrrooll For additional security of wireless access, the Access Control facility all

Vigor3200 Series User’s Guide 72Cancel Give up the access control set up. OK Click it to save the access control list. Clear All Clean all entries in

Vigor3200 Series User’s Guide 73 33..66..11 UUSSBB GGeenneerraall SSeettttiinnggss This page will determine the number of concurrent FTP connecti

Vigor3200 Series User’s Guide 74access samba server of the router. NetBios Name Service For the NetBios service of USB diskette, you have to specify

Vigor3200 Series User’s Guide 75Disable – Click this button to disable such profile. Username Type the username for FTP/Samba users for accessing int

Vigor3200 Series User’s Guide 76Before you click OK, you have to insert a USB diskette into the USB interface of the Vigor router. Otherwise, you can

Vigor3200 Series User’s Guide 77Connection Status If there is no USB diskette connected to Vigor router, “No Disk Connected” will be shown here. Disk

Vigor3200 Series User’s Guide 7833..77 SSyysstteemm MMaaiinntteennaannccee For the system setup, there are several items that you have to know the

Vigor3200 Series User’s Guide 79MAC Address Display the MAC address of the wireless LAN. Frequency Domain It can be Europe (13 usable channels), USA

Vigor3200 Series User’s Guide ix4.13.1 USB General Settings...

Vigor3200 Series User’s Guide 8033..77..33 TTiimmee aanndd DDaattee It allows you to specify where the time of the router should be inquired from

Vigor3200 Series User’s Guide 81Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot yo

Vigor3200 Series User’s Guide 8233..88..22 TTrraaffffiicc GGrraapphh Click Diagnostics and click Traffic Graph to open the web page. Choose WAN1/W

Vigor3200 Series User’s Guide 83 Ping to Use the drop down list to choose the destination that you want to ping. IP Address Type in the IP address o

Vigor3200 Series User’s Guide 84 Host/IP Address It indicates the IP address of the host. Run Click this button to start route tracing work. Clear C

Vigor3200 Series User’s Guide 854 AAddmmiinn MMooddee OOppeerraattiioonn This chapter will guide users to execute advanced (full) configuration t

Vigor3200 Series User’s Guide 86WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss As the router pla

Vigor3200 Series User’s Guide 87 44..11..22 GGeenneerraall SSeettuupp This section will introduce some general settings of Internet and explain th

Vigor3200 Series User’s Guide 88interface. Active Mode Display whether such WAN interface is Active device or backup device. Backup WAN Display the B

Vigor3200 Series User’s Guide 89WAN while sending them out. Disable – Disable the function of VLAN with tag. Tag value – Type the value as the VLAN