Draytek Vigor3220 SERIES User Manual

Page 1
Page 2
Vigor3220 Series User’s Guide
ii
Multi-WAN Security Firewall
User’s Guide
Version: 3.2
Firmware Version: V3.8.2
(For future update, please visit DrayTek web site)
Date: November 23, 2015
Page 3
Vigor3220 Series User’s Guide
iii
Copyrights
© All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.
Trademarks
The following trademarks are used in this document:
Microsoft is a registered trademark of Microsoft Corp. Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are trademarks of Microsoft Corp. Apple and Mac OS are registered trademarks of Apple Inc. Other products may be trademarks or registered trademarks of their respective manufacturers.
Safety Instructions
Read the installation guide thoroughly before you set up the router.
The router is a complicated electronic unit that may be repaired only be authorized and qualified personnel.
Do not try to open or repair the router yourself.
Do not place the router in a damp or humid place, e.g. a bathroom. The router should be used in a sheltered area, within a temperature range of +5 to +40 Celsius. Do not expose the router to direct sunlight or other heat sources. The housing and electronic components
may be damaged by direct sunlight or heat sources.
Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards. Keep the package out of reach of children. When you want to dispose of the router, please follow local regulations on conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any defects in workmanship
or materials for a period of two (2) years from the date of purchase from the dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, we will, at our discretion, repair or replace the defective products or components, without charge for either parts or labor, to whatever extent we deem necessary tore-store the product to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be offered solely at our discretion. This warranty will not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. The warranty does not cover the bundled or licensed software of other vendors. Defects which do not significantly affect the usability of the product will not be covered by the warranty. We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes.
Be a Registered Owner
Web registration is preferred. You can register your Vigor router via http://www.DrayTek.com.
Firmware & Tools Updates
Due to the continuous evolution of DrayTek technology, all routers will be regularly upgraded. Please consult
the DrayTek web site for more information on newest firmware, tools and documents.
http://www.DrayTek.com
Page 4
Vigor3220 Series User’s Guide
iv
European Community Declarations
Manufacturer: DrayTek Corp. Address: No. 26, Fu Shing Road, Hukou Township, Hsinchu Industrial Park, Hsinchu County, Taiwan 303 Product: Vigor3220 Series Router DrayTek Corp. declares that Vigor3220 Series of routers are in compliance with the following essential
requirements and other relevant provisions of R&TTE 1999/5/EC, ErP 2009/125/EC and RoHS 2011/65/EU. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/E C by
complying with the requirements set forth in EN55022/Class A and EN55024/Class A. The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1. This product is designed for 2.4GHz WLAN network throughout the EC region.
Regulatory Information
Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) This device may accept any interference received, including interference that may cause undesired operation. The antenna/transmitter should be kept at least 20 cm away from human body.
More update, please visit www.draytek.com.
Page 5
Vigor3220 Series User’s Guide
v
TTaabbllee ooff CCoonntteennttss
Part I Installation................................................................................................................1
I-1 Introduction ................................................................................................................................... 2
I-1-1 Indicators and Connectors .................................................................................................. 3
I-2 Hardware Installation .................................................................................................................... 5
I-2-1 Installing Vigor Router......................................................................................................... 5
I-2-2 Installing USB Printer to Vigor Router................................................................................. 6
I-3 Accessing Web Page.................................................................................................................. 14
I-4 Changing Password.................................................................................................................... 16
I-5 Dashboard................................................................................................................................... 18
I-5-1 Virtual Panel...................................................................................................................... 18
I-5-2 Name with a Link............................................................................................................... 19
I-5-3 Quick Access for Common Used Menu ............................................................................ 20
I-5-4 GUI Map ............................................................................................................................ 21
I-5-5 Web Console..................................................................................................................... 22
I-5-6 Config Backup................................................................................................................... 23
I-5-7 Logout................................................................................................................................ 23
I-5-8 Online Status..................................................................................................................... 24
I-5-8-1 Physical Connection......................................................................24
I-5-8-2 Virtual WAN ...............................................................................26
I-6 Quick Start Wizard...................................................................................................................... 27
I-6-1 For WAN1~ WAN4 (Ethernet)........................................................................................... 28
I-6-2 For WAN5 (USB)............................................................................................................... 36
I-7 Service Activation Wizard........................................................................................................... 38
I-8 Registering Vigor Router............................................................................................................. 41
Part II Connectivity ..........................................................................................................45
II-1 WAN........................................................................................................................................... 46
Web User Interface.................................................................................................................... 48
II-1-1 General Setup .................................................................................................................. 48
II-1-1-1 WAN1 ~ WAN4 (Ethernet)...............................................................49
II-1-1-2 WAN5 (USB) ...............................................................................50
II-1-2 Internet Access................................................................................................................. 52
II-1-2-1 Details Page for PPPoE in Etherenet WAN...........................................54
II-1-2-2 Details Page for Static or Dynamic IP in Etherenet WAN..........................55
II-1-2-3 Details Page for PPTP/L2TP in Etherenet WAN.....................................58
II-1-2-4 Details Page for 3G/4G USB Modem (PPP mode) in USB WAN ....................59
II-1-2-5 Details Page for 3G/4G USB Modem (DHCP mode) in USB WAN..................61
II-1-2-6 Details Page for IPv6 – Offline in Ethernet/USB WAN .............................62
II-1-2-7 Details Page for IPv6 – PPP in Ethernet WAN........................................62
II-1-2-8 Details Page for IPv6 – TSPC in Etherenet WAN.....................................64
II-1-2-9 Details Page for IPv6 – AICCU in Ethernet WAN.....................................65
II-1-2-10 Details Page for IPv6 – DHCPv6 Client in Ethernet WAN .........................67
II-1-2-11 Details Page for IPv6 – Static IPv6 in Ethernet WAN..............................68
II-1-2-12 Details Page for IPv6 – 6in4 Static Tunnel in Ethernet WAN ....................69
Page 6
Vigor3220 Series User’s Guide
vi
II-1-2-13 Details Page for IPv6 – 6rd in Ethernet WAN.......................................71
II-1-3 Multi-PVC/VLAN............................................................................................................... 73
II-1-4 WAN Budget..................................................................................................................... 77
II-1-4-1 General Setup ............................................................................77
II-1-4-2 Monitor Page..............................................................................78
Application Notes....................................................................................................................... 80
A-1 How to configure settings for IPv6 Service in Vigor3220...............................80
II-2 LAN............................................................................................................................................ 93
Web User Interface.................................................................................................................... 95
II-2-1 General Setup .................................................................................................................. 95
II-2-1-1 Details Page for LAN1 – Ethernet TCP/IP and DHCP Setup........................97
II-2-1-2 Details Page for LAN1 – IPv6 Setup....................................................99
II-2-1-3 Details Page for LAN2 ~ LAN6 and DMZ ............................................ 102
II-2-1-4 Details Page for IP Routed Subnet .................................................. 103
II-2-2 VLAN.............................................................................................................................. 105
II-2-3 Bind IP to MAC............................................................................................................... 108
II-2-4 LAN Port Mirror............................................................................................................... 110
II-2-5 Web Portal Setup ........................................................................................................... 111
II-3 NAT ...........................................................................................................................................114
Web User Interface..................................................................................................................115
II-3-1 Port Redirection.............................................................................................................. 115
II-3-2 DMZ Host ....................................................................................................................... 118
II-3-3 Open Ports ..................................................................................................................... 121
II-3-4 Port Triggering................................................................................................................ 123
II-4 Applications.............................................................................................................................. 125
Web User Interface..................................................................................................................127
II-4-1 Dynamic DNS................................................................................................................. 127
II-4-2 LAN DNS / DNS Forwarding.......................................................................................... 130
II-4-3 Schedule......................................................................................................................... 134
II-4-4 RADIUS/TACACS+........................................................................................................ 136
II-4-4-1 External RADIUS........................................................................ 136
II-4-4-2 Internal RADIUS ........................................................................ 137
II-4-4-3 External TACACS+...................................................................... 138
II-4-5 Active Directory/ LDAP................................................................................................... 140
II-4-6 UPnP.............................................................................................................................. 143
II-4-7 IGMP............................................................................................................................... 144
II-4-8 Wake on LAN ................................................................................................................. 145
II-4-9 SMS / Mail Alert Service................................................................................................. 146
II-4-10 Bonjour......................................................................................................................... 148
II-4-11 High Availability............................................................................................................ 151
II-4-11-1 General Setup......................................................................... 152
II-4-11-2 Config Sync ............................................................................ 154
Application Notes..................................................................................................................... 156
A-1 How to Implement the LDAP/AD Authentication for User Management? ......... 156
Page 7
Vigor3220 Series User’s Guide
vii
II-5 Routing..................................................................................................................................... 159
Web User Interface..................................................................................................................160
II-5-1 Static Route.................................................................................................................... 160
II-5-2 Load-Balance /Route Policy........................................................................................... 164
II-5-2-1 General Setup .......................................................................... 164
II-5-2-2 Diagnose................................................................................. 169
Application Notes..................................................................................................................... 171
A-1 How to Customize a Secure Route between VPN Router and Remote Router by Using
Route Policy ...................................................................................... 171
A-2 How to Setup Address Mapping........................................................... 174
A-3 How to setup Load Balance for Packets?................................................ 178
Part III Wireless LAN......................................................................................................181
III-1 Wireless LAN .......................................................................................................................... 182
Web User Interface..................................................................................................................185
III-1-1 Wireless Wizard............................................................................................................. 185
III-1-2 General Setup ............................................................................................................... 188
III-1-3 Security.......................................................................................................................... 190
III-1-4 Access Control .............................................................................................................. 192
III-1-5 WPS............................................................................................................................... 193
III-1-6 WDS .............................................................................................................................. 196
III-1-7 Advanced Setting .......................................................................................................... 199
III-1-8 AP Discovery................................................................................................................. 201
III-1-9 Station List..................................................................................................................... 202
III-1-10 Station Control............................................................................................................. 203
III-1-11 Bandwidth Management.............................................................................................. 204
Part IV VPN.....................................................................................................................205
IV-1 VPN and Remote Access....................................................................................................... 206
Web User Interface..................................................................................................................207
IV-1-1 VPN Client Wizard ........................................................................................................ 207
IV-1-2 VPN Server Wizard....................................................................................................... 213
IV-1-3 Remote Access Control ................................................................................................ 217
IV-1-4 PPP General Setup....................................................................................................... 218
IV-1-5 IPsec General Setup..................................................................................................... 220
IV-1-6 IPsec Peer Identity........................................................................................................ 221
IV-1-7 Remote Dial-in User...................................................................................................... 223
IV-1-8 LAN to LAN................................................................................................................... 226
IV-1-9 VPN Trunk Management .............................................................................................. 237
IV-1-10 Connection Management............................................................................................ 246
Application Notes..................................................................................................................... 248
A-1 How to Build a LAN-to-LAN VPN Between Remote Office and Headquarter via IPsec
Tunnel (Main Mode)............................................................................. 248
IV-2 SSL VPN................................................................................................................................. 253
Page 8
Vigor3220 Series User’s Guide
viii
Web User Interface..................................................................................................................254
IV-2-1 General Setup............................................................................................................... 254
IV-2-2 SSL Web Proxy............................................................................................................. 255
IV-2-3 SSL Application............................................................................................................. 257
IV-2-4 User Account................................................................................................................. 259
IV-2-5 User Group.................................................................................................................... 263
IV-2-6 Online User Status........................................................................................................ 265
IV-3 Certificate Management..........................................................................................................266
Web User Interface..................................................................................................................267
IV-3-1 Local Certificate ............................................................................................................ 267
IV-3-2 Trusted CA Certificate................................................................................................... 271
IV-3-3 Certificate Backup......................................................................................................... 273
IV-4 Central VPN Management...................................................................................................... 274
Web User Interface..................................................................................................................275
IV-4-1 General Setup............................................................................................................... 275
IV-4-1-1 General Settings....................................................................... 275
IV-4-1-2 IPsec VPN Settings .................................................................... 276
IV-4-2 CPE Management......................................................................................................... 277
IV-4-2-1 Managed Device List.................................................................. 277
IV-4-2-2 CPE Maintenance...................................................................... 279
IV-4-2-3 Google Map............................................................................. 281
IV-4-3 VPN Management......................................................................................................... 282
IV-4-4 Log & Alert .................................................................................................................... 283
Application Notes..................................................................................................................... 284
A-1 CVM Application - How to manage the CPE (router) through Vigor3220 Series?. 284 A-2 CVM Application - How to build the VPN between remote devices and Vigor32 20
Series?............................................................................................. 288
A-3 CVM Application - How to upgrade CPE firmware through Vigor3220 Series?.... 290
Part V Security...............................................................................................................293
V-1 Firewall.....................................................................................................................................294
Web User Interface..................................................................................................................296
V-1-1 General Setup................................................................................................................ 296
V-1-2 Filter Setup..................................................................................................................... 301
V-1-3 DoS Defense.................................................................................................................. 308
Application Notes..................................................................................................................... 312
A-1 How to Configure Certain Computers Accessing to Internet........................ 312
V-2 CSM(Central Security Management)....................................................................................... 316
Web User Interface..................................................................................................................317
V-2-1 APP Enforcement Profile ............................................................................................... 317
V-2-2 APPE Signature Upgrade.............................................................................................. 319
V-2-3 URL Content Filter Profile.............................................................................................. 320
V-2-4 Web Content Filter Profile.............................................................................................. 324
V-2-5 DNS Filter Profile ........................................................................................................... 328
Page 9
Vigor3220 Series User’s Guide
ix
Application Notes..................................................................................................................... 330
A-1 How to Create an Account for MyVigor ................................................. 330
A-2 How to Block Facebook Service Accessed by the Users via W eb Cont ent Fil ter / UR L
Content Filter.................................................................................... 338
Part VI Management ......................................................................................................343
VI-1 System Maintenance.............................................................................................................. 344
Web User Interface..................................................................................................................345
VI-1-1 System Status............................................................................................................... 345
VI-1-2 TR-069 .......................................................................................................................... 347
VI-1-3 Administrator Password................................................................................................ 349
VI-1-4 User Password.............................................................................................................. 351
VI-1-5 Login Page Greeting..................................................................................................... 354
VI-1-6 Configuration Backup.................................................................................................... 356
VI-1-7 Syslog/Mail Alert ........................................................................................................... 358
VI-1-8 Time and Date............................................................................................................... 361
VI-1-9 SNMP............................................................................................................................ 362
VI-1-10 Management............................................................................................................... 364
VI-1-11 Reboot System............................................................................................................ 368
VI-1-12 Firmware Upgrade ...................................................................................................... 369
VI-1-13 Activation..................................................................................................................... 370
VI-1-14 Internal Service User List............................................................................................ 371
VI-2 Bandwidth Management......................................................................................................... 372
Web User Interface..................................................................................................................374
VI-2-1 Sessions Limit............................................................................................................... 374
VI-2-2 Bandwidth Limit............................................................................................................. 376
VI-2-3 Quality of Service.......................................................................................................... 378
VI-2-4 APP QoS....................................................................................................................... 385
Application Notes..................................................................................................................... 387
A-1 How to Optimize the Bandwidth through QoS Technology .......................... 387
A-2 QoS Setting Example....................................................................... 392
VI-3 User Management.................................................................................................................. 396
Web User Interface..................................................................................................................397
VI-3-1 General Setup............................................................................................................... 397
VI-3-2 User Profile ................................................................................................................... 399
VI-3-3 User Group.................................................................................................................... 404
VI-3-4 User Online Status........................................................................................................ 405
Application Notes..................................................................................................................... 407
A-1 How to authenticate clients via User Management................................... 407
A-2 How to use Landing Page Feature ....................................................... 416
VI-4 Central AP Management (CAM)............................................................................................. 421
Web User Interface..................................................................................................................422
VI-4-1 Status............................................................................................................................ 422
Page 10
Vigor3220 Series User’s Guide
x
VI-4-2 WLAN Profile................................................................................................................. 423
VI-4-3 AP Maintenance............................................................................................................ 428
VI-4-4 AP Map ......................................................................................................................... 430
VI-4-5 Traffic Graph................................................................................................................. 433
VI-4-6 Load Balance................................................................................................................ 434
VI-4-7 Function Support List.................................................................................................... 435
VI-5 External Devices..................................................................................................................... 436
Part VII Others................................................................................................................437
VII-1 Objects Settings..................................................................................................................... 438
Web User Interface..................................................................................................................439
VII-1-1 IP Object ...................................................................................................................... 439
VII-1-2 IP Group....................................................................................................................... 442
VII-1-3 IPv6 Object................................................................................................................... 443
VII-1-4 IPv6 Group................................................................................................................... 445
VII-1-5 Service Type Object..................................................................................................... 446
VII-1-6 Service Type Group..................................................................................................... 448
VII-1-7 Keyword Object............................................................................................................ 450
VII-1-8 Keyword Group............................................................................................................ 452
VII-1-9 File Extension Object................................................................................................... 453
VII-1-10 SMS/Mail Service Object........................................................................................... 455
VII-1-11 Notification Object...................................................................................................... 460
Application Notes..................................................................................................................... 462
A-1 How to Send a Notification to Specified Phone Number via SMS Service in WAN
Disconnection .................................................................................... 462
VII-2 USB Application..................................................................................................................... 466
Web User Interface..................................................................................................................467
VII-2-1 USB General Settings.................................................................................................. 467
VII-2-2 USB User Management............................................................................................... 468
VII-2-3 File Explorer................................................................................................................. 470
VII-2-4 USB Device Status....................................................................................................... 471
VII-2-5 Modem Support List..................................................................................................... 472
VII-2-6 SMB Client Support List............................................................................................... 473
Application Notes..................................................................................................................... 474
A-1 How can I get the files from USB storage device connecting to Vigor router? ... 474
Part VIII Troubleshooting ..............................................................................................477
VIII-1Diagnostics............................................................................................................................ 478
Web User Interface..................................................................................................................479
VIII-1-1 Dial-out Triggering....................................................................................................... 479
VIII-1-2 Routing Table.............................................................................................................. 480
VIII-1-3 ARP Cache Table ....................................................................................................... 481
Page 11
Vigor3220 Series User’s Guide
xi
VIII-1-4 IPv6 Neighbour Table ................................................................................................. 481
VIII-1-5 DHCP Table................................................................................................................ 482
VIII-1-6 NAT Sessions Table ................................................................................................... 483
VIII-1-7 DNS Cache Table....................................................................................................... 484
VIII-1-8 Ping Diagnosis............................................................................................................ 485
VIII-1-9 Data Flow Monitor....................................................................................................... 487
VIII-1-10 Traffic Graph............................................................................................................. 489
VIII-1-11 Trace Route .............................................................................................................. 490
VIII-1-12 Syslog Explorer......................................................................................................... 491
VIII-1-13 IPv6 TSPC Status..................................................................................................... 492
VIII-1-14 High Availability Status ............................................................................................. 492
VIII-1-15 Authentication Information........................................................................................ 494
VIII-1-16 DoS Flood Table....................................................................................................... 496
VIII-2 Checking If the Hardware Status Is OK or Not..................................................................... 498
VIII-3 Checking If the Network Connection Settings on Your Computer Is OK or Not................... 499
VIII-4 Pinging the Router from Y our Computer.............................................................................. 502
VIII-5 Checking If the ISP Settings are OK or Not ......................................................................... 504
VIII-6 Problems for 3G/4G Network Connection............................................................................ 505
VIII-7 Backing to Factory Default Setting If Necessary.................................................................. 506
VIII-8 Contacting DrayTek .............................................................................................................. 507
Appendix I: VLAN Applications on Vigor Router ............................................................................ 508
Part IX DrayTek Tools....................................................................................................517
IX-1 SmartVPN Client..................................................................................................................... 518
IX-1-1 DrayTek Android-based SmartVPN APP for the establishment of SSL VPN connection
................................................................................................................................................. 518
IX-1-2 How to Use SmartVPN Android APP to Establish SSL VPN Tunnel?.......................... 519
Part X Telnet Commands...............................................................................................523
Accessing Telnet of Vigor3220....................................................................................................... 524
Page 12
Page 13
Vigor3220 Series User’s Guide
1
PPaarrtt II IIn
nssttaallllaattiioo
n
n
This part will introduce Vigor router and guide to install the device in hardware and software.
Page 14
Vigor3220 Series User’s Guide
2
II--11 IInnttrroodduuccttiioonn
TThhiiss iiss aa ggeenneerriicc IInntteerrnnaattiioonnaall vveerrssiioonn ooff tthhee uusseerr gguuiiddee.. SSppeecciiffiiccaattiioonn,, ccoommppaattiibbiilliittyy aanndd ffeeaattuurreess vvaarryy bbyy rreeggiioonn.. FFoorr ssppeecciiffiicc uusseerr gguuiiddeess ssuuiittaabbllee ffoorr yyoouurr rreeggiioonn oorr pprroodduucctt,, pplleeaassee ccoonnttaacctt llooccaall ddiissttrriibbuuttoorr..
Vigor3220 Series, a broadband router, integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth.
By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly and offers several protocols (such as IPSec/PPTP/L2TP) with up to 100 VPN tunnels.
The object-based design used in SPI (Stateful Packet Inspection) firewall allows users to set firewall policy easily. CSM (Content Security Management) provides users control and management in IM (Instant Messenger) and P2P (Peer to Peer) more efficiency than before. By the way, DoS/DDoS prevention and URL/Web content filter strengthen the security outside and control inside.
Object-based firewall is flexible and allows your network be safe. In addition, Vigor3220 Series supports USB interface for connecting USB printer to share printer, USB storage device for sharing files, or for 3G/4G WAN.
Page 15
Vigor3220 Series User’s Guide
3
II--11--11 IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss
Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.
LED Status Explanation
Blinking The router is powered on and running normally. ACT (Activity) Off The router is powered off. On A USB device is connected and active. USB1~USB2 Blinking The data is transmitting.
CSM On The profile of CSM (Content Security Management) for
IM/P2P application is enabled from Firewall >> General
Setup. (Such profile is established under CSM menu). On Wireless access point is ready. Blinking Ethernet packets are transmitting over wireless LAN.
WLAN
Off The WLAN function is inactive. On The WAN connection is ready. WAN1~WAN4 Blinking It will blink while transmitting data. On The VPN tunnel is active. Off VPN services are disabled
VPN
Blinking Traffic is passing through VPN tunnel.
LED on Connector
On The port is connected. Off The port is disconnected.
Left LED (Green)
Blinking The data is transmitting. On The port is connected with 1000Mbps.
DMZ
Right LED (Green)
Off The port is connected with 10/100Mbps. On The port is connected.
Off The port is disconnected.
Left LED
Blinking The data is transmitting. On The port is connected with 1000Mbps.
LAN
Right LED
Off The port is connected with 10/100Mbps On The port is connected. Off The port is disconnected.
Left LED
Blinking The data is transmitting. On The port is connected with 1000Mbps.
WAN1 ~WAN 4
Right LED
Off The port is connected with 10/100Mbps
Page 16
Vigor3220 Series User’s Guide
4
Interface Description
Wireless LAN ON/OFF/WPS
WLAN On - Press the button and release it within 2 seconds. When the wireless function is ready, the green LED will be on.
WLAN Off - Press the button and release it within 2 seconds to turn off the WLAN function. When the wireless function is not ready, the LED will be off.
WPS - When WPS function is enabled by web user interface, press this button for mor e than 2 seconds to wait for client’s device mak ing network connection through WPS.
Factory Reset Restore the default settings. Usage: Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you see the ACT LED begins to blink rapidly than usual, release the button.
Then the router will restart with the factory default configuration. Console Connecter reserved for RD debug. DMZ Connecter for local DMZ host. LAN Connecters for local networked devices. WAN1~WAN4 Connecter for remote networked devices. USB1~USB2 Connecter for a USB device (for 3G/4G USB Modem or printer).
Connecter for a power adapter.
ON/OFF
Power Switch.
Page 17
Vigor3220 Series User’s Guide
5
II--22 HHaarrddwwaarree IInnssttaallllaattiioonn
II--22--11 IInnssttaalllliinngg VViiggoorr RRoouutteerr
Before starting to configure the router, you have to connect your devices correctly.
1. Connect the cable Modem/DSL Modem/Media Converter to any WAN port of router with Ethernet cable (RJ-45).
2. Connect one end of an Ethernet cable (RJ-45) to the LAN port of the router and the other end of the cable (RJ-45) into the Ethernet port on your computer. Or, use a switch to connect Vigor router and computer(s).
3. Connect one end of the power adapter to the router’s power port on the rear panel, and the other side into a wall outlet.
4. Power on the device by pressing down the power switch on the rear panel.
5. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking.
(For the detailed information of LED status, please refer to section 3. Panel Explanation)
Page 18
Vigor3220 Series User’s Guide
6
II--22--22 IInnssttaalllliinngg UUSSBB PPrriinntteerr ttoo VViiggoorr RRoouutteerr
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows 7. For other Windows system, please visit www.DrayTek.com.
Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
1. Connect the printer with the router through USB/parallel port.
2. Open All Programs>>Getting Started>>Devices and Printers.
3. Click Add a printer.
Page 19
Vigor3220 Series User’s Guide
7
4. A dialog will appear. Click Add a local printer and click Next.
5. In this dialog, choose Create a new port. In the field of Type of port, use the drop down list to select Standard TCP/IP Port. Then, click Next.
Page 20
Vigor3220 Series User’s Guide
8
6. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Hostname or IP Address and type 192.168.1.1 as the Port name. Then, click Next.
7. Click Standard and choose Generic Network Card.
Page 21
Vigor3220 Series User’s Guide
9
8. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next.
9. Type a name for the chosen printer. Click Next.
Page 22
Vigor3220 Series User’s Guide
1
0
10. Choose Do not share this printer and click Next.
11. Then, in the following dialog, click Finish.
Page 23
Vigor3220 Series User’s Guide
11
12. The new printer has been added and displayed under Printers and Faxes. Click the new printer icon and click Printer server properties.
13. Edit the property of the new printer you have added by clicking Configure Port.
Page 24
Vigor3220 Series User’s Guide
12
14. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name.
Page 25
Vigor3220 Series User’s Guide
13
The printer can be used for printing now. Most of the printers with different manufacturers are compatible with vigor router.
Info
Note 1: Some printers with the fax/scanning or other additional functions are not supported. If
you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support >FAQ/Application Notes; find out the link of USB>>Printer Server and click it.
Then, click the What types of printers are compatible with Vigor router? link.
Note 2: Vigor router supports printing request from computers via LAN ports but not WAN port.
Page 26
Vigor3220 Series User’s Guide
1
4
II--33 AAcccceessssiinngg WWeebb PPaaggee
1. Make sure your PC connects to the router correctly. You may either simply set up your computer to get IP dynamically from the router or set
up the IP address of the computer to be the same subnet as the default IP address of Vigor router 192.168.1.1. For the detailed information, please refer to the later section - Trouble Shooting of the guide.
2. Open a web browser on your PC and type http://192.168.1.1. The following window
will be open to ask for username and password.
3. Please type “admin/admin” as the Username/Password and click Login.
Info
If you fail to access to the web configuration, please go to “Trouble Shooting” for detecting and solving your problem.
Page 27
Vigor3220 Series User’s Guide
15
4. Now, the Main Screen will appear.
Info
The home page will be different slightly in accordance with the type of the router you have.
5. The web page can be logged out according to the chosen condition. The default setting
is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity.
Page 28
Vigor3220 Series User’s Guide
16
II--44 CChhaannggiinngg PPaasssswwoorrdd
Please change the password for the original security of the router.
1. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password.
2. Please type “admin/admin” as Username/Password for access ing into the web user
interface with admin mode.
3. Go to System Maintenance page and choose Administrator Password.
4. Enter the login password (the default is “admin”) on the field of Old Password. Type
New Password and Confirm Password. Then click OK to continue.
Info
The maximum length of the password you can set is 23 characters.
5. Now, the password has been changed. Next time, use the new password to access the
Web user interface for this router.
Page 29
Vigor3220 Series User’s Guide
1
7
Info
Even the password is changed, the Username for logging onto the web user interface is still “admin”.
Page 30
Vigor3220 Series User’s Guide
18
II--55 DDaasshhbbooaarrdd
Dashboard shows the connection status including System Information, IPv4 Internet Acc ess, IPv6 Internet Access, Interface (physical connection), Security and Quick Access.
Click Dashboard from the main menu on the left side of the main page.
A web page with default selections will be displayed on the screen. Refer to the following figure:
II--55--11 VViirrttuuaall PPaanneell
On the top of the Dashboard, a virtual panel (simulating the physical panel of the router) displays the physical interface connection. It will be refreshed every five seconds. When you move and click the mouse cursor on LEDs (except ACT), USB ports, DMZ, LAN, or WAN1~4, related web setting page will be open for you to configure if required.
Page 31
Vigor3220 Series User’s Guide
1
9
Port Color Description
Black DMZ port is disconnected. Orange DMZ port is connected at 10/100 Mbps.
DMZ
Green DMZ port is connected at 1 Gbps. Black LAN port is disconnected. Orange LAN port is connected at 10/100 Mbps.
LAN
Green LAN port is connected at 1 Gbps. Black WAN2 port is disconnected. Orange WAN2 port is connected at 10/100 Mbps.
GigaWAN 1~4
Green WAN2 port is connected at 1 Gbps. Black No USB device is connected. USB Green A USB device is connected.
For detailed information about the LED display, refer to I-1-1 LED Indicators and Connectors.
II--55--22 NNaammee wwiitthh aa LLiinnkk
A name with a link (e.g., Router Name, Current Time, WAN1~5 and etc.) below means you can click it to open the configuration page for modification.
Page 32
Vigor3220 Series User’s Guide
2
0
II--55--33 QQuuiicckk AAcccceessss ffoorr CCoommmmoonn UUsseedd MMeennuu
All the menu items can be accessed and arranged orderly on the left side of the main page for your request. However, some important and common used menu items which can be accessed in a quick way just for convenience.
Look at the right side of the Dashboard. You will find a group of common used functions grouped under Quick Access.
The function links of System Status, Dynamic DDNS, TR-069, User Management, IM/P2P Block, Schedule, Syslog/Mail Alert, LDAP, RADIUS, Firewall Object Setting and Data Flow Monitor are displayed here. Move your mouse cursor on any one of the links and click on it. The corresponding setting page will be open immediately.
In addition, quick access for VPN security settings such as Remote Dial-in User and LAN to LAN are located on the bottom of this page. Scroll down the page to find them and use them if required.
Note that there is a plus (
) icon located on the left side of VPN/LAN. Click it to review the
VPN connection(s) used presently.
Page 33
Vigor3220 Series User’s Guide
21
Host connected physically to the router via LAN port(s) will be displayed with green circles in the field of Connected.
All of the hosts (including wireless clients) displayed with Host ID, IP Address and MAC address indicates that the traffic would be transmitted through LAN port(s) and then the WAN port. The purpose is to perform the traffic monitor of the host(s).
II--55--44 GGUUII MMaapp
All the functions the router supports are listed with table clearly in this page. Users can click the function link to access into the setting page of the function for detailed configuration. Click the icon on the top of the main screen to display all the functions.
Page 34
Vigor3220 Series User’s Guide
22
II--55--55 WWeebb CCoonnssoollee
It is not necessary to use the telnet command via DOS prompt. The changes made by using web console have the same effects as modified through web user interface. The functions/settings modified under Web Console also can be reviewed on the web user interface.
Click the Web Console icon on the top of the main screen to open the following screen.
Page 35
Vigor3220 Series User’s Guide
23
II--55--66 CCoonnffiigg BBaacckkuupp
There is one way to store current used settings quickly by clicking the Config Backup icon. It allows you to backup current settings as a file. Such configuration file can be restored by using System Maintenance>>Configuration Backup.
Simply click the icon on the top of the main screen and a pop up dialog will appear.
Click Save to store the setting.
II--55--77 LLooggoouutt
Click this icon to exit the web user interface.
Page 36
Vigor3220 Series User’s Guide
2
4
II--55--88 OOnnlliinnee SSttaattuuss
II--55--88--11 PPhhyyssiiccaall CCoonnnneeccttiioonn
Such page displays the physical connection status such as LAN connection status, WAN connection status, ADSL information, and so on.
Physical Connection for IPv4 Protocol
Page 37
Vigor3220 Series User’s Guide
25
Physical Connection for IPv6 Protocol
Detailed explanation (for IPv4) is shown below:
Item Description LAN Status Primary DNS-Displays the primary DNS server address for
WAN interface. Secondary DNS -Displays the secondary DNS server address
for WAN interface.
IP Address-Displays the IP address of the LAN interface. TX Packets-Displays the total transmitted packets at the
LAN interface. RX Packets-Displays the total received packets at the LAN
interface.
WAN1/WAN2/WAN3 /WAN4 Status
Enable – Yes in red means such interface is available but not enabled. Yes in green means such interface is enabled.
Line – Displays the physical connection (VDSL, ADSL,
Ethernet, or USB) of this interface.
Name – Display the name of the router. Mode - Displays the type of WAN connection (e.g., PPPoE). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. GW IP - Displays the IP address of the default gateway. TX Packets - Displays the total transmitted packets at the
WAN interface. TX Rate - Displays the speed of transmitted octets at the
WAN interface. RX Packets - Displays the total number of received packets
at the WAN interface. RX Rate - Displays the speed of received octets at the WAN
interface.
Detailed explanation (for IPv6) is shown below:
Item Description LAN Status IP Address- Displays the IPv6 address of the LAN interface..
TX Packets-Displays the total transmitted packets at the LAN
interface. RX Packets-Displays the total received packets at the LAN
interface. TX Bytes - Displays the speed of transmitted octets at the
LAN interface. RX Bytes - Displays the speed of received octets at the LAN
interface.
Page 38
Vigor3220 Series User’s Guide
26
Item Description WAN IPv6 Status Enable – No in red means such interface is available but not
enabled. Yes in green means such interf ace is enabled. No in red means such interface is not available.
Mode - Displays the type of WAN connection (e.g., TSPC). Up Time - Displays the total uptime of the interface. IP - Displays the IP address of the WAN interface. Gateway IP - Displays the IP address of the default gateway.
Info
The words in green mean that the WAN connection of that interface is ready for accessing Internet; the words in red mean that the WAN connection of that interfac e is not ready for accessing Internet.
II--55--88--22 VViirrttuuaall WWAANN
Such page displays the virtual WAN connection information. Virtual WAN are used by TR-069 management, VoIP service and so on. The field of Application will list i-9the purpose of such WAN connection.
Page 39
Vigor3220 Series User’s Guide
2
7
II--66 QQuuiicckk SSttaarrtt WWiizzaarrdd
Quick Start Wizard can help you to deploy and use the router easily and quickly. The first screen of Quick Start Wizard is entering login password. After typing the password, please click Next.
On the next page as shown below, please select the WAN interface (WAN 1 to WAN5) that you use. If Ethernet interface is used, please choose WAN1~WAN4. If USB interface is used, choose WAN5. For WAN 1 to WAN4, choose Auto negotiation as the physical type for your router. Here we take WAN1 as an example. Then, click Next for next step.
WAN1~ WAN4 and WAN5 will bring up different configuration page. Refer to the following sections for detailed information.
Page 40
Vigor3220 Series User’s Guide
28
II--66--11 FFoorr WWAANN11~~ WWAANN44 ((EEtthheerrnneett))
WAN1~ WAN4 are dedicated to physical mode in Ethernet. Please select the appropriate Internet access type according to the information from your ISP. For example, you should select PPPoE mode if the ISP provides you PPPoE interface.
PPPPPPooEE
1. Choose WAN1 as the WAN Interface and click the Next button. The following page will
be open for you to specify Internet Access Type.
2. Click PPPoE as the Internet Access Type. Then click Next to continue.
Available settings are explained as follows:
Item Description Service Name
(Optional)
Enter the description of the specific network service.
Page 41
Vigor3220 Series User’s Guide
2
9
Item Description Username Assign a specific valid user name provided by the ISP.
Note: The maximum length of the user name you can set is
63 characters.
Password Assign a valid password provided by the ISP.
Note: The maximum length of the password you can set is 62
characters.
Confirm Password Retype the password. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard.
3. Please manually enter the Username/Password provided by your ISP. Click Next for
viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 42
Vigor3220 Series User’s Guide
3
0
PPPPTTPP//LL22TTPP
1. Choose WAN2 as the WAN Interface and click the Next button. The following page will
be open for you to specify Internet Access Type.
2. Click PPTP/L2TP as the Internet Access Type. Then click Next to continue.
Available settings are explained as follows:
Item Description User Name Assign a specific valid user name provided by the ISP.
Note: The maximum length of the user name you can set is
63 characters.
Password Assign a valid password provided by the ISP.
Note: The maximum length of the password you can set is 62
characters.
Page 43
Vigor3220 Series User’s Guide
31
Confirm Password Retype the password. WAN IP Configuration Obtain an IP address automatically – the router will get an
IP address automatically from DHCP server. Specify an IP address – you have to type relational settings
manually.
IP Address - Type the IP address. Subnet Mask –Type the subnet mask.
Gateway – Type the IP address of the gateway.
Primary DNS –Type in the primary IP address for the router. Second DNS –Type in secondary IP address for necessity in
the future.
PPTP Server / L2TP Server
Type the IP address of the server.
Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard.
3. Please type in the IP address/mask/gateway information originally provided by your ISP.
Then click Next for viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 44
Vigor3220 Series User’s Guide
32
SSttaattiicc IIPP
1. Choose WAN2 as the WAN Interface and click the Next button. The following page will
be open for you to specify Internet Access Type.
2. Click Static IP as the Internet Access type. Simply click Next to continue.
Available settings are explained as follows:
Item Description WAN IP Type the IP address. Subnet Mask Type the subnet mask. Gateway Type the IP address of gateway. Primary DNS Type in the primary IP address for the router. Secondary DNS Type in secondary IP address for necessity in the future. Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard.
Page 45
Vigor3220 Series User’s Guide
33
3. Please type in the IP address information originally provided by your ISP. Then click Next
for next step.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 46
Vigor3220 Series User’s Guide
3
4
DDHHCCPP
1. Choose WAN2 as WAN Interface and click the Next button. The following page will be
open for you to specify Internet Access Type.
2. Click DHCP as the Internet Access type. Simply click Next to continue.
Available settings are explained as follows:
Item Description Host Name Type the name of the host.
Note: The maximum length of the host name you can set is
39 characters.
MAC Some Cable service providers specify a specific MAC address
for access authentication. In such cases you need to enter the MAC address.
Back Click it to return to previous setting page. Next Click it to get into the next setting page. Cancel Click it to give up the quick start wizard.
Page 47
Vigor3220 Series User’s Guide
35
3. After finished the settings above, click Next for viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 48
Vigor3220 Series User’s Guide
36
II--66--22 FFoorr WWAANN55 ((UUSSBB))
WAN5 is dedicated to physical mode in USB.
1. Choose WAN5 as WAN Interface.
2. Then, click Next for getting the following page.
Available settings are explained as follows:
Item Description Internet Access Choose one of the selections as the protocol of accessing the
internet.
3G/4G USB Modem (PPP mode)
SIM Pin code –Type PIN code of the SIM card that will be used
to access Internet. The maximum length of the pin code you can set is 15 characters.
Modem Initial String – Such value is used to initialize USB modem. Please use the default value. If you have any question, please contact to your ISP. The maximum length of the string you can set is 47 characters.
APN Name – APN means Access Point Name which is provided
Page 49
Vigor3220 Series User’s Guide
3
7
and required by some ISPs. Type the name and click Apply.
4G USB Modem (DHCP mode)
SIM Pin code –Type PIN code of the SIM card that will be used
to access Internet. Network Mode – Force Vigor router to connect Internet with
the mode specified here. If you choose 4G/3G/2G as network mode, the router will choose a suitable one according to the actual wireless signal automatically.
APN Name – APN means Access Point Name which is provided and required by some ISPs.
Info
Such mode (4G USB Modem (DHCP mode) is supported by WAN3 only.
3. Then, click Next for viewing summary of such connection.
4. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system
status of this protocol will be shown.
5. Now, you can enjoy surfing on the Internet.
Page 50
Vigor3220 Series User’s Guide
38
II--77 SSeerrvviiccee AAccttiivvaattiioonn WWiizzaarrdd
Service Activation Wizard can guide you to activate WCF service (Web Content Filter) with a quick and easy way. For the Service Activation Wizard is only available for admin
operation, therefore, please type “admin/admin” on Username/Password while Logging into the web user interface.
Service Activation Wizard is a tool which allows you to use trial version of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Now, follow the steps listed below to activate WCF feature for your router.
Info
Such function is available only for Admin Mode.
1. Open Wizards>>Service Activation Wizard.
2. The screen of Service Activation Wizard will be shown as follows. Click Next to activate
free trail edition.
Free trial edition: it offers a period of trial for you to get acquainted with WCF function.
Page 51
Vigor3220 Series User’s Guide
3
9
3. In the following page, you can activate the Web content filter services at the same time
or individually. When you finish the selection, please click Next.
Info
Commtouch is the web content filter based on Commtouch operated in the worldwide. There is a 30-day trial period. After trial, you can purchase DrayTek's prepared Commtouch GlobalView WCF package from retailing outlets.
BPjM is WCF for German Speaking users. The fragfINN is whitelist for German Speaking users. The BPjM is ideal for your family to provide more Internet security for youngsters.
eb Content Filter (fragFINN) service will not be supported since January 1,
2015.
4. Setting confirmation page will be displayed as follows, please click Next.
Page 52
Vigor3220 Series User’s Guide
40
5. Wait for a moment till the following page appears.
When such page appears, you can enable or disable these services for your necessity. Then, click Finish.
Info
The service will be activated and applied as the default rule configured in Firewall>>General Setup.
6. Now, the web page will display the service that you have activated according to your
selection(s). The valid time for the free trial of these services is one month.
When all the trial editions for various web content filters had been enabled, the configuration page of Service Activation Wizard will be invalid as shown below.
Page 53
Vigor3220 Series User’s Guide
41
II--88 RReeggiisstteerriinngg VViiggoorr RRoouutteerr
You have finished the configuration of Quick Start Wizard and you can surf the Internet at any time. Now it is the time to register your Vigor router to MyVigor website for getting more service. Please follow the steps below to finish the router registration.
1 Please login the web configuration interface of Vigor router by typing “admin/admin” as
User Name / Password.
2 Click Support Area>>Production Registration from the home page.
3 A Login page will be shown on the screen. Please type the account and password that
you created previously. And click Login.
Page 54
Vigor3220 Series User’s Guide
42
Info
If you haven’t an accessing account, please refer to section Creating an Account for MyVigor to create your own one. Please read the articles on the Agreement regarding user rights carefully while creating a user account.
4 The following page will be displayed after you logging in MyVigor. From this page, please
click Add or Product Registration.
Page 55
Vigor3220 Series User’s Guide
43
5 When the following page appears, please type in Nickname (for the router) and choose
the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit.
6 When the following page appears, your router information has been added to the
database.
7 After clicking OK, you will see the following page. Your router has been registered to
myvigor website successfully.
Vigor3220
Page 56
Vigor3220 Series User’s Guide
4
4
Page 57
Vigor3220 Series User’s Guide
45
PPaarrtt IIII C
Coo
n
n
n
neeccttiivviittyy
It means wide area network. Public IP will be used in WAN.
It means local area network. Private IP will be used in LAN.
Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP.
When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network.
DNS, LAN DNS, UPnP, IGMP, WOL, RADIUS, …
Static Route, Load-Balance/Route Policy
Page 58
Vigor3220 Series User’s Guide
46
IIII--11 WWAANN
It allows users to access Internet.
BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk
IP means Internet Protocol. Every device in an IP-based Network including routers, print server, and host PCs, needs an IP address to identify its location on the network. To avoid address conflicts, IP addresses are publicly registered with the Network Information Centre (NIC). Having a unique IP address is mandatory for those devices participated in the public network but not in the private TCP/IP local area networks (LANs), such as host PCs under the management of a router since they do not need to be accessed by the public. Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges:
From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255
WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss
As the router plays a role to manage and further protect its LAN, it interconnects groups of host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to communicate with the local hosts. Meanwhile, Vigor router will communicate with other network devices through a public IP address. When the data flow passing through, the Network Address Translation (NAT) function of the router will dedicate to translate public/private addresses, and the packets will be delivered to the correct host PC in the local area network. Thus, all the host PCs can share a common Internet connection.
GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP
In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is required for bridging customer premises equipment (CPE). Point to Point Protocol over Ethernet (PPPoE) connects a network of hosts via an access device to a remote access concentrator or aggregation concentrator. This implementation provides users with significant ease of use. Meanwhile it provides access control, billing, and type of service according to user requirement.
When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server, and other related information will usually be assigned by your ISP.
NNeettwwoorrkk CCoonnnneeccttiioonn bbyy 33GG//44GG UUSSBB MMooddeemm
For 3G/4G mobile communication through Access Point is popular more and more, Vigor3220 adds the function of 3G/4G network connection for such purpose. By connecting 3G/4G USB Modem to the USB port of Vigor3220, it can support LTE/HSDPA/UMTS/EDGE/GPRS/GSM and the future 3G/4G standard (HSUPA, etc). Vigor3220n with 3G/4G USB Modem allows you to receive 3G/4G signals at any place such as your car or certain location holding outdoor activity and share the bandwidth for using by more people. Users can use LAN ports on the router to access Internet. Also, they can access Internet via 802.11(a/b/g/n/ac) wireless standard, and enjoy the powerful firewall, bandwidth management, and VPN features of Vigor3220n series.
Page 59
Vigor3220 Series User’s Guide
4
7
After connecting into the router, 3G/4G USB Modem will be regarded as the WAN3/WAN4 port. However, the original WAN1 and WAN2 still can be used and Load-Balance can be done in the router. Besides, 3G/4G USB Modem in WAN3/WAN4 also can be used as backup device. Therefore, when WAN1 and WAN2 are not available, the router will use 3.5G for supporting automatically. The supported 3G/4G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information.
Page 60
Vigor3220 Series User’s Guide
48
WWeebb UUsseerr IInntteerrffaaccee
IIII--11--11 GGeenneerraall SSeettuupp
This section will introduce some general settings of Internet and explain the connection modes for WAN1, WAN2 and WAN3/WAN4 in details.
This router supports multiple-WAN function. It allows users to access Internet and combine the bandwidth of the multiple WANs to speed up the transmission through the network. Each WAN port can connect to different ISPs, Even if the ISPs use different technology to provide telecommunication service (such as DSL, Cable modem, etc.). If any connection problem occurred on one of the ISP connections, all the traffic will be guided and switched to the normal communication port for proper operation. Please configure WAN1, WAN2, WAN3 and WAN4 settings.
This webpage allows you to set general setup for WAN1, WAN2, WAN3 and WAN4 respectively. In default, WAN2 is disabled. If you want to enable it, simply click the WAN2 link and select Yes in the field of Enable.
Available settings are explained as follows:
Item Description Load Balance Mode This option is available for multiple-WAN for getting enough
bandwidth for each WAN port. If you know the practical bandwidth for your WAN interface, please choose the setting of According to Line Speed. Otherwise, please choose Auto
Weight to let the router reach the best load balance.
Index Click the WAN interface link under Index to access into the
WAN configuration page.
Enable V means such WAN interface is enabled and ready to be used. Physical Mode / Type Display the physical mode and physical type of such WAN
interface.
Line Speed(Kbps) DownLink/UpLink
Display the downstream and upstream rate of such WAN interface.
Active Mode Display whether such WAN interface is Active device or
backup device. Backup (WAN#)- Display the backup WAN interface for such
Page 61
Vigor3220 Series User’s Guide
4
9
WAN when it is disabled.
Info
In default, each WAN port is enabled.
After finished the above settings, click OK to save the settings.
IIII--11--11--11 WWAANN11 ~~ WWAANN44 ((EEtthheerrnneett))
Ethernet is the Physical Mode for WAN1 to WAN4.
Available settings are explained as follows:
Item Description Enable Choose Yes to invoke the settings for this WAN interface.
Choose No to disable the settings for this WAN interface. Display Name Type the description for such WAN interface. Physical Mode Display the physical mode of such WAN interface. Physical Type You can change the physical type for
WAN1/WAN2/WAN3/WAN4 or choose Auto negotiation for
determined by the system.
Line Speed If your choose According to Line Speed as the Load
Balance Mode, please type the line speed for downloading
and uploading for such WAN interface. The unit is kbps. VLAN Tag insertion Enable – Enable the function of VLAN with tag.
The router will add specific VLAN number to all packets on
the WAN while sending them out.
Please type the tag value and specify the priority for the
packets sending by WAN1.
Disable – Disable the function of VLAN with tag.
Tag value – Type the value as the VLAN ID number. The
Page 62
Vigor3220 Series User’s Guide
5
0
range is form 0 to 4095.
Priority – Type the packet priority number for such VLAN.
The range is from 0 to 7. Active Mode Choose Always On to make the WAN1/WAN2/WAN3/WAN4
connection being activated always.
Load Balance: Check this box to enable auto load balance
function for such WAN interface.
When the data traffic is large, the WAN interface with the
function enabled will balance the data transmission
automatically among all of the WAN interfaces in
connection status.
Active When If you choose Failover as the Active Mode, the option of
Active When will appear.
Any of the selected WAN disconnect – Such WAN
connection will be activated when any selected WAN interface (checked below) disconnects.
All of the selected WAN disconnect – Such WAN
connection will be activated only when all of selected WAN interfaces (checked below) disconnect.
Check boxes for WAN1 to WAN5 – Specify the WAN
interface by checking the WAN box.
After finished the above settings, click OK to save the settings.
IIII--11--11--22 WWAANN55 ((UUSSBB))
To use 3G/4G network connection through 3G/4G USB Modem, please configure WAN3 or WAN4 interface.
Available settings are explained as follows:
Item Description Enable Choose Yes to invoke the settings for this WAN interface.
Choose No to disable the settings for this WAN interface.
Display Name Type the description for such WAN interface.
Page 63
Vigor3220 Series User’s Guide
51
Physical Mode Display the physical mode of such WAN interface. Line Speed If your choose According to Line Speed as the Load Balance
Mode, please type the line speed for downloading and
uploading for such WAN interface. The unit is kbps.
Active Mode Choose Always On to make such WAN connection being
activated always. Load Balance: Check this box to enable auto load balance
function for such WAN interface. When the data traffic is large, the WAN interface with the
function enabled will balance the data transmission automatically among all of the WAN interfaces in connection status.
Active When If you choose Failover as the Active Mode, the option of
Active When will appear.
Any of the selected WAN disconnect – Such WAN
connection will be activated when any selected WAN interface (checked below) disconnects.
All of the selected WAN disconnect – Such WAN
connection will be activated only when all of selected WAN interfaces (checked below) disconnect.
Check boxes for WAN1 to WAN5 – Specify the WAN
interface by checking the WAN box.
After finished the above settings, click OK to save the settings.
Page 64
Vigor3220 Series User’s Guide
52
IIII--11--22 IInntteerrnneett AAcccceessss
For the router supports multi-WAN function, the users can set different WAN settings (for WAN1/WAN2/WAN3/WAN4) for Internet Access. Due to different Physical Mode for WAN interface, the Access Mode for these connections also varies. Refer to the following figures.
And,
Available settings are explained as follows:
Item Description Index Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3/WAN4/WAN5
that entered in general setup.
Physical Mode It shows the physical connection for WAN1~4 (Ethernet)
/WAN5 (3G/4G USB Modem) according to the real network connection.
Access Mode Use the drop down list to choose a proper access mode. The
details page of that mode will be popped up. If not, click Details Page for accessing the page to configure the settings.
Details Page This button will open different web page (based on IPv4)
according to the access mode that you choose in WAN interface.
Note that Details Page will be changed slightly based on physical mode.
Page 65
Vigor3220 Series User’s Guide
53
IPv6 This button will open different web page (based on Physical
Mode) to setup IPv6 Internet Access Mode for WAN interface. If IPv6 service is active on this WAN interface, the color of
“IPv6” will become green.
Advanced This button allows you to configure DHCP client options.
DHCP packets can be processed by adding option number and data information when such function is enabled and configured.
Enable – Check the box to enable the function of DHCP Option. Each DHCP option is composed by an option number with data. For example,
Option number:100 Data: abcd
When such function is enabled, the specified values for DHCP option will be seen in DHCP reply packets.
Interface – Specify the WAN interface(s) that will be overwritten by such function. WAN5 ~ WAN7 can be located under WAN>>Multi-PVC/VLAN.
Option Number – Type a number for such function. DataType – Choose the type (ASCII or Hex) for the data to be
stored. Data – Type the content of the data to be processed by the
function of DHCP option.
Page 66
Vigor3220 Series User’s Guide
5
4
Info
If you choose to configure option 61 here, the detailed settings in WAN>>Interface Access will be overwritten.
IIII--11--22--11 DDeettaaiillss PPaaggee ffoorr PPPPPPooEE iinn EEtthheerreenneett WWAANN
To choose PPPoE as the accessing protocol of the Internet, please select PPPoE from the WAN>>Internet Access >>WAN1 page. The following web page will be shown.
Available settings are explained as follows:
Item Description Enable/Disable Click Enable for act ivating this function. If you click Disable,
this function will be closed and all the settings that you adjusted in this page will be invalid.
ISP Access Setup Enter your allocated username, password and authentication
parameters according to the information provided by your ISP.
Service Name (Optional) - Enter the description of the specific network service.
Username – Type in the username provided by ISP in this field.
The maximum length of the user name you can set is 63 characters.
Password – Type in the passw ord provided by ISP in this field. The maximum length of the password you can set is 62
characters. Index (1-15) in Schedule Setup - You can type in four sets of
time schedule for your request. All the schedules can be set previously in Application >> Schedule web page and you can use the number that you have set in that web page.
WAN Connection Detection
Such function allows you to verify whether network connection is alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection.
Page 67
Vigor3220 Series User’s Guide
55
Ping IP – If you choose Ping Detect as detection mode, you have to type IP address in this field for pinging.
TTL (Time to Live) – Type TTL value. MTU It means Max Transmit Unit for pa cket. PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for
PPP.
Idle Timeout – Set the timeout for breaking down the
Internet after passing through the time without any action.
IP Address Assignment Method (IPCP)
Usually ISP dynamically assigns IP address to you each time
you connect to it and request. In some case, your ISP
provides service to always assign you the same IP address
whenever you request. In this case, you can fill in this IP
address in the Fixed IP field. Please contact your ISP before
you want to use this function.
WAN IP Alias - If you have multiple public IP addresses and
would like to utilize them on the WAN interface, please use
WAN IP Alias. You can set up to 32 public IP addresses other
than the current one you are using. Type the additional WAN
IP address and check the Enable box. Then click OK to exit
the dialog.
Fixed IP – Click Yes to use this function and type in a fixed IP
address in the box of Fixed IP Address.
Default MAC Address – You can use Default MAC Address or
specify another MAC address by typing on the boxes of MAC
Address for the router.
Specify a MAC Address – Type the MAC address for the router
manually.
After finishing all the settings here, please click OK to activate them.
IIII--11--22--22 DDeettaaiillss PPaaggee ffoorr SSttaattiicc oorr DDyynnaammiicc IIPP iinn EEtthheerreenneett WWAANN
For static IP mode, you usually receive a fixed public IP address or a public subnet, namely multiple public IP addresses from your DSL or Cable ISP service providers. In most case s, a Cable service provider will offer a fixed public IP, while a DSL service prov ider will offer a public subnet. If you have a public subnet, you could assign an IP address or many IP address to the WAN interface.
To use Static or Dynamic IP as the accessing protocol of the internet, please click the Static or Dynamic IP tab. The following web page will be shown.
Page 68
Vigor3220 Series User’s Guide
56
Available settings are explained as follows:
Item Description Enable / Disable Click Enable for act ivating this function. If you click Disable,
this function will be closed and all the settings that you
adjusted in this page will be invalid. Keep WAN Connection Normally, this function is designed for Dynamic IP
environments because some ISPs will drop connections if
there is no traffic within certain periods of time. Check
Enable PING to keep alive box to activate this function.
PING to the IP - If you enable the PING function, please
specify the IP address for the system to PING it for keeping
alive.
PING Interval - Enter the interval for the system to execute
the PING operation.
WAN Connection Detection
Such function allows you to verify whether network
connection is alive or not through ARP Detect or Ping Detect.
Mode – Choose ARP Detect or Ping Detect for the system to
execute for WAN detection.
Ping IP – If you choose Ping Detect as detection mode ,
you have to type IP address in this field for pinging.
TTL (Time to Live) – Displays value for your reference.
TTL value is set by telnet command.
MTU It means Max Transmit Unit for pa cket. RIP Protocol
Routing Information Protocol is abbreviated as RIP(RFC1058)
specifying how routers exchange routing tables information.
Page 69
Vigor3220 Series User’s Guide
5
7
Click Enable RIP for activating this function. Bridge Mode Enable Bridge Mode - If the function is enabled, the router
will work as a bridge modem.
Enable Firewall – It is available when Bridge Mode is
enabled. When both Bridge Mode and Firewall check boxes
are enabled, the settings configured (user profiles) under
User Management will be ignored. And all of the filter rules
defined and enabled in Firewall menu will be activated.
Bridge Subnet – Make a bridge between the selected LAN
subnet and such WAN interface. WAN IP Network Settings This group allows you to obtain an IP address automatically
and allows you type in IP address manually.
WAN IP Alias - If you have multiple public IP addresses and
would like to utilize them on the WAN interface, please use
WAN IP Alias. You can set up to 32 public IP addresses other
than the current one you are using.
Obtain an IP address automatically – Click this button to
obtain the IP address automatically if you want to use
Dynamic IP mode.
Router Name: Type in the router na me provided
by ISP.
Domain Name: Type in the domain name that you
have assigned.
DHCP Client Identifier for some ISP
Enable: Check the box to specify username and
password as the DHCP client identifier for some ISP.
Username: Type a name as username. The
maximum length of the user name you can set is 63 characters.
Password: Type a password. The maximum length
of the password you can set is 62 characters.
Specify an IP address – Click this radio button to specify
some data if you want to use Static IP mode.
IP Address: Type the IP address. Subnet Mask: Type the subnet mask. Gateway IP Address: Type the gateway IP
address.
Default MAC Address: Click this radio button to use default
MAC address for the router.
Specify a MAC Address: Some Cable service providers
specify a specific MAC address for access authentication. In
such cases you need to click the Specify a MAC Address and
enter the MAC address in the MAC Address field. DNS Server IP Address Type in the primary IP address for the router if you want to
use Static IP mode. If necessary, type in secondary IP address
for necessity in the future.
After finishing all the settings here, please click OK to activate them.
Page 70
Vigor3220 Series User’s Guide
58
IIII--11--22--33 DDeettaaiillss PPaaggee ffoorr PPPPTTPP//LL22TTPP iinn EEtthheerreenneett WWAANN
To use PPTP/L2TP as the accessing protocol of the internet, please click the PPTP/L2TP tab. The following web page will be shown.
Available settings are explained as follows:
Item Description PPTP/L2TP Enable PPTP- Click this radio button to enable a PPTP client
to establish a tunnel to a DSL modem on the WAN interface.
Enable L2TP - Click this radio button to enable a L2TP client
to establish a tunnel to a DSL modem on the WAN interface.
Disable – Click this radio button to close the connection
through PPTP or L2TP.
Server Address - Specify the IP address of the PPTP/L2TP
server if you enable PPTP/L2TP client mode.
Specify Gateway IP Address – Specify the gateway IP address
for DHCP server. ISP Access Setup Username -Type in the username provided by ISP in this
field. The maximum length of the user name you can set is 63
characters.
Password -Type in the password provided by ISP in this field.
The maximum length of the password you can set is 62
characters.
Index (1-15) in Schedule Setup - You can type in four sets of
time schedule for your request. All the schedules can be set
previously in Application >> Schedule web page and you can
use the number that you have set in that web page.
MTU It means Max Transmit Unit for pa cket. PPP Setup PPP Authentication - Select PAP only or PAP or CHAP for
PPP.
Idle Timeout - Set the timeout for breaking down the
Internet after passing through the time without any action.
IP Address Assignment Method(IPCP)
WAN IP Alias - If you have multiple public IP addresses and
would like to utilize them on the WAN interface, please use
Page 71
Vigor3220 Series User’s Guide
5
9
WAN IP Alias. You can set up to 32 public IP addresses other
than the current one you are using.
Fixed IP - Usually ISP dynamically assigns IP address to you
each time you connect to it and request. In some case, your ISP provides service to always assign you the same IP address whenever you request. In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. Click Yes to use this function and type in a fixed IP address in the box.
Fixed IP Address -Type a fixed IP address.
WAN IP Network Settings Obtain an IP address automatically – Click this button to
obtain the IP address automatically.
Specify an IP address – Click this radio button to specify
some data.
IP Address – Type the IP address. Subnet Mask – Type the subnet mask.
After finishing all the settings here, please click OK to activate them.
IIII--11--22--44 DDeettaaiillss PPaaggee ffoorr 33GG//44GG UUSSBB MMooddeemm ((PPPPPP mmooddee)) iinn UUSSBB WWAANN
To use 3G/4G USB Modem (PPP mode) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select 3G/4G USB Modem (PPP mode) for WAN5. The following web page will be shown.
Available settings are explained as follows:
Item Description Modem Support List It lists all of the modems supported by such router.
Page 72
Vigor3220 Series User’s Guide
6
0
3G /4G USB Modem (PPP mode)
Click Enable for act ivating this function. If you click Disable,
this function will be closed and all the settings that you
adjusted in this page will be invalid. SIM PIN code Type PIN code of the SIM card that will be used to access
Internet.
The maximum length of the PIN code you can set is 15
characters. Modem Initial String Such value is used to initialize USB modem. Please use the
default value. If you have any question, please contact to
your ISP.
The maximum length of the string you can set is 47
characters. APN Name APN means Access Point Name which is provided and
required by some ISPs. Type the name and click Apply.
The maximum length of the name you can set is 43
characters. Modem Initial String2 The initial string 1 is shared with APN.
In some cases, user may need another initial AT com mand to
restrict 3G band or do any special settings.
The maximum length of the string you can set is 47
characters. Modem Dial String Such value is used to dial through USB mode. Please use the
default value. If you have any question, please contact to
your ISP.
The maximum length of the string you can set is 31
characters.
Service Name Enter the description of the specific network service. PPP Username Type the PPP username (optional). The maximum length of
the name you can set is 63 characters. PPP Password Type the PPP password (optional). The maximum length of
the password you can set is 62 characters.
PPP Authentication Select PAP only or PAP or CHAP for PPP. Index (1-15) in Schedule
Setup
You can type in four sets of time schedule for your request.
All the schedules can be set previously in Application >>
Schedule web page and you can use the number that you
have set in that web page
WAN Connection Detection
Such function allows you to verify whether network
connection is alive or not through ARP Detect or Ping Detect.
Mode – Choose ARP Detect or Ping Detect for the system to
execute for WAN detection. If you choose Ping Detect as the
detection mode, you have to type required settings for the
following items.
Primary/Secondary Ping IP – If you choose Ping Detect as
detection mode, you have to type Primary or Secondary IP
Page 73
Vigor3220 Series User’s Guide
61
address in this field for pinging.
TTL (Time to Live) – Set TTL value of PING operation.
Ping Interval – Type the interval for the system to
execute the PING operation.
Ping Retry – Type the number of times that the system is
allowed to execute the PING operation before WAN disconnection is judged.
After finishing all the settings here, please click OK to activate them.
IIII--11--22--55 DDeettaaiillss PPaaggee ffoorr 33GG//44GG UUSSBB MMooddeemm ((DDHHCCPP mmooddee)) iinn UUSSBB WWAANN
To use 3G/4G USB Modem (DHCP mode) as the accessing protocol of the internet, please choose Internet Access from WAN menu. Then, select 3G/4G USB Modem (DHCP mode) for WAN3/WAN4. The following web page will be shown.
Available settings are explained as follows:
Item Description Modem Support List It lists all of the modems supported by such router.
3G/4G USB Modem (DHCP mode)
Click Enable for act ivating this function. If you click Disable,
this function will be closed and all the settings that you
adjusted in this page will be invalid. SIM PIN code Type PIN code of the SIM card that will be used to access
Internet.
The maximum length of the PIN code you can set is 19
characters.
Page 74
Vigor3220 Series User’s Guide
62
Network Mode Force Vigor router to connect Internet with the mode
specified here. If you choose 4G/3G/2G as network mode,
the router will choose a suitable one according to the actual
wireless signal automatically. APN Name APN means Access Point Name which is provided and
required by some ISPs. Type the name and click Apply.
The maximum length of the name you can set is 47
characters.
MTU It means Max Transmit Unit for pa cket. WAN Connection
Detection
Such function allows you to verify whether network
connection is alive or not through ARP Detect or Ping Detect.
Mode – Choose ARP Detect or Ping Detect for the system to
execute for WAN detection. If you choose Ping Detect as the
detection mode, you have to type required settings for the
following items.
Primary/Secondary Ping IP – If you choose Ping Detect as
detection mode, you have to type Primary or Secondary IP address in this field for pinging.
Ping Gateway IP – If you choose Ping Detect as detection
mode, you also can enable this setting to use current WAN gateway IP address for pinging. With the IP address(es) pinging, Vigor router can check if the WAN connection is on or off.
TTL (Time to Live) – Set TTL value of PING operation.
Ping Interval – Type the interval for the system to
execute the PING operation.
Ping Retry – Type the number of times that the system is
allowed to execute the PING operation before WAN disconnection is judged.
After finishing all the settings here, please click OK to activate them.
IIII--11--22--66 DDeettaaiillss PPaaggee ffoorr IIPPvv66
OOfffflliinnee iinn EEtthheerrnneett//UUSSBB WWAANN
When Offline is selected, the IPv6 connection will be disabled.
IIII--11--22--77 DDeettaaiillss PPaaggee ffoorr IIPPvv66
PPPPPP iinn EEtthheerrnneett WWAANN
During the procedure of IPv4 PPPoE connection, we can get the IPv6 Link Local Address between the gateway and Vigor router through IPv6CP. Later, use DHCPv6 or accept RA to acquire the IPv6 prefix address (such as: 2001:B010:7300:200::/64) offered by the ISP. In addition, PCs under LAN also can have the public IPv6 address for Internet access by means of the generated prefix.
Page 75
Vigor3220 Series User’s Guide
63
No need to type any other information for PPP mode.
Available settings are explained as follows:
Item Description WAN Connection
Detection
Such function allows you to verify whether network
connection is alive or not through Ping Detect.
Mode – Choose Always On or Ping Detect for the system to
execute for WAN detection. Always On means no detection
will be executed. The network connection will be on always.
Ping IP/Hostname – If you choose Ping Detect as
detection mode, you have to type IP address in this field for pinging.
TTL (Time to Live) –If you choose Ping Detect as
detection mode, you have to type TTL value.
Below shows an example for successful IPv6 connection based on PPP mode.
Page 76
Vigor3220 Series User’s Guide
64
Info
At present, the IPv6 prefix can be acquired via the PPPoE mode connection which is available for the areas such as Taiwan (hinet), the Netherlands, Australia and UK.
IIII--11--22--88 DDeettaaiillss PPaaggee ffoorr IIPPvv66
TTSSPPCC iinn EEtthheerreenneett WWAANN
Tunnel setup protocol client (TSPC) is an application which could help you to connect to IPv6 network easily.
Please make sure your IPv4 WAN connection is OK and apply one free account from hexago (http://gogonet.gogo6.com/page/freenet6-account ) before you try to use TSPC for network connection. TSPC would connect to tunnel broker and requests a tunnel according to the specifications inside the configuration file. It gets a public IPv6 IP address and an IPv6 prefix from the tunnel broker and then monitors the state of the tunnel in background.
After getting the IPv6 prefix and starting router advertisement daemon (RADVD), the PC behind this router can directly connect to IPv6 the Internet.
Available settings are explained as follows:
Item Description Username Type the name obtained from the broker. It is suggested for
you to apply another username and password for
http://gogonet.gogo6.com/page/freenet6-account.
The maximum length of the name you can set is 63
characters. Password Type the password assigned with the user name.
The maximum length of the name you can set is 19
characters. Tunnel Broker Type the address for the tunnel broker IP, FQDN or an
optional port number.
Page 77
Vigor3220 Series User’s Guide
65
WAN Connection Detection
Such function allows you to verify whether network
connection is alive or not through Ping Detect.
Mode – Choose Always On or Ping Detect for the system to
execute for WAN detection. Always On means no detection
will be executed. The network connection will be on always.
Ping IP/Hostname – If you choose Ping Detect as
detection mode, you have to type IP address in this field for pinging.
TTL (Time to Live) –If you choose Ping Detect as
detection mode, you have to type TTL value.
After finished the above settings, click OK to save the settings.
IIII--11--22--99 DDeettaaiillss PPaaggee ffoorr IIPPvv66
AAIICCCCUU iinn EEtthheerrnneett WWAANN
Available settings are explained as follows:
Item Description Always On Check this box to keep the network connection always. Username Type the name obtained from the broker. Please apply new
account at http://www.sixxs.net/. It is suggested for you to
apply another username and password.
The maximum length of the name you can set is 19
characters. Password Type the password assigned with the user name.
The maximum length of the password you can set is 19
characters. Tunnel Broker It means a server of AICCU. The server can provide IPv6
tunnels to sites or end users over IPv4.
Type the address for the tunnel broker IP, FQDN or an
optional port number.
Page 78
Vigor3220 Series User’s Guide
66
Tunnel ID One user account may have several tunnels. And, each
tunnel shall have one specified tunnel ID (e.g., T115394).
Type the ID offered by Tunnel Broker. Subnet Prefix Type the subnet prefix address obtained from service
provider.
The maximum length of the prefix you can set is 128
characters.
WAN Connection Detection
Such function allows you to verify whether network
connection is alive or not through Ping Detect.
Mode – Choose Always On or Ping Detect for the system to
execute for WAN detection.
Ping IP/Hostname – If you choose Ping Detect as
detection mode, you have to type IP address in this field for pinging.
TTL (Time to Live) –If you choose Ping Detect as
detection mode, you have to type TTL value.
After finished the above settings, click OK to save the settings.
Page 79
Vigor3220 Series User’s Guide
6
7
IIII--11--22--1100 DDeettaaiillss PPaaggee ffoorr IIPPvv66
DDHHCCPPvv66 CClliieenntt iinn EEtthheerrnneett WWAANN
DHCPv6 client mode would use DHCPv6 protocol to obtain IPv6 address from server.
Available settings are explained as follows:
Item Description Identify Association Choose Prefix Delegation or Non-temporary Addres s as the
identify association. IAID Type a number as IAID. WAN Connection
Detection
Such function allows you to verify whether network
connection is alive or not through NS Detect or Ping Detect.
Mode – Choose Always On, Ping Detect or NS Detect for the
system to execute for WAN detection. With NS Detect mode,
the system will check if network connection is established or
not, like IPv4 ARP Detect. Always On means no detection
will be executed. The network connection will be on always.
Ping IP/Hostname – If you choose Ping Detect as
detection mode, you have to type IP address in this field for pinging.
TTL (Time to Live) –If you choose Ping Detect as
detection mode, you have to type TTL value.
Bridge Mode Enable Bridge Mode - If the function is enabled, the router
will work as a bridge modem.
Enable Firewall – It is available when Bridge Mode is
enabled. When both Bridge Mode and Firewall check boxes
are enabled, the settings configured (user profiles) under
User Management will be ignored. And all of the filter rules
defined and enabled in Firewall menu will be activated.
Bridge Subnet – Make a bridge between the selected LAN
subnet and such WAN interface.
After finished the above settings, click OK to save the settings.
Page 80
Vigor3220 Series User’s Guide
68
IIII--11--22--1111 DDeettaaiillss PPaaggee ffoorr IIPPvv66
SSttaattiicc IIPPvv66 iinn EEtthheerrnneett WWAANN
This type allows you to setup static IPv6 address for WAN interface.
Available settings are explained as follows:
Item Description Static IPv6 Address
configuration
IPv6 Address – Type the IPv6 Static IP Address.
Prefix Length – Type the fixed value for prefix length.
Add – Click it to add a new entry.
Delete – Click it to remove an existed entry. Current IPv6 Address
Table
Display current interface IPv6 address.
Static IPv6 Gateway Configuration
IPv6 Gateway Address - Type your IPv6 gateway address
here. WAN Connection
Detection
Such function allows you to verify whether network
connection is alive or not through Ping Detect.
Mode – Choose Always On or Ping Detect for the system to
execute for WAN detection. Always On means no detection
will be executed. The network connection will be on always.
Ping IP/Hostname – If you choose Ping Detect as
detection mode, you have to type IP address in this field for pinging.
TTL (Time to Live) –If you choose Ping Detect as
detection mode, you have to type TTL value.
Page 81
Vigor3220 Series User’s Guide
6
9
Bridge Mode Enable Bridge Mode - If the function is enabled, the router
will work as a bridge modem.
Enable Firewall – It is available when Bridge Mode is
enabled. When both Bridge Mode and Firewall check boxes
are enabled, the settings configured (user profiles) under
User Management will be ignored. And all of the filter rules
defined and enabled in Firewall menu will be activated.
Bridge Subnet – Make a bridge between the selected LAN
subnet and such WAN interface.
After finished the above settings, click OK to save the settings.
IIII--11--22--1122 DDeettaaiillss PPaaggee ffoorr IIPPvv66
66iinn44 SSttaattiicc TTuunnnneell iinn EEtthheerrnneett WWAANN
This type allows you to setup 6in4 Static Tunnel for WAN interface. Such mode allows the router to access IPv6 network through IPv4 network. However, 6in4 offers a prefix outside of 2002::0/16. So, you can use a fixed endpoint rather
than anycast endpoint. The mode has more reliability.
Available settings are explained as follows:
Item Description Remote Endpoint IPv4
Address
Type the static IPv4 address for the remote server.
6in4 IPv6 Address Type the static IPv6 address for IPv4 tunnel with the value
for prefix length. LAN Routed Prefix Type the static IPv6 address for LAN routing with the value
for prefix length. Tunnel TTL Type the number for the data lifetime in tunnel.
Page 82
Vigor3220 Series User’s Guide
7
0
WAN Connection Detection
Such function allows you to verify whether network
connection is alive or not through Ping Detect.
Mode – Choose Always On or Ping Detect for the system to
execute for WAN detection. Always On means no detection
will be executed. The network connection will be on always.
Ping IP/Hostname – If you choose Ping Detect as
detection mode, you have to type IP address in this field for pinging.
TTL (Time to Live) –If you choose Ping Detect as
detection mode, you have to type TTL value.
After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6in4 Static Tunnel mode.
Page 83
Vigor3220 Series User’s Guide
71
IIII--11--22--1133 DDeettaaiillss PPaaggee ffoorr IIPPvv66
66rrdd iinn EEtthheerrnneett WWAANN
This type allows you to setup 6rd for WAN interface.
Available settings are explained as follows:
Item Description 6rd Mode Auto 6rd – Retrieve 6rd prefix automatically from 6rd service
provider. The IPv4 WAN must be set as "DHCP".
Static 6rd - Set 6rd options manually. IPv4 Border Relay Type the IPv4 addresses of the 6rd Border Relay for a given
6rd domain. IPv4 Mask Length Type a number of high-order bits that are identical across all
CE IPv4 addresses within a given 6rd domain.
It may be any value between 0 and 32.
6rd Prefix Type the 6rd IPv6 address. 6rd Prefix Length Type the IPv6 prefix length for the 6rd IPv6 prefix in number
of bits. WAN Connection
Detection
Such function allows you to verify whether network
connection is alive or not through Ping Detect.
Mode – Choose Always On or Ping Detect for the system to
execute for WAN detection. Always On means no detection
will be executed. The network connection will be on always.
Ping IP/Hostname – If you choose Ping Detect as
detection mode, you have to type IP address in this field for pinging.
TTL (Time to Live) –If you choose Ping Detect as
detection mode, you have to type TTL value.
After finished the above settings, click OK to save the settings. Below shows an example for successful IPv6 connection based on 6rd mode.
Page 84
Vigor3220 Series User’s Guide
72
Page 85
Vigor3220 Series User’s Guide
73
IIII--11--33 MMuullttii--PPVVCC//VVLLAANN
This router allows you to create multi-PVC for different data transferring for using. Simply go to WAN and select Multi-PVC/VLAN page.
The system allows you to set up to eight channels which are ready for choosing as the first PVC line that will be used as multi-PVC.
Available settings are explained as follows:
Item Description Channel Display the number of each channel.
Channels 1 and 2 are used by the Internet Access web user
interface and can not be configured here.
Channels 5 ~ 10 are configurable. Enable Display whether the settings in this channel are enabled
(Yes) or not (No).
WAN Type Displays the physical medium that the channel will use. VLAN Tag Displays the VLAN tag value that will be used for the packets
traveling on this channel.
Page 86
Vigor3220 Series User’s Guide
7
4
Click any index (6~8) to get the following web page:
Available settings are explained as follows:
Item Description Multi-VLAN Channel 6~8 Enable – Click it to enable the configuration of this channel.
Disable –Click it to disable the configuration of this channel. WAN Type The connections and interfaces created in every channel may
select a specific WAN type to be built upon. In the
Multi-VLAN application, only the Ethernet WAN type is
available. The user will be able to select the physical WAN
interface the channel shall use here. General Settings VLAN Tag – Type the value as the VLAN ID number. Valid
settings are in the range from 1 to 4095. The network traffic flowing on each channel will be identified by the system via their VLAN Tags. Channels using the same WAN type may not configure the same VLAN tag value.
Priority – Choose the number to determine the packet priority for such VLAN. The range is from 0 to 7.
Bridge mode Enable – Click it to enable Bridge mode for such channel.
Physical Members – Group the physical ports by checking the
corresponding check box(es) for applying the bridge
connection.
Page 87
Vigor3220 Series User’s Guide
75
Open WAN Interface for this Channel
Check the box to enable relating function.
WAN Application –
Management – It can be specified for general management
(Web configuration/telnet/TR069). If you choose
Management, the configuration for this VLAN will be
effective for Web configuration/telnet/TR069.
IPTV - The IPTV configuration will allow the WAN interface to
send IGMP packets to IPTV servers.
WAN Connection Detection
Such function allows you to verify whether network
connection is alive or not through ARP Detect or Ping Detect.
Mode – Choose ARP Detect or Ping Detect for the system to
execute for WAN detection.
Ping IP – If you choose Ping Detect as detection mode, you
have to type IP address in this field for pinging.
TTL (Time to Live) – Displays value for your reference. TTL
value is set by telnet command. WAN Setup It is available only when VDSL or Ethernet (WAN2) is
selected as WAN Type. Choose PPPoE/PPPoA Client or
Static or Dynamic IP as the WAN mode for such channel.
If PPPoE/PPPoA Client is selected as WAN Setup, you
have to configure the settings listed under ISP Access Setup. Enter your allocated username, password and authentication parameters according to the information provided by your ISP.
ISP Name – Type in the name of your ISP. Username – Type in the username provided by ISP in this
field. The maximum length of the name you can set is 80 characters.
Password – Type in the password provided by ISP in this field. The maximum length of the password you can set is 48 characters.
PPP Authentication – Select PAP only or PAP or CHAP for PPP.
Always On – Check it to keep the network
connection always.
Idle Timeout – Set the timeout for breaking down
the Internet after passing through the time without any action.
Fixed IP – Click Yes to use this function and type in a fixed IP address in the box of Fixed IP Address.
If Static or Dynamic IP is selected as WAN Setup, you
have to configure the settings listed under WAN IP
Network Settings .
Obtain an IP address automatically – Click this button to
obtain the IP address automatically.
Router Name – Type in the router name provided by
ISP.
Domain Name – Type in the domain name that you
have assigned.
Specify an IP address – Click this radio button to specify some data.
IP Address – Type in the private IP address. Subnet Mask – Type in the subnet mask.
Page 88
Vigor3220 Series User’s Guide
76
Gateway IP Address – Type in gateway IP address.
DNS Server IP Address - Type in the primary IP address for the router if you want to use Static IP mode. If necessary, type in secondary IP address for necessity in the future.
After finished the above settings, click OK to save the settings and return to previous page.
Page 89
Vigor3220 Series User’s Guide
77
IIII--11--44 WWAANN BBuuddggeett
This function is used to determine the data traffic volume for each WAN interface respectively to prevent from overcharges for data transmission by the ISP. Please note that the Quota Limit and Billing cycle day of month settings will need to be configured correctly first in order for some period calculations to be performed correctly.
IIII--11--44--11 GGeenneerraall SSeettuupp
Click WAN1/WAN2/WAN3/WAN4/WAN5 link to open the following web page.
Available settings are explained as follows:
Item Description Enable Check the box to enable such function. Quota Limit Type the data traffic quota allowed for such WAN interface.
There are two unit (MB and GB) offered for you to specify. When quota exceeded Check the box(es) as the condition(s) for the system to
perform when the traffic has exceeded the budget limit.
Shutdown WAN interface – All the outgoing traffic through
such WAN interface will be terminated.
Send Mail Alert to Administrator – The system will send out
a warning message to the administrator when the quota is
Page 90
Vigor3220 Series User’s Guide
78
running out. However, the connection charges will be
calculated continuously.
Send SMS messages to Administrator - The system will send
out SMS message to the administrator when the quota is
running out. Monthly Some ISP might apply for the network limitation based on the
traffic limit per month. This setting is to offer a mechanism
of resetting the traffic record every month.
Data quota resets on day … – You can determine the starting
day in one month. Custom This setting allows the user to define the billing cycle
according to his request.
The WAN budget will be reset with an interval of billing
cycle.
Custom – Monthly is default setting. If long period or a short
period is required, use Custom. The period of cycle duration
is between 1 day and 60 days. You can determine the cycle
duration by specifying the days and the hours. In addition,
you can specify which day of today is in a cycle.
Cycle duration: Specify the days to reset the traffic
record. For example, 7 means the whole cycle is 7 days; 20 means the whole cycle is 20 days. When the time is up, the router will reset the traffic record automatically.
Today is day – Specify the day in the cycle as the starting
point which Vigor router will reset the traffic record. For example, “3” means the third day of the cycle duration.
After finished the above settings, click OK to save the settings.
IIII--11--44--22 MMoonniittoorr PPaaggee
The monitor page displays the status WAN budget, including the duration and the usage.
Page 91
Vigor3220 Series User’s Guide
79
If the WAN budget is exhausted, a lock will be displayed on the page if Shutdown WAN interface is selected. Which means no data transmission will be carried out. Moreover, the system will send out a warning message to the administrator if Send Mail Alert to Administrator is selected. Or, the system will send out SMS message to the administrator if Send SMS messages to Administrator is selected.
Page 92
Vigor3220 Series User’s Guide
8
0
AApppplliiccaattiioonn NNootteess
AA--11 HHooww ttoo ccoonnffiigguurree sseettttiinnggss ffoorr IIPPvv66 SSeerrvviiccee iinn VViiggoorr33222200
Due to the shortage of IPv4 address, more and more countries use IPv6 to solve the problem. However, to continually use the original rich resources of IPv4, both IPv6 and IPv4 networks shall communicate for each other via intercommunication mechanis m to complete the shifting job from IPv4 to IPv6 gradually. At present, there are three common types of intercommunication mechanisms:
Dual Stack
The user can use both IPv4 and IPv6 techniques at the same time. That means adding an IPv6 stack on the origin network layer to let the host own the communication capability of IPv4 and IPv6.
Tunnel
Both IPv6 hosts can communication for each other via existing IPv4 network environment. The IPv6 packets will be encapsulated with the header of IPv4 first. Later, the packets will be transformed and judged by IPv4 router. Once the packets arrive the border between IPv4 and IPv6, the header of IPv4 on the packets will be removed. Then, the packets with IPv6 address will be forwarded to the destination of IPv6 network.
Translation
Such feature is active only for the user who uses IPv4 to communicate with other user using IPv4 service.
Before configuring the settings on Vigor3220, you need to know which connection type that your IPv6 service used.
Info
For the IPv6 service, you have to configure WAN/LAN settings before using the service.
II.. CCoonnffiigguurriinngg tthhee WWAANN SSeettttiinnggss
For the IPv6 WAN settings for Vigor3220, there are five connection types to be chosen: PPP, TSPC, AICCU, DHCPv6 Client and Static IPv6.
1. Access into the web user interface of Viogr3220. Open WAN>> Internet Access. Choose one of the WAN interfaces as the one supporting IPv6 service. Then, click the IPv6 button of the selected WAN.
Page 93
Vigor3220 Series User’s Guide
81
Info
Only one WAN interface support IPv6 service at one time. In this example, WAN2 is chosen as the one supporting IPv6 service.
2. In the following figure, use the drop down list to choose a proper connection type.
Different connection types will bring out different configuration page. Refer to the following:
PPP – Dual Stack application, IPv4 and IPv6 services can be utilized at the same time
Choose PPP and type the information for PPPoE of IPv4.
Page 94
Vigor3220 Series User’s Guide
82
Access into the setting page for IPv6 service, it is not necessary for you to configure anything.
Click OK and open Online Status. If the connection is successful, you will get the IP address for IPv4 and IPv6 at the same time.
Page 95
Vigor3220 Series User’s Guide
83
Page 96
Vigor3220 Series User’s Guide
84
TSPC – Tunnel application, both IPv6 hosts communicate through IPv4 network
Choose TSPC and type the information for TSPC service.
Info
While using such mode, you have to make sure the IPv4 network connection is normal.
(In the following figure, the TSPC information is obtained from http://gogo6.com/ after applied for the service.)
Click OK and open Online Status. If the connection is successful, the physical connection will be shown as follows:
Page 97
Vigor3220 Series User’s Guide
85
AICCU – Tunnel application
Choose AICCU and type the information for AICCU of IPv6.
Info
While using such mode, you have to make sure the IPv4 network connection is normal.
(In the following figure, the AICCU information is obtained from https://www.sixxs.net/main/ after applied for the service.)
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 98
Vigor3220 Series User’s Guide
86
DHCPv6 Client
Choose DHCPv6 Client. Click one of the identity associations and type the IAID number.
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 99
Vigor3220 Series User’s Guide
87
Static IPv6
Choose Static IPv6. Type IPv6 address, Prefix Length and Gateway Address.
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Page 100
Vigor3220 Series User’s Guide
88
6in4 Static Tunnel
Choose 6in4 Static Tunnel. Type remote endpoint IPv4 address, 6in4 IPv6 Address, LAN Routed Prefix and Tunnel TTL.
Click OK and open Online Status. If the connection is successful, the physical connection will be shows as follows:
Loading...