Page 1
Page 2
Vigor3900 Series User’s Guide
ii
Vigor3900
Multi-WAN Security Appliance
User’s Guide
Version: 2.0
Firmware Version: V1.1.0
(For future update, please visit DrayTek website)
Date: September 1, 2015
Page 3
Vigor3900 Series User’s Guide
iii
Intellectual Property Rights (IPR) Information
Copyrights
© All rights reserved. This publication contains information that is protected by
copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval
system, or translated into any language without written permission from the copyright
holders.
Trademarks
The following trademarks are used in this document:
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are
trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Inc.
Other products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
Read the installation guide thoroughly before you set up the router.
The router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
Do not place the router in a damp or humid place, e.g. a bathroom.
The router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
Do not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
Do not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
Keep the package out of reach of children.
When you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, dam aged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revi se the m anual and onli ne
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner
Web registration is preferred. You can register your Vigor router via
http://www.draytek.com.
Firmware & Tools
Updates
Due to the continuous evolution of DrayTek technology, all routers will be regularly
upgraded. Please consult the DrayTek web site for more information on newest
firmware, tools and documents.
http://www.draytek.com
Page 4
Vigor3900 Series User’s Guide
iv
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu County, Taiwan
303
Product: Vigor3900
DrayTek Corp. declares that Vigor3900 of routers are in compliance with the following essential requirements
and other relevant provisions of EC, Directive 2004/108/EC.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class A and EN55024/Class A.
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or televisio n recept i on , whi ch can be determined by turning the equipment of f and
on, the user is encouraged to try to correct the interference by one of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
More update, please visit www.draytek.com.
Page 5
Vigor3900 Series User’s Guide
v
TTaabbllee ooff CCoonntteennttss
Chapter 1: Introduction.....................................................................................................1
1.1 LED Indicators and Connectors................................................................................................... 2
1.2 Hardware Installation.................................................................................................................... 4
1.2.1 Network Connection ................................................................................................................4
1.2.2 Rack-Mounted Installation.......................................................................................................5
Chapter 2: Basic Setup......................................................................................................7
2.1 Changing Password..................................................................................................................... 7
2.2 Quick Start Wizard........................................................................................................................ 9
2.2.1 Step 1 - Specifying the WAN Profile........................................................................................9
2.2.2 Step 2 - Configuring the Selected Protocol...........................................................................11
2.3 Register Vigor Router................................................................................................................. 18
Chapter 3: Application and Tutorial................................................................................21
3.1 How to Configure Load Balance with Multi-WAN on Vigor3900?.............................................. 21
3.2 How to Configure OSPF?........................................................................................................... 27
3.3 How to Configure LAN to LAN IPSec Tunnel between Vigor3900 and Other Router (Main Mode)
.......................................................................................................................................................... 33
3.4 How to run RDP service in the browser via logging in 3900's HTTPS Server?......................... 36
3.5 How to Configure VPN Load Balance between Vigor3900 and Other Router........................... 41
3.6 How to Setup 50 WANs on Vigor3900....................................................................................... 50
3.7 CVM Application - How to manage the CPE (router) thro ugh Vigor3900?................................ 55
3.8 CVM Application - How to build the VPN between remote devices and Vigor3900? ................ 60
3.9 CVM Application - How to upgrade CPE firmware through Vigor3900?.................................... 63
3.10 How to use High Availability for Vigor routers?........................................................................ 69
3.1 1 How to Configure DNS Inbound Load Balance on Vigor 3900?.............................................. 73
Chapter 4: Advanced Web Configuration......................................................................77
4.1 WAN Setup................................................................................................................................. 77
4.1.1 General Setup........................................................................................................................78
4.1.2 Inbound Load Balance...........................................................................................................98
4.1.3 Switch .............................................................................................................................104
4.2 LAN .......................................................................................................................................... 109
4.2.1 General Setup......................................................................................................................109
4.2.2 PPPoE Server......................................................................................................................123
4.2.3 Switch .............................................................................................................................127
4.2.4 Bind IP to MAC....................................................................................................................133
4.2.5 LAN DNS .............................................................................................................................136
4.3 Routing..................................................................................................................................... 139
4.3.1 Load Balance Pool...............................................................................................................139
4.3.2 Static Route.........................................................................................................................143
Page 6
Vigor3900 Series User’s Guide
vi
4.3.3 Policy Route.........................................................................................................................149
4.3.4 Default Route.......................................................................................................................166
4.3.5 RIP Configuration ................................................................................................................167
4.3.6 OSPF Configuration.............................................................................................................168
4.3.7 BGP Configuration...............................................................................................................171
4.4 NAT........................................................................................................................................... 176
4.4.1 Port Redirection...................................................................................................................176
4.4.2 DMZ Host .............................................................................................................................180
4.4.3 ALG .............................................................................................................................182
4.4.4 Connection Timeout.............................................................................................................184
4.5 Firewall..................................................................................................................................... 185
4.5.1 Filter Setup ..........................................................................................................................185
4.5.2 DoS Defense .......................................................................................................................210
4.5.3 MAC Block...........................................................................................................................213
4.6 Objects Setting......................................................................................................................... 215
4.6.1 IP Object .............................................................................................................................216
4.6.2 IP Group .............................................................................................................................218
4.6.3 IPv6 Object..........................................................................................................................220
4.6.4 Country Object.....................................................................................................................222
4.6.5 Service Type Object ............................................................................................................224
4.6.6 Service Type Group.............................................................................................................226
4.6.7 Keyword /DNS Object..........................................................................................................228
4.6.8 File Extension Object...........................................................................................................232
4.6.9 APP Object..........................................................................................................................234
4.6.10 Web Category Object ........................................................................................................238
4.6.11 QQ Object..........................................................................................................................242
4.6.12 QQ Group..........................................................................................................................245
4.6.13 Time Object .......................................................................................................................247
4.6.14 Time Group........................................................................................................................249
4.6.15 SMS Service Object...........................................................................................................251
4.6.16 Mail Service Object............................................................................................................253
4.6.17 Notification Object..............................................................................................................255
4.7 User Management.................................................................................................................... 257
4.7.1 Web Portal...........................................................................................................................258
4.7.2 User Profile..........................................................................................................................263
4.7.3 User Group..........................................................................................................................276
4.7.4 Guest Profile........................................................................................................................278
4.7.5 RADIUS .............................................................................................................................284
4.7.6 LDAP/Active Directory.........................................................................................................286
4.8 Application................................................................................................................................ 289
4.8.1 Dynamic DNS......................................................................................................................289
4.8.2 GVRP .............................................................................................................................294
4.8.3 IGMP Proxy .........................................................................................................................295
4.8.4 UPnP .............................................................................................................................297
4.8.5 High Availability ...................................................................................................................298
4.8.6 Wake on LAN.......................................................................................................................308
4.8.7 SMS / Mail Alert Service......................................................................................................311
4.9 VPN and Remote Access......................................................................................................... 315
4.9.1 VPN Client Wizard...............................................................................................................315
4.9.2 VPN Server Wizard..............................................................................................................322
4.9.3 Remote Access Control.......................................................................................................328
4.9.4 PPP General Setup .............................................................................................................329
4.9.5 IPSec General Setup...........................................................................................................333
4.9.6 VPN Profiles ........................................................................................................................334
Page 7
Vigor3900 Series User’s Guide
vii
4.9.7 VPN Trunk Management.....................................................................................................347
4.9.8 Connection Management ....................................................................................................352
4.10 Certificate Management......................................................................................................... 354
4.10.1 Local Certificate.................................................................................................................355
4.10.2 Trusted CA Certificate .......................................................................................................360
4.10.3 Remote Certificate.............................................................................................................363
4.11 SSL Proxy............................................................................................................................... 364
4.11.1 SSL Web Proxy .................................................................................................................364
4.11.2 SSL Application .................................................................................................................366
4.11.3 Online User Status.............................................................................................................370
4.12 Central VPN Management..................................................................................................... 371
4.12.1 General Setup....................................................................................................................371
4.12.2 CPE Management .............................................................................................................373
4.12.3 Log/Alert ............................................................................................................................381
4.13 Bandwidth Management ........................................................................................................ 383
4.13.1 Quality of Service...............................................................................................................383
4.13.2 QoS Rule...........................................................................................................................387
4.13.3 Sessions Limit....................................................................................................................394
4.13.4 Bandwidth Limit .................................................................................................................397
4.14 USB Application......................................................................................................................401
4.14.1 Disk Status.........................................................................................................................401
4.14.2 FTP Server ........................................................................................................................402
4.14.3 Temperature Sensor..........................................................................................................403
4.14.4 Modem Support List...........................................................................................................405
4.15 System Maintenance.............................................................................................................. 406
4.15.1 TR-069 .............................................................................................................................406
4.15.2 Administrator Password.....................................................................................................408
4.15.3 Configuration Backup ........................................................................................................409
4.15.4 Syslog / Mail Alert..............................................................................................................411
4.15.5 Time and Date...................................................................................................................414
4.15.6 Access Control...................................................................................................................415
4.15.7 SNMP Setup......................................................................................................................419
4.15.8 Reboot System..................................................................................................................420
4.15.9 Firmware Upgrade.............................................................................................................423
4.15.10 APP Signature Upgrade..................................................................................................425
4.15.11 APP Support List .............................................................................................................427
4.16 Diagnostics............................................................................................................................. 428
4.16.1 Routing Table ....................................................................................................................428
4.16.2 ARP Cache Table..............................................................................................................431
4.16.3 DHCP Table.......................................................................................................................434
4.16.4 Session Table....................................................................................................................436
4.16.5 Traffic Graph......................................................................................................................437
4.16.6 Web Console.....................................................................................................................439
4.16.7 Ping/Trace Route...............................................................................................................439
4.16.8 Data Flow Monitor..............................................................................................................440
4.16.9 User Status........................................................................................................................441
4.17 External Devices .................................................................................................................... 442
4.18 Product Registration............................................................................................................... 443
Chapter 5: Trouble Shooting.........................................................................................445
Page 8
Vigor3900 Series User’s Guide
viii
5.1 Checking If the Hardware Status Is OK or Not......................................................................... 445
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ...................... 446
5.3 Pinging the Router from Y our Computer.................................................................................. 449
5.4 Checking If the ISP Settings are OK or Not.............................................................................450
5.5 Backing to Factory Default Setting If Necessary...................................................................... 451
5.6 Contacting DrayTek.................................................................................................................. 452
Page 9
Vigor3900 Series User’s Guide
1
C
Chhaapptteerr 11:: IInnttrroodduuccttiioonn
Note: This is a generic International version of the user guide. Specification,
compatibility and features vary by region. For specific user guides suitable for your
region or product, please contact local distributor.
The Vigor3900 Series integrates a rich suite of functions, including NAT, firewall, VPN,
load balance, and bandwidth management capability. These products are very suitable for
providing multi-integrated solutions to SME markets.
A Virtual Private Network (VPN) is an extension of a private network that encompasses
links across shared or public networks like an Intranet. A VPN enables you to send data
between two computers across a shared public Internet network in a manner that emulates
the properties of a point-to-point private link. The DrayTek Vigor3900 Series VPN router
supports Internet-industry standards technology to provide customers with open,
interoperable VPN solutions such as X.509, DHCP over Internet Protocol Security (IPSec)
up to 500 tunnels, and Point-to-Point Tunneling Protocol (PPTP).
Page 10
Vigor3900 Series User’s Guide
2
11..11 LLEEDD IInnddiiccaattoorrss aanndd CCoonnnneeccttoorrss
Before you use the Vigor router, please get acquainted with the LED indicators and connectors first.
The displays of LED indicators and connectors for the routers are different slightly.
DDeessccrriippttiioonn ffoorr LLEEDD
LED Status Explanation
On The router is powered on. PWR
Off The router is powered off.
Blinking The system is active. ACT
On/Off The system is hanged.
On The fiber connection is established. SFP 1/2
Off No fiber connection is established.
On The USB device is installed and ready. USB 1/2
Off No USB device is installed.
On The Ethernet link is established on corresponding port.
Blinking The data transmission is done through the corresponding
port.
LNK
Off No Ethernet link is established.
On It means that a normal 1000 Mbps connection is through
its corresponding port.
GigaLAN1
/LAN 2)
1000
Off It means that a normal 10/100 Mbps connection is
through its corresponding port.
On The Ethernet link is established.
Blinking The data transmission is done through the corresponding
port.
LNK
Off No Ethernet link is established.
On It means that a normal 1000Mbps connection is through
its corresponding port.
Giga
WAN1/2/3/4
1000
Off It means that a normal 10/100Mbps connection is through
its corresponding port.
Page 11
Vigor3900 Series User’s Guide
3
CCoonnnneeccttoorrss
Interface Description
GigaLAN1 / 2 Connecter for local network devices.
3(SFP) Connecter for fiber cable.
GigaWAN1/2/3/4 Connecter for remote network devices.
5(SFP) Connecter for fiber cable.
Console Provided for technician use.
USB1 / USB2 Connecter for the USB device.
Factory Reset Used to restore the default settings. Press it and keep for
more than 5 seconds. When you see the ACT LED begins
to blink, release the button. Then the router will restart with
the factory default configuration.
Connecter for a power cord.
ON/OFF - Power switch.
Page 12
Vigor3900 Series User’s Guide
4
11..22 HHaarrddwwaarree IInnssttaallllaattiioonn
11..22..11 NNeettwwoorrkk CCoonnnneeccttiioonn
Before starting to configure the router, you have to connect your devices correctly.
1. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of Vigor3900s.
2. Connect the other end of the cable (RJ-45) to the Ethernet port on your computer (that
device also can connect to other computers to form a small area network). The LAN
LED for that port on the front panel will light up.
3. Connect a server/modem/router (depends on your requirement) to any WAN port of
Vigor3900 with Ethernet cable (RJ-45). The WAN1 (to WAN4) LED will light up.
4. Connect the power cord to Vigor3900’s power port on the rear panel, and the other side
into a wall outlet.
5. Power on the device by pressing down the power switch on the rear panel. The PWR
LED should be ON.
6. The system starts to initiate. After completing the system test, the ACT LED will light
up and start blinking.
Below shows an outline of the hardware installation for your reference.
Page 13
Vigor3900 Series User’s Guide
5
11..22..22 RRaacckk--MMoouunntteedd IInnssttaallllaattiioonn
The Vigor3900 Series can be mounted on the wall by using standard brackets shown below.
Attach the brackets to the chassis of a rack. The second bracket attaches the other side of the
chassis.
After the bracket installation, the Vigor3900 Series chassis can be installed in a rack by using
four screws for each side of the rack.
DDeesskkttoopp TTyyppee IInnssttaallllaattiioonn
Rubber pads are included with the Vigor3900 Series. These rubber pads improve the air
circulation and decrease unnecessary rubbing on the desktop.
Page 14
Vigor3900 Series User’s Guide
6
This page is left blank.
Page 15
Vigor3900 Series User’s Guide
7
C
Chhaapptteerr 22::
B
Baassiicc SSeettuupp
For use the router properly, it is necessary for you to change the password of web
configuration for security and adjust primary basic settings.
This chapter explains how to setup a password for an administrator and how to adjust basic
settings for accessing Internet successfully. Be aware that only the administrator can change
the router configuration.
22..11 CChhaannggiinngg PPaasssswwoorrdd
To change the password for this device, you have to access into the web browse with default
password first.
1. Make sure your computer connects to the router correctly.
Notice: You may either simply set up your computer to get IP
dynamically from the router or set up the IP address of the computer to be
the same subnet as the default IP address of Vigor router 192.168.1.1.
For the detailed information, please refer to the later section - Trouble
Shooting of this guide.
2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password. Please type default values on the window for
the first time accessing. The default value for user name is admin and the password is
admin. Next, click Login.
Page 16
Vigor3900 Series User’s Guide
8
3. Now, the Main Screen will pop up.
4. Go to System Maintenance page and choose Administrator Password.
5. Enter the login password (admin) on the field of Original Password. Type a new one
in the field of New Password and retype it on the field of Confirm Password. Then
click Apply to continue.
6. Now, the password has been changed. Next time, use the new password to access the
Web User Interface for this router.
Page 17
Vigor3900 Series User’s Guide
9
22..22 QQuuiicckk SSttaarrtt WWiizzaarrdd
Quick Start Wizard is a wizard which is designed for configuring your router accessing
Internet with simply steps. In the Quick Start Wizard group, you can configure the router to
access the Internet with different modes such as Static, DHCP, PPPoE, or PPTP modes.
For most users, Internet access is the primary application. The router supports the Ethernet
WAN interface for Internet access.
Click Quick Start Wizard from the home page. Quick Start Wizard will guide the user to
establish LAN interface profile, WAN interface profile and select proper protocol for
connection. The following will explain in more detail for the various broadband access
configurations.
22..22..11 SStteepp 11 -- SSppeecciiffyyiinngg tthhee WWAANN PPrrooffiillee
In the first page of Quick Start Wizard, please create a WAN profile.
Available settings are explained as follows:
Item Description
Profile
Use the drop down list to choose one WAN profile.
IPv4 Protocol
Use the drop down list to choose a connection mode for such
WAN profile.
Page 18
Vigor3900 Series User’s Guide
10
Item Description
Static - If Static is selected, you can manually assign a static
IP address to the WAN interface and complete the
configuration by applying the settings.
DHCP - It allows a user to obtain an IP address automatically
from a DHCP server on the Internet. If you choose
DHCP mode, the DHCP server of your ISP will
assign a dynamic IP address for Vigor3900
automatically. It is not necessary for you to assign
any setting. (Host Name and Domain Name are
required for some ISPs).
PPTP - This mode lets user get the IP group information by a
DSL modem with PPTP service from ISP. Your
service provider will give you user name, password,
and authentication mode for a PPTP setting. Click
PPTP as the protocol. Type in all the information
that your ISP provides for this protocol.
If your ISP offers you PPTP (Point-to-Point
Tunneling Protocol) mode, please select PPTP for
this router. Next, enter the required information
provided by your ISP on the web page.
PPPoE - PPPoE stands for Point-to-Point Protocol over
Ethernet. It relies on two widely accepted standards:
PPP and Ethernet. It connects users through an
Ethernet to the Internet with a common broadband
medium, such as a single DSL line, wireless device
or cable modem. All the users over the Ethernet can
share a common connection.
PPPoE is used for most of DSL modem users. All
local users can share one PPPoE connection for
accessing the Internet. Your service provider will
provide you information about user name, password,
and authentication mode.
If your ISP provides you the PPPoE (Point-to-Point
Protocol over Ethernet) connection, please select
PPPoE for this router to get the following page.
Enter the username and password provided by your
ISP on the web page.
Note: After you creating the WAN profile(s) by using Quick Start Wizard, you can
select the existing WAN profiles for next time. Simply use the drop down list to choose
the WAN profile available for modifying.
When you finish the above settings, please click Next to go to next page.
Page 19
Vigor3900 Series User’s Guide
11
22..22..22 SStteepp 22 -- CCoonnffiigguurriinngg tthhee SSeelleecctteedd PPrroottooccooll
This page will be changed according to the IPv4 Protocol Type selected on last page.
IIff SSttaattiicc iiss sseelleecctteedd
If Static is selected, the following screen will appear. You can manually assign a static IP
address to the WAN interface and complete the configuration by applying the settings.
Available parameters are listed as follows:
Item Description
IP Address
Type a public IP address for such WAN profile.
Subnet Mask
Choose the static mask from the drop down list.
Gateway IP Address
Type a public gateway address for such WAN profile.
- click it to remove the IP address if you are not satisfied
with it.
Page 20
Vigor3900 Series User’s Guide
12
DNS Server IP
Address
Add – Click this button to display the IP address field for
adding a new IP address. Type the IP address on the tiny boxes
one by one.
Save – After finished the IP address configuration, click Save
to save the setting onto the router.
– Click the icon to remove the selected entry.
Previous
Click it to return to previous setting page.
Finish
Click it to finish the configuration.
Cancel
Click it to discard the settings configured in this page.
When you finished the above settings, please click Finish.
Page 21
Vigor3900 Series User’s Guide
13
IIff DDHHCCPP iiss sseelleecctteedd
DHCP allows a user to obtain an IP address automatically from a DHCP server on the
Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP
address for Vigor3900 automatically. It is not necessary for you to assign any setting. (Host
Name is required for some ISPs).
Available parameters are listed as follows:
Item Description
Host Name (Optional)
Type a name as the host name for identification.
Previous
Click it to return to previous setting page.
Finish
Click it to finish the configuration.
Cancel
Click it to discard the settings configured in this page.
When you finished the above settings, please click Finish.
IIff PPPPPPooEE iiss sseelleecctteedd
PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted
standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a
common broadband medium, such as a single DSL line, wireless device or cable modem. All
the users over the Ethernet can share a common connection.
PPPoE is used for most of DSL modem users. All local users can share one PPPoE
connection for accessing the Internet. Your service provider will provide you information
about user name, password, and authentication mode.
If your ISP provides you the PPPoE (Point-to-Point Protocol over Ethernet) connection,
please select PPPoE for this router to get the following page. Enter the username and
password provided by your ISP on the web page.
Page 22
Vigor3900 Series User’s Guide
14
Available parameters are listed as follows:
Item Description
Username
Type in the username provided by ISP in this field.
Password
Type in the password provided by ISP in this field.
Previous
Click it to return to previous setting page.
Finish
Click it to finish the configuration.
Cancel
Click it to discard the settings configured in this page.
When you finished the above settings, please click Finish.
Page 23
Vigor3900 Series User’s Guide
15
IIff PPPPTTPP iiss sseelleecctteedd
This mode lets user get the IP group information by a DSL modem with PPTP service from
ISP. Your service provider will give you user name, password, and authentication mode for a
PPTP setting. Click PPTP as the protocol. Type in all the information that your ISP provides
for this protocol.
If your ISP offers you PPTP (Point-to-Point Tunneling Protocol) mode, please select PPTP
for this router. Next, enter the settings provided by your ISP on the web page.
Available parameters are listed as follows:
Item Description
PPTP Over
Usually ISP dynamically assigns IP address to you each time
you connect to it and request. In some case, your ISP provides
service to always assign you the same IP address whenever you
request. In this case, you can fill in this IP address in the Fixed
IP field. Please contact your ISP before you want to use this
function.
Static – specify the IP address.
DHCP - obtain the IP address automatically.
Page 24
Vigor3900 Series User’s Guide
16
Server Address
Type a remote IP address of PPTP server.
Username
Type in the username provided by ISP in this field.
Password
Type in the password provided by ISP in this field.
Previous
Click it to return to previous setting page.
IP Address
Type a public IP address for such WAN profile.
Subnet Mask
Choose the static mask from the drop down list.
Gateway IP Address
Type a public gateway address for such WAN profile.
- click it to remove the IP address if you are not satisfied
with it.
DNS Server IP
Address
To add a new IP address, simply place the mouse cursor on this
filed. The following dialog will appear.
Add – Click this button to display the IP address field for
adding a new IP address.
Save – After finished the IP address configuration, click Save to
save the setting onto the router.
– Click the icon to remove the selected entry.
Previous
Click it to return to previous setting page.
Finish
Click it to finish the configuration.
Cancel
Click it to discard the settings configured in this page.
Page 25
Vigor3900 Series User’s Guide
17
When you finished the above settings, please click Finish. Later, you can surf the Internet at
any time.
When the following screen appears, it means you have finished the Quick Start Wizard
configuration.
Page 26
Vigor3900 Series User’s Guide
18
22..33 RReeggiisstteerr VViiggoorr RRoouutteerr
Please follow the steps below to register the router.
1 Before using such function, please register your router online first. Log into the Web
User Interface of Vigor3900 and click Product Registration.
2 A Login page will be shown on the screen. Please type the account and password that
you created previously. And click Login.
Note: If you haven’t an accessing account, please create a new one first. Please read
the articles on the Agreement regarding user rights carefully while creating a
user account.
Page 27
Vigor3900 Series User’s Guide
19
3 The following page will be displayed after you logging in MyVigor. From this page,
please click Add.
Note: Below the field of Your Device List, all the Vigor routers that you have
registered to MyVigor website will be displayed in sequence.
4 When the following page appears, please type in Nick Name (for the router) and choose
the right registration date from the popup calendar (it appears when you click on the
box of Registration Date). After adding the basic information for the router, please click
Submit.
Page 28
Vigor3900 Series User’s Guide
20
5 Now, your router information has been added to the database. Click OK to leave this
web page and return to My Information web page.
6 Take a look at the page of My Information, the new added Vigor3900 is listed under
Your Device List.
Page 29
Vigor3900 Series User’s Guide
21
C
Chhaapptteerr 33::
A
Apppplliiccaattiioonn aanndd
TTuuttoorriiaall
33..11 HHooww ttoo CCoonnffiigguurree LLooaadd BBaallaannccee wwiitthh MMuullttii--WWAANN oonn
VViiggoorr33990000??
There are two different LANs configured in the following figure. One is for Sale
(192.168.1.1/24) and the other is for FAE (192.168.2.1/24). Sale's LAN will be configured to
go Internet always via WAN1. When WAN1 is down, Sale's LAN will automatically failover
to WAN2. FAE's LAN will be configured to go Internet always via WAN2, but when WAN2
is down Sale's LAN will automatically failover to WAN1.
1. Access into the Web User Interface page of Vigor router (here, we take Vigor300B as
an example).
2. Go to LAN>>General Setup to create a profile for LAN1 (192.168.1.1/24).
Page 30
Vigor3900 Series User’s Guide
22
3. Click Add to open the following page.
Type the information specified for LAN1 profile, then click Apply to save the settings
and exit the screen.
4. Click Add again to create a profile for LAN2 (192.168.2.1/24).
Page 31
Vigor3900 Series User’s Guide
23
Type the information specified for LAN2 profile, then click Apply to save the settings
and exit the screen.
5. Open WAN >> Load Balance and click the Pool tab.
Page 32
Vigor3900 Series User’s Guide
24
6. Click Add under the Pool tab to create a profile (e.g., WAN1WAN2) for automatic
Load Balance between WAN1 and WAN2. Choose Load_Balance as the Mode
option.
Click Add to configure the interface. Setup the Weights (e.g, “1”) of WAN1 and
WAN2 respectively as you want. In this case ratio of WAN1 and WAN2 is 1:1. Also,
you can type 2 and 1 for WAN1 and WAN2, then the ratio of line speed of WAN 1and
line speed of WAN 2 will be 2:1.
7. After clicking Apply, the created profile will be shown on the screen.
8. Open WAN >> Load-Balance and click the Rule tab.
9. Click Add to create a profile for Rule1 accepting the data coming from 192.168.1.0/24
which always goes Internet via WAN1 when WAN1 is up. Type the information
specified for such rule. (e.g., Rule1 for Profile; 192.168.1.0 for Source IP Address;
Page 33
Vigor3900 Series User’s Guide
25
wan1 for Load Balance Pool/WAN Profile and so on). Next, click Apply to save and
exit.
10. Click Add again to create a profile for Rule2 accepting 192.168.2.0/24 which always
goes Internet via WAN2 when WAN2 is up.
11. After clicking Apply, the created profiles will be shown on the screen.
Page 34
Vigor3900 Series User’s Guide
26
12. Next, open WAN >> Default Route. Choose the profile of “WAN1WAN2” as WAN
Profile/Loadbalance Pool Name.
Note: The priority of WAN >> Load Balance>>Rule is higher than WAN >>
Default Route.
Now, you have completed the configuration. Next time, when WAN1 is down, the
connection for PCs behind Sale's LAN (192.168.1.1/24) will automatically failover to
WAN2.
Page 35
Vigor3900 Series User’s Guide
27
33..22 HHooww ttoo CCoonnffiigguurree OOSSPPFF??
OSPF (Open Shortest Path First) uses the algorithm of SPF (Shortest Path First) to calculate
the route metric. It is suitable for large network and complicated data exchange. Both
Vigor2960 and Vigor3900 support up to OSPF version 2(only for IPv4).
The Autonomous System (AS) used in OSPF indicates the largest entity and can be divided
into several areas. Usually, Area 0 will be used as OSPF backbone which distributing the
routing information among areas.
When you need faster convergence than distance vector, want to support much larger
networks or want to have less susceptible to bad routing information, you can enable OSPF
feature to fit your request. Note that both routers must support OSPF function at the same
time to build the OSPF connection.
In the following example, a PC can go 192.168.2.0/24 and 192.168.4.0/24 without setting
any Static Route. Refer to the OSPF topology diagram listed below.
OSPF can place each router (e.g., Vigor3900A, Vigor3900B and Vigor2960 shown above) at
the root of a tree and calculate the shortest path to each destination according to the
cumulative cost to reach the destination.
Each router has its own view of the topology and calculates its own SPF tree, even though all
the routers build a shortest-path tree using the same link-state database.
Page 36
Vigor3900 Series User’s Guide
28
CCoonnffiigguurraattiioonn ffoorr VViiggoorr33990000 AA,,
1. Open LAN >> General Setup to create a LAN (192.168.1.1/24) profile named lan1
with the settings shown below.
2. Next, continue to create a LAN (192.168.3.1/24) profile named lan2 with the settings
shown below.
3. Open LAN >> Static Route and click the Inter-LAN Route tab to enable this profile.
Page 37
Vigor3900 Series User’s Guide
29
4. Open LAN >> OSPF Configuration to enable this profile. Click Add to make the LAN
Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.)
CCoonnffiigguurraattiioonn ffoorr VViiggoorr33990000 BB,,
1. Open LAN >> General Setup to create a LAN (192.168.2.1/24) profile named lan1
with the settings shown below.
2. Next, continue to create a LAN (192.168.3.2/24) profile named lan2 with the settings
shown below.
Page 38
Vigor3900 Series User’s Guide
30
3. Open LAN >> Static Route and click the Inter-LAN Route tab to enable this profile.
4. Open LAN >> OSPF Configuration to enable this profile. Click Add to make the LAN
Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.)
CCoonnffiigguurraattiioonn ffoorr VViiggoorr22996600,,
1. Open LAN >> General Setup to create a LAN (192.168.4.1/24) profile named lan1
with the settings shown below.
Page 39
Vigor3900 Series User’s Guide
31
2. Next, continue to create a LAN (192.168.3.3/24) profile named lan2 with the settings
shown below.
3. Open LAN >> Static Route and click the Inter-LAN Route tab to enable this profile.
4. Open LAN >> OSPF Configuration to enable this profile. Click Add to make the LAN
Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.)
Page 40
Vigor3900 Series User’s Guide
32
5. After setting, check the routing information (marked with red line) which is created by
OSPF.
RRoouuttiinngg iinnffoorrmmaattiioonn ffoorr VViiggoorr33990000 AA
RRoouuttiinngg iinnffoorrmmaattiioonn ffoorr VViiggoorr33990000 BB
RRoouuttiinngg iinnffoorrmmaattiioonn ffoorr VViiggoorr22996600
Page 41
Vigor3900 Series User’s Guide
33
33..33 HHooww ttoo CCoonnffiigguurree LLAANN ttoo LLAANN IIPPSSeecc TTuunnnneell bbeettwweeeenn
VViiggoorr33990000 aanndd OOtthheerr RRoouutteerr ((MMaaiinn MMooddee))
Here provides an example about LAN to LAN IPSec tunnel established between Vigor3900
and Vigor2710.
CCoonnffiigguurriinngg VViiggoorr33990000
1. Access into the Web User Interface of Vigor3900 and open VPN and Remote Access
>> LAN to LAN Profiles to add a new VPN configuration.
Type the Pre-shared key and choose a WAN Profile. Specify Local IP/Subnet Mask
with 192.168.29.0/24. The Remote Host should be Vigor 2710's WAN IP address; and
the Remote IP/Subnet Mask should be192.168.2.0/24.
2. Click Apply to save the settings and return to previous page.
Page 42
Vigor3900 Series User’s Guide
34
CCoonnffiigguurriinngg VViiggoorr2277110
0
1. In Vigor2710, it is necessary to build two VPN connections (for two WANs) to connect
with Vigor3900. Please open the Web User Interface of Vigor2710 and open VPN and
Remote Access >> LAN to LAN.
First, please type the name of such VPN connection in the field of Profile Name
(e.g., 3900).
Check the box of Enable this profile.
Choose Dial-Out as Call Direction and check the box of Always on.
2. For Dial-Out Settings, please choose IPSec Tunnel and type WAN IP address of
Vigor3900 in the field of Server IP/Host Name for VPN (e.g., 1.169.162.1). Type the
same IKE Pre-Shared Key configured in Vigor3900.
Page 43
Vigor3900 Series User’s Guide
35
3. For the role of Vigor2710 is dialing-out, please skip Dial-In setting. Type the Remote
Network IP and Remote Network Mask of Vigor3900 to complete configuration.
4. Please check if the VPN connection is built successfully in both devices respectively.
For Vigor3900, open VPN and Remote Access>>IPSec>>Status for viewing the
result.
As to Vigor2710, please open VPN and Remote Access>>Connection Management
to confirm the result.
Page 44
Vigor3900 Series User’s Guide
36
33..44 HHooww ttoo rruunn RRDDPP sseerrvviiccee iinn tthhee bbrroowwsseerr vviiaa llooggggiinngg iinn 33990000''ss
HHTTTTPPSS SSeerrvveerr??
Remote Desktop Protocol (RDP) is a protocol designed for secure communications in
networks using Microsoft Terminal Services. An easy way is provided to establish
connection between the router and the RDP Server via any browser.
1. Open the Web User Interface of Vigor3900.
2. Enable the HTTPS service from System Maintenance >> Access Control by clicking
Enable for HTTPS Allow and type 443 as the value of HTTPS Port.
Page 45
Vigor3900 Series User’s Guide
37
3. Open SSL VPN >> SSL Application and click the RDP tab to create a profile named
“Win7”. Type IP address, Port number, and Screen Size as you want, then click Apply
to save the settings.
4. Open User Management >> User Profile to create a new profile named “7788”. Set
the Password as 7788 and choose the profile of Win7 as SSL Application (RDP).
Click Apply.
5. Logout Vigor3900.
Page 46
Vigor3900 Series User’s Guide
38
6. Login Vigor3900 HTTPS Server with 7788 for both Username and Password.
7. A screen like the following figure will appear. Simply click the SSL Application link.
8. In the following screen, click Connect for connecting to Win7, the RDP server.
Page 47
Vigor3900 Series User’s Guide
39
9. After that, you can access into Windows 7 via a browser. Note the message below the
window. In which, TLS means Transport Layer Security.
Page 48
Vigor3900 Series User’s Guide
40
Troubleshooting
If you have installed Java Runtime Environment edition 6 but still cannot establish the
connection, please make sure you have disabled “Use TLS 1.0” in the Java Control Panel
as figure shown below. Then, try to connect again.
Page 49
Vigor3900 Series User’s Guide
41
33..55 HHooww ttoo CCoonnffiigguurree VVPPNN LLooaadd BBaallaannccee bbeettwweeeenn VViiggoorr33990000
aanndd OOtthheerr RRoouutteerr
The staff in branch office can access into mail server/FTP server installed in the headquarters
via VPN Load Balance tunnels. Refer to the following figure.
Vigor3900 allows users to build VPN load balance connection between Vigor3900 and other
router. Take Vigor2950 for an example. There are two WANs on Vigor2950 and two WANs
on Vigor3900. We will build VPN connection with load balance between Vigor3900 and
two WANs of Vigor2950 respectively.
CCoonnffiigguurriinngg VViiggoorr33990000
1. Access into the Web User Interface of Vigor3900 and open VPN and Remote Access
>> VPN Profiles to add new VPN profiles. Click Add.
Page 50
Vigor3900 Series User’s Guide
42
2. Create a profile for WAN 1 (named 2950WAN1). Type the settings as shown below:
Page 51
Vigor3900 Series User’s Guide
43
3. Click Apply to save the settings and exit the dialog.
4. Create a profile for WAN 2 (named 2950WAN2).
Page 52
Vigor3900 Series User’s Guide
44
5. Click Apply to save the settings and exit the dialog.
6. Open VPN and Remove Access>>VPN Trunk Management and click the Load
Balance Pool tab. Click Add to add a Load Balance Pool profile.
7. The following window will pop up. Give a name for the profile.
8. Click the Load Balance tab. Select the IPSec GRE profiles (e.g., 2950WAN1) set for
Vigor2950 then click Apply.
Page 53
Vigor3900 Series User’s Guide
45
9. Click the Load Balance Rule tab and click Add to add a Load Balance rule profile.
10. Enable this profile and input the following settings then click Apply.
Type the local network IP address and Mask of Vigor3900 as Source IP Address and
Source Mask; type the network IP and Mask of Vigor2950 as Destination IP Address &
Destination Mask. Select the Load Balance Pool profile (e.g., 2950_LB) set for
Vigor2950.
Page 54
Vigor3900 Series User’s Guide
46
CCoonnffiigguurriinngg VViiggoorr22995500
1. In Vigor2950, it is necessary to build two VPN connections (for two WANs) to connect
with Vigor3900. Please open the Web User Interface of Vigor2950 and open VPN and
Remote Access >> LAN to LAN.
First, please type the name of such VPN connection in the field of Profile Name
(e.g., 3900WAN1).
Choose WAN1 Only as VPN Dial-Out Through setting to specify which WAN
interface will be used for building VPN connection.
Choose Dial-Out as Call Direction and check the box of Always on.
For Dial-Out Settings, please choose IPSec Tunnel and type WAN IP address of
Vigor3900 in the field of Server IP/Host Name for VPN (e.g., 29.29.29.1). Type
the same IKE Pre-Shared Key configured in Vigor3900.
For the role of Vigor2950 is dialing-out, please skip Dial-In setting. In this
example, please type the 1.1.1.1 in the field of My GRE IP; and type the GRE IP
address 1.1.1.2 in the field of Peer GRE IP.
Page 55
Vigor3900 Series User’s Guide
47
Please type the network IP address and subnet of Vigor3900 in the field of
Remote Network IP and Remote Network Mask. Type the network IP address and
subnet of Vigor2950 in the field of Local Network IP and Local Network Mask.
2. Continue to set the second VPN connection (profile name is 3900WAN2). The first
VPN tunnel will be used by WAN1 of Vigor2950. The second VPN tunnel will be
configured for the WAN2 of Vigor2950. Therefore, please choose WAN2 Only for
VPN Dial-Out Through.
Choose IPSec Tunnel and type the Server IP and Pre-shared Key as shown
below.
In the field of GRE over IPSec, please type the corresponding settings for
Vigor3900. Refer to the following figure.In this example, please type the 2.2.2.1
in the field of My GRE IP; and type the GRE IP address 2.2.2.2 in the field of
Peer GRE IP.
Page 56
Vigor3900 Series User’s Guide
48
Next, type the Network IP and Network Mask for both remote and local ends to
complete the second VPN connection.
3. After finished the settings on both VPN connections, please access the Web User
Interface of Vigor2950 and open VPN and Remote Access > VPN Trunk
Management to make these two VPN connections into one Load Balance group.
4. Type the name (e.g., 3900) of the Load Balance in the field of Profile Name. Specify
the VPN profiles in Member 1 and Member 2 respectively. Then, choose Load
Balance as the Active Mode.
5. Click Add. After finished the settings for Vigor3900 and Vigor2950, please check if
the VPN connection is built successfully in both devices respectively. Take Vigor3900
for an example, open VPN and Remote Access>> Connection Management for
viewing the result.
Page 57
Vigor3900 Series User’s Guide
49
As to Vigor2950, please open VPN and Remote Access>>Connection Management
to confirm the result.
Page 58
Vigor3900 Series User’s Guide
50
33..66 HHooww ttoo SSeettuupp 5500 WWAANNss oonn VViiggoorr33990000
Vigor3900 has 5 physical WANs; however, it can be extended to 50 WANs at most by using
VLAN Tagging technology.
Below will show how to achieve 50 WANs setup by one Vigor3900 and two
VigorSwitch2260s. Refer to the following application illustration:
CCoonnffiigguurriinngg 5500 WWAANN pprrooffiilleess oonn VViiggoorr33990000
1. Change mode from Basic to Advance via WAN>>General Setup page.
Page 59
Vigor3900 Series User’s Guide
51
2. Click OK. Vigor3900 will ask you to re-login.
3. Delete default wan profiles for wan3, wan4 and wan5 by selecting the wan profile then
click Delete.
4. Click Add to add new WANs.
Page 60
Vigor3900 Series User’s Guide
52
5. Create a new WAN profile named with wan1_1, and set VLAN ID named with 111
based on WAN Port 1(WAN1). Note that Untag must be set with Disable. It means
wan1_1 can accept the packets tagged with VLAN ID 111. Next, click Apply to save
the settings.
6. Create other WAN profiles named with wan1_2 ~ wan1_24 (referring to the settings
on the left side of the application illustration) and wan2_1~ wan2_24 (referring to the
settings on the right side of the application illustration) and set them with VLAN ID
(112~ 134 and 211~ 234) by repeating step 4 ~ step 5.
CCoonnffiigguurraattiioonn oonn VViiggoorrSSwwiittcchh22226600
1. Setup VLAN mode as Tag VLAN.
2. Click Add to create a New VLAN GROUP via VLAN>>TAG-based Group page.
Page 61
Vigor3900 Series User’s Guide
53
3. Type VLAN name and VID with 111.
Suppose the physical WAN1 of Vigor3900 connects to Port 26 of VigorSwitch.
Port 26 will receive untagged packets (based on profile wan1) and packets tagged
with 111 to 134 (based on profiles wan1_1 to wan1_24). Therefore VigorSwitch
Port 26 must be the member of VLAN Group ID 111 to 134.
In Member field, select Port 1 and Port 26 as members of VLAN Group 111.
Member setting means only the selected port number (e.g., Port 1 and Port 26)
will receive packets with VLAN TAG 111 coming from Vigor3900.
In Untag field, select Port 1 as Untag. Untag setting means VigorSwitch will
untag the packets while sending it to Port 1. Because general PC or normal
network devices do not accept VLAN packets, therefore in this example,
Vigor3900 WAN1 must be connected to VigorSwitch Port 26 for receiving
packets with tagged VLAN ID.
Since ISP modem usually doesn’t accept tagged packets, we have to set Untag for
the Port (e.g, Port 1) used for ISP modem. Connect ISP modem for wan1_1 to
VigorSwitch Port 1.
4. Create the rest VLAN Groups (total is 24) by referring to the following figure. Please
notice that Port 26 must be selected as the member for each group, for it is the channel
for any packets coming from Vigor3900. As to Untag, when you check Port 2 and Port
26, you have to untag Port 2; when you check Port 3 and Port 26, you have to untag
Port 3; and so forth.
Page 62
Vigor3900 Series User’s Guide
54
5. Go to VLAN>>PVID page to set up PVID for each port.
PVID means VigorSwitch2260 will check and add VLAN tags while receiving
packets from Ports.
ISP modem 1 which connects to Port 1 doesn’t support VLAN Tag.
While the switch receives packets from Port 1, it will add VLAN Tag 111 to the
packets Then Vigor3900 wan1_1 will receive the packets.
6. After finishing the configuration for one VigorSwitch, please set for another
VigorSwitch with the same procedure. The file names shall be wan2_1~ wan2_24 and
the VLAN ID shall be set as 211~ 234.
Page 63
Vigor3900 Series User’s Guide
55
33..77 CCVVMM AApppplliiccaattiioonn -- HHooww ttoo mmaannaaggee tthhee CCPPEE ((rroouutteerr)) tthhrroouugghh
VViiggoorr33990000??
To manage CPEs through Vigor3900, you have to set URL on CPE first and set username
and password for Vigor3900. For this section, we use Vigor2830 series as the example. The
firmware upgrade for the CPE can be done through Vigor2830 series.
33..77..11 CCoonnffiigguurree SSeettttiinnggss oonn VViiggoorr33990000
1. Access into the web user interface of Vigor3900.
2. Open System Maintenance>>Access Control. Check Enable for Web Allow and
type the value for Web Port. Then click Apply to save the settings.
3. Open Central VPN Management>>CPE Management. On the page of CPE
Maintenance, there is no CPE managed by Vigor3900.
4. Open Central VPN Management>>General Setup.
Page 64
Vigor3900 Series User’s Guide
56
5. Click the General Setup tab. Check the Enable box. Specify the WAN interface from
the WAN Profile drop down list. Type the values for Port, Username, and Password
respectively. Remember the values configured in this page.
6. Click Apply to save the settings.
33..77..22 CCoonnffiigguurree SSeettttiinnggss oonn CCPPEE
To manage CPEs through Vigor3900, you have to set ACS URL on CPE first and set
username and password for Vigor3900.
1. Connect one CPE (e.g., Vigor2830 series) and get ready to access into the web user
interface of the CPE.
2. Open a web browser (for example, IE, Mozilla Firefox or Netscape) on your computer
and type http://192.168.1.1.
3. Please type username and password on the window. If you don’t know the correct
username and password, please consult our dealer to get them.
4. Open System Maintenance >> TR-069.
5. In the field of ACS Server, type the URL (IP address with port number) of Vigor3900:
“http://{IP address of Vigor3900}:{CVM port}/ACSServer/services/ACSServlet”
and type the same Username and Password defined on the page of Central VPN
Management>>General Setup in Vigor3900. Then, click Enable for CPE Client and
then click OK to save the settings.
Page 65
Vigor3900 Series User’s Guide
57
33..77..33 IInnvvookkee RReemmoottee MMaannaaggeemmeenntt ffoorr CCPPEE
1. Login the web user interface of the CPE.
2. Open System Maintenance>>Management Setup.
3. Check Allow management from the Internet to set management access control.
Page 66
Vigor3900 Series User’s Guide
58
33..77..44 EEnnaabbllee WWAANN CCoonnnneeccttiioonn oonn CCPPEE
1. Login the web user interface of the CPE.
2. Open WAN>>Internet Access. Use the drop down list of Access Mode on WAN1 to
select MPoA (RFC1483/2684). Then, click Details Page.
3. Click Specify an IP address. Type correct WAN IP address, subnet mask and gateway
IP address for your CPE. Then click OK.
Note: Reboot the CPE device and re-log into Vigor3900. CPE which has registered
to Vigor3900 will be captured and displayed on the page of Central VPN
Management>>CPE Management.
Page 67
Vigor3900 Series User’s Guide
59
33..77..55 CChheecckk CCPPEE MMaaiinntteennaannccee PPaaggee
1. Return to the web user interface of Vigor3900.
2. Open Central VPN Management>>CPE Management.
3. Now there is one CPE managed (Vigor2830) by Vigor3900 on the page of CPE
Maintenance.
Page 68
Vigor3900 Series User’s Guide
60
33..88 CCVVMM AApppplliiccaattiioonn -- HHooww ttoo bbuuiilldd tthhee VVPPNN bbeettwweeeenn rreemmoottee
ddeevviicceess aanndd VViiggoorr33990000??
When a remote device is managed by Vigor3900 series, it is easy to build VPN between
these two devices.
1. Access into the web user interface of Vigor3900 series.
2. Open Central VPN Management>>CPE Management. The icons displayed on the
screen means the remote devices are ready for building VPN with Vigor3900.
3. Click the device icon (marked with
) and click the PPTP or IPsec button.
Page 69
Vigor3900 Series User’s Guide
61
Or click Advanced to open the following page for specified the CPE you want. Click
Connect after finished the settings.
4. A confirmation dialog will appear. Click OK and wait for a moment.
5. If VPN is built successfully, related information will be displayed on Connected
Devices.
Page 70
Vigor3900 Series User’s Guide
62
6. A LAN to LAN profile for such VPN will be generated automatically. You can access
into VPN and Remote Access>>LAN to LAN of the remote device for viewing the
detailed information.
Note: The profile name is created automatically by the system. Do not modify any
value in such page to avoid VPN error.
Page 71
Vigor3900 Series User’s Guide
63
33..99 CCVVMM AApppplliiccaattiioonn -- HHooww ttoo uuppggrraaddee CCPPEE ffiirrmmwwaarree tthhrroouugghh
VViiggoorr33990000??
33..99..11 IImmppoorrtt ffiirrmmwwaarree ffiillee ffrroomm yyoouurr PPCC ttoo VViiggoorr33990000
1. Suppose the newest firmware file is located on your PC. You can upload it from your
PC to Vigor3900.
2. Log into the web user interface of Vigor3900.
3. Open System Maintenance>>Access Control. Check Enable for Web Allow and
type the value for Web Port. Then click Apply to save the settings.
4. Open Central VPN Management>>CPE Management. Click CPE Maintenance. In
the Maintenance area, click File Explorer.
Page 72
Vigor3900 Series User’s Guide
64
5. In the File Explorer dialog, click Upload.
6. In the Upload dialog, click the Browse.. button to find out the firmware (e.g.,
2830_0508 in this case) you want to upload from PC to Vigor3900. Then, click
Upload.
Page 73
Vigor3900 Series User’s Guide
65
7. When the file is uploaded successfully, later you will find the one in the File Explorer
dialog.
Page 74
Vigor3900 Series User’s Guide
66
33..99..22 SSeett aa nneeww ffiirrmmwwaarree uuppggrraaddee pprrooffiillee
To create a new firmware upgrade profile, one CPE (e.g., 2830 in this case) must be
managed by Vigor3900 at least. Otherwise, the profile cannot be created successfully.
1. Open Central VPN Management>>CPE Management. Click CPE Maintenance. In
the Maintenance area, click Add.
2. In the following dialog, type the name for the new profile; specify the vigor router the
file will be applied to; choose Firmware Upgrade as the Action, choose Now as the
Schedule (it means the firmware upgrade will be performed after clicking Apply); and
type the string of the firmware filename or click
to choose a correct one.
Page 75
Vigor3900 Series User’s Guide
67
3. When you finished the above settings, click Apply to save them. The new maintenance
profile has been created and displayed on the Maintenance area.
4. Now, the new firmware will be loaded into the CPE immediately (based on the
schedule setting – now).
Note that a red icon,
will appear during the period of firmware upgrading.
And, in the web user interface of client’s CPE, the system will show you that firmware
upgrade is on going.
Page 76
Vigor3900 Series User’s Guide
68
5. Please wait for a moment. Later, open Central VPN Management>>Log/Alert>>Log
page to check the result. If [Finished] is displayed, it means the firmware upgrade of
specified CPE has completed.
33..99..33 CChheecckk tthhee DDeevviiccee IInnffoorrmmaattiioonn
1. Open Central VPN Management>>CPE Management. In the Managed Devices
Status area, choose the router (representing Vigor2830) and click Detail.
2. Check the software version field.
Page 77
Vigor3900 Series User’s Guide
69
33..1100 HHooww ttoo uussee HHiigghh AAvvaaiillaabbiilliittyy ffoorr VViiggoorr rroouutteerrss??
The High Availability (HA) feature in Vigor3900 can ensure the business continuity for your
organization. IT staff can use HA as a simple solution for the disaster recovery. Vigor3900
utilizes the Common Address Redundancy Protocol (CARP) to avoid the system crashing
which could stop the normal operation and then cause considerable lost of the entire
organization.
When the HA feature is enabled, the network administrator can set another Vigor3900(s) as
the backup device(s) to deliver full routing services during the shutdown of the main
Vigor3900. The network administrator can use a Virtual IP (e.g. 192.168.1.100) for both
master device and backup device. During the system uptime, the master device (e.g.
192.168.1.1) can offer services and act as the Virtual IP. Once the master device is
temporarily out-of-service, the backup device(s) (e.g. 192.168.1.5) will take over the service
that the Virtual IP does and deliver all routing functions.
Note: Make sure the WAN interfaces for both Router A and Router B are well
connected. Both routers can be used to access into Internet.
Note: For advanced applications, please refer to FAQ/Application Notes on
www.draytek.com.
Page 78
Vigor3900 Series User’s Guide
70
FFoorr rroouutteerr AA
1. Access into the web user interface of Vigor3900.
2. Open Applications >>High Availability.
3. In the tab of High Availability Global Setup, choose Hot-Standby as Redundant
Method; choose Primary as Config Synchronization Rule; type draytek as
Authentication Key; choose Automatic as Advance Preemption Mode. Click Apply to
save the settings.
4. Click the High Availability Profile Setup tab to create HA profile(s). Click Add.
Page 79
Vigor3900 Series User’s Guide
71
5. Create an HA profile. Refer to the following figures.
6. Now, the configuration for router A has been finished.
FFoorr rroouutteerr BB
1. Access into the web user interface of Vigor3900.
2. Open Applications >>High Availability.
3. In the tab of High Availability Global Setup, choose Hot-Standby as Redundant
Method; choose Secondary as Config Synchronization Rule; type the lan1 IP address
configured in router A; type draytek as Authentication Key; choose Automatic as
Advance Preemption Mode. Click Apply to save the settings.
Type the lan1
IP address
configured in
Router A
Page 80
Vigor3900 Series User’s Guide
72
4. Click the High Availability Profile Setup tab to create HA profile(s). Click Add.
5. Create an HA profile. Refer to the following figures.
6. Now, the configuration for router B has been finished.
After finished the above settings, it is the time to activate HA function for both router A and
router B. It is recommended to activate the HA for router A (Primary) before router B
(Secondary).
Simply open Applications>>High Availability and click the High Availability
Global Setup. Locate Enable High Availability. Check the box and click Apply to
save the settings.
Under such construction, when Router A (defined as Master device) is powered off,
Router B (defined as Slave device) will be up and take over all the jobs that Router A
performs. Later, when Router A is powered on again, all the jobs will return to Router
A.
Page 81
Vigor3900 Series User’s Guide
73
33..1111 HHooww ttoo CCoonnffiigguurree DDNNSS IInnbboouunndd LLooaadd BBaallaannccee oonn VViiggoorr
33990000??
Vigor3900 can offer the mapped IP address to respond the DNS query coming from the
remote end through the designate domain to reduce the loading of the network traffic.
WAN1 IP Address: 1.1.1.1
WAN2 IP Address: 2.2.2.2
Inbound Load Balance
allows Vigor3900 acting as a DNS Server to separate the traffic for
each WAN interface according to the DNS query time. Follow the steps listed below to
Configure DNS Inbound Load Balance.
EEnnaabblliinngg WWeebb sseerrvviiccee oonn tthhee RRoouutteerr
1. Open NAT >> Port Redirection to set up Port Redirection rules for the Web server.
Click Apply to save the settings.
2. Open WAN >> Load Balance and click the tab of Inbound Load Balance to enable the
service. Click Add.
Page 82
Vigor3900 Series User’s Guide
74
3. Add a profile named “yourdomain.com”. Define WAN1 weights 1 and WAN2 weights 2.
It means the total DNS query time will be three, one will pass through WAN1; two will
pass through WAN2.
4. Click the Detail tab and locate Additional A Record. Type “www” as the name of the
Host, and type “192.168.1.10” as the IP Address.
5. Then click Apply to save the settings.
Page 83
Vigor3900 Series User’s Guide
75
Now, make a test for inbound load balance.
Click Start>> Run and type cmd. Execute the command, nslookup, for DNS query test.
First DNS query
>www.yourdomain.com
Server: [google-public-dns-a.google.com]
Address: 8.8.8.8
Name: www. yourdomain.com
Address: 1.1.1.1
Second DNS query
> www.yourdomain.com
Server: [google-public-dns-a.google.com]
Address: 8.8.8.8
Name: www.yourdomain.com
Address: 2.2.2.2
Third DNS query
> www.yourdomain.com
Server: [google-public-dns-a.google.com]
Address: 8.8.8.8
Name: www.yourdomain.com
Address: 2.2.2.2
Note: It is recommended to clear cache before executing “nslookup” for DNS query.
Page 84
Vigor3900 Series User’s Guide
76
This page is left blank.
Page 85
Vigor3900 Series User’s Guide
77
C
Chhaapptteerr 44::
A
Addvvaanncceedd
W
Weebb
C
Coonnffiigguurraattiioonn
After finished basic configuration of the router, you can access Internet with ease. For the
people who want to adjust more setting for suiting his/her request, please refer to this chapter
for getting detailed information about the advanced configuration of this router. As for other
examples of application, please refer to chapter 3.
44..11 WWAANN SSeettuupp
Quick Start Wizard offers user an easy method to quick setup the connection mode for the
router. Moreover, if you want to adjust more settings for different WAN modes, please go to
WAN group and click the General Setup link.
BBaassiiccss ooff IInntteerrnneett PPrroottooccooll ((IIPP)) NNeettwwoorrkk
IP means Internet Protocol. Every device in an IP-based Network including routers, print
server, and host PCs, needs an IP address to identify its location on the network. To avoid
address conflicts, IP addresses are publicly registered with the Network Information Centre
(NIC). Having a unique IP address is mandatory for those devices participated in the public
network but not in the private TCP/IP local area networks (LANs), such as host PCs under
the management of a router since they do not need to be accessed by the public. Hence, the
NIC has reserved certain addresses that will never be registered publicly. These are known as
private IP addresses, and are listed in the following ranges:
From 10.0.0.0 to 10.255.255.255
From 172.16.0.0 to 172.31.255.255
From 192.168.0.0 to 192.168.255.255
WWhhaatt aarree PPuubblliicc IIPP AAddddrreessss aanndd PPrriivvaattee IIPP AAddddrreessss
As the router plays a role to manage and further protect its LAN, it interconnects groups of
host PCs. Each of them has a private IP address assigned by the built-in DHCP server of the
Vigor router. The router itself will also use the default private IP address: 192.168.1.1 to
communicate with the local hosts. Meanwhile, Vigor router will communicate with other
network devices through a public IP address. When the data flow passing through, the
Network Address Translation (NAT) function of the router will dedicate to translate
public/private addresses, and the packets will be delivered to the correct host PC in the local
area network. Thus, all the host PCs can share a common Internet connection.
GGeett YYoouurr PPuubblliicc IIPP AAddddrreessss ffrroomm IISSPP
In ADSL deployment, the PPP (Point to Point)-style authentication and authorization is
required for bridging customer premises equipment (CPE). Point to Point Protocol over
Ethernet (PPPoE) connects a network of hosts via an access device to a remote access
concentrator or aggregation concentrator. This implementation provides users with
significant ease of use. Meanwhile it provides access control, billing, and type of service
according to user requirement.
When a router begins to connect to your ISP, a serial of discovery process will occur to ask
for a connection. Then a session will be created. Your user ID and password is authenticated
Page 86
Vigor3900 Series User’s Guide
78
via PAP or CHAP with RADIUS authentication system. And your IP address, DNS server,
and other related information will usually be assigned by your ISP.
44..11..11 GGeenneerraall SSeettuupp
This section will introduce some general settings of Internet and explain the connection
modes for WAN profiles in details.
This router supports multi-WAN function. It allows users to access Internet and combine the
bandwidth of the WAN profiles to speed up the transmission through the network. Each
WAN port can connect to different ISPs, even if the ISPs use different technology to provide
telecommunication service (such as DSL, Cable modem, etc.). If any connection problem
occurred on one of the ISP connections, all the traffic will be guided and switched to the
normal communication port for proper operation.
There are two modes for you to choose for setting a WAN profile. Basic mode allows you to
view and edit the existing WAN profile. However, Advance mode allows you to define new
WAN profile.
When you switch the Mode setting from Advance to Basic or from Basic to Advance, the
system will ask you to re-login web configuration interface to activate some parameters.
Note: Some menu items (e.g., Bridge VLAN) are available only under Advance Mode.
Web Page in Basic Mode
Web Page in Advance Mode
Page 87
Vigor3900 Series User’s Guide
79
Each item will be explained as follows:
Item Description
Add
Add a new WAN profile. Such function is available in
Advance mode only.
Edit
Modify the selected WAN profile.
To edit a profile, simply select the one you want to modify
and click the Edit button. The edit window will appear for
you to modify the corresponding settings for the selected
rule.
Delete
Remove the selected WAN profile. Such function is
available in Advance mode only.
To delete a profile, simply select the one you want to delete
and click the Delete button.
Refresh
Renew current web page.
Mode
Specify the mode for adding /editing (Advance) new WAN
profile or just editing (Basic) existing WAN profile.
Profile Number Limit
Display the total number (50) of the profiles to be created.
Profile (max length:7)
Display the profile name.
Enable
Display the status of the profile. False means disabled; True
means enabled.
Description
Display a brief explanation for such profile.
Port
Display the physical WAN interface for such profile.
IPv4 Protocol Type
Display the IPv4 protocol selected by the profile.
IPv6 Protocol Type
Display the IPv6 protocol selected by the profile.
VLAN Tag
Display if the function is enabled or not.
If the data transmitted with tag, Enable will be displayed in
this field. Otherwise, Disable will be shown instead.
VLAN ID
Display the VLAN ID of the profile.
Priority(802.1p)
Display the level of the priority for such profile.
Page 88
Vigor3900 Series User’s Guide
80
44..11..11..11 EEtthheerrnneett WWAANN PPrrooffiilleess
How to add a new WAN profile:
1. If the router is under Basic mode, you have to switch into Advance mode. If the router
is under Advance mode, go to Step 4 directly.
2. A confirmation dialog will appear. Click OK to apply the related settings for Advance
mode.
3. Re-login the system.
4. Open WAN>>General Setup. Click the Add button to open the following dialog.
Different protocol type selected will bring up different configuration web page.
Page 89
Vigor3900 Series User’s Guide
81
Available parameters are listed as follows:
Item Description
Profile (max
length:7)
Type a name (less than 7 characters) for such profile.
Enable
Check this box to enable such profile.
Description
Give the brief description for such profile.
Port
Choose the physical WAN interface for such profile.
Default MAC
Address
Enable – Click it to enable the default MAC address for
such profile.
Disable – Click it to type the MAC address manually for
such profile.
MAC Address
Specify the MAC address for such profile. In default, the
system will determine it automatically.
IPv4 Protocol
There are several connection modes for you to specify for
IPv4 protocol type. Each mode will bring up different web
page.
The DMZ protocol is available for WAN4 profile only.
IPv4 Mode
Determine such profile will be used for.
IPv6 Protocol
There are four connection modes for you to specify for IPv6
protocol type. Each mode will bring up different web page.
Enable Schedule
Enable – Click it to enable the function of reconnecting the
Page 90
Vigor3900 Series User’s Guide
82
Reconnect
network automatically within the time schedule.
Disable – Click it to disable the schedule reconnect function.
Schedule Time
Object
Choose the time object profile to be applied by such WAN.
VLAN Tag
Enable – Click it to enable the function of VLAN Tag. Data
transmitted through the router will be tagged with specified
number for identification.
Disable – Click it to disable the function of VLAN Tag.
Data transmitted through the router will not be tagged with
any number.
VLAN ID
Type the VLAN ID number for such profile.
Priority(802.1p)
Type the packet priority number for such VLAN. The range
is from 0 to 7.
Apply
Click it to save the configuration and exit the dialog.
Cancel
Click it to exit the dialog without saving the configuration.
General Settings allows you to enable the profile, give a brief explanation for such profile,
specify the VLAN ID, specify MAC address, choose IPv4 and IPv6 protocol, and specify the
mode of the data transmission (NAT or Routing).
Note: The DMZ tab is available for WAN4 profile only.
Different IPv4 and IPv6 protocol types specified will bring up different configuration web
page.
If you choose Static as IPv4 protocol type, click the Static Tab to open the following
page:
Page 91
Vigor3900 Series User’s Guide
83
Available parameters are listed as follows:
Item Description
IP Address
Type the IP address specified for such profile.
Subnet Mask
Use the drop down list to choose the subnet mask for such
profile.
Gateway IP
Address
Type the gateway address for such profile.
DNS Server IP
Address
Type a public IP address as the primary DNS (Domain Name
Server). To add a new IP address, simply place the mouse
cursor on this filed. The following dialog will appear.
Add – click this button to have a field for adding a new IP
address.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
IP Alias
Type other IP addresses to be bound to this interface. This
setting is optional. If you have typed addresses here, you can
see and choose it in later web page settings (e.g.,
NAT>>Port Redirection/DMZ Host).
Add – Click this button to display the IP address field for
adding a new IP address. Type the IP address on the tiny
boxes one by one.
Page 92
Vigor3900 Series User’s Guide
84
Save – Click this button to save the setting.
– click the icon to remove the selected entry.
MTU/MRU
Type the value of MTU/MRU. The default value is 1500.
Connection
Detection Mode
Select a detecting mode for this WAN interface. There are
three ways ARP, PING and HTTP supported in Vigor
router for you to choose to send the request out.
Connection
Detection Host
Add – click this button to have a field for adding a new IP
address. Assign an IP address or Domain name as a
destination to be detected whether the host is active (sending
reply to the router) or not. If not, the connection of WAN
interface will be regarded as breaking down. This function
is available when Connection Detection Mode is set with
PING or HTTP.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
Connection
Detection Interval
Assign an interval period of time for each detecting.
Connection
Detection Retry
Assign detecting times to ensure the connection of the WAN
interface. After passing the times you set in this field and no
reply received by the router, the connection of WAN
interface will be regarded as breaking down.
Apply
Click it to save the configuration and exit the dialog.
Page 93
Vigor3900 Series User’s Guide
85
Cancel
Click it to exit the dialog without saving the configuration.
If you choose DHCP as IPv4 protocol type, click the DHCP Tab to open the
following page:
Available parameters are listed as follows:
Item Description
Host Name
(Optional)
Type a name as the host name for identification.
IP Alias
Type other IP addresses to be bound to this interface. This
setting is optional. If you have typed addresses here, you can
see and choose it in later web page settings (e.g.,
NAT>>Port Redirection/DMZ Host).
Add – To add a new IP address, click Add. Type the IP
address and use the drop down list to specify the subnet
mask. Next, click Save. The new one will be added and
displayed on the field under the box.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
MTU/MRU
It means Max Transmit Unit for packet. The default setting
is 1500.
Connection
Detection Mode
Select a detecting mode for this WAN interface. There are
three ways ARP, PING and HTTP supported in Vigor
Page 94
Vigor3900 Series User’s Guide
86
router for you to choose to send the request out.
Connection
Detection Host
Add – click this button to have a field for adding a new IP
address. Assign an IP address or Domain name as a
destination to be detected whether the host is active (sending
reply to the router) or not. If not, the connection of WAN
interface will be regarded as breaking down. This function is
available when Connection Detection Mode is set with
PING or HTTP.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
Connection
Detection Interval
Assign an interval period of time for each detecting.
Connection
Detection Retry
Assign detecting times to ensure the connection of the WAN
interface. After passing the times you set in this field and no
reply received by the router, the connection of WAN
interface will be regarded as breaking down.
Vendor Class ID
(option 60)
It is used to identify the vendor type and the configuration of
a DHCP client.
DHCP Client ID
(option 61)
It used to specify a DHCP client identifier in a host
declaration, so that DHCP can find the host record by
matching against the client identifier.
Specify DNS
Enable – Click it to enable the function of DNS specified.
It is used for local service (e.g., NTP, ping diagnostic) or
used for forwarding packets to PC on LAN/VPN.
Disable – Click it to disable the function of DNS specified.
DNS
Add – click this button to have a field for adding a new IP
address.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
Apply
Click it to save the configuration and exit the dialog.
Cancel
Click it to exit the dialog without saving the configuration.
Page 95
Vigor3900 Series User’s Guide
87
If you choose PPPoE as IPv4 protocol type, click the PPPoE Tab to open the
following page:
Available parameters are listed as follows:
Item Description
Username
Type the user name offered by your ISP.
Password
Type the password offered by your ISP.
MTU/MRU
Type the value of MTU/MRU. The default value is 1492.
Service Name
This is an optional setting. Some ISP will offer such
information and ask you to type the same data on this field.
Debug
Click Enable to display the PPPoE debug message in
Syslog. The default setting is Disable.
Always On
Enable – Click it to enable the function of Always On. The
router will keep network connection all the time.
Disable – Click it to disable the function of Always On.
Fixed IP
Enable – Click it to enable the function of fixed IP.
Disable – Click it to disable the function of fixed IP.
Fixed IP Address
Type the IP address in the boxes.
Connection
Detection Mode
Select a detecting mode for this WAN interface. There are
two ways PING and HTTP supported in Vigor router for
you to choose to send the request out.
Connection
Detection Host
If you choose PING/HTTP as Connection Detection Mode,
you have to specify the detection host address in this field.
Use the default setting.
Page 96
Vigor3900 Series User’s Guide
88
Add – Click this button to have a field for adding a new IP
address. Assign an IP address or Domain name as a
destination to be detected whether the host is active (sending
reply to the router) or not. If not, the connection of WAN
interface will be regarded as breaking down.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
Connection
Detection Interval
Assign an interval period of time for each detecting.
Connection
Detection Retry
Assign detecting times to ensure the connection of the WAN
interface. After passing the times you set in this field and no
reply received by the router, the connection of WAN
interface will be regarded as breaking down.
IP Alias
Type other IP addresses to be bound to this interface. This
setting is optional. If you have typed addresses here, you can
see and choose it in later web page settings (e.g.,
NAT>>Port Redirection/DMZ Host).
Add – Click this button to display the IP address field for
adding a new IP address. Type the IP address on the tiny
boxes one by one.
Save – After finished the IP address configuration, click
Save to save the setting onto the router.
– Click the icon to remove the selected entry.
Specify DNS
Enable – Click it to enable the function of DNS specified.
It is used for local service (e.g., NTP, ping diagnostic) or
used for forwarding packets to PC on LAN/VPN.
Disable – Click it to disable the function of DNS specified.
Page 97
Vigor3900 Series User’s Guide
89
DNS
Add – click this button to have a field for adding a new IP
address.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
Apply
Click it to save the configuration and exit the dialog.
Cancel
Click it to exit the dialog without saving the configuration.
If you choose PPTP as IPv4 protocol type, click the PPTP Tab to open the following
page:
Available parameters are listed as follows:
Item Description
PPTP Over
Usually ISP dynamically assigns IP address to you each time
you connect to it and request. In some case, your ISP
provides service to always assign you the same IP address
whenever you request. In this case, you can fill in this IP
address in the Fixed IP field. Please contact your ISP
before you want to use this function.
Choose a proper protocol, Static or DHCP. After finished
the settings in such page, you need to open the Static or
DHCP tab for configuring the settings there.
Server Address
Type the IP address of PPTP server offered by your ISP.
Username
Type the user name offered by your ISP.
Password
Type the password offered by your ISP.
MTU/MRU
Type the value of MTU/MRU. The default value is 1452.
Debug
Click Enable to display the PPTP debug message in syslog.
The default setting is Disable.
Always On
Enable – Click it to enable the function of Always On. The
Page 98
Vigor3900 Series User’s Guide
90
router will keep network connection all the time.
Disable – Click it to disable the function of Always On.
Connection
Detection Mode
Select a detecting mode for this WAN interface. There are
two ways PING and HTTP supported in Vigor router for
you to choose to send the request out.
Connection
Detection Host
If you choose PING/HTTP as Connection Detection Mode,
you have to specify the detection host address in this field.
Use the default setting.
Add – Click this button to have a field for adding a new IP
address. Assign an IP address or Domain name as a
destination to be detected whether the host is active (sending
reply to the router) or not. If not, the connection of WAN
interface will be regarded as breaking down.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
Connection
Detection Interval
Assign an interval period of time for each detecting.
Connection
Detection Retry
Assign detecting times to ensure the connection of the WAN
interface. After passing the times you set in this field and no
reply received by the router, the connection of WAN
interface will be regarded as breaking down.
Apply
After finished the PPTP configuration, please click Static or
DHCP (according to the PPTP Over Protocol setting) to
modify the Static/DHCP configuration for such profile.
Click it to save the configuration and exit the dialog.
Cancel
Click it to exit the dialog without saving the configuration.
If you choose Link-Local as IPv6 protocol type
Link-Local address is used for communicating with neighbouring nodes on the same
link. It is defined by the address prefix fe80::/64. You don't need to setup Link-Local
address manually for it is generated automatically according to your MAC Address.
If you choose PPP as IPv6 protocol type
Simply refer to the section of “If you choose PPPoE as IPv4 protocol type, click the
PPPoE Tab to open the following page” for detailed information.
Page 99
Vigor3900 Series User’s Guide
91
If you choose Static as IPv6 protocol type, click the StaticV6 tab to open the
following page:
Available parameters are listed as follows:
Item Description
IPv6 Address
Type the IP address for such protocol.
IPv6 Prefix Length
Type your IPv6 address prefix length.
IPv6 Gateway
Address
Type your IPv6 gateway address.
IPv6 DNS Server
Address
Type your IPv6 primary DNS Server address.
Add – click this button to have a field for adding a new IP
address.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
Apply
Click it to save the configuration and exit the dialog.
Cancel
Click it to exit the dialog without saving the configuration.
Page 100
Vigor3900 Series User’s Guide
92
If you choose DHCP-IA_NA as IPv6 protocol type, click the DHCPV6 Tab to open
the following page:
Available parameters are listed as follows:
Item Description
DHCP (IA_NA)
Gateway Address
Type the gateway IP address for IPv6 DHCP IA_NA mode.
DHCP (IA_NA)
DNS Address
Type your IPv6 primary DNS Server address.
Add – click this button to have a field for adding a new IP
address.
Save – click this button to save the setting.
– click the icon to remove the selected entry.
Apply
Click it to save the configuration and exit the dialog.
Cancel
Click it to exit the dialog without saving the configuration.
If you choose DHCP-IA_PD as IPv6 protocol type
It is not necessary for you to configure any web page.
5. Enter all the settings and click Apply. The new added profile will be shown as below.
Loading...