Draytek Vigor 3100 User Manual
Draytek Vigor 3100 User Manual

Draytek Vigor 3100 User Manual

Vigor 3100 series
Hide thumbs Also See for Vigor 3100:
Table of Contents

Advertisement

Quick Links

Vigor 3100 Series Router
User's Guide
Version: 1.2
Date: 2007/08/15
Copyright 2007 All rights reserved.
This publication contains information that is protected by copyright. No part may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright
holders. The scope of delivery and other details are subject to change without prior notice.
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Computer Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.

Advertisement

Table of Contents
loading

Summary of Contents for Draytek Vigor 3100

  • Page 1 Vigor 3100 Series Router User’s Guide Version: 1.2 Date: 2007/08/15 Copyright 2007 All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders.
  • Page 2 Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek Corporation, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
  • Page 3: Regulatory Information

    Product: Vigor3100 Series G.SHDSL Routers DrayTek Corp. declares that Vigor3100 series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 89/336/EEC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
  • Page 4: Table Of Contents

    Preface ...1 1.1 Panel Description ... 2 1.1.1 Vigor3100 ... 2 1.1.2 Vigor3100G... 3 1.1.3 Vigor3100i... 4 1.1.4 Vigor3120 ... 5 1.2 Hardware Installation ... 6 1.2.1 For Vigor3100/Vigor3100G/Vigor3100i ... 6 1.2.2 Hardware Installation for Vigor3120 ... 7 1.2.3 Pin Definition for Flat Module Cable ... 8 1.3 Rack Mount Instruction ...
  • Page 5 3.3.1 Port Redirection ... 46 3.3.2 DMZ Host... 48 3.3.3 Open Ports... 50 3.4 Firewall ... 52 3.4.1 Basics for Firewall... 52 3.4.2 General Setup... 55 3.4.3 Filter Setup ... 56 3.4.4 IM Blocking ... 59 3.4.5 P2P Blocking ... 60 3.4.6 DoS Defense ...
  • Page 6 3.11.4 Wireless Rate Control... 126 3.12 System Maintenance... 126 3.12.1 System Status... 126 3.12.2 Administrator Password... 127 3.12.3 Configuration Backup ... 128 3.12.4 Syslog/Mail Alert ... 129 3.12.5 Time and Date ... 131 3.12.6 Management... 132 3.12.7 Reboot System ... 133 3.12.8 Firmware Upgrade ...
  • Page 7: Preface

    Intranet. A VPN enables you to send data between two computers across a shared public Internet network in a manner that emulates the properties of a point-to-point private link. The DrayTek Vigor3100 series VPN router supports Internet-industry standards technology to provide customers with open, interoperable VPN solutions such as X.509, DHCP over Internet Protocol Security (IPSec) up to 32 tunnels, and...
  • Page 8: Panel Description

    ACT (Activity) (1, 2, 3, Interface (Factory Reset) LAN (1,2,3,4) Interface Status Explanation Blinking The router is powered on and running properly. The VPN tunnel is launched. The QoS function is active. The USB interface printer is ready. The G.SHDSL line is connected Blinking It means that Ethernet packets are transmitting.
  • Page 9 (Activity) WLAN (1, 2, 3, Interface (Factory Reset) LAN (1,2,3,4) Interface Vigor3100 Series User’s Guide Status Explanation Blinking The router is powered on and running properly. The VPN tunnel is launched. The QoS function is active. The USB interface printer is ready. The wireless LAN function is enabled.
  • Page 10 ACT (Activity) ISDN (1, 2, 3, 4) Interface (Factory Reset) ISDN LAN (1,2,3,4) Interface Status Explanation Blinking The router is powered on and running properly. The VPN tunnel is launched. The QoS function is active. The USB interface printer is ready. The ISDN service function is active.
  • Page 11 (Activity) (1, 2, 3, Interface (Factory Reset) DSL(1/2) LAN (1-4) Interface Vigor3100 Series User’s Guide Status Explanation Blinking The router is powered on and running properly. The VPN tunnel is launched. The QoS function is active. The USB interface printer is ready. The G.SHDSL line is connected.
  • Page 12: Vigor3100G

    Before starting to configure the router, you have to connect your devices correctly. Connect the DSL port of the router to the wall outlet with a RJ-11 to RJ-45 (or RJ-45 to RJ-45) cable. For Vigor3120, please refer to 2.2.1 Connect one port of 4-port switch to your computer with a RJ-45 cable.
  • Page 13: Hardware Installation For Vigor3120

    Vigor3120 provides Flat Module Cable (RJ-45, 4x4) for bonding bandwidth for data transmission. Please apply two-pair of circuit from your ISP first for hardware connection. Then, open the cover of surface jack and use a screw driver to loosen the screws inside the surface jack.
  • Page 14: Pin Definition For Flat Module Cable

    Below shows the pin definition of flat module cable. One pair is composed by Pin4 and Pin5. The other pair is composed by Pin3 and Pin6. Vigor3100 Series User’s Guide...
  • Page 15: Rack Mount Instruction

    The Vigor3100 series can be mounted on a rack by using standard brackets in a 19-inch rack or optional larger brackets on 23-inch rack (not included). The bracket for the racks are shown below. Use brackets to set the Vigor router on the rack as shown below. After the bracket installation, the Vigor router chassis can be installed in a rack by using four screws for each side of the rack.
  • Page 16: Printer Installation

    You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE, please visit www.draytek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
  • Page 17 Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name.
  • Page 18 Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Now, your system will ask you to choose right name of the printer that you installed onto the router. Such step can make correct driver loaded onto your PC. When you finish the selection, click Next.
  • Page 19 Note 1: Some printers with the fax/scanning or other additional functions are not supported. If you do not know whether your printer is supported or not, please visit www.draytek.com to find out the printer list. Open Support Center->FAQ->Sort by product; select the model of the router and click on it;...
  • Page 20 Vigor3100 Series User’s Guide...
  • Page 21: Configuring Basic Settings

    For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password for an administrator and how to adjust basic settings for accessing Internet successfully.
  • Page 22 Note: The home page will change slightly in accordance with the router you have. Go to System Maintenance page and choose Administrator Password. Enter the login password (the default is blank) on the field of Old Password. Type a new one in the field of New Password and retype it on the field of Confirm Password.
  • Page 23: Quick Start Wizard

    If your Vigor router can be under an environment with high speed NAT, the configuration provide here can help you to deploy and use the router quickly. There are two phases of quick setup, one is protocol/encapsulation configuration; and the other is LAN configuration. In the Quick Start Wizard, you can configure the router to access the Internet with different protocols/modes such as PPPoE, PPPoA, Bridged IP, or Routed IP.
  • Page 24: Pppoe/Pppoa

    Primary DNS Second DNS PPPoE stands for Point-to-Point Protocol over Ethernet. It relies on two widely accepted standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a common broadband medium, such as a single DSL line, wireless device or cable modem. All the users over the Ethernet can share a common connection.
  • Page 25: Bridged Ip

    Click Finish. The online status of this protocol will be shown as below. Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for this protocol. After finishing the settings in this page, click Next to see the following page. Vigor3100 Series User’s Guide...
  • Page 26: Routed Ip

    Click Finish. The online status of this protocol will be shown as below. Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for this protocol. Vigor3100 Series User’s Guide...
  • Page 27: Selecting Correct Annex Type

    After finishing the settings in this page, click Next to see the following page. Click Finish. The online status of this protocol will be shown as below. After finishing Quick Start Wizard, please go to Internet Access and choose DSL Settings for choosing correct annex type for your router.
  • Page 28: Online Status

    Now, check the online status for your router. The online status shows the system status, WAN status, ADSL Information and other status related to this router within one page. If you select PPPoE or PPPoA as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE in the Online Status web page.
  • Page 29: Saving Configuration

    Each time you click OK on the web page for saving the configuration, you can find messages showing the system interaction with you. Ready indicates the system is ready for you to input settings. Settings Saved means your settings are saved once you click Finish or OK button. Vigor3100 Series User’s Guide...
  • Page 30 Vigor3100 Series User’s Guide...
  • Page 31: Advanced Web Configuration

    After finished basic configuration of the router, you can access Internet with ease. For the people who want to adjust more setting for suiting his/her request, please refer to this chapter for getting detailed information about the advanced configuration of this router. As for other examples of application, please refer to chapter 4.
  • Page 32: Pppoe/Pppoa

    Besides, 3G USB Modem in WAN2 also can be used as backup device. Therefore, when WAN1 is not available, the router will use 3.5G for supporting automatically. The supported 3G USB Modem will be listed on Draytek web site. Please visit www.draytek.com for more detailed information.
  • Page 33 PPPoE/PPPoA Client DSL Modem Settings PPPoE Pass-through WAN Backup Setup Vigor3100 Series User’s Guide Click Enable for activating this function. If you click Disable, this function will be closed and all the settings that you adjusted in this page will be invalid. Set up the DSL parameters required by your ISP.
  • Page 34 None - Disable the backup function. Packet Trigger -The backup line is not on until a packet from a local host triggers the router to establish a connection. Always On - If the broadband connection is no longer available, the backup line will be activated automatically and always on until the broadband connection is restored.
  • Page 35 ISP Access Setup IP Address From ISP Vigor3100 Series User’s Guide only. You may choose up to 4 schedules out of the 15 schedules pre-defined in Applications >> Schedule setup. The default setting of this filed is blank and the function will always work. Enter your allocated username, password and authentication parameters according to the information provided by your ISP.
  • Page 36: Mpoa

    Default MAC Address Type in MAC address for the router. You can use Default MAC Index (1-15) in Schedule Setup After finishing all the settings here, please click OK to activate them. MPoA is a specification that enables ATM services to be integrated with existing LANs, which use either Ethernet, token-ring or TCP/IP protocols.
  • Page 37 MPoA(RFC1483/2684) Click Enable for activating this function. If you click Disable, this DSL Modem Settings WAN Backup Setup Vigor3100 Series User’s Guide function will be closed and all the settings that you adjusted in this page will be invalid. Set up the DSL parameters required by your ISP. These are vital for building DSL connection to your ISP.
  • Page 38 ISDN - This setting is available for the routers supporting ISDN function only. Before utilizing the ISDN dial backup feature, you must create a dial backup profile first. Please click Internet Access Setup > Dialing to a Single ISP to enter the backup profile. Due to the absence of the ISDN interface in some models, the ISDN dial backup feature and its associated setup options are not available to them.
  • Page 39: Multi-Pvcs

    Bridge Mode WAN IP Network Settings Default MAC Address Type in MAC address for the router. You can use Default MAC DNS Server IP Address After finishing all the settings here, please click OK to activate them. This router allows you to create multi-PVCs for different data transferring for using. Simply go to Internet Access and select Multi-PVC Setup page.
  • Page 40: Dsl Settings

    Enable QoS Type Protocol Encapsulation DSL is one technology that dramatically increases the digital capacity of ordinary telephone lines (the local loops) into the home or office. The speed of DSL is based on the distance between the customer and telco central office. Type in the primary IP address for the router.
  • Page 41 MaxRate MinRate FixedRate Terminal Type Annex Type Vigor3120 offers different DSL settings with Vigor 3100 and Vigor3100G due to its feature of 4-wire bundle mode. 4-wire bundle mode Vigor3100 Series User’s Guide Set the connection rate for the network. Select the maximum rate for this setting. Use the drop down list to select the one that suits your router.
  • Page 42: Lan

    FixedRate Terminal Type Annex Type Local Area Network (LAN) is a group of subnets regulated and ruled by router. The design of network structure is related to what type of public IP addresses coming from your ISP. The most generic function of Vigor router is NAT. It creates a private subnet of your own. As mentioned previously, the router will talk to other public hosts on the Internet by using public IP address and talking to local hosts by using its private IP address.
  • Page 43 Vigor router will exchange routing information with neighboring routers using the RIP to accomplish IP routing. This allows users to change the information of the router such as IP address and the routers will automatically inform for each other. When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method.
  • Page 44: General Setup

    This page provides you the general settings for LAN. Click LAN to open the LAN settings page and choose General Setup. 1st IP Address 1st Subnet Mask For IP Routing Usage Click Enable to invoke this function. The default setting is Disable. IP Address Subnet Mask DHCP Server...
  • Page 45 RIP Protocol Control DHCP Server Configuration Vigor3100 Series User’s Guide Start IP Address: Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 2nd IP address of your router is 220.135.240.1, the starting IP address must be 220.135.240.2 or greater, but smaller than 220.135.240.254.
  • Page 46: Static Route

    DNS Server Configuration There are two common scenarios of LAN settings that stated in Chapter 4. For the configuration examples, please refer to that chapter to get more information for your necessity. Go to LAN to open setting page and choose Static Route. Index Destination Address Status...
  • Page 47 Viewing Routing Table Displays the routing table for your reference. Here is an example of setting Static Route in Main Router so that user A and B locating in different subnet can talk to each other via the router. Assuming the Internet access has been configured and the router works properly: use the Main Router to surf the Internet.
  • Page 48 Click the LAN - Static Route and click on the Index Number 1. Please add a static route as shown below, which regulates all packets destined to 192.168.10.0 will be forwarded to 192.168.1.2. Click OK. Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3.
  • Page 49: Vlan

    Click the Index Number that you want to disable from the Static Route Configuration page. Select Inactive/Disable from the drop-down menu, and then click the OK button to disable the route. Note: This menu is available for Vigor3100, Vigor3100i and Vigor3120 model. For Vigor3100G, please refer to 3.10.
  • Page 50 To add or remove a VLAN, please refer to the following example. If, VLAN 0 is consisted of hosts linked to P1 and P2 and VLAN 1 is consisted of hosts linked to P3 and P4. After checking the box to enable VLAN function, you will check the table according to the needs as shown below.
  • Page 51: Bind Ip To Mac

    This function is used to bind the IP and MAC address in LAN to have a strengthen control in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC address, it might cause you not access into the Internet.
  • Page 52: Nat

    Edit Remove Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC. If not, no one of the PCs can access into Internet. And the web configurator of the router might not be accessed. Usually, the router serves as an NAT (Network Address Translation) router.
  • Page 53 The port redirection can only apply to incoming traffic. The server users inside the LAN can not access public IP address of the server. The correct route is to access the server using the local private IP address of the server, or you should set up an alias in a Windows hosts file. Please only redirect the ports you know you have to forward rather than forward all ports.
  • Page 54: Dmz Host

    Public Port Private IP Private Port Active Note that the router has its own built-in services (servers) such as Telnet, HTTP and FTP etc. Since the common port numbers of these services (servers) are all the same, you may need to reset the router’s in order to avoid confliction.
  • Page 55 The inherent security properties of NAT are somewhat bypassed if you set up DMZ host. We suggest you to add additional filter rules or a secondary firewall. Click DMZ Host to open the following page: Enable Private IP Choose PC If you previously have set up WAN Alias in Internet Access>>PPPoE/PPPoA or Internet Access>>MPoA, you will find them in Aux.
  • Page 56: Open Ports

    Open Ports allows you to open a range of ports for the traffic of special applications. Common application of Open Ports includes P2P application (e.g., BT, KaZaA, Gnutella, WinMX, eMule and others), Internet Camera etc. Ensure that you keep the application involved up-to-date to avoid falling victim to any security exploits.
  • Page 57 However, if you previously have set up WAN Alias in Internet Access>>PPPoE/PPPoA or Internet Access>>MPoA, you will find that WAN IP appeared for your selection. Enable Open Ports Comment Local Computer Choose PC Protocol Start Port End Port Vigor3100 Series User’s Guide Check to enable this entry.
  • Page 58: Firewall

    While the broadband users demand more bandwidth for multimedia, interactive applications, or distance learning, security has been always the most concerned. The firewall of the Vigor router helps to protect your local network against attack from unauthorized outsiders. It also restricts users in the local network from accessing the Internet.
  • Page 59 Depending on whether there is an existing Internet connection, or in other words “the WAN link status is up or down”, the IP filter architecture categorizes traffic into two: Call Filter and Data Filter. Call Filter - When there is no existing Internet connection, Call Filter is applied to all traffic, all of which should be outgoing.
  • Page 60 As the popularity of all kinds of instant messenger application arises, communication cannot become much easier. Nevertheless, while some industry may leverage this as a great tool to connect with their customers, some industry may take reserve attitude in order to reduce employee misusage during office hour or prevent unknown security leak.
  • Page 61: General Setup

    ActiveX control object is usually used for providing interactive web feature. If malicious code hides inside, it may occupy user’s system. We all know that the content on the Internet just like other types of media may be inappropriate sometimes. As a responsible parent or employer, you should protect those in your trust against the hazards.
  • Page 62: Filter Setup

    Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to transfer game data. Instinctively as a secure firewall, Vigor router will reject these fragmented packets to prevent attack unless you enable “Accept Incoming Fragmented UDP Packets”. By checking this box, you can play these kinds of on-line games.
  • Page 63 Comment Next Filter Set To edit Filter Rule, click the Filter Rule index button to enter the Filter Rule setup page. Comments Check to enable the Filter Rule Pass or Block Branch to other Filter Direction Protocol IP Address Vigor3100 Series User’s Guide Enter filter set comments/description.
  • Page 64 Subnet Mask Operator, Start Port and End Port Keep State Fragments Select the Subnet Mask for the IP Address column for this filter rule to apply from the drop-down menu. The operator column specifies the port number settings. If the Start Port is empty, the Start Port and the End Port column will be ignored.
  • Page 65: Im Blocking

    As stated before, all the traffic will be separated and arbitrated using on of two IP filters: call filter or data filter. You may preset 12 call filters and data filters in Filter Setup and even link them in a serial manner. Each filter set is composed by 7 filter rules, which can be further defined.
  • Page 66: P2P Blocking

    P2P is the short name of peer to peer. Click Firewall and click P2P Blocking to open the setup page. You will see a list of common P2P applications. Check Enable P2P Blocking and select the one(s) to block. To block selected P2P applications during specific periods, enter the number of the scheduler predefined in Applications>>Call Schedule.
  • Page 67: Dos Defense

    As a sub-functionality of IP Filter/Firewall, there are 15 types of detect/ defense function in the DoS Defense setup. The DoS Defense functionality is disabled for default. Click Firewall and click DoS Defense to open the setup page. Enable Dos Defense Enable SYN flood defense Enable UDP flood...
  • Page 68 Block IP options Block Land Block Smurf Block trace router Block SYN fragment Block Fraggle Attack Block TCP flag scan Block Tear Drop Block Ping of Death Block ICMP Fragment Check the box to activate the Block ICMP fragment function. Any Block Unknown Protocol detecting this malicious exploration behavior by monitoring the...
  • Page 69 indicate the protocol type running over the upper layer. However, the protocol types greater than 100 are reserved and undefined at this time. Therefore, the router should have ability to detect and reject this kind of packets. Warning Messages We provide Syslog function for user to retrieve message from Vigor router.
  • Page 70: Url Content Filter

    Based on the list of user defined keywords, the URL Content Filter facility in Vigor router inspects the URL string in every outgoing HTTP request. No matter the URL string is found full or partial matched with a keyword, the Vigor router will block the associated HTTP connection.
  • Page 71 Prevent web access from IP address Enable Restrict Web Feature Enable Excepting Subnets Time Schedule Vigor3100 Series User’s Guide addition, the maximal length of each frame is 32-character long. After specifying keywords, the Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword.
  • Page 72: Web Content Filter

    Click Firewall and click Web Content Filter to open the setup page. For this section, please refer to Web Content Filter user’s guide. Vigor3100 Series User’s Guide...
  • Page 73: Bandwidth Management

    A PC with private IP address can access to the Internet via NAT router. The router will generate the records of NAT sessions for such connection. The P2P (Peer to Peer) applications (e.g., BitTorrent) always need many sessions for procession and also they will occupy over resources which might result in important accesses impacted.
  • Page 74: Bandwidth Limit

    Remove Index (1-15) in Schedule Setup The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs. Please use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Management menu, click Bandwidth Limit to open the web page.
  • Page 75: Quality Of Service

    TX limit RX limit Edit Remove Index (1-15) in Schedule Setup Deploying QoS (Quality of Service) management to guarantee that all applications receive the service levels required and sufficient bandwidth to meet performance expectations is indeed one important aspect of modern enterprise network. One reason for QoS is that numerous TCP-based applications tend to continually increase their transmission rate and consume all available bandwidth, which is called TCP slow start.
  • Page 76 Best Effort (BE). AF defines the four classes of delivery (or forwarding) classes and three levels of drop precedence in each class. Vigor routers as edge routers of DS domain shall check the marked DSCP value in the IP header of bypassing traffic, thus to allocate certain amount of resource execute appropriate policing, classification or scheduling.
  • Page 77 Setup Enable UDP Bandwidth Control Limited_bandwidth Ratio On Line Statistics Click the Basic button to open basic configuration screen for each index number. Choose one of the items from the left box and click ADD>>. The selected one will be shown Vigor3100 Series User’s Guide There are two-level of settings: Basic - setup Reserved Bandwidth Ratio according to the traffic...
  • Page 78 on the right box. To remove the selected on from the right box, simply choose the one again and click <<Remove. Click this button to open advanced configuration for each index number. You can insert, move, edit or delete select rule in this page. For inserting a rule, click Insert to open the following page.
  • Page 79 DiffServ CodePoint Service Type Vigor3100 Series User’s Guide All the packets of data will be divided with different levels and will be processed according to the level type by the system. Please assign one of the levels of the data for processing with QoS control.
  • Page 80: Applications

    The ISP often provides you with a dynamic IP address when you connect to the Internet via your ISP. It means that the public IP address assigned to your router changes each time you access the Internet. The Dynamic DNS feature lets you assign a domain name to a dynamic WAN IP address.
  • Page 81 Select Index number 1 to add an account for the router. Check Enable Dynamic DNS Account, and choose correct Service Provider: dyndns.org, type the registered hostname: hostname and domain name suffix: dyndns.org in the Domain Name block. The following two blocks should be typed your account Login Name: test and Password: test. Service Provider Service Type Domain Name...
  • Page 82: Schedule

    Disable the Function and Clear all Dynamic DNS Accounts In the DDNS setup menu, uncheck Enable Dynamic DNS Setup, and push Clear All button to disable the function and clear all accounts from the router. Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account.
  • Page 83 Enable Schedule Setup Start Date (yyyy-mm-dd) Start Time (hh:mm) Duration Time (hh:mm) Action Idle Timeout Example Suppose you want to control the PPPoE Internet access connection to be always on (Force On) from 9:00 to 18:00 for whole week (office hour). Other time the Internet access connection should be disconnected (Force Down).
  • Page 84: Radius

    Assign these two profiles to the PPPoE Internet access profile. Now, the PPPoE Internet connection will follow the schedule order to perform Force On or Force Down action according to the time plan that has been pre-defined in the schedule profiles. Remote Authentication Dial-In User Service (RADIUS) is a security authentication client/server protocol that supports authentication, authorization and accounting, which is widely used by Internet service providers.
  • Page 85 Enable UPNP Service After setting Enable UPNP Service setting, an icon of IP Broadband Connection on Router on Windows XP/Network Connections will appear. The connection status and control status will be able to be activated. The NAT Traversal of UPnP enables the multimedia features of your applications to operate.
  • Page 86 The reminder as regards concern about Firewall and UPnP Can't work with Firewall Software Enabling firewall applications on your PC may cause the UPnP function not working properly. This is because these applications will block the accessing ability of some network ports.
  • Page 87: Wake On Lan

    A PC client on LAN can wake up specified PC through the router. Yet the specified PC must have installed a network card supporting WOL function. By the way, WOL function must be set as “Enable” on the BIOS setting of the specified PC. Wake by IP Address MAC Address...
  • Page 88: Vpn And Remote Access

    A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Internet. In short, by VPN technology, you can send data between two computers across a shared or public network in a manner that emulates the properties of a point-to-point private link.
  • Page 89: Ipsec General Setup

    Require MPPE (40/128bits) Selecting this option will force the router to encrypt packets by Maximum MPPE Mutual Authentication (PAP) Start IP Address In IPSec General Setup, there are two major parts of configuration. There are two phases of IKE/IPSec. Phase 1: negotiation of IKE parameters including encryption, hash, Diffie-Hellman parameter values, and lifetime to protect the following IKE exchange, authentication of both peers using either a Pre-Shared Key or Digital Signature (x.509).
  • Page 90: Ipsec Peer Identity

    IKE Authentication Method This usually applies to those are remote dial-in user or node IPSec Security Method To use digital certificate for peer authentication in either LAN-to-LAN connection or Remote User Dial-In connection, here you may edit a table of peer certificate for selection. As shown below, the router provides 32 entries of digital certificates for peer dial-in users.
  • Page 91 Profile Name Accept Any Peer ID Accept Subject Alternative Name Accept Subject Name Vigor3100 Series User’s Guide Type in a name in this file. Click to accept any peer regardless of its identity. Click to check one specific field of digital signature to accept the peer with matching value.
  • Page 92: Remote Dial-In User

    You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in or build the VPN connection. You may set parameters including specified connection peer ID, connection type (ISDN, VPN including PPTP, IPSec Tunnel, and L2TP by itself or over IPSec) and corresponding security methods, etc.
  • Page 93 Enable this account ISDN PPTP IPSec Tunnel L2TP Specify Remote Node Vigor3100 Series User’s Guide Check the box to enable this function. Idle Timeout- If the dial-in user is idle over the limitation of the timer, the router will drop this connection. By default, the Idle Timeout is set to 300 seconds.
  • Page 94 User Name Password IKE Authentication Method This group of fields is applicable for IPSec Tunnels and L2TP IPSec Security Method Callback Function further specify the corresponding security methods on the right side. Uncheck the checkbox-This means the connection type you select above will apply the authentication methods and security methods in the general settings.
  • Page 95: Lan To Lan

    Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles. You may set parameters including specified connection direction (dial-in or dial-out), connection peer ID, connection type (ISDN, VPN including PPTP, IPSec Tunnel, and L2TP by itself or over IPSec) and corresponding security methods, etc. The router provides up to 32 profiles, which also means supporting 32 VPN tunnels simultaneously.
  • Page 96 Profile Name Enable this profile Call Direction Always On or Idle Timeout Always On-Check to enable router always keep VPN Enable PING to keep alive This function is to help the router to determine the status of PING to the IP Specify a name for the profile of the LAN-to-LAN connection.
  • Page 97 ISDN PPTP IPSec Tunnel L2TP-with IPsec… Server IP/Host Name for.. User Name Password PPP Authentication VJ compression IKE Authentication Method IPSec Security Method Medium Vigor3100 Series User’s Guide procedure to inform each other. However, if the remote peer disconnect without notice, Vigor router will by no where to know this situation.
  • Page 98 High Encapsulating Security Payload (ESP)- means payload (data) will be encrypted and authenticated. Select from below: DES without Authentication -Use DES encryption algorithm and not apply any authentication scheme. DES with Authentication-Use DES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. 3DES without Authentication-Use triple DES encryption algorithm and not apply any authentication scheme.
  • Page 99 Callback Function (for i models only) Allowed Dial-In Type ISDN: PPTP IPSec Tunnel Vigor3100 Series User’s Guide reused to avoid the computation complexity in phase 2. The default value is inactive this function. Local ID -In Aggressive mode, Local ID is on behalf of the IP address while identity authenticating with remote VPN server.
  • Page 100 L2TP Specify Remote VPN Gateway... User Name Password VJ Compression IKE Authentication Method IPSec Security Method Allow the remote dial-in user to make a L2TP VPN connection through the Internet. You can select to use L2TP alone or with IPSec. Select from below: None- Do not apply the IPSec policy.
  • Page 101 Callback Function My WAN IP Remote Gateway IP Remote Network IP/ Remote Network Mask More RIP Direction RIP Version For NAT operation, treat remote sub-net as Vigor3100 Series User’s Guide The callback function provides a callback service only for the ISDN dial-in user.
  • Page 102: Connection Management

    Change default route to this VPN tunnel You can find the summary table of all VPN connections. You may disconnect any VPN connection by clicking Drop button. You may also aggressively Dial-out by using Dial-out Tool and clicking Dial button. Dial Refresh Seconds Refresh...
  • Page 103: Certificate Management

    A digital certificate works as an electronic ID, which is issued by a certification authority (CA). It contains information such as your name, a serial number, expiration dates etc., and the digital signature of the certificate-issuing authority so that a recipient can verify that the certificate is real.
  • Page 104: Trusted Ca Certificate

    Refresh View After clicking Generate, the generated information will be displayed on the window below: Trusted CA certificate lists three sets of trusted CA certificate. To import a pre-saved trusted CA certificate, please click IMPORT to open the following window. Use Browse.. to find out the saved text file. Then click Import. The one you imported will be listed on the Trusted CA Certificate window.
  • Page 105: Isdn

    ISDN means integrated services digital network that is an international communications standard for sending voice, video, and data over digital telephone lines or normal telephone wires. This page provides some basic ISDN settings such as enabling the ISDN port or not, MSN numbers and blocked MSN numbers, etc.
  • Page 106 router MSN Numbers for the Router Mapping to VoIP Ports prevent the router from dialing the specific MSN number. MSN Numbers mean that the router is able to accept only number-matched incoming calls. In addition, MSN services should be supported by local ISDN network provider.
  • Page 107: Dialing To A Single Isp

    If you access the Internet via a single ISP, press this link. ISP Name Dial Number Username Password Require ISP Callback (CBCP) Scheduler (1-15) Link Type PPP Authentication Idle Timeout Fixed IP Vigor3100 Series User’s Guide Enter your ISP name. Enter the ISDN access number provided by your ISP.
  • Page 108: Dialing To Dual Isps

    Fixed IP Address If you have more than one ISP, press this link to configure two ISP dialup profiles. You will be able to dial to both ISPs at the same time. This is mainly for those ISPs that do not support Multiple-Link PPP (ML-PPP) function.
  • Page 109 As depicted in the above application scenario, the Virtual TA client can make an outgoing call or accept an incoming call to/from a peer FAX machine or ISDN TA, etc. Before describing the configuration of Virtual TA in the Vigor routers, please heed the following limitations.
  • Page 110 On the server - Click Virtual TA (Remote CAPI) Setup link, and fill in the Username and Password fields. Check the Active box to enable the account. On the client - Right-click the mouse on the VT icon. The following pop-up menu will be shown.
  • Page 111 Click the Virtual TA Login tab to launch the login box. Enter the Username/Password and then click OK. After a short time, the VT icon text will turn green. If you have applied to an MSN number service, the Virtual TA server can assign which client has the specified MSN number.
  • Page 112: Call Control

    Some applications require that the router (only for the ISDN models) be remotely activated, or be able to dial up to the ISP via the ISDN interface. Vigor routers provide this feature by allowing user to make a phone call to the router and then ask it to dial up to the ISP. Accordingly, a teleworker can access the remote network to retrieve resources.
  • Page 113: Wireless Lan

    Note: If you are not sure whether your ISP can support BOD and/or ML-PPP’s features, please seek assistance from your ISP, local dealers or our website: support@draytek.com. This function is used for G models only. Over recent years, the market for wireless communications has enjoyed tremendous growth.
  • Page 114 Note: The actual data throughput will vary according to the network conditions and environmental factors, including volume of network traffic, network overhead and building materials. In an Infrastructure Mode of wireless network, Vigor wireless router plays a role as an Access Point (AP) connecting to lots of wireless clients or Stations (STA).
  • Page 115 Example 1 Example 2 Example 3 Separate the Wireless and the Wired LAN- WLAN Isolation enables you to isolate your wireless LAN from wired LAN for either quarantine or limit access reasons. To isolate means neither of the parties can access each other. To elaborate an example for business use, you may set up a wireless LAN for visitors only so they can connect to Internet without hassle of the confidential information leakage.
  • Page 116: General Setup

    By clicking the General Settings, a new web page will appear so that you could configure the SSID and the wireless channel. Please refer to the following figure for more information. Enable Wireless LAN Mode SuperG Overdrive Index(1-15) Check the box to enable wireless function. Select an appropriate wireless mode.
  • Page 117 SSID Channel Hide SSID Long Preamble Vigor3100 Series User’s Guide The default SSID is "default". We suggest you change it to a particular name. It is the identification of the wireless LAN. SSID can be any text numbers or various special characters.
  • Page 118: Security

    By clicking the Security Settings, a new web page will appear so that you could configure the settings of WEP and WPA. Mode There are several modes provided for you to choose. Disable - Turn off the encryption mechanism. WEP Only - Accept only WEP clients and the encryption key should be entered in WEP Key.
  • Page 119 Vigor3100 Series User’s Guide auto-negotiated during authentication, the field of key setting below will be not available for input. The WPA encrypts each frame transmitted from the radio using the key, which either PSK entered manually in this field below or automatically negotiated via 802.1x authentication.
  • Page 120: Access Control

    For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client. Only the valid MAC address that has been configured can access the wireless LAN interface. By clicking the Access Control, a new web page will appear, as depicted below, so that you could edit the clients' MAC addresses to control their access rights.
  • Page 121: Wds

    WDS means Wireless Distribution System. It is a protocol for connecting two access points (AP) wirelessly. Usually, it can be used for the following application: Provide bridge traffic between two LANs through the air. Extend the coverage range of a WLAN. To meet the above requirement, two WDS modes are implemented in Vigor router.
  • Page 122 In the following examples, hosts connected to Bridge 1 or 3 can communicate with hosts connected to Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Mode Security Choose the mode for WDS setting.
  • Page 123 Pre-shared Key Bridge Repeater Access Point Function Status Vigor3100 Series User’s Guide following WEP or Pre-shared key field valid or not. Choose one of the types for the router. Check this box to use the same key set in Security Settings page.
  • Page 124: Ap Discovery

    Vigor router can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know which channel is clean for usage. Also, it can be used to facilitate finding an AP for a WDS link. Notice that during the scanning process (about 5 seconds), no client is allowed to connect to Vigor.
  • Page 125: Station List

    Station List provides the knowledge of connecting wireless clients now along with its status code. There is a code summary below for explanation. For convenient Access Control, you can select a WLAN station and click Add to Access Control below. Refresh Vigor3100 Series User’s Guide Click this button to refresh the status of station list.
  • Page 126: Station Rate Control

    This page allows you to control the upload and download rate of each wireless client (station). Please check the box of Enable to invoke this setting. The range for the rate is between 100 ~ 30,000 kbps. Note: This menu is available for Vigor3100G model only. For Vigor3100 and Vigor3120, please refer to 3.2.4.
  • Page 127: Wireless Vlan

    Enable P1 – P4 VLAN0-3 PCs (equipped with wireless network cards) connected to the router through wireless interface can be divided into different groups and formed W_VLAN. PCs under the same groups can share each other information through the router and will not be peeked by other groups. PCs under the same groups can use same Login ID and password to access into Internet.
  • Page 128 7890 in the boxes of W_VLAN1. Users can configure fifteen groups of wireless VLAN in this page. Enable Login ID Password Details Check this box to invoke wireless VLAN function. Type Login ID for different groups of W_VLAN with 1 to 11 characters.
  • Page 129 After finishing the configuration of wireless VLAN, the wireless clients connecting to this router must do the following steps to access into Internet. 1. Open a browser and type http://www.draytek.vlan/login.htm or http://(vigor router’s IP address)/login.htm on the address line. 2. The following screen will appear.
  • Page 130: Vlan Cross Setup

    5. You can go to Diagnostics>>Wireless VLAN Online Station for viewing the connection status whenever you want. This function allows the router to integrate VLAN and W_VLAN for managing different computers (notebooks). See the following picture for an example. With VLAN Cross Setup, notebook A/B and PCs on VLAN0 can share resources without difficulty.
  • Page 131 Enable VLAN0-3 W_VLAN0-15 Vigor3100 Series User’s Guide Check this box to invoke VLAN Cross Setup function. It represents the groups of virtual LAN connected by Ethernet interface. It represents the groups of wireless VLAN communicated by wireless interface.
  • Page 132: Wireless Rate Control

    Rate Control manages the transmission rate of data in and out through the router. You can also manage the in/out rate of each wireless VLAN. Go to VLAN menu and select Wireless Rate Control. The following page will appear. Click Enable to invoke VLAN function. For the rate control of wireless connection, please open VLAN menu and choose Wireless Rate Control.
  • Page 133: Administrator Password

    Model Name Firmware Version Build Date/Time MAC Address IP Address Subnet Mask DHCP Server MAC Address IP Address Default Gateway This page allows you to set new password. Old Password New Password Retype New Password Type in the new password again. Vigor3100 Series User’s Guide Displays the model name of the router.
  • Page 134: Configuration Backup

    When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Follow the steps below to backup your configuration. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below.
  • Page 135: Syslog/Mail Alert

    Click Save button, the configuration will download automatically to your computer as a file named config.cfg. The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Go to System Maintenance >>...
  • Page 136 Enable Server IP Address Destination Port Enable syslog message Check the box to display the specified log. SMTP Server Mail To Return-Path Click OK to save these settings. For viewing the Syslog, please do the following: Just set your monitor PC’s IP address in the field of Server IP Address Install the Router Tools in the Utility within provided CD.
  • Page 137: Time And Date

    It allows you to specify where the time of the router should be inquired from. Current System Time Click Inquire Time to get the current time. Use Browser Time Use Internet Time Time Protocol Server IP Address Time Zone Enable Daylight Saving This function is valid for some area. Vigor3100 Series User’s Guide Select this option to use the browser time from the remote administrator PC host as router’s system time.
  • Page 138: Management

    Automatically Update Interval Click OK to save these settings. The port number used to send/receive SIP message for building a session. The default value is 5060 and this must match with the peer Registrar when making VoIP calls. Enable remote firmware upgrade Allow management from the Internet...
  • Page 139: Reboot System

    In the following, we use an example to explain the firmware upgrade. Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com Click System Maintenance>>...
  • Page 140: Diagnostics

    Diagnostic Tools provide a useful way to view or diagnose the status of you Vigor router. Click Diagnostics and click WAN Connection to open the web page. Refresh Broadband Access Mode/Status WAN IP Address Dial PPPoE or PPPoA Click it to force the router to establish a PPPoE or PPPoA Click Diagnostics and click Dial-out Trigger to open the web page.
  • Page 141: Routing Table

    Click Diagnostics and click Routing Table to open the web page. Refresh Click Diagnostics and click ARP Cache Table to view the content of the ARP (Address Resolution Protocol) cache held in the router. The table shows a mapping between an Ethernet hardware address (MAC Address) and an IP address.
  • Page 142: Nat Sessions Table

    Index IP Address MAC Address Leased Time HOST ID Refresh Click Diagnostics and click NAT Sessions Table to open the setup page. Private IP:Port #Pseudo Port Peer IP:Port Ifno Refresh It displays the connection item number. It displays the IP address assigned by this router for specified PC. It displays the MAC address for the specified PC that DHCP assigned IP address for it.
  • Page 143: Wireless Vlan Online Station Table

    This function is available for G model only. Click Diagnostics and click Wireless VLAN Online Station Table to open the web page. It will display the IP address, MAC address and Login ID information for all the Wireless VLAN stations. IP Address MAC Address Login ID...
  • Page 144 Enable Data Flow Monitor Order by Refresh Seconds Refresh Index IP Address TX rate (kbps) RX rate (kbps) Sessions Action Check this box to enable this function. Use the drop down list to choose the order of data arranging. Use the drop down list to choose the time interval of refreshing data flow that will be done by the system automatically.
  • Page 145: Traffic Graph

    Click Diagnostics and click Traffic Graph to pen the web page. Choose WAN1 Bandwidth/WAN2 Bandwidth or Sessions for viewing different traffic graph. Click Refresh to renew the graph at any time. The horizontal axis represents time. Yet the vertical axis has different meanings. For WAN1/WAN2 Bandwidth chart, the numbers displayed on vertical axis represent the numbers of the transmitted and received packets in the past.
  • Page 146: Ping Diagnosis

    Click Diagnostics and click Ping Diagnosis to pen the web page. Ping to IP Address Clear Click Diagnostics and click Trace Route to open the web page. This page allows you to trace the routes from router to the host. Simply type the IP address of the host in the box and click Run.
  • Page 147: Application And Examples

    The most common case is that you may want to connect to network securely, such as the remote branch office and headquarter. According to the network structure as shown in the below illustration, you may follow the steps to create a LAN-to-LAN profile. These two networks (LANs) should NOT have the same network address.
  • Page 148 Go to LAN-to-LAN. Click on one index number to edit a profile. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method.
  • Page 149 Set Dial-In settings to as shown below to allow Router B dial-in to build VPN connection. If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above.
  • Page 150 At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router A can direct the packets destined to the remote network to Router B via the VPN connection. Settings in Router B in the remote office: Go to Remote Access Control to enable the necessary VPN service. Then, for using PPP based services, such as PPTP, L2TP, or ISDN, you have to set general settings in PPP General Setup.
  • Page 151 Go to LAN-to-LAN. Click on one index number to edit a profile. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method.
  • Page 152 connection. Set Dial-In settings to as shown below to allow Router A dial-in to build VPN connection. If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above.
  • Page 153 At last, set the remote network IP/subnet in TCP/IP Network Settings so that Router B can direct the packets destined to the remote network to Router A via the VPN connection. Vigor3100 Series User’s Guide...
  • Page 154: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter

    The other common case is that you, as a teleworker, may want to connect to the enterprise network securely. According to the network structure as shown in the below illustration, you may follow the steps to create a Remote User Profile and install Smart VPN Client on the remote host.
  • Page 155 Go to Remote Dial-In Users. Click on one index number to edit a profile. Set Dial-In settings to as shown below to allow the remote user dial-in to build VPN connection. If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection.
  • Page 156 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.draytek.com download center. Install as instructed.
  • Page 157 You may further specify the method you use to get IP, the security method, and authentication method. If the Pre-Shared Key is selected, it should be consistent with the one set in VPN router. If a PPP-based service is selected, you should further specify the remote VPN server IP address, Username, Password, and encryption method.
  • Page 158: Qos Setting Example

    Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. Assume a teleworker sometimes works at home and takes care of children. When working time, he would use Vigor router at home to connect to the server in the headquarter office downtown via either HTTPS or VPN to check email and access internal database.
  • Page 159 HTTPS. And click Basic button on the right. Select HTTPS in the list on the left column and click on ADD to add to right column. Click OK to exit. Check the Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of VoIP influent other application.
  • Page 160: Lan - Created By Using Nat

    – – An example of default setting and the corresponding deployment are shown below. The default Vigor router private IP address/Subnet Mask is 192.168.1.1/255.255.255.0. The built-in DHCP server is enabled so it assigns every local NATed host an IP address of 192.168.1.x starting from 192.168.1.10.
  • Page 161 You can just set the settings wrapped inside the red rectangles to fit the request of NAT usage. Vigor3100 Series User’s Guide...
  • Page 162: Request A Certificate From A Ca Server On Windows Ca Server

    Go to Certificate Management and choose Local Certificate. Vigor3100 Series User’s Guide...
  • Page 163 You can click GENERATE button to start to edit a certificate request. Enter the information in the certificate request. Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2000 CA server for example.
  • Page 164 Select Advanced request. Select Submit a certificate request a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file Import the X509 Local Certificate Requet text file. Select Router (Offline request) or IPSec (Offline request) below. Then you have done the request and the server now issues you a certificate.
  • Page 165: Request A Ca Certificate And Set As Trusted On Windows Ca Server

    you will find the below window showing “------BEGINE CERTIFICATE------...” You may review the detail information of the certificate by clicking View button. Vigor3100 Series User’s Guide...
  • Page 166 Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. In Choose file to download, click CA Certificate Current and Base 64 encoded, and Download CA certificate to save the .cer.
  • Page 167 You may review the detail information of the certificate by clicking View button. Vigor3100 Series User’s Guide...
  • Page 168 Vigor3100 Series User’s Guide...
  • Page 169: Trouble Shooting

    This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow below sections to check your basic installation stage by stage. Checking if the hardware status is OK or not. Checking if the Network Connection Settings on your computer is OK or not.
  • Page 170 OK. The example is based on Windows XP. As to the examples for other operation systems, please refer to the similar steps or find support notes in www.draytek.com. Go to Control Panel and then double-click on Network Connections.
  • Page 171 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used MacOs on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor3100 Series User’s Guide...
  • Page 172: Pinging The Router From Your Computer

    The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most important thing is that the computer will receive a reply from 192.168.1.1. If not, please check the IP address of your computer.
  • Page 173: Checking If The Isp Settings Are Ok Or Not

    Click Internet Access Setup group and then check whether the ISP settings are set correctly. Check if the Enable option is selected. Check if all parameters of DSL Modem Settings are entered with correct values that you got from your ISP. Check if Username and Password are entered with correct values that you got from your ISP.
  • Page 174: Problems For 3G Network Connection

    PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek.
  • Page 175: Backing To Factory Default Setting If Necessary

    Please connect your Notebook with 3G USB Modem to test the connection speed to verify if the problem is caused by Vigor3100. In addition, please refer to the manual of 3G USB Modem for LED Status to make sure if the modem connects to Internet via HSDPA mode. If you want to use the modem indoors, please put it on the place near the window to obtain better signal receiving.
  • Page 176: Contacting Your Dealer

    After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor3100 Series User’s Guide...

This manual is also suitable for:

Vigor 3100gVigor 3100iVigor 3100v

Table of Contents