Draytek Vigor3300 Series User Manual
  1. Manuals
  2. Brands
  3. Draytek Manuals
  4. Network Router
  5. Vigor3300 Series
  6. User manual
Draytek Vigor3300 Series User Manual

Draytek Vigor3300 Series User Manual

Multi-wan security router
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual

Advertisement

Table of Contents
loading

Related Manuals for Draytek Vigor3300 Series

Summary of Contents for Draytek Vigor3300 Series

  • Page 2 Vigor 3300 Series Multi-WAN Security Router User’s Guide Version: 3.0 Date: 1/4/2009 Vigor3300 Series User’s Guide...

  • Page 3: Copyright Information

    Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp. Apple and Mac OS are registered trademarks of Apple Inc. Other products may be trademarks or registered trademarks of their respective manufacturers. Vigor3300 Series User’s Guide...

  • Page 4: Table Of Contents

    3.2.6 Bandwidth Management ....................56 3.2.7 Limit Session ........................58 3.3 Advanced Setup ........................60 3.3.1 Static Route Setup......................61 3.3.2 NAT Setup ........................62 3.3.3 RADIUS Setup........................ 68 3.3.4 Port Block ........................70 3.3.5 DDNS Setup ........................70 Vigor3300 Series User’s Guide...
  • Page 5 5.1.1 Block LAN-to-LAN Communication ................157 5.1.2 How to Check/Edit VLAN ID on Your PC? ..............158 5.1.3 Four VLANs for Different Departments in A Company..........164 5.1.4 Two VLANs for Different Departments in A Company ..........166 Vigor3300 Series User’s Guide...
  • Page 6 5.2.6 Example 1 - Basic Configuration and Registration............183 5.2.7 Example 2- Basic Calling Method................. 190 5.2.8 Example 3 - VoIP over VPN ..................197 5.2.9 Example 4 - Practical Application of FXS ..............203 5.2.10 Example 5 - Practical Application of FXO..............205 Vigor3300 Series User’s Guide...

  • Page 7: Preface

    The Vigor3300 Series integrates a rich suite of functions, including NAT, firewall, VPN, load balance, bandwidth management, and VoIP capability. These products are very suitable for providing multi-integrated solutions to SME markets. An application scenario for the Vigor3300 Series is depicted in the following figure, which illustrates interconnections among branch offices through the Internet via the Vigor3300 Series routers.

  • Page 8: Led Indicators And Connection

    Each interface can be connected to an individual Internet Service Provider. The Vigor3300 Series also supports a backup function for WAN interfaces– a user can select one WAN interface to be a backup interface. If the master interface fails, the backup interface will take the place of the master interface immediately.
  • Page 9 Interface Description Console Provided for technician use. LAN (P1 ~ P4) Connecter for local networked devices. WAN/DMZ (P1 ~ P4) Connecter for remote networked devices. Connecter for telephone set. Connecter for FXS interface of PABX. Vigor3300 Series User’s Guide...

  • Page 10: Led Indicators And Connectors For Vigor3300

    The Ethernet link is established. Blinking The data transmission is done through the corresponding port. (1, 2, 3, 4) No Ethernet link is established. It means that a normal 100Mbps connection is through 100M its corresponding port. Vigor3300 Series User’s Guide...
  • Page 11 It means a full duplex connection on corresponding port. It means a half duplex connection on corresponding port. Interface Description Console Provided for technician use. LAN (P1 ~ P4) Connecter for local networked devices. WAN/DMZ (WAN1 ~ WAN3) Connecter for remote networked devices. Vigor3300 Series User’s Guide...

  • Page 12: Led Indicators And Connectors For Vigor3300B

    No Ethernet link is established. It means that a normal 100Mbps connection is through 100M its corresponding port. It means that a normal 10Mbps connection is through its corresponding port. It means a full duplex connection on corresponding port. Vigor3300 Series User’s Guide...
  • Page 13 Ethernet (LAN) RJ-45, Blue Ethernet switch or hub Ethernet (DMZ) RJ-45, Blue Server Ethernet (WAN1) RJ-45, Blue DSL/Cable/Fiber Modem Ethernet (WAN2) RJ-45, Blue DSL/Cable/Fiber Modem Ethernet (WAN3) RJ-45, Blue DSL/Cable/Fiber Modem Ethernet (WAN4) RJ-45, Blue DSL/Cable/Fiber Modem Vigor3300 Series User’s Guide...

  • Page 14: Hardware Installation

    Connect the FXO ports to PABX with telephone lines (RJ-11 to RJ-11). For the users of Vigor3300 and Vigor3300B+, please skip this step. Below shows an outline of the hardware installation for your reference (take Vigor3300V as an example). Vigor3300 Series User’s Guide...

  • Page 15: Detailed Explanation For The Connector

    RJ45 cables. These cables are used on WAN, LAN, and DMZ interfaces. The Vigor3300 Series can be mounted on a rack by using standard brackets in a 19-inch rack or optional larger brackets on 23-inch rack (not included). The bracket for 19- and 23-inch racks are shown below.
  • Page 16 After the bracket installation, the Vigor3300 Series chassis can be installed in a rack by using four screws for each side of the rack. Rubber pads are included with the Vigor3300 Series. These rubber pads improve the air circulation and decrease unnecessary rubbing on the desktop.

  • Page 17: Configuring Basic Settings

    Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type default values on the window for the first time accessing. The default value for user name is draytek and the password is 1234. Next, click OK.
  • Page 18 Now, the Main Screen will pop up. Go to System page and choose Change Password. The following screen will appear. Vigor3300 Series User’s Guide...

  • Page 19: Quick Setup

    The router supports the Ethernet WAN interface for Internet access. The following sections will explain in more detail the various broadband access configurations. All the settings in this section will be used in the first WAN1 interface. Vigor3300 Series User’s Guide...
  • Page 20 Assign the downstream rate for this WAN interface. The default value is 102400 kbps (100 Megabit). This setting is very important for Vigor3300 Series incoming buffer adjustment. If you use a DSL subscriber service with a 2Mbps downstream, please set the downstream rate setting with 2Mbps.

  • Page 21: Static Mode

    (e.g., Advanced >> NAT>>Port Redirection/DMZ Host). Thirty-two IP addresses settings are allowed at one time. After setting up the WAN interface, the user can click Next to setup the LAN interface continuously. Vigor3300 Series User’s Guide...
  • Page 22 Gateway IP (Optional) Set a gateway IP address for the DHCP server. When you finished the above required settings, please click Finish. A system reboot page will appear. Click Apply to activate the static mode configuration. Vigor3300 Series User’s Guide...

  • Page 23: Dhcp Mode

    Assign the start IP address of the IP pool that DHCP server can use for clients in LAN. End IP Assign the end IP address of the IP pool that DHCP sever can use for clients in LAN. Primary DNS Type the IP address for primary DNS. Vigor3300 Series User’s Guide...
  • Page 24 Next, click IP Routing tab to set routing path for each WAN interface if required. When you finished the above settings, please click Finish. A system reboot page will appear. Click Apply to activate the DHCP mode configuration. Vigor3300 Series User’s Guide...

  • Page 25: Pppoe

    Select PAP, CHAP, MS-CHAP or MS-CHAP-V2 protocol for PPP authentication. The default value is PAP. Service Name Assign a service name required from ISP service. After setting up the PPPoE, click Next to setup the LAN interface continuously. Vigor3300 Series User’s Guide...
  • Page 26 Set a lease time for the DHCP server. The time unit is minute. Gateway IP (Optional) Set a gateway IP address for the DHCP server. When you finished the above settings, please click Finish. A system reboot page will appear. Click Apply to activate the PPPoE mode configuration. Vigor3300 Series User’s Guide...

  • Page 27: Pptp

    PPTP Subnet Mask Assign a net mask value for IP address of PPTP. PPTP Server Address Assign a remote IP address of PPTP server. After setting up the PPTP, click Next to setup the LAN interface continuously. Vigor3300 Series User’s Guide...
  • Page 28 Set a lease time for the DHCP server. The time unit is minute. Gateway IP (Optional) Set a gateway IP address for the DHCP server. When you finished the above settings, please click Finish. A system reboot page will appear. Vigor3300 Series User’s Guide...

  • Page 29: Advanced Configuration

    The online Status function provides some useful system information on the current status of the Vigor3300 Series. A user can observe the system status on this Web page and determine which setting needed to be changed in corresponding web pages. In the System group, click the Status option.
  • Page 30 Display the average percentage of the CPU used. Memory Size Display the size of the memory of this router. Memory Usage Display the percentage of memory used. Current System Time Display the current local system time. Vigor3300 Series User’s Guide...
  • Page 31 If there is only one Vigor3300 used in LAN, this line will be blank. RX Packets Display the total number of received packets at the LAN interface. TX Packets Display the total transmitted packets at the LAN interface. Vigor3300 Series User’s Guide...
  • Page 32 Display the total transmitted packets for each WAN interface. Connection Status Display the connection status of the WAN interface. Up Time Display the total system uptime of the interface. Connect Click this button to make a connection manually. Vigor3300 Series User’s Guide...

  • Page 33: Time

    The Vigor3300 Series supports synchronization with a specific NTP server or the remote PC host of the administrator. In the System group, click the Time option. The Time page is...

  • Page 34: Syslog

    The Vigor3300 Series supports a Syslog function to keep a record of abnormal conditions. The router will send Syslog packets to a Syslog server on the remote site. The administrator can observe any abnormal events from Vigor3300. In the System group, click the Syslog option.

  • Page 35: Access Control

    This page allows you to determine which services (HTTP/Telnet/SSH) is used for the user to access Vigor3300 Series. In addition, you can also limit some hosts to access Vigor3300 Series with specified IP address. In the System group, click the Access Control option. You will get the following page:...

  • Page 36: Configuration Setup

    Most of the settings can be saved locally as a configuration file, and can be applied to another router. The Vigor3300 Series supports the restore and upload functions of the configuration files. In the System group, click the Configuration Setup option. And you can see the following page.

  • Page 37: Firmware Upgrade Setup

    Vigor3300 Series allows users to upgrade firmware through a Web interface. In the System group, click the Firmware Upgrade option. You can see the following page then. Before you execute the firmware upgrade, please download the newest firmware from Draytek’s website (www.draytek.com) or FTP site (ftp.draytek.com) on the computer first.
  • Page 38 4. Open Hyper Terminal on the PC. Now, Vigor3300 can accept a TFTP download and will display the following message: **************************** * DrayTek V3300 Bootloader * **************************** Press [ENTER] key within 5 sec. to download image...2 Current LAN IP is 192.168.1.1 New IP: Prepare downloading.
  • Page 39 7. When set flash0_0 "780000:800000:general" appears, it means the firmware downloading has been completed. The router will reboot itself and you will see the Firmware version: V2.X.X. Please wait about seconds to relogin the router. The procedure is finished now. Vigor3300 Series User’s Guide...

  • Page 40: Reboot

    The Vigor3300 Series system can be restarted from a Web browser. Reboot screen can appear after you finish the changing of WAN and LAN settings. You have to reboot the router to invoke the configured settings that you made before. Besides, you can select Reset to factory default to reboot the device and retrieve the default settings.

  • Page 41: Diagnostic Tools

    In some cases, a user may need to know some information about the router, such as static or dynamic databases, or other routing information. The Vigor3300 Series supports four functions, Routing Table, ARP Cache Table, DHCP Assignment Table, and NAT Active Sessions Table for the user to review such information.
  • Page 42 DHCP server. When the time expired, such IP address would not be kept for this client and might be assigned to other client. Refresh Click Refresh to re-display this web page for getting newest routing information. Vigor3300 Series User’s Guide...
  • Page 43 IP address monitored and refreshes the data in an interval of several seconds. Disable/Enable Click Enable to invoke this function. Index Display the number of the data flow. IP Address Display the IP address of the monitored device. Vigor3300 Series User’s Guide...

  • Page 44: Network Setup

    For Internet access, it is necessary for you to set WAN and LAN interfaces for the router. The Vigor3300 Series supports four WAN interfaces (Static, DHCP, PPPoE and PPTP), which share the same setting page. In the Network group, please click the WAN option. The following page will be shown.
  • Page 45 VoIP Set this WAN interface as VoIP default interface. Most users will use their routers primarily for Internet access. The Vigor3300 Series supports broadband Internet access and provides multiple WAN interfaces. The following sections will give a detailed illustration to broadband access methods.
  • Page 46 Different mode will lead different configuration and will be explained in later section. Before you connect a broadband access device e.g. a DSL/Cable modem to Vigor3300 Series, you need to know what kind of Internet access your ISP provides. The following sections introduce four widely used broadband access services: Static, PPPoE, PPTP for DSL, DHCP for Cable modem and DMZ.
  • Page 47 Send ARP to Gateway, Send PING and Send HTTP Request supported in 3300. Detect Interval (sec) Assign an interval period of time for each detecting. The minimum value is 3 and no limit for maximum value. Vigor3300 Series User’s Guide...
  • Page 48 Click Apply to go back to the WAN Interface Configuration page. To apply all settings, click Apply on the WAN Interface Configuration page and reboot your router. Reset Click this button to clear all the configurations for this page. Vigor3300 Series User’s Guide...
  • Page 49 If the WAN interface is set as a DHCP client, the Vigor3300 Series will ask for IP network settings from the DHCP server or DSL modem automatically. It is not necessary for users to manually configure the router. Detect Type Select a detecting type for this WAN interface.
  • Page 50 32 sets of IP alias settings. If you have typed addresses here, you can see and choose it in later web page settings (e.g., Advanced >> NAT>>Port Redirection/DMZ Host). Detect Interval Assign an interval time for detecting if the WAN connection is on or off. Vigor3300 Series User’s Guide...
  • Page 51 Assign a service name required for some ISP services. PPTP Local Address Assign a local IP address. PPTP Subnet Mask Assign a subnet mask value of IP address. PPTP Remote Address Assign a remote IP address of PPTP server. Vigor3300 Series User’s Guide...
  • Page 52 The service provider must provide the exact settings for this mode. IP Address Set the private IP address of WAN interface. Subnet Mask Set the subnet mask value of WAN interface. Vigor3300 Series User’s Guide...

  • Page 53: Load Balance Policy

    IP address here to be chosen in IP Alias in Advanced>>NAT>>DMZ Host. Vigor3300 Series supports a load balancing function. It can assign traffic with protocol type, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN interface.
  • Page 54 Network Interface Select an interface (WAN1 to WAN4) to be forwarded to. Strict Bind Packets fitting the above settings can be routed through the selected interface only. Check this box to invoke this function. Vigor3300 Series User’s Guide...

  • Page 55: Auto Load Balance

    A telecom company. China CNC A telecom company. Other Traffic Regions that are not belonged to China Telecom and China CNC. In the Network group, select LAN option. The following page for LAN IP/DHCP will be shown. Vigor3300 Series User’s Guide...
  • Page 56 In the Vigor3300 Series router, there are some IP address settings for the LAN interface. The IP address/subnet mask is for private users or NAT users. The IP address of the default gateway on other local PCs should be set as the Vigor3300 Series’ server IP address. When the DSL connection between the DSL and the ISP has been established, each local PC can directly route to the Internet.
  • Page 57 This page allows users to specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to. WAN Interface Choose the WAN interface for applying relay agent. DHCP Server IP Address Type the IP address for the DHCP server. Vigor3300 Series User’s Guide...
  • Page 58 Type the subnet mask for the WAN interface (WAN1/WAN2/WAN3/WAN4). LAN Interface Select a proper LAN interface for WAN interface (WAN1/WAN2/WAN3/WAN4). Note: Vigor3300V supports four WAN interfaces, yet Vigor3300/Vigor3300B+ support three WAN interfaces. That is, #WAN4 will be disabled for Vigor3300/Vigor3300B+. Vigor3300 Series User’s Guide...

  • Page 59: High Availability

    Slave device could replace the Master role to take over all jobs as soon as possible. However, once the original Master is working again, the Slave would be changed to original role to stand by. Vigor3300 Series User’s Guide...
  • Page 60 In the Network group, click the High availability option. Vigor3300 Series User’s Guide...

  • Page 61: Rip Configuration

    In addition, it will choose a correct route based on the method of Distance Vector Routing and use the Bellman-Ford algorithm to calculate the routing table. RIP can update the routing table automatically and find a route to send packet. See the following figure as an example: Vigor3300 Series User’s Guide...

  • Page 62: Bandwidth Management

    Disables or enables this function. Enabled Interface Check the interface to apply the RIP configuration. Apply After finishing the configuration, please click this button to invoke these settings. This function is used to limit user bandwidth. Vigor3300 Series User’s Guide...
  • Page 63 This function allows users to set limitation for bandwidth management. In the Network group, choose Bandwidth Management and then Limitation Table. You will get the following page. Start IP Display the start IP address of bandwidth. End IP Display the End IP address of bandwidth. Vigor3300 Series User’s Guide...

  • Page 64: Limit Session

    (e.g., BitTorrent) always need many sessions for procession and they will occupy over resources which might result in important accesses impacted. To solve the problem, you can use limit session to limit the session procession for specified Hosts. Vigor3300 Series User’s Guide...
  • Page 65 Click this button to open the edit page for adjusting the settings. Delete/Delete All Click this button to delete the selected setting or all settings. A confirmation dialog box will appear. Click OK to delete this Vigor3300 Series User’s Guide...

  • Page 66: Advanced Setup

    Apply After finishing the configuration, please click this button to invoke these settings. In the Advanced menu, there are several items offered here for you to adjust for the router. Vigor3300 Series User’s Guide...

  • Page 67: Static Route Setup

    The system allows users to set up to 10 static routes for the router. To edit static route for certain item, select the radio button of the item and click Edit on the bottom of the page. The following web page will be displayed: Vigor3300 Series User’s Guide...

  • Page 68: Nat Setup

    NAT-enabled by default and gets one globally routable IP addresses from the ISP by Static, PPPoE, or DHCP mechanism. The Vigor3300 Series assigns private network IP addresses according to RFC-1918 protocol and translates the private network addresses to a globally routable IP address so that local hosts can communicate with the router and access the Internet.
  • Page 69 Public Port End Display the end point in the range of public port. Private IP Display the private IP used for this entry. Private Port Start Display the start point in the range of private port. Vigor3300 Series User’s Guide...
  • Page 70 Click Apply to reboot the system and apply the settings. Note: The port forwarding function could redirect the Internet traffic, which has the destination port within the public port range and has the same IP address as WAN Interface or Vigor3300 Series User’s Guide...
  • Page 71 If you have a group of static IP addresses, then you can use the address-mapping feature to multiple open ports hosts in the Vigor3300 Series of broadband security routers. The following session will show you how to setup address-mapping feature.
  • Page 72 The DMZ may typically also have the company’s Web pages so these could be served to the outside world. If an outside user penetrated the DMZ host’s security, only the Web pages will be corrupted but other company information would not be exposed. Vigor3300 Series User’s Guide...
  • Page 73 Use IP Alias Disable option uses WAN interface, Enable option uses IP Alias addresses. IP Alias Select an IP address which are set within the list of IP Alias configured in Network >>WAN interface. Vigor3300 Series User’s Guide...

  • Page 74: Radius Setup

    PAP of CHAP protocols. The Vigor 3300 Series support Radius client function. A user can configure some authentication information to do an authentication with Radius server. In Vigor3300 Series, it is only applied by VPN->PPTP function.
  • Page 75 Confirm Shared Secret Confirm the code assigned in Shared Secret field. WAN Interface Select one specific WAN interface to be used. Click Apply to reboot the system and apply the settings. Vigor3300 Series User’s Guide...

  • Page 76: Port Block

    (both TCP and UCP) of packets with these assigned port numbers are on WAN and LAN. The advantage of this feature is to filter some unnecessary packets or attacking packets on Internet environment or LAN network. Vigor3300 Series supports ten port numbers to be blocked.
  • Page 77 Select a specific interface for registering on DDNS server. The Interface should be any WAN port on V3300 series. Server Provider Assign a provider name to support DDNS server. The Vigor3300 supports 7 domain server providers as default. Vigor3300 Series User’s Guide...
  • Page 78 You could get more detailed information from their websites. 2. Backup MX provides a secondary mail server to hold your e-mail if your main email server go offline for any reason. Once you go back online, your email will be delievered to you. Vigor3300 Series User’s Guide...

  • Page 79: Call Schedule Setup

    In order to do the proper call schedule function, a user must have to setup time function and arrange schedules for specified Internet access profile or LAN-to-LAN profile. Vigor3300 Series support lots of profiles for call schedule usage. In the Advanced group, click the Call Schedule option. You will get the following page.

  • Page 80: Wan Port Mirroring Setup

    Vigor 3300 Series supports port mirroring function in WAN interfaces. Generally speaking, this function copies traffic from one or more specific ports to a target port. This mechanism helps manager track the network errors or abnormal packets transmission without interrupting Vigor3300 Series User’s Guide...
  • Page 81 Click Disable to disable this function. Click Enable to activate this function. Mirroring Port Select a port to view traffic sent from mirrored ports. Mirrored Port(s) Click which ports are necessary to be mirrored. After finishing the settings, please click Apply. Vigor3300 Series User’s Guide...

  • Page 82: Lan Port Mirroring Setup

    This router supports Virtual LAN only in LAN site. User can select some ports to add into a VLAN group. In one VLAN group, the port number can be single one or more. The purpose of VLAN is to isolate traffic between different users and it can provide better security application. Vigor3300 Series User’s Guide...
  • Page 83 This router allows you to set 4 groups of virtual LAN. Apply After finishing the settings, please click Apply. Reset In addition, you can click Reset to reset the VLAN setting as default. A dialog will be prompted for you to ask confirmation. Click OK. Vigor3300 Series User’s Guide...
  • Page 84 P4) according to your necessity. Frame Tag Operation Basically, the default settings for tagged or untagged VLAN will be shown automatically when you type VLAN ID/Name and check the Active box. By the way, you can modify the tag Vigor3300 Series User’s Guide...

  • Page 85: Snmp

    Managed devices collect and store management information and make this information available to NMSs by using SNMP. Managed devices, sometimes called network elements, can be routers and access servers, switches and bridges, computers hosts, or printers. Vigor3300 Series User’s Guide...
  • Page 86 To edit an item, click the radio button of the item that you want to modify. Then click Edit on the bottom of the page to add a new rule entry or modify an existed rule entry. Vigor3300 Series User’s Guide...
  • Page 87 To edit an item, click the radio button of the item that you want to modify. Then click Edit on the bottom of the page to add a new rule entry or modify an existed rule entry. Vigor3300 Series User’s Guide...
  • Page 88 Assign an IP address of trap server. Trap community Assign a community string for Trap packet using. Trap server port Assign a port number for Trap server using. Apply Click Apply to save this setting and return the previous page. Vigor3300 Series User’s Guide...

  • Page 89: Firewall Setup

    The default is Disable. Start Filter Group Default group names provided here are Pass and Block. Select the first filter group to begin filtering mechanism. The group in Vigor3300 Series User’s Guide...
  • Page 90 In this page, you can type in new group name and decide the next group name. Also, you can type in your comment for such group. After you click Apply, the new group will be added and you will see it from the drop down menu of Start Filter Group. Vigor3300 Series User’s Guide...
  • Page 91 It means the source IP address. Placing the symbol “!” before a particular IP address will prevent this rule from being applied to that IP address. It is equal to the logical NOT operator. Subnet Mask It means the subnet mask for the source IP. Vigor3300 Series User’s Guide...
  • Page 92 It means the filter group for the current rule. Protocol It is the protocol(s) for this filter rule. Direction The direction of packet flow VPN In is for incoming packets. VPN Out is for outgoing packets, and Any is for both Vigor3300 Series User’s Guide...
  • Page 93 Block or Pass is selected as Block or Pass. Apply Click this button to return to IP Filter Table setting page. The new added rule information will be displayed on this page too. Refer to the following graphic. Vigor3300 Series User’s Guide...

  • Page 94: Dos

    Disable. Enable SYN Flood Defense Activates the SYN flood defense function. If the amount of TCP SYN packets from the Internet exceeds the user-defined threshold value, the router will be forced to randomly discard Vigor3300 Series User’s Guide...
  • Page 95 Activates the Block fraggle Attack function. Any broadcast Attack UDP packets received from the Internet are blocked. Enable TCP Flag Scan Activates the Block TCP flag scan function. Any TCP packet with an anomalous flag setting is dropped. These scanning Vigor3300 Series User’s Guide...

  • Page 96: Url Filter

    HTTP requestt. If the entire or part of the URL string (for instance, http://www.draytek.com, as shown above) matches any activated rule, the first and the following associate HTTP request will be blocked. The system will discard any request, which tries to retrieve the malicious code.
  • Page 97 Deny any Web surfing activity that directly uses an IP Access address. Enable Exception List Click it to allow specified IP addresses or subnets to be passed through. IP Address The allowed IP address. Subnet Mask The allowed subnet mask of IP address. Vigor3300 Series User’s Guide...
  • Page 98 The permitted categories are obtained from the selected a server. Forbidden Categories List The forbidden categories are obtained from the selected a server. The URL domain name. Option Allow or Deny the selected URL. Exception URL List The list of filtered URLs. Vigor3300 Series User’s Guide...
  • Page 99 The router will filter out all cookies-related transmissions. Proxy Activates the Block Proxy function. The router will filter out all proxy-related transmissions. Multimedia Files Activates the Block Multimedia function. The router will filter out multimedia from any website. Vigor3300 Series User’s Guide...
  • Page 100 The default value is 8:00 to 18:00 from Monday to Friday. After the configuration of URL Filter is configured properly, an alert page will appear in the browser when an HTTP request is denied. Refer to the following graphic. Vigor3300 Series User’s Guide...

  • Page 101: Bind Ip To Mac

    It is used to refresh the ARP table. When there is one new PC added to the LAN, you can click this link to obtain the newly ARP table information. IP Bind List It displays a list for the IP bind to MAC information. Vigor3300 Series User’s Guide...

  • Page 102: Im/P2P Blocking

    IP address for passing through or blocking) for IM (Instant Messenger)/P2P (Peer to Peer) application. To edit IM/P2P blocking rule, please choose one of the radio buttons under “#” and click Edit. The following page will be shown automatically. Vigor3300 Series User’s Guide...

  • Page 103: Quality Of Service Setup

    In the Vigor 3300 Series, DSCP (Differentiated Service Code Point) support is also taken into consideration in the design of theQoS-guaranteed control module. The QoS function handles incoming and outgoing classes independently. Users can configure incoming or outgoing separately without any impact on the other. Vigor3300 Series User’s Guide...

  • Page 104: Incoming/Outgoing Class Setup

    Please type the name for each queue. Bandwidth Please type the usage percentage for each queue. Apply Click this button to apply all the settings set in this page. Click the QoS option and choose Incoming Class Filter/Outgoing Class Filter. Vigor3300 Series User’s Guide...
  • Page 105 Click this button to delete the selected setting or all settings. To edit an incoming class filter, please choose one of the radio buttons under Priority and click Edit. The following page will be shown automatically. Vigor3300 Series User’s Guide...
  • Page 106 Type the port range number for this filter. DiffServ CodePoint Status There are three options: Basic – Only the DiffServ CodePoint Type field can be configured. Advanced – Only the DiffServ CodePoint field can be configured. None –No field allowed to be configured. Vigor3300 Series User’s Guide...

  • Page 107: Vpn And Remote Access Setup

    For example, the head office network can access the branch office network, and vice versa. The VPN technology implemented in the Vigor3300 Series of broadband security routers supports Internet-industry standards to provide customers with interoperable VPN solutions,...

  • Page 108: Ipsec

    "paths" between a pair of hosts, between a pair of security gateways, or between a security gateway and a host. The Vigor3300 Series supports ESP Tunnel mode with IKE for key management. Internet Key Exchange (IKE) Protocol, a key protocol in the IPSec architecture, is a hybrid protocol using...
  • Page 109 For Default Configuration. Delete Delete a designated entry. Delete All Delete all entries in the table. To edit or add a policy table, please click one of the radio buttons and click Edit. Vigor3300 Series User’s Guide...
  • Page 110 20 characters including spaces. Authentication The authentication to be used by PreShared Key or RSA Signature. PreShared Key The shared key for peer identification. The maximum length is 40 characters, including spaces. Vigor3300 Series User’s Guide...
  • Page 111 The subnet behind the remote gateway. If the remote gateway Subnet Mask IP address is 0.0.0.0, this field can be omitted, but you can specify it as 0.0.0.0/32 for clarity. For Advanced Configuration Click Advanced tab. The following page of default configuration will be shown: Vigor3300 Series User’s Guide...
  • Page 112 Key Lifetime (quick) The rekey-renegotiated period of the IKE Phase2 keying channel. The acceptable range is from 5 to 1440 minutes (24 hours). Proposal (quick) The proposed encryption and/or authentication algorithms for IKE Phase2 negotiations. There are 2 options. Vigor3300 Series User’s Guide...
  • Page 113 DOWN means no tunnel existing, or termination status of the tunnel. If user expects the local gateway to act as the IKE initiator, i.e., emit the first IKE main mode message, user can click the hyperlink Initiate to start the IKE negotiation or set Vigor3300 Series User’s Guide...
  • Page 114 TCP/UDP Service Port again. The VPN Load Balance function can keep the transmission for internal data on tunnel stably. To create a VPN IPSec policy for VPN Trunk, click the Policy Table option under the IPSec >>VPN Trunk menu. Vigor3300 Series User’s Guide...
  • Page 115 Configure an entry. Clicking this button can guide you accessing into editing page for that IPSec tunnel. For detailed information, refer to the following section of For Default Configuration. Delete Delete a designated entry. Delete All Delete all entries in the table. Vigor3300 Series User’s Guide...
  • Page 116 AH - Specify the IPSec protocol for the Authentication Header protocol. The data will be authenticated but not be encrypted. ESP - Specify the IPSec protocol for the Encapsulating Security Payload protocol. The data will be encrypted and authenticated. Vigor3300 Series User’s Guide...
  • Page 117 The IP address of the remote client/gateway. This field is mandatory. The setting for 0.0.0.0 is used for the road-warrior with a dynamic IP address. Remote GRE IP The virtual IP address of the remote client, specified for this tunnel. Vigor3300 Series User’s Guide...
  • Page 118 The proposed encryption and/or authentication algorithms for IKE Phase1 negotiation. There are several proposals offered in this page with combination of three types of algorithms: Encryption algorithms - DES/3DES/AES Authentication algorithms - MD5/SHA1 DH (Diffie-Hellman) Group - MODP768/MODP1024/MODP1536. Vigor3300 Series User’s Guide...
  • Page 119 Initiate to start the IKE negotiation or set admin status to be always on to automatically restart IKE negotiation. During the negotiation, you can press Refresh to show the latest status of all policies. Vigor3300 Series User’s Guide...
  • Page 120 Vigor3300 series allows users to configure policies. In addition, it also allows users to combine several policies into one group for VPN usage. Each group can combine four policies for fitting different requirement of VPN application. Simply click VPN>>VPN Trunk>>Group Table to access into the following page. There are ten groups offered for users to configure.
  • Page 121 At any time, you can click VPN >>IPSec>> Log to monitor the VPN tunnel status. The log is helpful for solving some setting problems. The system will keep the 100 most recent messages. Click Clear to clear the log. Vigor3300 Series User’s Guide...
  • Page 122 It can make users loading double key certificate issued by trusted CA server. To upload a new Trust CA, please select any one of the entry and click the Upload button. The following page will appear. Vigor3300 Series User’s Guide...
  • Page 123 Delete an assigned entry. View Show configuration of the assigned entry. To generate a user certificate, please click one radio button to select the entry and click the Generate button. Certification Name The name of the certification entry. Vigor3300 Series User’s Guide...
  • Page 124 Request Generated) and click the Download button. If not, you might see the following dialog to warn you. After you click the Download button, the system will guide you to save the downloaded file (newreq_RD-computer_1.pem) to a place that you assign. Vigor3300 Series User’s Guide...
  • Page 125 To view a user certificate, please click the index number that you want to view the detailed information of the certificate and click the View button. The following page will be shown for your reference. This page will show the VPN connection status. Vigor3300 Series User’s Guide...

  • Page 126: Pptp & L2Tp

    Allow you to refresh current VPN status. Disconnect Allow you to disconnect the select VPN connection. & & To configure the general setup, please click VPN>> PPTP & L2TP>>General Setup>>PPTP General Setup. Status Set the function to Active or Inactive. Vigor3300 Series User’s Guide...
  • Page 127 Type the IP address for primary DNS. Secondary DNS Type the IP address for secondary DNS. When you finish the configuration, please click Apply to invoke it. To configure the general setup, please click VPN>> PPTP & L2TP>>General Setup>>L2TP General Setup. Vigor3300 Series User’s Guide...
  • Page 128 DNS IP address manually in the following Manual Setting fields. Primary DNS Type the IP address for primary DNS. Secondary DNS Type the IP address for secondary DNS. To create a VPN PPTP/L2TP group table, click VPN>>PPTP & L2TP>> Group Table. Vigor3300 Series User’s Guide...
  • Page 129 The group for this entry. Edit Allow you to edit the selected group. Type in user name and password, then choose a proper group (A, B, C or D that configured in VPN>>PPTP & L2TP>>Group Table) for this Vigor3300 Series User’s Guide...
  • Page 130 Display the bytes count sent out by this tunnel. Uptime Display the time duration since the tunnel is established. Refresh Allow you to refresh current VPN status. Disconnect Allow you to disconnect the select VPN connection. Vigor3300 Series User’s Guide...

  • Page 131: Voip Setup

    There are two protocols can be used for VoIP - SIP and MGCP. You should click either one of buttons to set corresponding settings for VoIP phones. Be aware that both sides (local end and remote end) should use same protocol for VoIP phones. Vigor3300 Series User’s Guide...
  • Page 132 Type the timeout value for SIP protocols. The default value is 300. Domain Type the IP address or domain name of the SIP Domain/Realm. User Agent Name You can set up to 3 sets of SIP configurations in this page. Vigor3300 Series User’s Guide...
  • Page 133 - ex: aaln/1@v3300.draytek.com Logic ID Starting Number Determine the starting number for the endpoint name. There are eight ports in Vigor3300 series. The default name for endpoint will be “aaln”. If you type “1” in this filed, the endpoint name will be “aaln/1, aaln/2…,aaln/8”.

  • Page 134: Port Settings

    Display the proxy information that you set on VoIP >> Protocol page for the VoIP connection. Codec Display the codec settings for the VoIP connection. When you click Edit, the following page will appear for you to configure. Vigor3300 Series User’s Guide...
  • Page 135 User Name – Type the user name (a number) for each phone line. Password - Type the user password for each phone line. Display Name - Type the user name to be displayed on another phone terminal. Authentication ID - Type the characters for authenticate this Vigor3300 Series User’s Guide...
  • Page 136 Microphone Gain- The gain value while transmitting voice. The default value is 0. The range is from -32 to 31. Speaker Gain - The gain value while receiving voice. The default value is 0. The range is from -32 to 31. Vigor3300 Series User’s Guide...
  • Page 137 Call forwarding busy - Forward incoming calls to the specified SIP URL site when this line is busy. Call forwarding no answer after (Range: 1~10) rings- Forward incoming calls to the specified SIP URL site after Vigor3300 Series User’s Guide...
  • Page 138 Click this radio button to make the first available port in the port same group ringing while receiving incoming calls. Rings by round robin Click this radio button to make the phone port ringing in sequence within the same group. Vigor3300 Series User’s Guide...

  • Page 139: Speed Dial

    Speed dial allows users to call out with simple buttons instead of dialing long numbers. To set a speed dial with specified settings, please open the following page. Prefix Display the prefix number of the entry. Strip Length Display the strip length of the entry. Vigor3300 Series User’s Guide...

  • Page 140: Miscellaneous

    Assign an IP address for the destination which the SIP message would be sent to. Memo A description for this entry. This page includes RTP and T.38 Starting Port, T.38 Redundancy Number, VoIP ToS, and FAX Ringing settings. Vigor3300 Series User’s Guide...
  • Page 141 Determine the time length for the FXO disconnecting no packet is received in X automatically when there is no packet received. minutes FXS On-hook Tip/Ring Determine the voltage of FXS port (on hook). Choose Low to Voltage save the power. Vigor3300 Series User’s Guide...

  • Page 142: Tone Settings

    VoIP feature. Or, select User Defined for proprietary settings. Caller ID Type If User Defined is selected in the Region field, users can select one of the supported values. If a country is selected, this field Vigor3300 Series User’s Guide...
  • Page 143 Type the silence duration after the first ring. TOn2 (10msec) Type the duration of the next continuous ring. TOff2 (10msec) Type the silence duration after the next continuous ring. Tone Timer Determine the timeout for the tone invoked. Vigor3300 Series User’s Guide...

  • Page 144: Qos

    Meanwhile, the VoIP packets will be inserted in the front of queue of signal for transmitting quickly and obtaining best audio quality. Please check this box to invoke this function (shrinking the packet for fast sending). Vigor3300 Series User’s Guide...

  • Page 145: Nat Traversal

    NAT device sitting between the STUN client and STUN server. Semi-auto, need to config NAT – If you click this function; the user needs to configure NAT information. Full-auto, no need to config NAT (only for SIP)- If you Vigor3300 Series User’s Guide...

  • Page 146: Incoming Call Barring

    Barring Class There are five options for incoming calls from remote ends. Choose either one of them to set the barring class. Allow all incoming calls – All incoming calls from remote Vigor3300 Series User’s Guide...
  • Page 147 Otherwise, use the static IP address or DDNS domain name. The Vigor3300 Series supports up to 30 entries in the Deny List table. When you choose Deny only calls from deny list as the Barring Class, people listed in this list cannot call this router.

  • Page 148: Call History

    You can click Refresh to get the latest status information for these VoIP phones. In addition, you can set the time interval of refreshing. Use the drop down list of Refresh Option to choose an automatic refreshing setting. If you choose No Refresh, the Vigor3300 Series User’s Guide...

  • Page 149: Tone Upload

    The status of DTMF. This page allows you to upload tone settings such as G.711a Ping Prompt, G.711a Pin Error, G.729 Pin Prompt and G.729 Pin Error to Vigor3300 series. Click Browse.. to choose the file and click Apply to upload it.

  • Page 150: Status

    Refresh Option You can click Refresh to get the latest status information for these VoIP phones. In addition, you can set the time interval of refreshing. Use the drop down list of Refresh Option to choose Vigor3300 Series User’s Guide...
  • Page 151 The used port number of the remote voice site. Codec Type The Codec mode used for this phone call. Packet Period The period of time for sampling on voice signal. The status of VAD. DTMF Relay The status of DTMF. Vigor3300 Series User’s Guide...
  • Page 152 This page is left blank. Vigor3300 Series User’s Guide...

  • Page 153: Trouble Shooting

    Turn on the router. Make sure the ACT LED blinks once per second and the correspondent WAN/LAN LED is bright. If not, there must be something wrong with the hardware connection. Simply back to “2.1 Hardware Installation” to execute the hardware installation. And then, try again. Vigor3300 Series User’s Guide...
  • Page 154 The example is based on Windows XP. As to the examples for other operation systems, please refer to the similar steps or find support notes in www.draytek.com. Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Vigor3300 Series User’s Guide...
  • Page 155 Select Internet Protocol (TCP/IP) and then click Properties. Select Obtain an IP address automatically and Obtain DNS server address automatically. Vigor3300 Series User’s Guide...
  • Page 156 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network. 3. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor3300 Series User’s Guide...

  • Page 157: Pinging The Router From Your Computer

    Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. It the link is OK, the line of 64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms will appear. Vigor3300 Series User’s Guide...

  • Page 158: Checking If The Isp Settings Are Ok Or Not

    Make sure the Active check box has been selected. Check if Username and Password are entered with correct values that you got from your ISP. Check if the setting of Authentication is correct or not. You may need to try both PAP and CHAP. Vigor3300 Series User’s Guide...
  • Page 159 Check if the values of IP Address, Subnet Mask, Gateway IP Address and Primary DNS that you got from ISP are set properly or not. If you forget, please contact with ISP for getting new ones. Vigor3300 Series User’s Guide...
  • Page 160 If anything wrong, please check and retype correct values. Then try the network connection again. After finishing the settings, go to System >> Status page and click WAN Status. You will get a correct web page of WAN settings. Vigor3300 Series User’s Guide...

  • Page 161: Backing To Factory Default Setting If Necessary

    After finishing the settings, go to System - Status page and click WAN Status. You will get a correct web page of WAN settings. Sometimes, a wrong connection can be improved by returning to the default settings. Try to reset the router by software or hardware. Vigor3300 Series User’s Guide...

  • Page 162: Contacting Your Dealer

    If the router settings are correct at all, and the router still does not connect to internet, please contact your ISP technical support representative to help you for configuration. Also, if the router still cannot work correctly, please contact your dealer for help. For any further questions, please send e-mail to support@draytek.com. Vigor3300 Series User’s Guide...

  • Page 163: Application Notes

    Open Firewall>IP Filter>Group Table to access into the following page. Click Index #2 radio button. In this page, click Add Rule. Choose Block as Next Group Name. In the following page, please set Block immediately as the action and click Apply. Vigor3300 Series User’s Guide...

  • Page 164: How To Check/Edit Vlan Id On Your Pc

    Not all the network cards support VLAN features. If you cannot sure if the network card of your computer supports tagged VLAN or not, please do the following steps to check (or edit) VLAN ID on your PC. Go to Control Panel and then double-click on Network Connections. Vigor3300 Series User’s Guide...
  • Page 165 Right-click on Local Area Connection and click on Status. On the following dialog, click Properties. Click Configure to access into next screen. Vigor3300 Series User’s Guide...
  • Page 166 On this dialog box, locate VLANs tag and click on it. If you cannot find out VLANs tag, that means your network card does not support VLAN feature. In this screen, there is no VALN existed. You can create a new one. Please click the New…button. Vigor3300 Series User’s Guide...
  • Page 167 In New VLAN dialog, please type a number in the box of VLAN ID. Here, “5” is entered. The corresponding VLAN Name will appear automatically. Next, click OK to create it. After you click OK, the system will configure for the VLAN settings. Please wait for several seconds. Vigor3300 Series User’s Guide...
  • Page 168 When the configuration is finished, the new VLAN settings with ID number and name will appear on previous dialog, Desktop Adapter Properties. Click OK to exit this dialog. 10. Now, the Desktop Adapter – VLAN dialog will appear as follows. Please click OK. Vigor3300 Series User’s Guide...
  • Page 169 11. Next time, if you want to check VLAN setting again, please open Settings tag to modify Vigor3300 Series User’s Guide...

  • Page 170: Four Vlans For Different Departments In A Company

    In the VLAN8, input “8” to VLAN ID. In the Member field, choose p4. Then choose the “Untagged” for Frame Tag Operation in p4. Configure the PVID to “8” for the device does not support 802.1Q VLAN. Vigor3300 Series User’s Guide...
  • Page 171 In the Network setting, type the subnet 192.168.4.0 to LAN4. For example, the VLAN8 LAN IP is 192.168.4.1 and the Subnet Mask is 255.255.255.0. Then, users in the Engineer Department can set IP address from 192.168.4.2 to 192.168.4.254. Vigor3300 Series User’s Guide...

  • Page 172: Two Vlans For Different Departments In A Company

    In the VLAN6, type “6” to VLAN ID. In the Member field, choose p3 and p4. Then choose “Tagged” for Frame Tag Operation in p3 and p4. We can ignore the PVID (Port VLAN because 802.1q tag will be inserted to the frame from other departments. Vigor3300 Series User’s Guide...
  • Page 173 In the Network setting, type the subnet 192.168.2.0 to LAN2. For example, the VLAN6 LAN IP is 192.168.2.1 and the Subnet Mask is 255.255.255.0. Then, users in the other departments can set IP address from 192.168.2.2 to 192.168.2.254. Vigor3300 Series User’s Guide...

  • Page 174: Example For The Companies In The Same Building

    In the VLAN7, type “7” to VLAN ID. In the Member field, choose p3. Then choose the “Tagged” for Frame Tag Operation in p3. We can ignore the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from the PC of company C. Vigor3300 Series User’s Guide...
  • Page 175 Network setting. After finishing Network setting, you can execute the reboot procedure. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only. The network configuration is the same with A.2.1. Please refer to A.2.1. Vigor3300 Series User’s Guide...

  • Page 176: Example For A Company And Guest

    In the VLAN7, type “7” to VLAN ID. In the Member field, choose p3. Then choose the “Tagged” for Frame Tag Operation in p3. We can ignore the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from the PC of Engineer Department. Vigor3300 Series User’s Guide...
  • Page 177 Network setting. After finishing Network setting, you can execute the reboot procedure. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only. The network configuration is the same with A.2.1. Please refer to A.2.1 part. Vigor3300 Series User’s Guide...

  • Page 178: Example For Trunk Usage

    PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from switch. In the VLAN7, type “7” to VLAN ID. In the Member field, choose p1, p2, p3 and p4. Then choose the “Tagged” for Frame Tag Operation in p1, p2, p3 and p4. We can ignore Vigor3300 Series User’s Guide...
  • Page 179 Network setting. After finishing Network setting, you can execute the reboot procedure. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only. The network configuration is the same with A.2.1. Please refer to A.2.1 part. Vigor3300 Series User’s Guide...

  • Page 180: Application For Voip

    A telecommunications line from an FXO device must be connected to an FXS device. Similarly, an FXS device must be connected to an FXO device. For example, PSTN is FXS equipment, and a telephone is FXO equipment. Vigor3300 Series User’s Guide...
  • Page 181 FXS card and FXO card. FXS card This card can connect to the telephone, FAX machine, outside lines of PBX and FXO port on FXO card. Vigor3300 Series User’s Guide...
  • Page 182 FXO card This card can connect to PSTN, inside lines of PBX and FXS port on FXS cards. Vigor3300 Series User’s Guide...

  • Page 183: Practical Application Of Fxs Card With Pbx

    Headquarters’ PBX via the Internet, and communicate with the customers via the PBX. Another application is that you can call back to the Headquarters from outside, and communicate with the branch via the Internet. (For detailed configuration, please refer to Practical Application of FXO) Vigor3300 Series User’s Guide...

  • Page 184: Voip Basic

    Vigor 3300V. Port Settings This page displays the basic settings for each port. Click the Edit icon in the Phone Number page to enter the Edit page. Then you can configure this port. Vigor3300 Series User’s Guide...
  • Page 185 Port Settings - Port – Edit Configure related VoIP settings for each port respectively. Vigor3300 Series User’s Guide...
  • Page 186 IP address. There are 150 entries available at most. Miscellaneous Other related VoIP settings. Tone Settings There are optional built-in 14 groups of tone for different regions, and a group of tone (User Defined) can be configured by users. Vigor3300 Series User’s Guide...
  • Page 187 13456~13470 and 49170~49184 to the WAN IP address of 3300V. Incoming Call Barring – Set This function can receive or reject the specific VoIP calling via Internet. The rules are based on the speed dial number or IP/Domain. Vigor3300 Series User’s Guide...
  • Page 188 Call History It can display 50 groups of calling information. Status Display current VoIP registering status and calling status. Vigor3300 Series User’s Guide...

  • Page 189: Voip Examples

    Port4(FXS) 660534 G.729A Port5(FXO) 888835 iptel G.729A Port6(FXO) 888836 iptel G.729A Port7(FXO) 660525 G.729A Port8(FXO) 660526 G.729A 2900V 61.31.167.135 Port1(FXS) 888829 iptel G.729A Port2(FXS) 660529 G.729A Proxy Domain Port iptel iptel.org iptel.org 5060 fwd.pulver.com fwd.pulver.com 5060 Vigor3300 Series User’s Guide...
  • Page 190 There are None and three SIP Servers available, which are set in the VoIP- Protocol page. Please select iptel. FXO: Dedicated settings for FXO card. Incoming Pre-Set Number: The transfer number auto dialed after the FXO receives a call from the Internet. Vigor3300 Series User’s Guide...
  • Page 191 DTMF: DTMF are the audible sounds you hear when you press keys on your phone. DTMF Relay: By default is RFC2833. After configuration, click Apply to save the settings. Router will auto jump to the VoIP - Port Settings page. Vigor3300 Series User’s Guide...
  • Page 192 Register Status: Display the register information from Port 1 ~ Port 8. OK means this port is registered successfully. Call Status: Display calling information from Port 1 ~ Port 8. Idle means there is no conversations on Port 1 ~ Port 8. Vigor3300 Series User’s Guide...
  • Page 193 Note: This page will automatically refresh every 6 second, so as to display the latest status. You may click Refresh button to renew immediately. Open the Web of 2900V and click VoIP Setup. Vigor3300 Series User’s Guide...
  • Page 194 Setup Port1 and Port2. This page falls into two sections, SIP: Setup relevant SIP Servers used for registration respectively. Ports: Type account and password. After configuration, please click OK to save the settings. 2900V will go to VoIP – Setup page automatically. Vigor3300 Series User’s Guide...
  • Page 195 Wait one or two minutes (The time depends on SIP Server's response speed and the network condition). Channel: R means Port 1 and Port 2 register successfully. Status: IDLE means there is no conversations on Port 1~ Port 8. Now the configuration is completed. Vigor3300 Series User’s Guide...

  • Page 196: Example 2- Basic Calling Method

    Connect a telephone into 3300V's Port 1 and 2900V's Port 1 respectively. They can call with each other directly with IP addresses if only 3300V and 2900V both have public IP addresses and have set up the Phone Numbers. Below shows a scenario architecture graph: Vigor3300 Series User’s Guide...
  • Page 197 Enter VoIP - Speed Dial page, configure relevant settings for 2900V's Port1. Speed Dial Phone Number: type 2901. Speed Dial Destination: Cal lee’s Number@IP, type 888829@61.31.167.135. Memo: To facilitate ease differentiation please type 2900V_Port1_IP. Click Apply to save the settings and finish the configuration. Vigor3300 Series User’s Guide...
  • Page 198 Enter relevant settings for 3300V's Port 1. Click OK to save the settings. Enable: click (√) to activate the entry. Phone Number: type 3301. Display Name: To facilitate ease differentiation please type 3300V_Port1_IP. SIP URL: Cal lee’s Number@IP, please type 888833@220.135.240.207. Vigor3300 Series User’s Guide...
  • Page 199 * (star). In this example you have to press #220*135*240*207#. But 3300V can only receive the format of Number@IP. So it is required to setup 3300V's number (888833@220.135.240.207) in the DialPlan entry. Vigor3300 Series User’s Guide...
  • Page 200 Port3(FXS) 660533 G.729A Port1(FXS) 888829 iptel G.729A 2900V 61.31.167.135 Port2(FXS) 660529 G.729A You can also add Speed Dial numbers in Speed Dial to speed up the dialing, or to accommodate the setup of company's extension numbers. Vigor3300 Series User’s Guide...
  • Page 201 Phone 3 call Phone 1--->Press 888833#. Phone 4 call Phone 2--->Press 660533#. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out. Or you may wait 3 seconds if you do not press #. Vigor3300 Series User’s Guide...
  • Page 202 Phone 3 call Phone 1--->Press 3312#. Phone 4 call Phone 2--->Press 3311#. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out. Or you may wait 3 seconds if you do not press #. Vigor3300 Series User’s Guide...

  • Page 203: Example 3 - Voip Over Vpn

    3300V. These three sites internal networks must be within the same subnet (192.168.X.X). Either site can ping the other two routers. Then you can make a VoIP call through the encrypted VPN tunnel by directly dialing remote router's LAN IP. Below shows the architecture graph: Vigor3300 Series User’s Guide...
  • Page 204 The following examples are modified which based on these two examples. Configuration Example for Vigor3300V Enter the VoIP – Protocol page; Disable all the Active entries by removing the (√) box. After configuration, please click Apply to save the settings. Vigor3300 Series User’s Guide...
  • Page 205 Proxy Server for each Port, the Proxy entries are blank.) Enter the VoIP - Speed Dial page and input the first and second group of Speed Dial Phone Number. Click Apply to save the settings. Vigor3300 Series User’s Guide...
  • Page 206 WAN to LAN/VPN for Port1 and Port2. Press OK to save the settings. Note: Do not set up the Outbound Proxy and Stun Server when calling through VPN. Click DialPlan Setup in the VoIP Setup page and add the first and second group of Speed Dial Phone Number. Vigor3300 Series User’s Guide...
  • Page 207 Note: Do not set up the Proxy and Stun Server when calling through VPN. While in 2200V firmware v2.5.5.4, the Proxy will be active if Use Registrar is enabled. So make sure not click Use Registrar. Vigor3300 Series User’s Guide...
  • Page 208 Phone 3 call Phone 2---->Press 2901# or #192*168*29*1#. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out. Or you may wait 3 seconds if you do not press #. Vigor3300 Series User’s Guide...

  • Page 209: Example 4 - Practical Application Of Fxs

    3300V's FXS Port1. The Inside Line is connected to a telephone with the extension 101. If the extension wants to dial VoIP using Line 3, you must firstly press 3, and then dial the phone number. Vigor3300 Series User’s Guide...
  • Page 210 Also you can set up the Speed Dial entry. To accommodate the extension please set up 888829 to 291, 888833 to 331. You may refer to the figures shown below and VoIP Example 2(Basic Calling Method). Vigor3300 Series User’s Guide...

  • Page 211: Example 5 - Practical Application Of Fxo

    220.135.240.207 Port5(FXO) 888835 iptel G.729A 2900V 61.31.167.135 Port1(FXS) 888829 iptel G.729A The number of the PSTN line connected into the FXO Port 5 on the 3300V is 12345678. The number of another PSTN line is 87654321. Vigor3300 Series User’s Guide...
  • Page 212 By connecting 3300V's FXO Port5 to PBX's Inside Line, VoIP is seamlessly integrated to PBX's inside lines and allows you to call not only the VoIP, but also the PSTN line and PBX's extension. Also the remote user can call you from the PSTN line and PBX's extension. Vigor3300 Series User’s Guide...
  • Page 213 SIP Proxy Server. For the applications of Direct IP Call and Intercommunication with different SIP Proxy Servers please refer to VoIP Example 2(Basic Calling Method). The VoIP call can also wok with VPN, please refer to VoIP Example 3(VoIP over VPN). Vigor3300 Series User’s Guide...

This manual is also suitable for:

Vigor3300vVigor3300b+

Table of Contents