Page 2 Vigor3200 Series Multi-WAN Security Router User’s Guide Version: 1.0 Firmware Version: V3.3.6_RC6 Date: 18/11/2010 Vigor3200 Series User’s Guide...
Page 3: Copyright Information
Web registration is preferred. You can register your Vigor router via Owner http://www.DrayTek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 4: European Community Declarations
Product: Vigor3200 Series Router DrayTek Corp. declares that Vigor3200 Series of routers are in compliance with the following essential requirements and other relevant provisions of R&TTE Directive 1999/5/EEC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class B and EN55024/Class B.
Page 5 Vigor3200 Series User’s Guide...
Page 6: Table Of Contents
3.1.4 Load-Balance Policy ....................... 45 3.2 LAN ............................47 3.2.1 Basics of LAN ......................... 47 3.2.2 General Setup......................... 48 3.3 NAT ............................51 3.3.1 Port Redirection ......................52 3.3.2 DMZ Host........................55 3.3.3 Open Ports........................58 3.4 Applications ........................... 60 Vigor3200 Series User’s Guide...
Page 7: Admin Mode Operation
4.3.2 DMZ Host........................122 4.3.3 Open Ports........................125 4.4 Firewall ..........................127 4.4.1 Basics for Firewall......................127 4.4.2 General Setup....................... 129 4.4.3 Filter Setup ........................133 4.4.4 DoS Defense ........................ 141 4.5 User Management....................... 144 4.5.1 General Setup....................... 144 Vigor3200 Series User’s Guide...
Page 8 4.12.3 Security ........................226 4.12.4 Access Control......................228 4.12.5 WPS..........................229 4.12.6 WDS..........................231 4.12.7 Advanced Setting......................234 4.12.8 WMM Configuration ....................235 4.12.9 AP Discovery ......................237 4.12.10 Station List ........................ 238 4.13 USB Application ........................ 238 Vigor3200 Series User’s Guide viii...
Page 9 6.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ....304 6.3 Pinging the Router from Your Computer ................306 6.4 Checking If the ISP Settings are OK or Not ................ 307 Vigor3200 Series User’s Guide...
Page 10 6.5 Problems for 3G Network Connection ................308 6.6 Backing to Factory Default Setting If Necessary ..............308 6.7 Contacting Your Dealer ....................... 309 Vigor3200 Series User’s Guide...
Page 11: Preface
Vigor3200 Series is a broadband router. It integrates IP layer QoS, NAT session/bandwidth management to help users control works well with large bandwidth. By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP) with up to 32 VPN tunnels.
Page 12: Led Indicators And Connectors
Left LED The port is connected. (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps when left LED is on. Vigor3200 Series User’s Guide...
Page 13 WAN1- WAN4 Connecters for remote networked devices. Connecter for local DMZ host. Connecter for local network devices. Connecter for 3G Modem or printer. Connecter for a power adapter. Power Switch. ON/OFF Vigor3200 Series User’s Guide...
Page 14: For Vigor3200N
Left LED The port is connected. (Green) The port is disconnected. Blinking The data is transmitting. Right LED The port is connected with 1000Mbps. (Green) The port is connected with 10/100Mbps when left LED is on. Vigor3200 Series User’s Guide...
Page 15 WAN1- WAN4 Connecters for remote networked devices. Connecter for local DMZ host. Connecter for local network devices. Connecter for 3G Modem or printer. Connecter for a power adapter. Power Switch. ON/OFF Vigor3200 Series User’s Guide...
Page 16: Hardware Installation
Power on the device by pressing down the power switch on the rear panel. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. (For the detailed information of LED status, please refer to section 1.1.) Vigor3200 Series User’s Guide...
Page 17: Printer Installation
You can install a printer onto the router for sharing printing. All the PCs connected this router can print documents via the router. The example provided here is made based on Windows XP/2000. For Windows 98/SE/Vista, please visit www.DrayTek.com. Before using it, please follow the steps below to configure settings for connected computers (or wireless clients).
Page 18 Open File->Add Printer. A welcome dialog will appear. Please click Next. Click Local printer attached to this computer and click Next. In this dialog, choose Create a new port Type of port and use the drop down list to select Standard TCP/IP Port. Click Next. Vigor3200 Series User’s Guide...
Page 19 In the following dialog, type 192.168.1.1 (router’s LAN IP) in the field of Printer Name or IP Address and type IP_192.168.1.1 as the port name. Then, click Next. Click Standard and choose Generic Network Card. Then, in the following dialog, click Finish. Vigor3200 Series User’s Guide...
Page 20 11. Select "LPR" on Protocol, type p1 (number 1) as Queue Name. Then click OK. Next please refer to the red rectangle for choosing the correct protocol and LPR name. Vigor3200 Series User’s Guide...
Page 21 If you do not know whether your printer is supported or not, please visit www.DrayTek.com to find out the printer list. Open Support >FAQ; find out the link of Printer Server and click it; then choose the What types of printers are compatible with Vigor router?.
Page 22 This page is left blank. Vigor3200 Series User’s Guide...
Page 23: Configuring Basic Settings
The web page can be logged out according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting for your necessity. Vigor3200 Series User’s Guide...
Page 24: Changing Password
Please type “admin/admin” on Username/Password for admin mode. Otherwise, do not type any word (both username and password are Null for user mode) on the window and click Login on the window. Now, the Main Screen will appear. Main screen for admin mode operation (full configuration) Vigor3200 Series User’s Guide...
Page 25 Enter the login password (the default is blank) on the field of Old Password. Type New Password and confirm the password. Then click OK to continue. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. Vigor3200 Series User’s Guide...
Page 26: Quick Start Wizard
Wizard is entering login password. After typing the password, please click Next. On the next page as shown below, please select the WAN interface that you use. Choose Auto negotiation as the physical type for your router. Then click Next for next step. Vigor3200 Series User’s Guide...
Page 27: Pppoe
Ethernet can share a common connection. PPPoE is used for most of DSL modem users. All local users can share one PPPoE connection for accessing the Internet. Your service provider will provide you information about user name, password, and authentication mode. Vigor3200 Series User’s Guide...
Page 28 Assign a valid password provided by the ISP. Confirm Password Retype the password. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor3200 Series User’s Guide...
Page 29: Pptp/L2Tp
Click PPTP/L2TP as the protocol. Type in all the information that your ISP provides for this protocol. Click Next for viewing summary of such connection. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor3200 Series User’s Guide...
Page 30: Static Ip
After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor3200 Series User’s Guide...
Page 31: Dhcp
After finishing the settings in this page, click Next to see the following page. Click Finish. A page of Quick Start Wizard Setup OK!!! will appear. Then, the system status of this protocol will be shown. Vigor3200 Series User’s Guide...
Page 32: Service Activation Wizard
Service Activation Wizard is a tool which allows you to use trial version or update the license of WCF directly without accessing into the server (MyVigor) located on http://myvigor.draytek.com. For using Web Content Filter Profile, please refer to later section Web Content Filter Profile for detailed information.
Page 33 Wait for a moment till the following page appears. When such page appears, you can enable or disable these services for your necessity. Then, click Finish. Note: The service will be activated and applied as the default rule configured in Firewall>>General Setup. Vigor3200 Series User’s Guide...
Page 34 Later, if you need to extend the license valid time, you can also use the Service Activation Wizard again to reach your goal by clicking the radio button of Formal edition with license key and clicking Next. Vigor3200 Series User’s Guide...
Page 35: Online Status
Displays the total number of received packets at the LAN interface. WAN1~WAN5 Status Line Displays the physical connection (Ethernet) of this interface. Name Displays the name set in WAN web page. Mode Displays the type of WAN connection (e.g., PPPoE). Vigor3200 Series User’s Guide...
Page 36: Saving Configuration
Settings Saved means your settings are saved once you click Finish or OK button. When you click the menu item under Support Area, you will be guided to visit www.draytek.com and open the corresponding pages directly. Click Support Area>>Application Note, the following web page will be displayed.
Page 37 Click Support Area>>Product Registration, the following web page will be displayed. Vigor3200 Series User’s Guide...
Page 38 This page is left blank. Vigor3200 Series User’s Guide...
Page 39: User Mode Operation
Hence, the NIC has reserved certain addresses that will never be registered publicly. These are known as private IP addresses, and are listed in the following ranges: Vigor3200 Series User’s Guide...
Page 40 However, the other Ethernet WAN ports still can be used and Load-Balance can be done in the router. Besides, 3G USB Modem in WAN5 also can be used as backup device. Therefore, when other Ethernet WAN port is not available, the router will use 3.5G for supporting Vigor3200 Series User’s Guide...
Page 41: General Setup
The supported 3G USB Modem will be listed on DrayTek web site. Please visit www.draytek.com for more detailed information. Below shows the menu items for WAN. This section will introduce some general settings of Internet and explain the connection modes for WAN1 to WAN5 in details.
Page 42 Line Speed If your choose According to Line Speed as the Load Balance Mode, please type the line speed for downloading and uploading for such WAN interface. The unit is kbps. The Vigor3200 Series User’s Guide...
Page 43 WAN interface should play if you want to backup multiple WANs. When any WAN disconnect –WAN1 will be activated when any master WAN interface disconnects. When all WAN disconnect –WAN1 will be activated when all master WAN interfaces disconnect. Vigor3200 Series User’s Guide...
Page 44 Later, when such WAN is disconnected for some reason, the backup WAN will be activated automatically to prevent data transmission from connection interrupted. If you choose Backup as the Active Mode, Backup WAN will Vigor3200 Series User’s Guide...
Page 45: Internet Access
Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3/WAN4/WAN5 that entered in general setup. Physical Mode It shows the physical connection for WAN1-WAN4 (Ethernet) /WAN5 (3G USB Modem) according to the real network Vigor3200 Series User’s Guide...
Page 46 IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. PPP/MP Setup PPP Authentication – Select PAP only or PAP or CHAP for Vigor3200 Series User’s Guide...
Page 47 Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor3200 Series User’s Guide...
Page 48 ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you Vigor3200 Series User’s Guide...
Page 49 Domain Name: Type in the domain name that you have assigned. Specify an IP address – Click this radio button to specify some data if you want to use Static IP mode. IP Address: Type the IP address. Vigor3200 Series User’s Guide...
Page 50 MAC address in the MAC Address field. DNS Server IP Address Type in the primary IP address for the router if you want to use Static IP mode. If necessary, type in secondary IP address for necessity in the future. Vigor3200 Series User’s Guide...
Page 51 WAN IP Alias - If you have multiple public IP addresses and Method(IPCP) would like to utilize them on the WAN interface, please use WAN IP Alias. You can set up to 8 public IP addresses other than the current one you are using. Vigor3200 Series User’s Guide...
Page 52 Obtain an IP address automatically – Click this button to Settings obtain the IP address automatically. Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. Vigor3200 Series User’s Guide...
Page 53 Type the PPP password (optional). PPP Authentication Select PAP only or PAP or CHAP for PPP. WAN Connection Such function allows you to verify whether network connection Detection is alive or not through ARP Detect or Ping Detect. Vigor3200 Series User’s Guide...
Page 54 IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finishing all the settings here, please click OK to activate them. Vigor3200 Series User’s Guide...
Page 55: Load-Balance Policy
Displays the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Move UP/Move Down Use Up or Down link to move the order of the policy. Vigor3200 Series User’s Guide...
Page 56 Type the destination port start for the destination IP. Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the destination ports will be passed through the WAN interface. Vigor3200 Series User’s Guide...
Page 57: Lan
IP address. As a part of the public subnet, the Vigor router will serve for IP routing to help hosts in the public subnet to communicate with other public hosts or servers outside. Therefore, the router should be set as the gateway for public hosts. Vigor3200 Series User’s Guide...
Page 58: General Setup
Basically, LAN1 status is enabled in default. DHCP LAN1 is configured with DHCP in default. IP Address Display the IP address for LAN1. Such information is set in default. Details Page Click it to access into the setting page. Vigor3200 Series User’s Guide...
Page 59 IP address of your router is 192.168.1.10, the starting IP address must be 192.168.1.11 or greater, but smaller than 192.168.1.254. IP Pool Counts - Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. The default is Vigor3200 Series User’s Guide...
Page 60 If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name immediately. Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. Vigor3200 Series User’s Guide...
Page 61: Nat
192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor3200 Series User’s Guide...
Page 62: Port Redirection
The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor3200 Series User’s Guide...
Page 63 IP address and port. Public Port Specify which port can be redirected to the specified Private IP and Port of the internal host. If you choose Range as the port Vigor3200 Series User’s Guide...
Page 64 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor3200 Series User’s Guide...
Page 65: Dmz Host
Click DMZ Host to open the following page. You can set different DMZ host for each WAN interface. Click the WAN tab to switch into the configuration page for that WAN. Enable Check to enable the DMZ Host function. Vigor3200 Series User’s Guide...
Page 66 DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor3200 Series User’s Guide...
Page 67 IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor3200 Series User’s Guide...
Page 68: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor3200 Series User’s Guide...
Page 69 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor3200 Series User’s Guide...
Page 70: Applications
Click the number below Index to access into the setting page of DDNS setup to set account(s). WAN Interface Display the WAN interface used. Domain Name Display the domain name that you set on the setting page of DDNS setup. Vigor3200 Series User’s Guide...
Page 71 Type in the password that you set for applying domain. Wildcard and Backup The Wildcard and Backup MX features are not supported for all Dynamic DNS providers. You could get more detailed information from their websites. Vigor3200 Series User’s Guide...
Page 72 Delete a Dynamic DNS Account In the DDNS setup menu, click the Index number you want to delete and then push Clear All button to delete the account. Vigor3200 Series User’s Guide...
Page 73: Upnp
NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor3200 Series User’s Guide...
Page 74: Wireless Lan
IEEE 802.11n draft 2 protocol. To boost its performance further, the Vigor Router is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps*. Hence, you can finally smoothly enjoy stream music and video. Vigor3200 Series User’s Guide...
Page 75 Since WEP has been proved vulnerable, you may consider using WPA for the most secure connection. You should select the appropriate security mechanism according to your needs. No matter which security suite you select, they all will enhance the over-the-air data Vigor3200 Series User’s Guide...
Page 76: General Setup
Enable Wireless LAN Check the box to enable wireless function. At present, the router can connect to Mixed (11b+11g), 11g Mode Only, 11b Only, Mixed (11g+11n), 11n Only and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode. Vigor3200 Series User’s Guide...
Page 77 SSID Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek". We suggest you to change it. Channel Means the channel of frequency of the wireless LAN. The default channel is 6.
Page 78 56 bit sync field instead of long preamble with 128 bit sync field. However, some original 11b wireless network devices only support long preamble. Check it to use Long Preamble if needed to communicate with this kind of devices. Vigor3200 Series User’s Guide...
Page 79: Security
Mixed (WPA+ WPA2)/PSK - Accepts WPA and WPA2 clients simultaneously and the encryption key should be entered in PSK. The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered Vigor3200 Series User’s Guide...
Page 80 Four keys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCII or Hexadecimal. Check the key you wish to use. Vigor3200 Series User’s Guide...
Page 81: Access Control
MAC address from LAN. Add a new MAC address into the list. Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Vigor3200 Series User’s Guide...
Page 82: Station List
After setting the configuration in USB Application, you can type the IP address of the Vigor router and username/password created in USB Application>>USB User Management on the client software. Then, the client can use the FTP site (USB diskette) or share the Samba service through Vigor router. Vigor3200 Series User’s Guide...
Page 83: Usb General Settings
Click Enable to invoke samba service via the router. Access Mode LAN Only – Users coming from internet cannot connect to the samba server of the router. LAN And WAN - Both LAN and WAN users can Vigor3200 Series User’s Guide...
Page 84: Usb User Management
Click index number to access into configuration page. FTP/Samba User Enable – Click this button to activate this profile (account) for FTP service or Samba User service. Later, the user can use the username specified in this page to login into FTP server. Vigor3200 Series User’s Guide...
Page 85 USB diskette, must follow the rule specified here. File – Check the items (Read, Write and Delete) for such profile. Directory –Check the items (List, Create and Remove) for such profile. Vigor3200 Series User’s Guide...
Page 86: File Explorer
This page is to monitor the status for the users who accessing into FTP or Samba server (USB diskette) via the Vigor router. If you want to remove the diskette from USB port in router, please click Disconnect USB Disk first. And then, remove the USB diskette later. Vigor3200 Series User’s Guide...
Page 87 FTP server. Username It displays the username that user uses to login to the FTP server. When you insert USB diskette into the Vigor router, the system will start to find out such device within several seconds. Vigor3200 Series User’s Guide...
Page 88: System Maintenance
Display the IP address of the LAN interface. Subnet Mask Display the subnet mask address of the LAN interface. DHCP Server Display the current status of DHCP server of the LAN interface. Display the assigned IP address of the primary DNS. Wireless LAN------- Vigor3200 Series User’s Guide...
Page 89: User Password
Type in new password in this field. Confirm Password Type in the new password again. When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Vigor3200 Series User’s Guide...
Page 90: Time And Date
The Web Configurator may be used to restart your router for using current configuration. Click Reboot System from System Maintenance to open the following page. Click OK. The router will take 5 seconds to reboot the system. Vigor3200 Series User’s Guide...
Page 91: Diagnostics
It displays the MAC address for the specified PC that DHCP assigned IP address for it. It displays the leased time of the specified PC. Leased Time HOST ID It displays the host ID name of the specified PC. Refresh Click it to reload the page. Vigor3200 Series User’s Guide...
Page 92: Traffic Graph
Click Diagnostics and click Ping Diagnosis to pen the web page. Ping through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Vigor3200 Series User’s Guide...
Page 93: Trace Route
Trace through Use the drop down list to choose the WAN interface that you want to ping through or choose Unspecified to be determined by the router automatically. Protocol Choose the protocol for using trace route. Vigor3200 Series User’s Guide...
Page 94 Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Clear Click this link to remove the result on the window. Vigor3200 Series User’s Guide...
Page 95: Admin Mode Operation
These are known as private IP addresses, and are listed in the following ranges: From 10.0.0.0 to 10.255.255.255 From 172.16.0.0 to 172.31.255.255 From 192.168.0.0 to 192.168.255.255 Vigor3200 Series User’s Guide...
Page 96 Besides, 3G USB Modem also can be used as backup device. Therefore, when other Ethernet WAN ports are not available, the router will use 3.5G for supporting automatically. The supported 3G USB Modem will be listed on DrayTek web site. Please visit www.DrayTek.com for more detailed information.
Page 97: General Setup
V means such WAN interface is enabled and ready to be used. Physical Mode / Type Display the physical mode and physical type of such WAN interface. Line Speed Display the downstream and upstream rate of such WAN Vigor3200 Series User’s Guide...
Page 98 WAN interface. The unit is kbps. The default setting for down link and up link is 10000Kbps. VLAN Tag insertion Enable – Enable the function of VLAN with tag. The router will add specific VLAN number to all packets on the Vigor3200 Series User’s Guide...
Page 99 Backup Type. You have to specify which role the WAN interface should play. When any WAN disconnect – WAN1 will be activated when any WAN interface disconnects. When all WAN disconnect – WAN1 will be activated when all the WAN interfaces disconnect. Vigor3200 Series User’s Guide...
Page 100 Later, when such WAN is disconnected for some reason, the backup WAN will be activated automatically to prevent data transmission from connection interrupted. If you choose Backup as the Active Mode, Backup WAN will Vigor3200 Series User’s Guide...
Page 101: Internet Access
Display the WAN interface. Display Name It shows the name of the WAN1/WAN2/WAN3/WAN4/WAN5 that entered in general setup. Physical Mode It shows the physical connection for WAN1-WAN4 (Ethernet) /WAN5 (3G USB Modem) according to the real network Vigor3200 Series User’s Guide...
Page 102 WAN Connection Such function allows you to verify whether network connection Detection is alive or not through ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to Vigor3200 Series User’s Guide...
Page 103 Address or specify another MAC address by typing on the boxes of MAC Address for the router. Specify a MAC Address – Type the MAC address for the router manually. After finishing all the settings here, please click OK to activate them. Vigor3200 Series User’s Guide...
Page 104 ARP Detect or Ping Detect. Mode – Choose ARP Detect or Ping Detect for the system to execute for WAN detection. Ping IP – If you choose Ping Detect as detection mode, you Vigor3200 Series User’s Guide...
Page 105 Domain Name: Type in the domain name that you have assigned. Specify an IP address – Click this radio button to specify some data if you want to use Static IP mode. IP Address: Type the IP address. Vigor3200 Series User’s Guide...
Page 106 MAC address in the MAC Address field. DNS Server IP Address Type in the primary IP address for the router if you want to use Static IP mode. If necessary, type in secondary IP address for necessity in the future. Vigor3200 Series User’s Guide...
Page 107 Idle Timeout - Set the timeout for breaking down the Internet after passing through the time without any action. IP Address Assignment WAN IP Alias - If you have multiple public IP addresses and Method(IPCP) would like to utilize them on the WAN interface, please use Vigor3200 Series User’s Guide...
Page 108 Obtain an IP address automatically – Click this button to Settings obtain the IP address automatically. Specify an IP address – Click this radio button to specify some data. IP Address – Type the IP address. Subnet Mask – Type the subnet mask. Vigor3200 Series User’s Guide...
Page 109 If you have any question, please contact to your ISP. PPP Username Type the PPP username (optional). PPP Password Type the PPP password (optional). Index (1-15) in Schedule You can type in four sets of time schedule for your request. All Vigor3200 Series User’s Guide...
Page 110 IP address in this field for pinging. TTL (Time to Live) – Displays value for your reference. TTL value is set by telnet command. After finishing all the settings here, please click OK to activate them. Vigor3200 Series User’s Guide...
Page 111: Load-Balance Policy
Displays the IP address for the start of the destination port. Dest Port End Displays the IP address for the end of the destination port. Move UP/Move Down Use Up or Down link to move the order of the policy. Vigor3200 Series User’s Guide...
Page 112 Type the destination port start for the destination IP. Dest Port End Type the destination port end for the destination IP. If this field is blank, it means that all the destination ports will be passed through the WAN interface. Vigor3200 Series User’s Guide...
Page 113: Lan
IP address to private IP address to forward the right packets to the right host and vice versa. Besides, Vigor router has a built-in DHCP server that assigns private IP address to each local host. See the following diagram for a briefly understanding. Vigor3200 Series User’s Guide...
Page 114 When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other method. You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP. Vigor3200 Series User’s Guide...
Page 115: General Setup
Virtual LAN (VLAN) function and the rate of each. This page provides you the general settings for LAN. Vigor3200 series provides four LANs, one DMZ and one IP Routed Subnet. Click LAN to open the LAN settings page and choose General Setup.
Page 116 Check the box to make the routing among LANs. LAN 1 ~ LAN 4, DMZ PORT To configure LAN 1 ~ LAN 4, DMZ or IP Routed Subnet, simply click Details Page to open the settings page. Vigor3200 Series User’s Guide...
Page 117 Start IP Address - Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses. If the 1st IP address of your router is 192.168.1.1, the starting IP address must Vigor3200 Series User’s Guide...
Page 118 If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name immediately. Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection. Vigor3200 Series User’s Guide...
Page 119 Gateway IP Address - Enter a value of the gateway IP address for the DHCP server. The value is usually as same as the 1st IP address of the router, which means the router is the default gateway. Vigor3200 Series User’s Guide...
Page 120 Gateway IP Address - Enter a value of the gateway IP address for the DHCP server. The value is usually as same as the 1st IP address of the router, which means the router is the default gateway. Vigor3200 Series User’s Guide...
Page 121 192.168.1.2 or greater, but smaller than 192.168.1.254. IP Pool Counts - Enter the maximum number of PCs that you want the DHCP server to assign IP addresses to. The default is 0 and the maximum is 10. Vigor3200 Series User’s Guide...
Page 122: Static Route
The number (1 to 10) under Index allows you to open next page to Index set up static route. Destination Address Displays the destination address of the static route. Status Displays the status of the static route. Viewing Routing Displays the routing table for your reference. Table Vigor3200 Series User’s Guide...
Page 123 1st subnet (192.168.1.0/24). The second is that those hosts on the internal private subnets (ex. 192.168.10.0/24) can access the Internet via the router, and continuously exchange of IP routing information with different subnets. Vigor3200 Series User’s Guide...
Page 124 Return to Static Route Setup page. Click on another Index Number to add another static route as show below, which regulates all packets destined to 211.100.88.0 will be forwarded to 192.168.1.3. Go to Diagnostics and choose Routing Table to verify current routing table. Vigor3200 Series User’s Guide...
Page 125: Vlan
Choose one of them to make the selected VLAN group mapping to specified subnet only. For example, LAN1 is specified for VLAN0 group. It means that PCs grouped under VLAN0 can get the IP address (es) that specified by the subnet. Vigor3200 Series User’s Guide...
Page 126: Bind Ip To Mac
It is used to refresh the ARP table. When there is one new PC added to the LAN, you can click this link to obtain the newly ARP table information. IP Bind List It displays a list for the IP bind to MAC information. Vigor3200 Series User’s Guide...
Page 127: Lan Port Mirror
Select a port to view traffic sent from mirrored ports. At present, only WAN4 will be treated as mirror port. Mirrored port Select which ports (LAN port or WAN port) are necessary to be mirrored. P1 represents LAN port. Vigor3200 Series User’s Guide...
Page 128: Nat
192.168.1.0/24 subnet for the router. As stated before, the NAT facility can map one or more IP addresses and/or service ports into different specified services. In other words, the NAT function can be achieved by using port mapping methods. Below shows the menu items for NAT. Vigor3200 Series User’s Guide...
Page 129: Port Redirection
The port redirection can only apply to incoming traffic. To use this function, please go to NAT page and choose Port Redirection web page. The Port Redirection Table provides 20 port-mapping entries for the internal hosts. Vigor3200 Series User’s Guide...
Page 130 Simply type the required number on the first box. The second one will be assigned automatically later. Private IP Specify the private IP address of the internal host providing the Vigor3200 Series User’s Guide...
Page 131 80 to avoid conflict, such as 8080. This can be set in the System Maintenance >>Management Setup. You then will access the admin screen of by suffixing the IP address with 8080, e.g., http://192.168.1.1:8080 instead of port 80. Vigor3200 Series User’s Guide...
Page 132: Dmz Host
Click the WAN tab to switch into the configuration page for that WAN. Check to enable the DMZ Host function. Enable Private IP Enter the private IP address of the DMZ host, or click Choose PC Vigor3200 Series User’s Guide...
Page 133 When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. DMZ Host for WAN2 ~ WAN5 are slightly different with WAN1. See the following figure. Vigor3200 Series User’s Guide...
Page 134 IP address in the list to be the DMZ host. When you have selected one private IP from the above dialog, the IP address will be shown on the following screen. Click OK to save the setting. Vigor3200 Series User’s Guide...
Page 135: Open Ports
Inactive or Active state. To add or edit port settings, click one index number on the page. The index entry setup page will pop up. In each index entry, you can specify 10 port ranges for diverse services. Vigor3200 Series User’s Guide...
Page 136 Specify the transport layer protocol. It could be TCP, UDP, or ----- (none) for selection. Start Port Specify the starting port number of the service offered by the local host. End Port Specify the ending port number of the service offered by the local host. Vigor3200 Series User’s Guide...
Page 137: Firewall
It will check packets according to the filter rules. If legal, the packet will pass the router. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. Vigor3200 Series User’s Guide...
Page 138 4. Port Scan attack 12. Tear drop attack 5. IP options 13. Ping of Death attack 6. Land attack 14. ICMP fragment 7. Smurf attack 15. Unknown protocol 8. Trace route Below shows the menu items for Firewall. Vigor3200 Series User’s Guide...
Page 139: General Setup
Such feature is enabled in default. All the packets will be inspected by the web content filter server while transmitting through Vigor router. If the web content filter server does not make any response (pass or block) for the packets, Vigor Vigor3200 Series User’s Guide...
Page 140 Quality of Service Choose one of the QoS rules to be applied as firewall rule. For detailed information of setting QoS, please refer to the related section later. Load-Balance Policy Choose the WAN interface for applying Load-Balance Policy. Vigor3200 Series User’s Guide...
Page 141 Web Content Filter by checking the Log box. It will be sent to Syslog server. Please refer to section Syslog/Mail Alert for more detailed information. Advance Setting Click Edit to open the following window. However, it is Vigor3200 Series User’s Guide...
Page 142 (0~65535). The more the value is, the better the performance will be. However, if the network is not stable, small value will be proper. Session timeout – Setting timeout for sessions can make the best utilization of network resources. Vigor3200 Series User’s Guide...
Page 143: Filter Setup
Use Up or Down link to move the order of the filter rules. Next Filter Set Set the link to the next filter set to be executed after the current filter run. Do not make a loop with many filter sets. Vigor3200 Series User’s Guide...
Page 144 Call Filter, this setting is not available since Call Filter is only applied to outgoing traffic. Note: RT means routing domain for 2nd subnet or other LAN. Click Edit to access into the following dialog to choose the Source/Destination IP source/destination IP or IP ranges. Vigor3200 Series User’s Guide...
Page 145 To set the service type manually, please choose User defined as the Service Type and type them in this dialog. In addition, if you want to use the service type from defined groups or objects, please choose Group and Objects as the Service Type. Vigor3200 Series User’s Guide...
Page 146 The number typed here is the total sessions of the packets that do not match the filter rule configured in this page. The default setting is 60000. Strict –Make the MAC address and IP address settings MAC Bind IP Vigor3200 Series User’s Guide...
Page 147 Web Content Filter Select one of the Web Content Filter profile settings (created in CSM>> Web Content Filter) for applying with this router. Please set at least one profile for anti-virus in CSM>> Web Vigor3200 Series User’s Guide...
Page 148 Syslog. From Codepage Information of Setup dialog, you will see the recommended codepage listed on the dialog box. Window size – It determines the size of TCP protocol (0~65535). The more the value is, the better the performance Vigor3200 Series User’s Guide...
Page 149 TCP protocol only; session timeout is configured for the data flow which matched with the firewall rule. DrayTek Banner – Please uncheck this box and the following screen will not be shown for the unreachable web page. The default setting is Enabled.
Page 150 Each filter set is composed by 7 filter rules, which can be further defined. After that, in General Setup you may specify one set for call filter and one set for data filter to execute first. Vigor3200 Series User’s Guide...
Page 151: Dos Defense
Check the box to activate the ICMP flood defense function. Similar to the UDP flood defense function, once if the defense Threshold of ICMP packets from Internet has exceeded the defined value, the router will discard the ICMP echo requests Vigor3200 Series User’s Guide...
Page 152 ICMP packets with a length greater than 1024 octets. Block Ping of Death Check the box to activate the Block Ping of Death function. This attack involves the perpetrator sending overlapping packets to the target hosts so that those target hosts will hang Vigor3200 Series User’s Guide...
Page 153 All the warning messages related to DoS Defense will be sent to user and user can review it through Syslog daemon. Look for the keyword DoS in the message, followed by a name to indicate what kind of attacks is detected. Vigor3200 Series User’s Guide...
Page 154: User Management
User-Based - If you choose such mode, the router will apply the filter rules configured in User Management>>User Profile to the users. Rule-Based –If you choose such mode, the router will apply Vigor3200 Series User’s Guide...
Page 155: User Profile (Reserved)
To set the user profile, please click any index number link to open the following page. Notice that profile 1 (Admin) and profile 2 (System Reservation) are factory default settings and only few settings for them can be modified. Vigor3200 Series User’s Guide...
Page 156 Create New Policy – If you choose such item, the following page will be popped up for you to define another filter rule as a new policy. For the detailed configuration, simply refer to Firewall>>Filter Rule. The firewall filter rules that are not Vigor3200 Series User’s Guide...
Page 157 The first box displays the remaining time of the network connection. The second box allows to type the number of time (unit is minute) which is available for the user (using such profile) to access Internet. Vigor3200 Series User’s Guide...
Page 158: User Group
You can gather user profiles (objects) from User Profile page within one user group. All the available user objects that you have created will be shown in this box. Notice that user object, Admin and Dial-In User are factory settings. User defined Vigor3200 Series User’s Guide...
Page 159: User Online Status
Display the expired time of the network connection for the user. Idle Time Display the idle timeout setting for such profile. Action Block - can prevent specified user accessing into Internet. Unblock – the user will be blocked. Vigor3200 Series User’s Guide...
Page 160: Objects Settings
IPs in the same department can be defined with an IP object (a range of IP address). You can set up to 192 sets of IP Objects with different conditions. Set to Factory Default Clear all profiles. Click the number under Index column for settings in detail. Vigor3200 Series User’s Guide...
Page 161 MAC Address Type the MAC address for Mac Address type. Start IP Address Type the start IP address for Single Address type. End IP Address Type the end IP address if the Range Address type is selected. Vigor3200 Series User’s Guide...
Page 162: Ip Group
Below is an example of IP objects settings. This page allows you to bind several IP objects into one IP group. Set to Factory Default Clear all profiles. Vigor3200 Series User’s Guide...
Page 163 Available IP Objects All the available IP objects with the specified interface chosen above will be shown in this box. Selected IP Objects Click >> button to add the selected IP objects in this box. Vigor3200 Series User’s Guide...
Page 164: Service Type Object
Specify the protocol(s) which this profile will apply to. Source/Destination Port Source Port and the Destination Port column are available for TCP/UDP protocol. It can be ignored for other protocols. The filter rule will filter out any port number. Vigor3200 Series User’s Guide...
Page 165: Service Type Group
(<) – the port number less than this value is available for this profile. Below is an example of service type objects settings. This page allows you to bind several service types into one group. Set to Factory Default Clear all profiles. Vigor3200 Series User’s Guide...
Page 166: Keyword Object
Click >> button to add the selected IP objects in this box. Objects You can set 200 keyword object profiles for choosing as black /white list in CSM >>URL Web Content Filter Profile. Set to Factory Default Clear all profiles. Vigor3200 Series User’s Guide...
Page 167: Keyword Group
This page allows you to bind several keyword objects into one group. The keyword groups set here will be chosen as black /white list in CSM >>URL /Web Content Filter Profile. Set to Factory Default Clear all profiles. Vigor3200 Series User’s Guide...
Page 168: File Extension Object
Profile 1 with name of “default” is the default profile, some files with the file extensions specified in this profile will be ignored and not be scanned by Vigor router. Set to Factory Default Clear all profiles. Vigor3200 Series User’s Guide...
Page 169 Profile Name Type a name for this profile. Type a name for such profile and check all the items of file extension that will be processed in the router. Finally, click OK to save this profile. Vigor3200 Series User’s Guide...
Page 170: Csm Profile
Please note that this action will not introduce any delay in your Web surfing because each of multiple load balanced database servers can handle millions of requests for categorization. Note: The priority of URL Content Filter is higher than Web Content Filter. Vigor3200 Series User’s Guide...
Page 171: App Enforcement Profile
Click the number under Index column for settings in detail. There are four tabs IM, P2P, Protocol and Misc displayed on this page. Each tab will bring out different items that you can choose to disallow people using. Vigor3200 Series User’s Guide...
Page 172 Uncheck all the selected boxes. The profiles configured here can be applied in the Firewall>>General Setup and Firewall>>Filter Setup pages as the standard for the host(s) to follow. Below shows the items which are categorized under P2P. Vigor3200 Series User’s Guide...
Page 173 Below shows the items which are categorized under Protocol. The items categorized under Misc. Vigor3200 Series User’s Guide...
Page 174: Url Content Filter Profile
Click CSM and click URL Content Filter Profile to open the profile setting page. You can set eight profiles as URL content filter. Simply click the index number under Profile to open the following web page. Vigor3200 Series User’s Guide...
Page 175 For this one, the router will process the packages with the conditions set below for web feature first, then URL second. None – There is no log file will be recorded for this profile. Vigor3200 Series User’s Guide...
Page 176 After specifying keywords, the Vigor router will decline the connection request to the website whose URL string matched to any user-defined keyword. It should be noticed that the more simplified the blocking keyword list is, the more efficiently the Vigor router performs. Vigor3200 Series User’s Guide...
Page 177 File Extension Profile – Choose one of the profiles that you configured in Object Setting>> File Extension Objects previously for passing or blocking the file downloading. Vigor3200 Series User’s Guide...
Page 178: Web Content Filter Profile
Note: If you have used Service Activation Wizard to activate WCF service, you can skip this section. WCF adopts the mechanism developed and offered by certain service provider (e.g., DrayTek). No matter activating WCF feature or getting a new license for web content filter, you have to click Activate to satisfy your request.
Page 179 If you have and activate another web content filter license, the items will be changed simultaneously. All of the configuration made for web content filter will be deleted automatically. Therefore, please backup your data before you change the web content filter license. Vigor3200 Series User’s Guide...
Page 180 If the web pages do not match with the specified feature set here, it will be processed with reverse action. None – There is no log file will be recorded for this profile. Vigor3200 Series User’s Guide...
Page 181: Bandwidth Management
To solve the problem, you can use limit session to limit the session procession for specified Hosts. In the Bandwidth Management menu, click Sessions Limit to open the web page. Vigor3200 Series User’s Guide...
Page 182 Adds the specific session limitation onto the list above. Edit Allows you to edit the settings for the selected limitation. Remove Remove the selected settings existing on the limitation list. Administration Message Type the words which will be displayed when reaches the Vigor3200 Series User’s Guide...
Page 183: Bandwidth Limit
Click this button to close the function of limit bandwidth. Default TX limit Define the default speed of the upstream for each computer in LAN. Default RX limit Define the default speed of the downstream for each computer in LAN. Vigor3200 Series User’s Guide...
Page 184: Quality Of Service
Scheduling: Based on classification of service level to assign packets to queues and associated service types The basic QoS implementation in Vigor routers is to classify and schedule packets based on the service type information in the IP header. For instance, to ensure the connection with the Vigor3200 Series User’s Guide...
Page 185 This page displays the QoS settings result of the WAN interface. Click the Setup link to access into next page for the general setup of WAN interface. As to class rule, simply click the Edit link to access into next for configuration. Vigor3200 Series User’s Guide...
Page 186 Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor3200 Series User’s Guide...
Page 187 Display an online statistics for quality of service for your reference. The first three (Class 1 to Class 3) class rules can be adjusted for your necessity. To add, edit or delete the class rule, please click the Edit link of that one. Vigor3200 Series User’s Guide...
Page 188 For Single Address, you have to fill in Start IP address. For Range Address, you have to fill in Start IP address and End IP address. For Subnet Address, you have to fill in Start IP address and Vigor3200 Series User’s Guide...
Page 189 Edit to open the rule edit page for modification. To add a new service type, edit or delete an existed service type, please click the Edit link under Service Type field. Vigor3200 Series User’s Guide...
Page 190 Range as the type. By the way, you can set up to 40 service types. If you want to edit/delete an existed service type, please select the radio button of that one and click Edit/Edit for modification. Vigor3200 Series User’s Guide...
Page 191: Applications
Clear all profiles and recover to factory settings. Auto-Update interval Set the time for the router to perform auto update for DDNS service. Index Click the number below Index to access into the setting page of DDNS setup to set account(s). Vigor3200 Series User’s Guide...
Page 192 Type in one domain name that you applied previously. Use the drop down list to choose the desired domain. Login Name Type in the login name that you set for applying domain. Password Type in the password that you set for applying domain. Vigor3200 Series User’s Guide...
Page 193: Schedule
You can set up to 15 schedules. Then you can apply them to your Internet Access or VPN and Remote Access >> LAN-to-LAN settings. To add a schedule, please click any index, say Index No. 1. The detailed settings of the call schedule with index 1 are shown below. Vigor3200 Series User’s Guide...
Page 194 Suppose you want to control the PPPoE Internet access connection to be always on (Force On) from 9:00 to 18:00 for whole week. Other time the Internet access connection should be disconnected (Force Down). Office Hour: (Force On) Vigor3200 Series User’s Guide...
Page 195: Radius
The RADIUS server and client share a secret that is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret. Confirm Shared Secret Re-type the Shared Secret for confirmation. Vigor3200 Series User’s Guide...
Page 196: Upnp
NAT router. The application will also learn the external IP address and configure port mappings on the router. Subsequently, such a facility forwards packets from the external ports of the router to the internal ports used by the application. Vigor3200 Series User’s Guide...
Page 197 Non-privileged users can control some router functions, including removing and adding port mappings. The UPnP function dynamically adds port mappings on behalf of some UPnP-aware applications. When the applications terminate abnormally, these mappings may not be removed. Vigor3200 Series User’s Guide...
Page 198: Igmp
This field displays the ID port for the multicast group. The available range for IGMP starts from 224.0.0.0 to 239.255.255.254. It indicates the LAN port used for the multicast group. Refresh Click this link to renew the working multicast group status. Vigor3200 Series User’s Guide...
Page 199: Wake On Lan
MAC Address Type any one of the MAC address of the bound PCs. Wake Up Click this button to wake up the selected IP. See the following figure. The result will be shown on the box. Vigor3200 Series User’s Guide...
Page 200: Vpn And Remote Access
Route Mode/NAT Mode – If the remote network only allows Selection you to dial in with single IP, please choose this mode, otherwise please choose Route Mode. Please choose a There are 32 VPN profiles for users to set. LAN-to-LAN Profile Vigor3200 Series User’s Guide...
Page 201 Different type will lead to different configuration page. After making the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: Vigor3200 Series User’s Guide...
Page 202 When you choose IPSec, you will see the following graphic: Vigor3200 Series User’s Guide...
Page 203 When you choose L2TP, you will see the following graphic: When you choose L2TP over IPSec (Nice to Have), you will see the following graphic: Vigor3200 Series User’s Guide...
Page 204 Pre-Shared Key- Specify a key for IKE authentication. Confirm Pre-Shared Key-Confirm the pre-shared key. Digital Signature (X.509) Click Digital Signature to invoke this function. Use the drop down list to choose one of the certificates for using. Vigor3200 Series User’s Guide...
Page 205 If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Go to the VPN Connection Click this radio button to access VPN and Remote Vigor3200 Series User’s Guide...
Page 206: Vpn Server Wizard
VPN connection. Please choose a This item is available when you choose Site to Site VPN LAN-to-LAN Profile (LAN-to-LAN) as VPN server mode. There are 32 VPN profiles for users to set. Vigor3200 Series User’s Guide...
Page 207 (similar to VPN Client Wizard). Different Dial-in Type will lead to different configuration page. In addition, adjustable items for each dial-in type will be changed according to the VPN Server Mode (Site to Site VPN and Remote Dial-in User) selected. Vigor3200 Series User’s Guide...
Page 208 Remote-Dial-in User as the VPN Server Mode. When you check PPTP, you will see the following graphic: When you check PPTP/IPSec/L2TP (three types) or PPTP/IPSec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: Vigor3200 Series User’s Guide...
Page 209 Please type one LAN IP address (according to the real location of the remote host) for building VPN connection. Remote Network Mask Please type the network mask (according to the real location of the remote host) for building VPN connection. Vigor3200 Series User’s Guide...
Page 210: Remote Access Control
Enable the necessary VPN service as you need. If you intend to run a VPN server inside your LAN, you should disable the VPN service of Vigor Router to allow VPN tunnel pass through, as well as the appropriate NAT settings, such as DMZ or open port. Vigor3200 Series User’s Guide...
Page 211: Ppp General Setup
Cisco routers. So you should enable this function when your peer router requires mutual authentication. You should further specify the User Name and Password of the mutual authentication peer. Vigor3200 Series User’s Guide...
Page 212: Ipsec General Setup
IKE Authentication This usually applies to those are remote dial-in user or node Method (LAN-to-LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and Vigor3200 Series User’s Guide...
Page 213: Ipsec Peer Identity
Click each index to edit one peer digital certificate. There are three security levels of digital signature authentication: Fill each necessary field to authenticate the remote peer. The following explanation will guide you to fill all the necessary fields. Vigor3200 Series User’s Guide...
Page 214: Remote Dial-In User
L2TP by itself or over IPSec) and corresponding security methods, etc. The router provides 32 access accounts for dial-in users. Besides, you can extend the user accounts to the RADIUS server through the built-in RADIUS client function. The following figure shows the summary table. Vigor3200 Series User’s Guide...
Page 215 LAN-to-LAN profile. The symbol ??? represents that the profile is empty. Status Display the access state of the specific dial-in user. The symbol V and X represent the specific dial-in user to be active and inactive, respectively. Vigor3200 Series User’s Guide...
Page 216 Nice to Have - Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-in VPN connection becomes one pure L2TP connection. Must -Specify the IPSec policy to be definitely applied on the L2TP connection. Vigor3200 Series User’s Guide...
Page 217 Profiles set in the VPN and Remote Access >>IPSec Peer Identity. IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with IPSec Policy when you specify the remote node. Check Vigor3200 Series User’s Guide...
Page 218: Lan To Lan
4 subgroups. If the fields gray out, it means you may leave it untouched. The following explanations will guide you to fill all the necessary fields. For the web page is too long, we divide the page into several sections for explanation. Vigor3200 Series User’s Guide...
Page 219 VPN Tunnel while connecting. Block – When there is conflict occurred between the hosts on both sides of VPN Tunnel in connecting, such function can block data transmission of Netbios Naming Packet inside the Vigor3200 Series User’s Guide...
Page 220 None: Do not apply the IPSec policy. Accordingly, the VPN connection employed the L2TP without IPSec policy can be viewed as one pure L2TP connection. Nice to Have: Apply the IPSec policy first, if it is applicable during negotiation. Otherwise, the dial-out VPN connection Vigor3200 Series User’s Guide...
Page 221 AES with Authentication-Use AES encryption algorithm and apply MD5 or SHA-1 authentication algorithm. Advanced Specify mode, proposal and key life of each IKE phase, Gateway, etc. The window of advance setup is shown as below: Vigor3200 Series User’s Guide...
Page 222 Local ID-In Aggressive mode, Local ID is on behalf of the IP address while identity authenticating with remote VPN server. The length of the ID is limited to 47 characters. Vigor3200 Series User’s Guide...
Page 223 You can specify the IP address of the remote dial-in user or peer Gateway ID (should be the same with the ID setting in dial-in type) by checking the box. Also, you should further specify the corresponding security methods on the right side. Vigor3200 Series User’s Guide...
Page 224 Network IP Address/Remote Network Mask through the VPN Remote Network Mask connection. For IPSec, this is the destination clients IDs of phase 2 quick mode. Local Network IP / Local Display the local network IP and mask for TCP / IP Vigor3200 Series User’s Guide...
Page 225 If the remote network only allows you to dial in with single IP, please choose NAT, otherwise choose Route. remote network, you have to do Change default route to Check this box to change the default route with this VPN tunnel. this VPN tunnel Vigor3200 Series User’s Guide...
Page 226: Connection Management
Tool and clicking Dial button. Dial Click this button to execute dial out function. Refresh Seconds Choose the time for refresh the dial information among 5, 10, and 30. Refresh Click this button to refresh the whole connection status. Vigor3200 Series User’s Guide...
Page 227: Certificate Management
Remember to adjust the time of Vigor router before using the certificate so that you can get the correct valid period of certificate. Below shows the menu items for Certificate Management. Generate Click this button to open Generate Certificate Request window. Vigor3200 Series User’s Guide...
Page 228 Refresh Click this button to refresh the information listed below. Click this button to view the detailed settings for certificate View request. After clicking Generate, the generated information will be displayed on the window below: Vigor3200 Series User’s Guide...
Page 229: Trusted Ca Certificate
For viewing each trusted CA certificate, click View to open the certificate detail information window. If you want to delete a CA certificate, choose the one and click Delete to remove all the certificate information. Vigor3200 Series User’s Guide...
Page 230: Certificate Backup
Point (AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the same Internet connection via Vigor wireless router. The General Settings will set up the information of this wireless network, including its SSID as identification, located channel etc. Vigor3200 Series User’s Guide...
Page 231 No matter which security suite you select, they all will enhance the over-the-air data protection and /or privacy on your wireless network. The Vigor wireless router is very flexible and can support multiple secure connections with both WEP and WPA at the same time. Vigor3200 Series User’s Guide...
Page 232 MAC addresses to isolate users’ access from wired LAN. Manage Wireless Stations - Station List will display all the station in your wireless network and the status of their connection. Below shows the menu items for Wireless LAN. Vigor3200 Series User’s Guide...
Page 233: General Setup
Enable Wireless LAN Check the box to enable wireless function. Mode At present, the router can connect to Mixed (11b+11g), 11g Only, 11b Only, Mixed (11g+11n), 11n Only and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mix (11b+11g+11n) mode. Vigor3200 Series User’s Guide...
Page 234 SSID Means the identification of the wireless LAN. SSID can be any text numbers or various special characters. The default SSID is "DrayTek. We suggest you to change it. Isolate LAN – Check this box to make the wireless clients (stations) with the same SSID cannot access wired PCs on LAN.
Page 235 It controls the data transmission rate through wireless connection. Upload – Check Enable and type the transmitting rate for data upload. Default value is 30,000 kbps. Download – Type the transmitting rate for data download. Default value is 30,000 kbps. Vigor3200 Series User’s Guide...
Page 236: Security
PSK value for connection. By clicking the Security Settings, a new web page will appear so that you could configure the settings of WEP and WPA. There are several modes provided for you to choose. Mode Vigor3200 Series User’s Guide...
Page 237 Four keys can be entered here, but only one key can be selected at a time. The keys can be entered in ASCII or Hexadecimal. Check the key you wish to use. Vigor3200 Series User’s Guide...
Page 238: Access Control
MAC address from LAN. Add a new MAC address into the list. Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. Vigor3200 Series User’s Guide...
Page 239: Wps
On the side of Vigor 3200 series which served as an AP, press WPS button once on the front panel of the router or click Start PBC on web configuration interface. On the side of a station with network card installed, press Start PBC button of network card. Vigor3200 Series User’s Guide...
Page 240 Below shows Wireless LAN>>WPS web page. Enable WPS Check this box to enable WPS setting. WPS Status Display related system information for WPS. If the wireless security (encryption) function of the router is properly configured, you can see ‘Configured’ message here. Vigor3200 Series User’s Guide...
Page 241: Wds
Provide bridge traffic between two LANs through the air. Extend the coverage range of a WLAN. To meet the above requirement, two WDS modes are implemented in Vigor router. One is Bridge, the other is Repeater. Below shows the function of WDS-bridge interface: Vigor3200 Series User’s Guide...
Page 242 Bridge 2 through WDS links. However, hosts connected to Bridge 1 CANNOT communicate with hosts connected to Bridge 3 through Bridge 2. Click WDS from Wireless LAN menu. The following page will be shown. Vigor3200 Series User’s Guide...
Page 243 If you did not set any key in Security Settings page, this check box will be dimmed. Pre-shared Key Type – There are three types for you to choose. DrayTek WPA can be used for all DrayTek wireless routers like Vigor2700, Vigor2800, Vigor2820, and etc., except for other brand's wireless routers.
Page 244: Advanced Setting
Such channel can increase the performance for data transit. Guard Interval It is to assure the safety of propagation delays and reflections for the sensitive digital data. If you choose auto as guard interval, the AP router will choose short guard interval (increasing the Vigor3200 Series User’s Guide...
Page 245: Wmm Configuration
CWMin means contention Window-Min and CWMax means CWMin/CWMax contention Window-Max. Please specify the value ranging from 1 to 15. Be aware that CWMax value must be greater than CWMin or equals to CWMin value. Both values will influence Vigor3200 Series User’s Guide...
Page 246 It can assure that the peer must receive the WMM packets. “Check” the box means the AP router will not answer any response request for the transmitting packets. It will have better performance with lower reliability. Vigor3200 Series User’s Guide...
Page 247: Ap Discovery
AP’s MAC address on the bottom of the page and click Bridge or Repeater. Next, click Add to. Later, the MAC address of the AP will be added to Bridge or Repeater field of WDS settings page. Vigor3200 Series User’s Guide...
Page 248: Station List
After setting the configuration in USB Application, you can type the IP address of the Vigor router and username/password created in USB Application>>USB User Management on the client software. Then, the client can use the FTP site (USB diskette) or share the Samba service through Vigor router. Vigor3200 Series User’s Guide...
Page 249: Usb General Settings
For the NetBios service of USB diskette, you have to specify a workgroup name and a host name. A workgroup name must not be the same as the host name. The workgroup name can have as Vigor3200 Series User’s Guide...
Page 250: Usb User Management
Type the username for FTP/Samba users for accessing into FTP server (USB diskette). Be aware that users cannot access into USB diskette in anonymity. Later, you can open FTP client software and type the username specified here for accessing Vigor3200 Series User’s Guide...
Page 251 Directory –Check the items (List, Create and Remove) for such profile. Before you click OK, you have to insert a USB diskette into the USB interface of the Vigor router. Otherwise, you cannot save the configuration. Vigor3200 Series User’s Guide...
Page 252: File Explorer
Vigor router. If you want to remove the diskette from USB port in router, please click Disconnect USB Disk first. And then, remove the USB diskette later. Connection Status If there is no USB diskette connected to Vigor router, “No Disk Connected” will be shown here. Vigor3200 Series User’s Guide...
Page 253: System Maintenance
For the system setup, there are several items that you have to know the way of configuration: Status, Administrator Password, Configuration Backup, Syslog, Time setup, Reboot System, Firmware Upgrade. Below shows the menu items for System Maintenance. Vigor3200 Series User’s Guide...
Page 254: System Status
It indicates information about equipped WLAN miniPCi card. Firmware Version This also helps to provide availability of some features that are bound with some WLAN miniPCi. SSID Display the SSID of the router. WAN------- Link Status Display current connection status. Vigor3200 Series User’s Guide...
Page 255: 245
Please refer to Auto Configuration Server user’s manual for detailed information. Such information is useful for Auto Configuration Server. CPE Client Enable/Disable – Allow/Deny the CPE Client to connect with Auto Configuration Server. Port – Sometimes, port conflict might be occurred. To solve Vigor3200 Series User’s Guide...
Page 256: Administrator Password
Type in new password in this field. New Password Confirm Password Type in the new password again. When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Vigor3200 Series User’s Guide...
Page 257: User Password
When you click OK, the login window will appear. Please use the new password to access into the web configurator again. Follow the steps below to backup your configuration. Go to System Maintenance >> Configuration Backup. The following windows will be popped-up, as shown below. Vigor3200 Series User’s Guide...
Page 258 The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Vigor3200 Series User’s Guide...
Page 259 Click Browse button to choose the correct configuration file for uploading to the router. Click Restore button and wait for few seconds, the following picture will tell you that the restoration procedure is successful. Vigor3200 Series User’s Guide...
Page 260: Syslog/Mail Alert
Make a simple test for the e-mail address specified in this page. Please assign the mail address first and click this button to execute a test for verify the mail address is available or not. SMTP Server The IP address of the SMTP server. Vigor3200 Series User’s Guide...
Page 261 From the Syslog screen, select the router you want to monitor. Be reminded that in Network Information, select the network adapter used to connect to the router. Otherwise, you won’t succeed in retrieving information from the router. Vigor3200 Series User’s Guide...
Page 262: Time And Date
Select the time zone where the router is located. Enable Daylight Saving Check this box to enable daylight saving function. Automatically Update Select a time interval for updating from the NTP server. Interval Click OK to save these settings. Vigor3200 Series User’s Guide...
Page 263: Management
Check to specify user-defined port numbers for the Telnet, HTTP and FTP servers. Enable SNMP Agent Check it to enable this function. Set the name for getting community by typing a proper Get Community character. The default setting is public. Vigor3200 Series User’s Guide...
Page 264: Reboot System
Note: When the system pops up Reboot System web page after you configure web settings, please click OK to reboot your router for ensuring normal operation and preventing unexpected errors of the router in the future. Vigor3200 Series User’s Guide...
Page 265: Firmware Upgrade
Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 266: Activation
Activate via Interface Web Content Filter. Activate The Activate link brings you accessing into http://myvigor.draytek.com to finish the activation of the account and the router. Authentication Message As for authentication information of web filter, the process of authenticating will be displayed on this field for your reference.
Page 267: Diagnostics
Below shows the successful activation of Web Content Filter: Diagnostic Tools provide a useful way to view or diagnose the status of your Vigor router. Below shows the menu items for Diagnostics. Vigor3200 Series User’s Guide...
Page 268: Dial-Out Trigger
It shows the source IP address (local), destination IP (remote) address, the protocol and length of the package. Refresh Click it to reload the page. Click Diagnostics and click Routing Table to open the web page. Click it to reload the page. Refresh Vigor3200 Series User’s Guide...
Page 269: Arp Cache Table
It displays the connection item number. IP Address It displays the IP address assigned by this router for specified MAC Address It displays the MAC address for the specified PC that DHCP assigned IP address for it. Vigor3200 Series User’s Guide...
Page 270: Nat Sessions Table
Flow Monitor. If not, a notification dialog box will appear to remind you enabling it. Click Diagnostics and click Data Flow Monitor to open the web page. You can click IP Address, TX rate, RX rate or Session link for arranging the data display. Vigor3200 Series User’s Guide...
Page 271 Display the receiving speed of the monitored device. RX rate (kbps) Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Vigor3200 Series User’s Guide...
Page 272: Traffic Graph
Auto for instead. Click Diagnostics and click Traffic Graph to open the web page. Choose WAN1/WAN2/WN3/WAN4/WAN5 Bandwidth, Sessions, daily or weekly for viewing different traffic graph. Click Refresh to renew the graph at any time. Vigor3200 Series User’s Guide...
Page 273: Ping Diagnosis
Unspecified to be determined by the router automatically. Use the drop down list to choose the destination that you want Ping to to ping. IP Address Type in the IP address of the Host/IP that you want to ping. Vigor3200 Series User’s Guide...
Page 274: Trace Route
Use the drop down list to choose the protocol that you want to ping through. Host/IP Address It indicates the IP address of the host. Click this button to start route tracing work. Clear Click this link to remove the result on the window. Vigor3200 Series User’s Guide...
Page 275: Application And Examples
See the following graphic for an example. VLAN0 (Human Resource): LAN Port 4 IP: 192.168.1.0/24 VLAN1 (Finance Dept): LAN Port 4 IP: 192.168.3.0/24 VLAN2 (Sales Dept.): LAN Port 4 IP: 192.168.5.0/24 VLAN3 (R&D): LAN Port 4 IP: 192.168.7.0/24 Vigor3200 Series User’s Guide...
Page 276 (40) for VID setting. Then check LAN Port and set LAN4 as the Subnet. In the page of LAN >> General Setup, check the Status box of LAN2, LAN3, LAN4 and enable the function of DHCP. Vigor3200 Series User’s Guide...
Page 277 To make any two of VLAN groups linked with each other, just check the boxes of the ones in the field of Inter-LAN Routing in the page of LAN >> General Setup. Refer to the following figure. LAN2 and LAN3 are linked. Vigor3200 Series User’s Guide...
Page 278 Port 23 is set with Trunk in this example and will transfer the packets with VLAN Tag information. That is, packets with VID 10, 20, 30 and 40 will be transferred to Vigor3200 by Port 23 and VID information will be retained. Vigor3200 Series User’s Guide...
Page 279 To make any two of VLAN groups of Tag Based VLAN linked with each other, just check the boxes of the ones in the field of Inter-LAN Routing in the page of LAN >> General Setup. Refer to the following figure. LAN2 and LAN3 are linked. Vigor3200 Series User’s Guide...
Page 280: Create A Lan-To-Lan Connection Between Remote Office And Headquarter
For using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both parties have known. Vigor3200 Series User’s Guide...
Page 281 Go to LAN-to-LAN. Click on one index number to edit a profile. Set Common Settings as shown below. You should enable both of VPN connections because any one of the parties may start the VPN connection. Vigor3200 Series User’s Guide...
Page 282 Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. Vigor3200 Series User’s Guide...
Page 283 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor3200 Series User’s Guide...
Page 284 PPP General Setup. For using IPSec-based service, such as IPSec or L2TP with IPSec Policy, you have to set general settings in IPSec General Setup, such as the pre-shared key that both parties have known. Vigor3200 Series User’s Guide...
Page 285 Set Dial-Out Settings as shown below to dial to connect to Router B aggressively with the selected Dial-Out method. If an IPSec-based service is selected, you should further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-Out connection. Vigor3200 Series User’s Guide...
Page 286 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, PPP Authentication and VJ Compression for this Dial-Out connection. Vigor3200 Series User’s Guide...
Page 287 Otherwise, it will apply the settings defined in IPSec General Setup above. If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor3200 Series User’s Guide...
Page 288: Create A Remote Dial-In User Connection Between The Teleworker And Headquarter
Go to VPN and Remote Access and select Remote Access Control to enable the necessary VPN service and click OK. Then, for using PPP based services, such as PPTP, L2TP, you have to set general settings in PPP General Setup. Vigor3200 Series User’s Guide...
Page 289 If an IPSec-based service is selected, you may further specify the remote peer IP Address, IKE Authentication Method and IPSec Security Method for this Dial-In connection. Otherwise, it will apply the settings defined in IPSec General Setup above. Vigor3200 Series User’s Guide...
Page 290 If a PPP-based service is selected, you should further specify the remote peer IP Address, Username, Password, and VJ Compression for this Dial-In connection. Vigor3200 Series User’s Guide...
Page 291 For Win2000/XP, please use "Network and Dial-up connections" or “Smart VPN Client”, complimentary software to help you create PPTP, L2TP, and L2TP over IPSec tunnel. You can find it in CD-ROM in the package or go to www.DrayTek.com download center. Install as instructed.
Page 292 Internet. This will make the remote host seem to be working in the enterprise network. Click Connect button to build connection. When the connection is successful, you will find a green light on the right down corner. Vigor3200 Series User’s Guide...
Page 293: Qos Setting Example
Note: The rate of outbound/inbound must be smaller than the real bandwidth to ensure correct calculation of QoS. It is suggested to set the bandwidth value for inbound/outbound as 80% - 85% of physical network speed provided by ISP to maximize the QoS performance. Vigor3200 Series User’s Guide...
Page 294 For this index, the user will set reserved bandwidth (e.g., 25%) for E-mail using protocol POP3 and SMTP. Return to previous page. Enter the Name of Index Class 2 by clicking Edit link. In this index, the user will set reserved bandwidth for HTTPS. And click OK. Vigor3200 Series User’s Guide...
Page 295 Click Setup link for one of the WAN interface. Check Enable UDP Bandwidth Control on the bottom to prevent enormous UDP traffic of influent other application. Click OK. Vigor3200 Series User’s Guide...
Page 296 11. Click Edit to open the following window. Check the ACT box, first. 12. Then click Edit of Local Address to set a worker’s subnet address. Click Edit of Remote Address to set headquarter’s IP address. Leave other fields and click OK. Vigor3200 Series User’s Guide...
Page 297: Upgrade Firmware For Your Router
3. Access into Support >> Downloads. Please find out Utility menu and click it. 4. Click on the link of Router Tools to download the file. After downloading the files, please decompressed the file onto your host. Vigor3200 Series User’s Guide...
Page 298 You will find out two files with different extension names, xxxx.all (keep the old custom settings) and xxxx.rst (reset all the custom settings to default settings). Choose any one of them that you need. Vigor3200 Series User’s Guide...
Page 299 The web page also can guide you to upgrade firmware. Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and FTP site is ftp.DrayTek.com.
Page 300: Request A Certificate From A Ca Server On Windows Ca Server
Go to Certificate Management and choose Local Certificate. Vigor3200 Series User’s Guide...
Page 301 Copy and save the X509 Local Certificate Requet as a text file and save it for later use. Connect to CA server via web browser. Follow the instruction to submit the request. Below we take a Windows 2000 CA server for example. Select Request a Certificate. Vigor3200 Series User’s Guide...
Page 302 64 encoded certificate and Download CA certificate. Now you should get a certificate (.cer file) and save it. Back to Vigor router, go to Local Certificate. Click IMPORT button and browse the file to import the certificate (.cer file) into Vigor router. When finished, click refresh and Vigor3200 Series User’s Guide...
Page 303 “------BEGINE CERTIFICATE------..” You may review the detail information of the certificate by clicking View button. Vigor3200 Series User’s Guide...
Page 304: Request A Ca Certificate And Set As Trusted On Windows Ca Server
Use web browser connecting to the CA server that you would like to retrieve its CA certificate. Click Retrive the CA certificate or certificate recoring list. Vigor3200 Series User’s Guide...
Page 305 You may review the detail information of the certificate by clicking View button. Note: Before setting certificate configuration, please go to System Maintenance >> Time and Date to reset current time of the router first. Vigor3200 Series User’s Guide...
Page 306: Creating An Account For Myvigor
The website of MyVigor (a server located on http://myvigor.draytek.com) provides several useful services (such as Anti-Spam, Web Content Filter, Anti-Intrusion, and etc.) to filter the web pages for protecting your system. To access into MyVigor for getting more information, please create an account for MyVigor first.
Page 307 4. Check to confirm that you accept the Agreement and click Accept. 5. Type your personal information in this page and then click Continue. 6. Choose proper selection for your computer and click Continue. Vigor3200 Series User’s Guide...
Page 308 8. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 9. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor3200 Series User’s Guide...
Page 309: Creating An Account Via Myvigor Web Site
11. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. 1. Access into http://myvigor.draytek.com. Find the line of Not registered yet?. Then, click the link Click here! to access into next page.
Page 310 2. Check to confirm that you accept the Agreement and click Accept. 3. Type your personal information in this page and then click Continue. 4. Choose proper selection for your computer and click Continue. Vigor3200 Series User’s Guide...
Page 311 6. Check to see the confirmation email with the title of Letter from myvigor.draytek.com. 7. Click the Activate my Account link to enable the account that you created. The following screen will be shown to verify the register process is finished. Please click Login. Vigor3200 Series User’s Guide...
Page 312 UserName and Password. Then type the code in the box of Auth Code according to the value displayed on the right side of it. Now, click Login. Your account has been activated. You can access into MyVigor server to activate the service (e.g., WCF) that you want. Vigor3200 Series User’s Guide...
Page 313: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor3200 Series User’s Guide...
Page 314 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor3200 Series User’s Guide...
Page 315 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor3200 Series User’s Guide...
Page 316: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor3200 Series User’s Guide...
Page 317: Checking If The Isp Settings Are Ok Or Not
Open WAN >> Internet Access page and then check whether the ISP settings are set correctly. Click Details Page of each WAN interface to review the settings that you configured previously. Vigor3200 Series User’s Guide...
Page 318 PIN code and try again. If it still fails, it might be the compliance problem of system. Please open DrayTek Syslog Tool to capture the connection information (WAN Log) and send the page (similar to the following graphic) to the service center of DrayTek.
Page 319 After restore the factory default setting, you can configure the settings for the router again to fit your personal request. If the router still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com. Vigor3200 Series User’s Guide...

Draytek Vigor3200 Series User Manual

Preface

Configuring Basic Settings

User Mode Operation

Admin Mode Operation

Application and Examples

Trouble Shooting

Quick Links

Related Manuals for Draytek Vigor3200 Series

Summary of Contents for Draytek Vigor3200 Series