I and pa rt of the VR-3030 Multi-DSL Router User Manual Version A1.0, August 21, 2015 261099-036...
Page 2
Preface This manual provides information related to the installation and operation of this device. The individual reading this manual is presumed to have a basic understanding of telecommunications terminology and concepts. Important Safety Instructions With reference to unpacking, installation, use, and maintenance of your electronic device, the following basic guidelines are recommended: •...
Table of Contents CHAPTER 1 INTRODUCTION ......................5 CHAPTER 2 INSTALLATION ......................6 2.1 H ........................... 6 ARDWARE ETUP 2.2 LED I ..........................8 NDICATORS CHAPTER 3 WEB USER INTERFACE ....................9 3.1 D ......................... 9 EFAULT ETTINGS 3.2 IP C ........................
Page 5
5.10 DSL ............................. 70 5.11 UP P ............................71 5.12 DNS P ........................72 ROXY ELAY 5.13 IP T ........................... 73 UNNEL 5.13.1 IPv6inIPv4 ........................... 73 5.13.2 IPv4inIPv6 ........................... 74 5.14 IPS ............................76 5.14.1 IPSec Tunnel Mode Connections ..................76 5.15 C ..........................
Data) applications. The VR-3030 comes with one 10/100 Base-T Ethernet port. The VR-3030 is a cost effective solution designed to meet the needs of ISPs and carriers planning on deploying a single DSL device for covering end users in different loop range areas.
2.2 LED Indicators for details). NOTE: If pressed down for more than 20 seconds, the VR-3030 will go into a firmware update state (CFE boot mode). The firmware can then be updated using an Internet browser pointed to the default IP address.
Page 8
Ethernet (LAN) Port Use a 10/100 BASE-T RJ-45 cable to connect to a network device. The ports is auto-sensing MDI/X; so either straight-through or crossover cable can be used. DSL Port Connect to an ADSL2/2+ or VDSL with this RJ11 Port. This device contains a micro filter which removes the analog phone signal.
2.2 LED Indicators The front panel LED indicators are shown below and explained in the following table. This information can be used to check the status of the device and its connections. Color Mode Function The device is powered up. Green The device is powered down.
Chapter 3 Web User Interface This section describes how to access the device via the web user interface (WUI) using an Internet browser such as Internet Explorer (version 5.0 and later). 3.1 Default Settings The factory default settings of this device are summarized below. •...
3.2 IP Configuration DHCP MODE When the VR-3030 powers up, the onboard DHCP server will switch on. Basically, the DHCP server issues and reserves IP addresses for LAN devices, such as your PC. To obtain an IP address from the DCHP server, follow the steps provided below.
Page 12
STATIC IP MODE In static IP mode, you assign IP settings to your PC manually. Follow these steps to configure your PC IP address to use subnet 192.168.1.x. NOTE: The following procedure assumes you are running Windows XP. However, the general steps involved are similar for most operating systems (OS).
3.3 Login Procedure Perform the following steps to login to the web user interface. NOTE: The default settings can be found in section 3.1 Default Settings. STEP 1: Start the Internet browser and enter the default IP address for the device in the Web address field.
Page 14
STEP 3: After successfully logging in for the first time, you will reach this screen.
Chapter 4 Device Information The web user interface window is divided into two frames, the main menu (at left) and the display screen (on the right). The main menu has several options and selecting each of these options opens a submenu with more selections. NOTE: The menu items shown are based upon the configured connection(s) and user account privileges.
4.1 WAN Select WAN from the Device Info submenu to display the configured PVC(s). Heading Description Interface Name of the interface for WAN Description Name of the WAN connection Type Shows the connection type VlanMuxId Shows 802.1Q VLAN ID IPv6 Shows WAN IPv6 address IGMP Pxy Shows Internet Group Management Protocol (IGMP) proxy...
4.2 Statistics This selection provides LAN, WAN, ATM/PTM and xDSL statistics. NOTE: These screens are updated automatically every 15 seconds. Click Reset Statistics to perform a manual update. 4.2.1 LAN Statistics This screen shows data traffic statistics for each LAN interface. Heading Description Interface...
4.2.2 WAN Service This screen shows data traffic statistics for each WAN interface. Heading Description Interface WAN interfaces Description WAN service label Received/Transmitted - Bytes Number of Bytes - Pkts Number of Packets - Errs Number of packets with errors - Drops Number of dropped packets...
4.2.3 ATM Statistics The following figure shows Asynchronous Transfer Mode (ATM) statistics. ATM Interface Statistics Heading Description Port Number ATM PORT (0-3) In Octets Number of received octets over the interface Out Octets Number of transmitted octets over the interface In Errors Number of cells dropped due to uncorrectable HEC errors In Unknown...
4.2.4 xDSL Statistics The xDSL Statistics screen displays information corresponding to the xDSL type. The two examples below (VDSL & ADSL) show this variation. VDSL...
Page 21
ADSL Click the Reset Statistics button to refresh this screen. Field Description Mode G.Dmt, G.lite, T1.413, ADSL2, ADSL2+ Traffic Type Channel type Interleave or Fast Status Lists the status of the DSL link Link Power State Link output power state Line Coding (Trellis) Trellis On/Off SNR Margin (0.1 dB)
Page 22
Output Power (0.1 dBm) Total upstream output power Attainable Rate (Kbps) The sync rate you would obtain Rate (Kbps) Current sync rates downstream/upstream In VDSL mode, the following section is inserted. Number of bytes in Mux Data Frame Number of Mux Data Frames in a RS codeword Number of Mux Data Frames in an OH sub-frame Number of redundancy bytes in the RS codeword Number of data symbols the RS codeword spans...
Page 23
HEC Errors Total Number of Header Error Checksum errors OCD Errors Total Number of Out-of-Cell Delineation errors LCD Errors Total number of Loss of Cell Delineation Total Cells Total number of ATM cells (including idle + data cells) Data Cells Total number of ATM data cells Bit Errors Total number of bit errors...
Page 24
xDSL TONE GRAPH Click Draw Graph on the xDSL Statistics screen and a pop-up window will display the xDSL bits per tone status, as shown below.
4.3 Route Choose Route to display the routes that the VR-3030 has found. Field Description Destination Destination network or destination host Gateway Next hub IP address Subnet Mask Subnet Mask of Destination Flag U: route is up !: reject route...
4.4 ARP Click ARP to display the ARP information. Field Description IP address Shows IP address of host pc Flags Complete, Incomplete, Permanent, or Publish HW Address Shows the MAC address of host pc Device Shows the connection interface...
4.5 IGMP Info Displays a list of IGMP Proxy entries. Field Description Interface The Source interface from which the IGMP report was received The WAN interface from which the multicast traffic is received Groups The destination IGMP group address Member The Source IP from which the IGMP report was received Timeout The time remaining before the IGMP report expires...
4.6 IPv6 4.6.1 IPv6 Info Field Description Interface WAN interface with IPv6 enabled Status Connection status of the WAN interface Address IPv6 Address of the WAN interface Prefix Prefix received/configured on the WAN interface Device Link-local Address The CPE's LAN Address Default IPv6 Gateway The default WAN IPv6 gateway IPv6 DNS Server...
4.6.2 IPv6 Neighbor Field Description IPv6 Address Ipv6 address of the device(s) found Flags Status of the neighbor device HW Address MAC address of the neighbor device Device Interface from which the device is located...
4.6.3 IPv6 Route Field Description Destination Destination IP Address Gateway Gateway address used for destination IP Metric Metric specified for gateway Interface Interface used for destination IP...
Chapter 5 Advanced Setup 5.1 Layer 2 Interface The ATM, PTM and ETH WAN interface screens are described here. 5.1.1 ATM Interface Add or remove ATM interface connections here. Click Add to create a new ATM interface (see Appendix E NOTE: Up to 8 ATM interfaces can be created and saved in flash memory.
Page 32
5.2 WAN Service This screen allows for the configuration of WAN interfaces. Click the Add button to create a new connection. For connections on ATM or ETH WAN interfaces see Appendix E NOTE: ETH and ATM service connections cannot coexist. In Default Mode, up to 8 WAN connections can be configured;...
5.3 LAN LAN interface settings can be configured on this screen. NOTE: NAT is enabled so the DHCP Server Relay option is hidden above. (see underlined notes below). Consult the field descriptions below for more details. GroupName: Select an Interface Group. LAN INTERFACE IP Address: Enter the IP address for the LAN port.
Page 34
Blocking Mode: In blocking mode, the multicast data traffic will be blocked and not flood to all bridge ports when there are no client subscriptions to any multicast group. Enable LAN side firewall: Enable by ticking the checkbox . DHCP Server: To enable DHCP, select Enable DHCP server and enter Start and End IP addresses and the Leased Time.
Page 35
IP Address: Enter the secondary IP address for the LAN port. Subnet Mask: Enter the secondary subnet mask for the LAN port.
5.3.1 LAN IPv6 Autoconfig Configure the LAN interface settings and then click Apply/Save.
Page 37
Consult the field descriptions below for more details. LAN IPv6 Link-Local Address Configuration Heading Description EUI-64 Use EUI-64 algorithm to calculate link-local address from MAC address User Setting Use the Interface Identifier field to define a link-local address Static LAN IPv6 Address Configuration Heading Description Interface Address...
Page 38
To remove an entry, tick the corresponding checkbox in the Remove column and then click the Remove Entries button, as shown below. Heading Description Enable RADVD Enable use of router advertisement daemon RA interval Min(sec): Minimum time to send router advertisement RA interval Max(sec): Maximum time to send router advertisement Reachable Time(ms):...
5.3.2 Static IP Neighbor Click the Add button to display the following. Heading Description IP Version The IP version used for the neighbor device IP Address Define the IP Address for the neighbor device MAC Address The MAC Address of the neighbor device Associated Interface The interface where the neighbor device is located...
5.4 NAT To display this option, NAT must be enabled in at least one PVC shown on the Advanced Setup - WAN screen. NAT is not an available option in Bridge mode. 5.4.1 Virtual Servers Virtual Servers allow you to direct incoming traffic from the WAN side (identified by Protocol and External port) to the Internal server with private IP addresses on the LAN side.
Page 41
Consult the table below for field and header descriptions. Field/Header Description Use Interface Either select the ‘Choose All Interface’ radio button or select a WAN interface from the drop-down box. Select a Service User should select the service from the list. Custom Service User can enter the name of their choice.
Field/Header Description Internal Port Start Enter the internal port starting number (when you select Custom Server). When a service is selected the port ranges are automatically configured Internal Port End Enter the internal port ending number (when you select Custom Server). When a service is selected, the port ranges are automatically configured.
Page 43
Consult the table below for field and header descriptions. Field/Header Description Use Interface Select a WAN interface from the drop-down box. Select an Application User should select the application from the list. Custom Application User can enter the name of their choice. Trigger Port Start Enter the starting trigger port number (when you select custom application).
5.4.3 DMZ Host The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer. To Activate the DMZ host, enter the DMZ host IP address and click Save/Apply. To Deactivate the DMZ host, clear the IP address field and click Save/Apply.
5.4.4 IP Address Map Mapping Local IP (LAN IP) to some specified Public IP (WAN IP). Field/Header Description Rule The number of the rule Type Mapping type from local to public Local Start IP The beginning of the local IP Local End IP The ending of the local IP Public Start IP...
Page 46
Select a Service, then click the Save/Apply button. One to One: mapping one local IP to a specific public IP Many to one: mapping a range of local IP to a specific public IP Many to many(Overload): mapping a range of local IP to a different range of public IP Many to many(No Overload): mapping a range of local IP to a same range of public IP...
5.4.5 ALG/Pass-Through Support ALG Pass-through for the listed protocols. To allow/deny the corresponding ALG protocol, select Enable / Disable and then click the Save button. After reboot, the protocol will be added/removed from the system module.
5.5 Security To display this function, you must enable the firewall feature in WAN Setup. For detailed descriptions, with examples, please consult Appendix A - Firewall. 5.5.1 IP Filtering This screen sets filter rules that limit IP traffic (Outgoing/Incoming). Multiple filter rules can be set and each applies at least one limiting condition.
Page 49
Consult the table below for field descriptions. Field Description Filter Name The filter rule label IP Version Select from the drop down menu. Protocol TCP, TCP/UDP, UDP, or ICMP. Source IP address Enter source IP address. Source Port (port or port:port) Enter source port number or range.
Each network device has a unique 48-bit MAC address. This can be used to filter (block or forward) packets based on the originating device. MAC filtering policy and rules for the VR-3030 can be set according to the following procedure. The MAC Filtering Global Policy is defined as follows. FORWARDED means that all MAC layer frames will be FORWARDED except those matching the MAC filter rules.
Page 51
Choose Add or Remove to configure MAC filtering rules. The following screen will appear when you click Add. Create a filter to identify the MAC layer frames by specifying at least one condition below. If multiple conditions are specified, all of them must be met.
5.6 Parental Control This selection provides WAN access control functionality. 5.6.1 Time Restriction This feature restricts access from a LAN device to an outside network through the device on selected days at certain times. Make sure to activate the Internet Time server synchronization as described in Section 7.5 , so that the scheduled times...
User Name: A user-defined label for this restriction. Browser's MAC Address: MAC address of the PC running the browser. Other MAC Address: MAC address of another LAN device. Days of the Week: The days the restrictions apply. Start Blocking Time: The time the restrictions start. End Blocking Time: The time the restrictions end.
Page 54
A maximum of 100 entries can be added to the URL Filter list. Tick the Exclude radio button to deny access to the websites listed. Tick the Include radio button to restrict access to only those listed websites.
5.7 Quality of Service (QoS) NOTE: QoS must be enabled in at least one PVC to display this option. (see Appendix E for detailed PVC setup instructions). To Enable QoS tick the checkbox and select a Default DSCP Mark. Click Apply/Save to activate QoS. QoS and DSCP Mark are defined as follows: Quality of Service (QoS): This provides different priority to different users or data flows, or guarantees a certain level of performance to a data flow in accordance with...
5.7.1 QoS Queue Setup Configure queues with different priorities to be used for QoS setup. In ATM mode, maximum 16 queues can be configured. In PTM mode, maximum 8 queues can be configured. For each Ethernet interface, maximum 3 queues can be configured. To add a queue, click the Add button.
Page 57
After completing the settings, click Apply/Save to save and apply the settings. Name: Identifier for this Queue entry. Enable: Enable/Disable the Queue entry. Interface: Assign the entry to a specific network interface (QoS enabled).
5.7.2 QoS Policer To remove policers, check their remove-checkboxes, then click the Remove button. The Enable button will scan through every policers in the table. Policers with enable-checkbox checked will be enabled. Policers with enable-checkbox un-checked will be disabled. The enable-checkbox also shows status of the policer after page reload. To add a policer, click the Add button.
Page 59
Field Description Name Name of this policer rule Enable Enable/Disable this policer rule Meter Type Meter type used for this policer rule Committed Rate (kbps) Defines the rate allowed for committed packets Committed Burst Size Maximum amount of packets that can be processed by (bytes) this policer Conforming Action...
5.7.3 QoS Classification The network traffic classes are listed in the following table. Click Add to configure a network traffic class rule and Enable to activate it. To delete an entry from the list, click Remove. This screen creates a traffic class rule to classify the upstream traffic, assign queuing priority and optionally overwrite the IP header DSCP byte.
Page 61
After completing the settings, click Apply/Save to save and apply the settings. Field Description Traffic Class Name Enter a name for the traffic class. Rule Order Last is the only option. Rule Status Disable or enable the rule. Classification Criteria Ingress Interface Select an interface (i.e.
Page 62
Field Description Source MAC Address A packet belongs to SET-1, if a binary-AND of its source MAC address with the Source MAC Mask is equal to the binary-AND of the Source MAC Mask and this field. Source MAC Mask This is the mask used to decide how many bits are checked in Source MAC Address.
5.7.4 QoS Port Shaping QoS port shaping supports traffic shaping of Ethernet interface. If "Shaping Rate" is set to "-1", it means no shaping and "Burst Size" will be ignored. Click Apply/Save to save and apply the settings.
5.8 Routing This following routing functions are accessed from this menu: Default Gateway, Static Route, Policy Routing, RIP and IPv6 Static Route. NOTE: In bridge mode, the RIP menu option is hidden while the other menu options are shown but ineffective. 5.8.1 Default Gateway Default gateway interface list can have multiple WAN interfaces served as system...
5.8.2 Static Route This option allows for the configuration of static routes by destination IP. Click Add to create a static route or click Remove to delete a static route. After clicking Add the following screen will display. After completing the settings, click Apply/Save to save and apply the settings.
Page 66
IP Version: Select the IP version to be IPv4. Destination IP address/prefix length: Enter the destination IP address. Interface: select the proper interface for the rule. Gateway IP Address: The next-hop IP address. Metric: The metric value of routing. ...
5.8.3 Policy Routing This option allows for the configuration of static routes by policy. Click Add to create a routing policy or Remove to delete one. On the following screen, complete the form and click Apply/Save to create a policy. Field Description Policy Name...
5.8.4 To activate RIP, configure the RIP version/operation mode and select the Enabled checkbox for at least one WAN interface before clicking Save/Apply.
5.9 DNS 5.9.1 DNS Server Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses must be inputted. Click Apply/Save to save the new configuration.
Dynamic DNS The Dynamic DNS service allows you to map a dynamic IP address to a static hostname in any of many domains, allowing the VR-3030 to be more easily accessed from various locations on the Internet. To add a dynamic DNS service, click Add. The following screen will display.
Field Description D-DNS provider Select a dynamic DNS provider from the list Hostname Enter the name of the dynamic DNS server Interface Select the interface from the list Username Enter the username of the dynamic DNS server Password Enter the password of the dynamic DNS server 5.10 DSL The DSL Settings screen allows for the selection of DSL modulation modes.
5.12 DNS Proxy/Relay To enable DNS Proxy, select the corresponding checkbox and then enter Host and Domain names, as the example shown below. Click Apply/Save to continue. Enabling the DNS Relay function allows the cpe to relay public DNS servers received from WAN interface to DHCP clients.
5.13 IP Tunnel 5.13.1 IPv6inIPv4 Configure 6in4 tunneling to encapsulate IPv6 traffic over explicitly-configured IPv4 links. Click the Add button to display the following.
Options Description Tunnel Name Input a name for the tunnel Mechanism Mechanism used by the tunnel deployment Associated WAN Interface Select the WAN interface to be used by the tunnel Associated LAN Interface Select the LAN interface to be included in the tunnel Manual/Automatic Select automatic for point-to-multipoint tunneling / manual for point-to-point tunneling...
Page 76
Options Description Tunnel Name Input a name for the tunnel Mechanism Mechanism used by the tunnel deployment Associated WAN Interface Select the WAN interface to be used by the tunnel Associated LAN Interface Select the LAN interface to be included in the tunnel Manual/Automatic Select automatic for point-to-multipoint tunneling / manual for point-to-point tunneling...
5.14 IPSec 5.14.1 IPSec Tunnel Mode Connections You can add, edit or remove IPSec tunnel mode connections from this page. Click Add New Connection to add a new IPSec termination rule. The following screen will display.
Page 78
IPSec Connection Name User-defined label IP Version Select IPv4 or IPv6 for this tunnel Tunnel Mode Select tunnel protocol, AH (Authentication Header) or ESP (Encapsulating Security Payload) for this tunnel. Local Gateway Interface Select the outgoing WAN interface for the IPSEC connection.
Page 79
IP Address for VPN If you chose Single, please enter the host IP address for VPN. If you chose Subnet, please enter the subnet information for VPN. Mask or Prefix Length Enter subnet mask for IPv4 or prefix length for IPv6 address.
Page 80
Manual Key Exchange Method Perfect Forward Secrecy Enable/Disable use of Perfect Forward Secrecy (pfs) key-agreement Encryption Algorithm DES / 3DES / AES (aes-cbc) Encryption Key DES: 16 digit Hex, 3DES: 48 digit Hex Authentication Algorithm MD5 / SHA1 Authentication Key MD5: 32 digit Hex, SHA1: 40 digit Hex SPI (default is 101) Enter a Hex value from 100-FFFFFFFF...
5.15 Certificate A certificate is a public key, attached with its owner’s information (company name, server name, personal real name, contact e-mail, postal address, etc) and digital signatures. There will be one or more digital signatures attached to the certificate, indicating that these entities have verified that this certificate is valid.
Page 82
The following table is provided for your reference. Field Description Certificate Name A user-defined name for the certificate. Common Name Usually, the fully qualified domain name for the machine. Organization Name The exact legal name of your organization. Do not abbreviate. State/Province Name The state or province where your organization is located.
Page 83
Enter a certificate name and click Apply to import the local certificate.
5.15.2 Trusted CA CA is an abbreviation for Certificate Authority, which is a part of the X.509 system. It is itself a certificate, attached with the owner information of this certificate authority; but its purpose is not encryption/decryption. Its purpose is to sign and issue certificates, in order to prove that these certificates are valid.
Page 85
Enter a certificate name and click Apply to import the CA certificate.
5.16 Power Management This screen allows for control of hardware modules to evaluate power consumption. Use the buttons to select the desired option, click Apply and check the response.
5.17 Multicast Input new IGMP or MLD protocol configuration fields if you want modify default values shown. Then click Apply/Save. Field Description Multicast Precedence Select precedence of multicast packets. Multicast Strict Grouping Enable/Disable multicast strict grouping. Enforcement Default Version Define IGMP using version with video server. Query Interval The query interval is the amount of time in seconds between IGMP General Query messages sent by the...
Page 88
Field Description Query Response Interval The query response interval is the maximum amount of time in seconds that the IGMP router waits to receive a response to a General Query message. The query response interval is the Maximum Response Time field in the IGMP v2 Host Membership Query message header.
Chapter 6 Diagnostics The first Diagnostics screen is a dashboard that shows overall connection status. If a test displays a fail status, click the button to retest and confirm the error. If a test continues to fail, click Help and follow the troubleshooting procedures.
6.1 Ethernet OAM The Ethernet OAM page provides settings to enable/disable 802.3ah, 802.1ag/Y1.731 OAM protocols. To enable Ethernet Link OAM (802.3 ah), click Enabled to display the full configuration list. At least one option must be enabled for 802.1ah. WAN Interface Select layer 2 WAN interface for outgoing OAM packets OAM ID OAM Identification number...
Chapter 7 Management The Management menu has the following maintenance functions and processes: 7.1 Settings This includes Backup Settings, Update Settings, and Restore Default screens. 7.1.1 Backup Settings To save the current configuration to a file on your PC, click Backup Settings. You will be prompted for backup file location.
PC IP configuration to match any new settings. NOTE: This entry has the same effect as the Reset button. The VR-3030 board hardware and the boot loader support the reset to default. If the Reset button is continuously pressed for more than 5 seconds, the boot loader...
7.2 System Log This function allows a system log to be kept and viewed upon request. Follow the steps below to configure, enable, and view the system log. STEP 1: Click Configure System Log, as shown below (circled in Red). STEP 2: Select desired options and click Apply/Save.
Page 94
“Emergency” down to this configured level will be recorded to the log buffer on the VR-3030 SDRAM. When the log buffer is full, the newer event will wrap up to the top of the log buffer and overwrite the old event.
7.3 SNMP Agent Simple Network Management Protocol (SNMP) allows a management application to retrieve statistics and status from the SNMP agent in this device. Select the Enable radio button, configure options, and click Save/Apply to activate SNMP.
7.4 TR-069 Client WAN Management Protocol (TR-069) allows an Auto-Configuration Server (ACS) to perform auto-configuration, provision, collection, and diagnostics to this device. Select desired values and click Apply/Save to configure TR-069 client options. The table below is provided for ease of reference. Option Description Inform...
Page 97
Password used to authenticate an ACS making a Connection Request to the CPE. IP address and port the ACS uses to connect to VR-3030. The Get RPC Methods button forces the CPE to establish an immediate connection to the ACS. This may be used to discover the set of methods supported by the ACS or CPE.
7.5 Internet Time This option automatically synchronizes the router time with Internet timeservers. To enable time synchronization, tick the corresponding checkbox , choose your preferred time server(s), select the correct time zone offset, and click Apply/Save. NOTE: Internet Time must be activated to use Parental Control.
7.6 Access Control 7.6.1 Passwords This screen is used to configure the user account access passwords for the device. Access to the VR-3030 is controlled through the following three user accounts: • root - unrestricted access to change and view the configuration.
7.6.3 IP Address The IP Address Access Control mode, if enabled, permits access to local management services from IP addresses contained in the Access Control List. If the Access Control mode is disabled, the system will not validate IP addresses for incoming packets.
7.7 Wake-on-LAN This tool allows you to wake up (power on) computers connected to the Broadband Router LAN interface by sending special "magic packets". The network interface card in the computer or device that is going to be woken up must support Wake-on-LAN.
7.8 Update Software This option allows for firmware upgrades from a locally stored file. STEP 1: Obtain an updated software image file from your ISP. STEP 2: Enter the path and filename of the firmware image file in the Software File Name field or click the Browse button to locate the image file.
7.9 Reboot To save the current configuration and reboot the router, click Save/Reboot. NOTE: You may need to close the browser window and wait for 2 minutes before reopening it. It may also be necessary, to reset your PC IP configuration.
Appendix A - Firewall STATEFUL PACKET INSPECTION Refers to an architecture, where the firewall keeps track of packets on each connection traversing all its interfaces and makes sure they are valid. This is in contrast to static packet filtering which only examines a packet based on the information in the packet header.
Page 106
Example 1: Filter Name : In_Filter1 Protocol : TCP Policy : Allow Source IP Address : 210.168.219.45 Source Subnet Mask : 255.255.0.0 Source Port : 80 Dest. IP Address : NA Dest. Subnet Mask : NA Dest. Port : NA Selected WAN interface : br0 This filter will ACCEPT all TCP packets coming from WAN interface “br0”...
Page 107
DAYTIME PARENTAL CONTROL This feature restricts access of a selected LAN device to an outside Network through the VR-3030, as per chosen days of the week and the chosen times. Example: User Name : FilterJohn Browser's MAC Address : 00:25:46:78:63:21...
Appendix C - Specifications Hardware Interface RJ-11 X 1 for ADSL2+/VDSL2, RJ-45 X 1 for LAN (10/100 Base-T), Reset Button X 1, Power Switch X 1, WAN Interface ADSL2+ ..Downstream : 24 Mbps Upstream : 1.3 Mbps ITU-T G.992.5, ITU-T G.992.3, ITU-T G.992.1, ANSI T1.413 Issue 2, AnnexM VDSL2 ..Downstream : 100 Mbps Upstream : 60 Mbps ITU-T G.993.2 (supporting profile 8a, 8b, 8c, 8d, 12a, 12b, 17a)
Page 110
Operating temperature ......0 ~ 40 degrees Celsius Relative humidity ........5 ~ 95% (non-condensing) Dimensions ........171 mm (W) x 37 mm (H) x 121 mm (D) Kit Weight (1*VR-3030, 1*RJ11 cable, 1*RJ45 cable, 1*power adapter) = 0.6 kg NOTE: Specifications are subject to change without notice...
Appendix D - SSH Client Unlike Microsoft Windows, Linux OS has a ssh client included. For Windows users, there is a public domain one called “putty” that can be downloaded from here: http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html To access the ssh client you must first enable SSH access for the LAN or WAN from the Management ...
E1.1 ATM Interfaces Follow these procedures to configure an ATM interface. NOTE: The VR-3030 supports up to 16 ATM interfaces. STEP 1: Go to Advanced Setup Layer2 Interface ATM Interface. This table is provided here for ease of reference.
Page 113
Heading Description Peak Cell Rate Maximum allowed traffic rate for the ATM PCR service connection Sustainable Cell The average allowable, long-term cell transfer rate on the VBR Rate service connection Max Burst Size The maximum allowable burst size of cells that can be transmitted contiguously on the VBR service connection Min Cell The minimum guaranteed cell rate for the service connection...
Page 114
There are many settings here including: VPI/VCI, DSL Latency, DSL Link Type, Encapsulation Mode, Service Category, Connection Mode and Quality of Service. Here are the available encapsulations for each xDSL Link Type: EoA- LLC/SNAP-BRIDGING, VC/MUX PPPoA- VC/MUX, LLC/ENCAPSULATION IPoA- LLC/SNAP-ROUTING, VC MUX ...
Page 115
E1.2 PTM Interfaces Follow these procedures to configure a PTM interface. NOTE: The VR-3030 supports up to four PTM interfaces. STEP 4: Go to Advanced Setup Layer2 Interface PTM Interface. This table is provided here for ease of reference.
Page 116
There are many settings that can be configured here including: DSL Latency, PTM Priority, Connection Mode and Quality of Service. STEP 6: Click Apply/Save to confirm your choices. On the next screen, check that the PTM interface is added to the list. For example, an PTM interface in Default Mode is shown below.
Page 117
E2 ~ WAN Connections In Default Mode, the VR-3030 supports one WAN connection for each interface, up to a maximum of 8 connections. VLAN Mux and MSC support up to 16 connections. To setup a WAN connection follow these instructions.
Page 118
NOTE: The WAN services shown here are those supported by the layer 2 interface you selected in the previous step. If you wish to change your selection click the Back button and select a different layer 2 interface. STEP 4: For VLAN Mux Connections only, you must enter Priority tags, VLAN ID tags.
Page 119
E2.1 PPP over ETHERNET (PPPoE) STEP 1: Select the PPP over Ethernet radio button and click Next. You can also enable IPv6 by ticking the checkbox at the bottom of this screen. STEP 2: On the next screen, enter the PPP settings as provided by your ISP. Click Next to continue or click Back to return to the previous step.
Page 120
The settings shown above are described below.
Page 121
DIAL ON DEMAND The VR-3030 can be configured to disconnect if there is no activity for a period of time by selecting the Dial on demand checkbox . You must also enter an inactivity timeout period in the range of 1 to 4320 minutes.
Page 122
ENABLE FIREWALL If this checkbox is selected, the Security submenu will be displayed on the Advanced Setup menu after reboot. If firewall is not necessary, this checkbox should not be selected to free up system resources for better performance. USE STATIC IPv4 ADDRESS Unless your service provider specially requires it, do not select this checkbox .
Page 123
Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses must be entered. Click Next to continue or click Back to return to the previous step.
Page 124
After clicking Apply/Save, the new service should appear on the main screen. To activate it you must reboot. Go to Management Reboot and click Reboot.
Page 125
E2.2 IP over ETHERNET (IPoE) STEP 1: *Select the IP over Ethernet radio button and click Next. For tagged service, enter valid 802.1P Priority and 802.1Q VLAN ID. Select TPID from the list if S-VLAN/C-VLAN is used. For untagged service, set -1 to both 802.1P Priority and 802.1Q VLAN ID. STEP 2: The WAN IP settings screen provides access to the DHCP server settings.
Page 126
NOTE: If IPv6 networking is enabled, an additional set of instructions, radio buttons, and text entry boxes will appear at the bottom of the screen. These configuration options are quite similar to those for IPv4 networks. Click Next to continue or click Back to return to the previous step. STEP 3: This screen provides access to NAT, Firewall and IGMP Multicast settings.
Page 127
ENABLE NAT If the LAN is configured with a private IP address, the user should select this checkbox . The NAT submenu will appear in the Advanced Setup menu after reboot. On the other hand, if a private IP address is not used on the LAN side (i.e. the LAN side is using a public IP), this checkbox ...
Page 128
Click Next to continue or click Back to return to the previous step. STEP 5: Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses must be entered.
Page 129
If IPv6 is enabled, an additional set of options will be shown. Heading Description Use Static IPv6 Address Configures static IPv6 address for the WAN connection...
Page 130
Heading Description Enable IPv6 Unnumbered Enables or disables IPv6 processing on an Model interface without assigning an explicit IPv6 address to that interface. The global IPv6 address of the interface, becomes the source address in packets that the unnumbered interface generates Launch Dhcp6c for Address Use dhcp6c to solicit address from server Assignment...
Page 131
E2.3 Bridging NOTE: This connection type is not available on the Ethernet WAN interface. STEP 1: *Select the Bridging radio button and click Next. For tagged service, enter valid 802.1P Priority and 802.1Q VLAN ID. Select TPID from the list if S-VLAN/C-VLAN is used. For untagged service, set -1 to both 802.1P Priority and 802.1Q VLAN ID.
Page 132
After clicking Apply/Save, the new service should appear on the main screen. To activate it you must reboot. Go to Management Reboot and click Reboot. NOTE: If this bridge connection is your only WAN service, the VR-3030 will be inaccessible for remote management or technical support from the WAN.
Page 133
E2.4 PPP over ATM (PPPoA) STEP 1: Click Next to continue. STEP 2: On the next screen, enter the PPP settings as provided by your ISP. Click Next to continue or click Back to return to the previous step.
Page 134
PPP SETTINGS The PPP username and password are dependent on the requirements of the ISP. The user name can be a maximum of 256 characters and the password a maximum of 32 characters in length. (Authentication Method: AUTO, PAP, CHAP, or MSCHAP.) KEEP ALIVE INTERVAL This option configures the interval between each PPP LCP request and the amount of time to wait for the PPP server to reply to the LCP request.
Page 135
DIAL ON DEMAND The VR-3030 can be configured to disconnect if there is no activity for a period of time by selecting the Dial on demand checkbox . You must also enter an inactivity timeout period in the range of 1 to 4320 minutes.
Page 136
ENABLE PPP DEBUG MODE When this option is selected, the system will put more PPP connection information into the system log. This is for debugging errors and not for normal usage. ENABLE IGMP MULTICAST Tick the checkbox to enable Internet Group Membership Protocol (IGMP) multicast.
Page 137
Click Next to continue or click Back to return to the previous step.
Page 138
STEP 5: The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them. After clicking Apply/Save, the new service should appear on the main screen. To activate it you must reboot.
Page 139
E2.5 IP over ATM (IPoA) STEP 1: Click Next to continue. STEP 2: Enter the WAN IP settings provided by your ISP. Click Next to continue. STEP 3: This screen provides access to NAT, Firewall and IGMP Multicast settings. Enable each by selecting the appropriate checkbox . Click Next to continue or click Back to return to the previous step.
Page 140
ENABLE FULLCONE NAT This option becomes available when NAT is enabled. Known as one-to-one NAT, all requests from the same internal IP address and port are mapped to the same external IP address and port. An external host can send a packet to the internal host by sending a packet to the mapped external address.
Page 141
STEP 5: Choose an interface to be the default gateway. Click Next to continue or click Back to return to the previous step. STEP 6: The WAN Setup - Summary screen shows a preview of the WAN service you have configured. Check these settings and click Apply/Save if they are correct, or click Back to modify them.
Need help?
Do you have a question about the VR-3030 and is the answer not in the manual?
Questions and answers