Page 2 Vigor3900 Multi-WAN Security Appliance User’s Guide Version: 1.8 Firmware Version: V1.0.8 (For future update, please visit DrayTek website) Date: March 27, 2014 Vigor3900 Series User’s Guide...
Page 3: Copyright Information
Web registration is preferred. You can register your Vigor router via Owner http://www.draytek.com. Firmware & Tools Due to the continuous evolution of DrayTek technology, all routers will be regularly Updates upgraded. Please consult the DrayTek web site for more information on newest firmware, tools and documents.
Page 4: Regulatory Information
No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu County, Taiwan Product: Vigor3900 DrayTek Corp. declares that Vigor3900 of routers are in compliance with the following essential requirements and other relevant provisions of EC, Directive 2004/108/EC. The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by complying with the requirements set forth in EN55022/Class A and EN55024/Class A.
Page 5: Table Of Contents
3.1 How to Configure Load Balance with Multi-WAN on Vigor3900? ..........21 3.2 How to Configure OSPF?......................27 3.3 How to Configure LAN to LAN IPSec Tunnel between Vigor3900 and Other Router (Main Mode) ................................33 3.4 How to run RDP service in the browser via logging in 3900's HTTPS Server?......36 3.5 How to Configure VPN Load Balance between Vigor3900 and Other Router......
Page 6 4.9 VPN and Remote Access......................307 4.9.1 VPN Client Wizard .......................307 4.9.2 VPN Server Wizard......................313 4.9.3 Remote Access Control .......................317 4.9.4 PPP General Setup ......................318 4.9.5 IPSec General Setup ......................321 4.9.6 VPN Profiles ........................322 4.9.7 VPN Trunk Management .....................333 Vigor3900 Series User’s Guide...
Page 7 5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ...... 424 5.3 Pinging the Router from Your Computer .................. 426 5.4 Checking If the ISP Settings are OK or Not ................427 5.5 Backing to Factory Default Setting If Necessary..............428 Vigor3900 Series User’s Guide...
Page 8 5.6 Contacting Your Dealer ......................429 Appendix I Release Note ....................431 Vigor3900 Series User’s Guide viii...
Page 9: Chapter 1: Introduction
The Vigor3900 Series integrates a rich suite of functions, including NAT, firewall, VPN, load balance, and bandwidth management capability. These products are very suitable for providing multi-integrated solutions to SME markets. A Virtual Private Network (VPN) is an extension of a private network that encompasses links across shared or public networks like an Intranet.
Page 10: Web Configuration Buttons Explanation
Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed explanation. Before you use the Vigor router, please get acquainted with the LED indicators and connectors first. The displays of LED indicators and connectors for the routers are different slightly. Vigor3900 Series User’s Guide...
Page 11 The data transmission is done through the corresponding Giga port. WAN1/2/3/4 No Ethernet link is established. 1000 It means that a normal 1000Mbps connection is through its corresponding port. It means that a normal 10/100Mbps connection is through its corresponding port. Vigor3900 Series User’s Guide...
Page 12 Used to restore the default settings. Press it and keep for more than 5 seconds. When you see the ACT LED begins to blink, release the button. Then the router will restart with the factory default configuration. Connecter for a power cord. ON/OFF - Power switch. Vigor3900 Series User’s Guide...
Page 13: Hardware Installation
Connect a server/modem/router (depends on your requirement) to any WAN port of Vigor3900 with Ethernet cable (RJ-45). The WAN1 (to WAN4) LED will light up. Connect the power cord to Vigor3900’s power port on the rear panel, and the other side into a wall outlet.
Page 14: Rack-Mounted Installation
The Vigor3900 Series can be mounted on a rack by using standard brackets in a 19-inch rack or optional larger brackets on 23-inch rack (not included). The bracket for 19- and 23-inch racks are shown below. Attach the brackets to the chassis of a 19- or a 23-inch rack. The second bracket attaches the other side of the chassis as above procedure.
Page 15: Chapter 2: Initialing Settings
Open a web browser on your PC and type http://192.168.1.1. A pop-up window will open to ask for username and password. Please type default values on the window for the first time accessing. The default value for user name is admin and the password is admin. Next, click Login. Vigor3900 Series User’s Guide...
Page 16 New Password and retype it on the field of Confirm Password. Then click Apply to continue. Now, the password has been changed. Next time, use the new password to access the Web User Interface for this router. Vigor3900 Series User’s Guide...
Page 17: Quick Start Wizard
In the first page of Quick Start Wizard, please create a WAN profile. Available settings are explained as follows: Item Description Profile Use the drop down list to choose one WAN profile. IPv4 Protocol Use the drop down list to choose a connection mode for such WAN profile. Vigor3900 Series User’s Guide...
Page 18 DHCP server on the Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP address for Vigor3900 automatically. It is not necessary for you to assign any setting. (Host Name and Domain Name are required for some ISPs).
Page 19: Step 2 - Configuring The Selected Protocol
Choose the static mask from the drop down list. Gateway IP Address Type a public gateway address for such WAN profile. - click it to remove the IP address if you are not satisfied with it. Vigor3900 Series User’s Guide...
Page 20 Previous Click it to return to previous setting page. Finish Click it to finish the configuration. Cancel Click it to discard the settings configured in this page. When you finished the above settings, please click Finish. Vigor3900 Series User’s Guide...
Page 21 DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP address for Vigor3900 automatically. It is not necessary for you to assign any setting. (Host Name is required for some ISPs).
Page 22 Previous Click it to return to previous setting page. Finish Click it to finish the configuration. Cancel Click it to discard the settings configured in this page. When you finished the above settings, please click Finish. Vigor3900 Series User’s Guide...
Page 23 In this case, you can fill in this IP address in the Fixed IP field. Please contact your ISP before you want to use this function. Static – specify the IP address. DHCP - obtain the IP address automatically. Vigor3900 Series User’s Guide...
Page 24 – Click the icon to remove the selected entry. Click it to return to previous setting page. Previous Finish Click it to finish the configuration. Cancel Click it to discard the settings configured in this page. Vigor3900 Series User’s Guide...
Page 25 When you finished the above settings, please click Finish. Later, you can surf the Internet at any time. When the following screen appears, it means you have finished the Quick Start Wizard configuration. Vigor3900 Series User’s Guide...
Page 26: Register Vigor Router
Please follow the steps below to register the router. Before using such function, please register your router online first. Log into the Web User Interface of Vigor3900 and click Product Registration. A Login page will be shown on the screen. Please type the account and password that you created previously.
Page 27 When the following page appears, please type in Nick Name (for the router) and choose the right registration date from the popup calendar (it appears when you click on the box of Registration Date). After adding the basic information for the router, please click Submit. Vigor3900 Series User’s Guide...
Page 28 Now, your router information has been added to the database. Click OK to leave this web page and return to My Information web page. Take a look at the page of My Information, the new added Vigor3900 is listed under Your Device List.
Page 29: Chapter 3: Application And Tutorial
Sale's LAN will automatically failover to WAN1. Access into the Web User Interface page of Vigor router (here, we take Vigor300B as an example). Go to LAN>>General Setup to create a profile for LAN1 (192.168.1.1/24). Vigor3900 Series User’s Guide...
Page 30 Click Add to open the following page. Type the information specified for LAN1 profile, then click Apply to save the settings and exit the screen. Click Add again to create a profile for LAN2 (192.168.2.1/24). Vigor3900 Series User’s Guide...
Page 31 Type the information specified for LAN2 profile, then click Apply to save the settings and exit the screen. Open WAN >> Load Balance and click the Pool tab. Vigor3900 Series User’s Guide...
Page 32 Click Add to create a profile for Rule1 accepting the data coming from 192.168.1.0/24 which always goes Internet via WAN1 when WAN1 is up. Type the information specified for such rule. (e.g., Rule1 for Profile; 192.168.1.0 for Source IP Address; Vigor3900 Series User’s Guide...
Page 33 10. Click Add again to create a profile for Rule2 accepting 192.168.2.0/24 which always goes Internet via WAN2 when WAN2 is up. 11. After clicking Apply, the created profiles will be shown on the screen. Vigor3900 Series User’s Guide...
Page 34 Note: The priority of WAN >> Load Balance>>Rule is higher than WAN >> Default Route. Now, you have completed the configuration. Next time, when WAN1 is down, the connection for PCs behind Sale's LAN (192.168.1.1/24) will automatically failover to WAN2. Vigor3900 Series User’s Guide...
Page 35: How To Configure Ospf
It is suitable for large network and complicated data exchange. Both Vigor2960 and Vigor3900 support up to OSPF version 2(only for IPv4). The Autonomous System (AS) used in OSPF indicates the largest entity and can be divided into several areas.
Page 36 2. Next, continue to create a LAN (192.168.3.1/24) profile named lan2 with the settings shown below. 3. Open LAN >> Static Route and click the Inter-LAN Route tab to enable this profile. Vigor3900 Series User’s Guide...
Page 37 Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.) 1. Open LAN >> General Setup to create a LAN (192.168.2.1/24) profile named lan1 with the settings shown below. 2. Next, continue to create a LAN (192.168.3.2/24) profile named lan2 with the settings shown below. Vigor3900 Series User’s Guide...
Page 38 Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.) 1. Open LAN >> General Setup to create a LAN (192.168.4.1/24) profile named lan1 with the settings shown below. Vigor3900 Series User’s Guide...
Page 39 3. Open LAN >> Static Route and click the Inter-LAN Route tab to enable this profile. 4. Open LAN >> OSPF Configuration to enable this profile. Click Add to make the LAN Profiles lan2 area setting as 11 and lan1 area as 11. (As shown in the topology diagram.) Vigor3900 Series User’s Guide...
Page 40 5. After setting, check the routing information (marked with red line) which is created by OSPF. Vigor3900 Series User’s Guide...
Page 41: How To Configure Lan To Lan Ipsec Tunnel Between Vigor3900 And Other Router (Main Mode)
Here provides an example about LAN to LAN IPSec tunnel established between Vigor3900 and Vigor2710. Access into the Web User Interface of Vigor3900 and open VPN and Remote Access >> LAN to LAN Profiles to add a new VPN configuration.
Page 42 In Vigor2710, it is necessary to build two VPN connections (for two WANs) to connect with Vigor3900. Please open the Web User Interface of Vigor2710 and open VPN and Remote Access >> LAN to LAN.  First, please type the name of such VPN connection in the field of Profile Name (e.g., 3900).
Page 43 For the role of Vigor2710 is dialing-out, please skip Dial-In setting. Type the Remote Network IP and Remote Network Mask of Vigor3900 to complete configuration. Please check if the VPN connection is built successfully in both devices respectively. For Vigor3900, open VPN and Remote Access>>IPSec>>Status for viewing the result.
Page 44: How To Run Rdp Service In The Browser Via Logging In 3900'S Https Server
Microsoft Terminal Services. An easy way is provided to establish connection between the router and the RDP Server via any browser. Open the Web User Interface of Vigor3900. Enable the HTTPS service from System Maintenance >> Access Control by clicking Enable for HTTPS Allow and type 443 as the value of HTTPS Port.
Page 45 Open User Management >> User Profile to create a new profile named “7788”. Set the Password as 7788 and choose the profile of Win7 as SSL Application (RDP). Click Apply. Logout Vigor3900. Vigor3900 Series User’s Guide...
Page 46 Login Vigor3900 HTTPS Server with 7788 for both Username and Password. A screen like the following figure will appear. Simply click the SSL Application link. In the following screen, click Connect for connecting to Win7, the RDP server. Vigor3900 Series User’s Guide...
Page 47 After that, you can access into Windows 7 via a browser. Note the message below the window. In which, TLS means Transport Layer Security. Vigor3900 Series User’s Guide...
Page 48: Troubleshooting
If you have installed Java Runtime Environment edition 6 but still cannot establish the connection, please make sure you have disabled “Use TLS 1.0” in the Java Control Panel as figure shown below. Then, try to connect again. Vigor3900 Series User’s Guide...
Page 49: How To Configure Vpn Load Balance Between Vigor3900 And Other Router
Vigor3900. We will build VPN connection with load balance between Vigor3900 and two WANs of Vigor2950 respectively. Access into the Web User Interface of Vigor3900 and open VPN and Remote Access >> VPN Profiles to add new VPN profiles. Click Add.
Page 50 Create a profile for WAN 1 (named 2950WAN1). Type the settings as shown below: Vigor3900 Series User’s Guide...
Page 51 Click Apply to save the settings and exit the dialog. Create a profile for WAN 2 (named 2950WAN2). Vigor3900 Series User’s Guide...
Page 52 Balance Pool tab. Click Add to add a Load Balance Pool profile. The following window will pop up. Give a name for the profile. Click the Load Balance tab. Select the IPSec GRE profiles (e.g., 2950WAN1) set for Vigor2950 then click Apply. Vigor3900 Series User’s Guide...
Page 53 10. Enable this profile and input the following settings then click Apply. Type the local network IP address and Mask of Vigor3900 as Source IP Address and Source Mask; type the network IP and Mask of Vigor2950 as Destination IP Address &...
Page 54 In Vigor2950, it is necessary to build two VPN connections (for two WANs) to connect with Vigor3900. Please open the Web User Interface of Vigor2950 and open VPN and Remote Access >> LAN to LAN.  First, please type the name of such VPN connection in the field of Profile Name (e.g., 3900WAN1).
Page 55  Please type the network IP address and subnet of Vigor3900 in the field of Remote Network IP and Remote Network Mask. Type the network IP address and subnet of Vigor2950 in the field of Local Network IP and Local Network Mask.
Page 56 VPN profiles in Member 1 and Member 2 respectively. Then, choose Load Balance as the Active Mode. Click Add. After finished the settings for Vigor3900 and Vigor2950, please check if the VPN connection is built successfully in both devices respectively. Take Vigor3900 for an example, open VPN and Remote Access>>...
Page 57 As to Vigor2950, please open VPN and Remote Access>>Connection Management to confirm the result. Vigor3900 Series User’s Guide...
Page 58: How To Setup 50 Wans On Vigor3900
Vigor3900 has 5 physical WANs; however, it can be extended to 50 WANs at most by using VLAN Tagging technology. Below will show how to achieve 50 WANs setup by one Vigor3900 and two VigorSwitch2260s. Refer to the following application illustration: Change mode from Basic to Advance via WAN>>General Setup page.
Page 59 Click OK. Vigor3900 will ask you to re-login. Delete default wan profiles for wan3, wan4 and wan5 by selecting the wan profile then click Delete. Click Add to add new WANs. Vigor3900 Series User’s Guide...
Page 60 VLAN ID (112~ 134 and 211~ 234) by repeating step 4 ~ step 5. Setup VLAN mode as Tag VLAN. Click Add to create a New VLAN GROUP via VLAN>>TAG-based Group page. Vigor3900 Series User’s Guide...
Page 61 Port 26 must be selected as the member for each group, for it is the channel for any packets coming from Vigor3900. As to Untag, when you check Port 2 and Port 26, you have to untag Port 2; when you check Port 3 and Port 26, you have to untag Port 3;...
Page 62  While the switch receives packets from Port 1, it will add VLAN Tag 111 to the packets Then Vigor3900 wan1_1 will receive the packets. After finishing the configuration for one VigorSwitch, please set for another VigorSwitch with the same procedure. The file names shall be wan2_1~ wan2_24 and the VLAN ID shall be set as 211~ 234.
Page 63: Cvm Application - How To Manage The Cpe (Router) Through Vigor3900
To manage CPEs through Vigor3900, you have to set URL on CPE first and set username and password for Vigor3900. For this section, we use Vigor2830 series as the example. The firmware upgrade for the CPE can be done through Vigor2830 series.
Page 64 Remember the values configured in this page. Click Apply to save the settings. To manage CPEs through Vigor3900, you have to set ACS URL on CPE first and set username and password for Vigor3900. Connect one CPE (e.g., Vigor2830 series) and get ready to access into the web user interface of the CPE.
Page 65 Login the web user interface of the CPE. Open System Maintenance>>Management Setup. Check Allow management from the Internet to set management access control. Vigor3900 Series User’s Guide...
Page 66 Click Specify an IP address. Type correct WAN IP address, subnet mask and gateway IP address for your CPE. Then click OK. Note: Reboot the CPE device and re-log into Vigor3900. CPE which has registered to Vigor3900 will be captured and displayed on the page of Central VPN Management>>CPE Management.
Page 67 Return to the web user interface of Vigor3900. Open Central VPN Management>>CPE Management. Now there is one CPE managed (Vigor2830) by Vigor3900 on the page of CPE Maintenance. Vigor3900 Series User’s Guide...
Page 68: Cvm Application - How To Build The Vpn Between Remote Devices And Vigor3900
When a remote device is managed by Vigor3900 series, it is easy to build VPN between these two devices. Access into the web user interface of Vigor3900 series. Open Central VPN Management>>CPE Management. The icons displayed on the screen means the remote devices are ready for building VPN with Vigor3900.
Page 69 Or click Advanced to open the following page for specified the CPE you want. Click Connect after finished the settings. A confirmation dialog will appear. Click OK and wait for a moment. If VPN is built successfully, related information will be displayed on Connected Devices. Vigor3900 Series User’s Guide...
Page 70 VPN and Remote Access>>LAN to LAN of the remote device for viewing the detailed information. Note: The profile name is created automatically by the system. Do not modify any value in such page to avoid VPN error. Vigor3900 Series User’s Guide...
Page 71: Cvm Application - How To Upgrade Cpe Firmware Through Vigor3900
Suppose the newest firmware file is located on your PC. You can upload it from your PC to Vigor3900. Log into the web user interface of Vigor3900. Open System Maintenance>>Access Control. Check Enable for Web Allow and type the value for Web Port. Then click Apply to save the settings.
Page 72 In the File Explorer dialog, click Upload. In the Upload dialog, click the Browse.. button to find out the firmware (e.g., 2830_0508 in this case) you want to upload from PC to Vigor3900. Then, click Upload. Vigor3900 Series User’s Guide...
Page 73 When the file is uploaded successfully, later you will find the one in the File Explorer dialog. Vigor3900 Series User’s Guide...
Page 74 To create a new firmware upgrade profile, one CPE (e.g., 2830 in this case) must be managed by Vigor3900 at least. Otherwise, the profile cannot be created successfully. Open Central VPN Management>>CPE Management. Click CPE Maintenance. In the Maintenance area, click Add.
Page 75 – now). Note that a red icon, will appear during the period of firmware upgrading. And, in the web user interface of client’s CPE, the system will show you that firmware upgrade is on going. Vigor3900 Series User’s Guide...
Page 76 If [Finished] is displayed, it means the firmware upgrade of specified CPE has completed. Open Central VPN Management>>CPE Management. In the Managed Devices Status area, choose the router (representing Vigor2830) and click Detail. Check the software version field. Vigor3900 Series User’s Guide...
Page 77: How To Use High Availability For Vigor Routers
The High Availability (HA) feature in Vigor3900 can ensure the business continuity for your organization. IT staff can use HA as a simple solution for the disaster recovery. Vigor3900 utilizes the Common Address Redundancy Protocol (CARP) to avoid the system crashing which could stop the normal operation and then cause considerable lost of the entire organization.
Page 78 1. Access into the web user interface of Vigor3900. 2. Open Applications >>High Availability. 3. In the tab of High Availability Global Setup, choose Hot-Standby as Redundant Method; choose Primary as Config Synchronization Rule; type draytek as Authentication Key; choose Automatic as Advance Preemption Mode. Click Apply to save the settings.
Page 79 3. In the tab of High Availability Global Setup, choose Hot-Standby as Redundant Method; choose Secondary as Config Synchronization Rule; type the lan1 IP address configured in router A; type draytek as Authentication Key; choose Automatic as Advance Preemption Mode. Click Apply to save the settings.
Page 80 Under such construction, when Router A (defined as Master device) is powered off, Router B (defined as Slave device) will be up and take over all the jobs that Router A performs. Later, when Router A is powered on again, all the jobs will return to Router Vigor3900 Series User’s Guide...
Page 81: How To Configure Dns Inbound Load Balance On Vigor 3900
Vigor3900 can offer the mapped IP address to respond the DNS query coming from the remote end through the designate domain to reduce the loading of the network traffic. WAN1 IP Address: 1.1.1.1 WAN2 IP Address: 2.2.2.2 Inbound Load Balance allows Vigor3900 acting as a DNS Server to separate the traffic for each WAN interface according to the DNS query time.
Page 82 It means the total DNS query time will be three, one will pass through WAN1; two will pass through WAN2. Click the Detail tab and locate Additional A Record. Type “www” as the name of the Host, and type “192.168.1.10” as the IP Address. Then click Apply to save the settings. Vigor3900 Series User’s Guide...
Page 83 > www.yourdomain.com Server: [google-public-dns-a.google.com] Address: 8.8.8.8 Name: www.yourdomain.com Address: 2.2.2.2 Third DNS query > www.yourdomain.com Server: [google-public-dns-a.google.com] Address: 8.8.8.8 Name: www.yourdomain.com Address: 2.2.2.2 Note: It is recommended to clear cache before executing “nslookup” for DNS query. Vigor3900 Series User’s Guide...
Page 84 This page is left blank. Vigor3900 Series User’s Guide...
Page 85: Chapter 4: Advanced Web Configuration
When a router begins to connect to your ISP, a serial of discovery process will occur to ask for a connection. Then a session will be created. Your user ID and password is authenticated Vigor3900 Series User’s Guide...
Page 86: General Setup
When you switch the Mode setting from Advance to Basic or from Basic to Advance, the system will ask you to re-login web configuration interface to activate some parameters. Web Page in Basic Mode Web Page in Advance Mode Vigor3900 Series User’s Guide...
Page 87 Display the level of the priority for such profile. Port Display the physical WAN interface for such profile. IPv4 Protocol Type Display the IPv4 protocol selected by the profile. IPv6 Protocol Type Display the IPv6 protocol selected by the profile. Vigor3900 Series User’s Guide...
Page 88 Open WAN>>General Setup. Click the Add button to open the following dialog. Different protocol type selected will bring up different configuration web page. Available parameters are listed as follows: Item Description Profile (max Type a name (less than 7 characters) for such profile. length:7) Vigor3900 Series User’s Guide...
Page 89 There are several connection modes for you to specify for IPv4 protocol type. Each mode will bring up different web page. The DMZ protocol is available for WAN4 profile only. IPv4 Mode Determine such profile will be used for. Vigor3900 Series User’s Guide...
Page 90 If you choose Static as IPv4 protocol type, click the Static Tab to open the following page: Available parameters are listed as follows: Item Description IP Address Type the IP address specified for such profile. Subnet Mask Use the drop down list to choose the subnet mask for such profile. Vigor3900 Series User’s Guide...
Page 91 Assign an IP address or Domain name as a destination to be Detection Host detected whether the host is active (sending reply to the router) or not. If not, the connection of WAN interface will be regarded as breaking down. This function is available Vigor3900 Series User’s Guide...
Page 92 If you choose DHCP as IPv4 protocol type, click the DHCP Tab to open the following page: Available parameters are listed as follows: Item Description Host Name Type a name as the host name for identification. (Optional) Vigor3900 Series User’s Guide...
Page 93 If not, the connection of WAN interface will be regarded as breaking down. This function is available when Connection Detection Mode is set with PING or HTTP. Add – click this button to have a field for adding a new IP Vigor3900 Series User’s Guide...
Page 94 Save – click this button to save the setting. – click the icon to remove the selected entry. Apply Click it to save the configuration and exit the dialog. Cancel Click it to exit the dialog without saving the configuration. Vigor3900 Series User’s Guide...
Page 95 Detection Mode you to choose to send the request out. Connection If you choose PING/HTTP as Connection Detection Mode, Detection Host you have to specify the detection host address in this field. Use the default setting. Vigor3900 Series User’s Guide...
Page 96 It is used for local service (e.g., NTP, ping diagnostic) or used for forwarding packets to PC on LAN/VPN. Disable – Click it to disable the function of DNS specified. Add – click this button to have a field for adding a new IP Vigor3900 Series User’s Guide...
Page 97 Enable – Click it to enable the function of Always On. The router will keep network connection all the time. Disable – Click it to disable the function of Always On. Connection Select a detecting mode for this WAN interface. There are Vigor3900 Series User’s Guide...
Page 98 MAC Address.  If you choose PPP as IPv6 protocol type Simply refer to the section of “If you choose PPPoE as IPv4 protocol type, click the PPPoE Tab to open the following page” for detailed information. Vigor3900 Series User’s Guide...
Page 99 Save – click this button to save the setting. – click the icon to remove the selected entry. Apply Click it to save the configuration and exit the dialog. Cancel Click it to exit the dialog without saving the configuration. Vigor3900 Series User’s Guide...
Page 100  If you choose DHCP-IA_PD as IPv6 protocol type It is not necessary for you to configure any web page. Enter all the settings and click Apply. The new added profile will be shown as below. Vigor3900 Series User’s Guide...
Page 101 Description Display a brief explanation for such profile. Display the physical WAN interface for such profile. Port Protocol Display the protocol selected by the profile. Choose one of the USB WAN profiles and click Edit. Vigor3900 Series User’s Guide...
Page 102 Click it to restore the default settings. Click it to save and exit the dialog. Apply Cancel Click it to exit the dialog without saving anything. After finished the settings above, click the USB 3G tab to display the following page: Vigor3900 Series User’s Guide...
Page 103 Type the PPP username (optional). PPP Password Type the PPP password (optional). Default Click it to restore the default settings. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Vigor3900 Series User’s Guide...
Page 104 Delete Remove the selected WAN profile. Such function is available in Advance mode only. To delete a profile, simply select the one you want to delete and click the Delete button. Vigor3900 Series User’s Guide...
Page 105 VLAN for creating VLAN ID number bound with LAN port (802.1Q VLAN profile) first. Otherwise, no profiles will be displayed here for you to specify. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Vigor3900 Series User’s Guide...
Page 106: Default Route
Enable – Check it to let the network connection being WANs established through any active WAN interface. Disable – Check it to disable the function. Apply Click it to save the configuration. Cancel Discard current page modification. Vigor3900 Series User’s Guide...
Page 107: Load Balance
Vigor3900 supports a load balancing function. It can assign traffic with protocol type, IP address for specific host, a subnet of hosts, and port range to be allocated in WAN interface. User can assign traffic category and force it to go to dedicate network interface based on the following web page setup.
Page 108 Open WAN>>Load Balance and click the tab of Pool. Simply click the Add button to open the following dialog. Type a name (e.g., LB_1) for such profile. Available parameters are listed as follows: Item Description Profile Type the name of the profile. Vigor3900 Series User’s Guide...
Page 109 Open WAN>>Load Balance and click the tab of Pool. Simply click the Add button to open the following dialog. Type a name (e.g., FL_1) for such profile. Choose Failover as the Mode selection. Available parameters are listed as follows: Item Description Vigor3900 Series User’s Guide...
Page 110 Click Apply. A new profile will be added on the page. This page will make the packets be transmitted with user defined profiles with IP address, protocol and WAN profile that is different with default route. Simply click the Rule tab to open the following page: Vigor3900 Series User’s Guide...
Page 111 Pool/WAN Profile Display the status (enabled or disabled) of the function. Failover Status Failback Display the status (enabled or disabled) of the function. Open WAN>>Load Balance and click the tab of Rule. Simply click the Add button. Vigor3900 Series User’s Guide...
Page 112 Source IP Address - Type a WAN IP address here as the source IP address for such rule. – click the icon to clear the IP setting. Source Mask - Use the drop down list on the right to choose a suitable mask for the source. Vigor3900 Series User’s Guide...
Page 113 To have user-defined WAN profile, please refer to WAN<<General Setup for detailed information. Failover to the When the specified interface disconnects due to some reason, Default Route the router can use the default route to perform data transmission. Vigor3900 Series User’s Guide...
Page 114 Enter all the settings and click Apply. The new rule profile will be added on the screen. Vigor3900 can offer the mapped IP address to respond the DNS query coming from the remote end through the designate domain to reduce the loading of the network traffic.
Page 115 Display the weight(s) that WAN interface(s) used. Weight Display the WAN interfaces used by the IP alias. Alias Interface Display the alias IP settings used by the profile. Display the weight that the above IP address used. Alias Weight Vigor3900 Series User’s Guide...
Page 116 It is available only when Failover is selected as the Mode. There are five levels (Top, 2, 3, 4 and 5) which can be specified for WAN profiles (including default WAN profiles and user-defined WAN profiles). Vigor3900 Series User’s Guide...
Page 117 (for Alias From Wan Interface) or type an IP address manually (for Alias From Manual Input). Weight –Use the drop down list to choose the one you want. – click the icon to remove the selected entry. Vigor3900 Series User’s Guide...
Page 118 DNS query forwarded by HOST. IP Address – This is optional. If required, simply type the IP address of the NS record server. – click the icon to remove the selected entry. Vigor3900 Series User’s Guide...
Page 119 Any query concerning of Host will be forwarded to the server selected in Reference for advanced process. – Click the icon to remove the selected entry. Click Apply. A new profile will be added on the page. Vigor3900 Series User’s Guide...
Page 120 A sub-domain setting page will appear for you to add new profile. Note that the configuration is similar to the way stated on the above steps. Vigor3900 Series User’s Guide...
Page 121: Switch
Display number of the WAN interface for the packets Member tagged with such VLAN ID number to pass through. Display number of the WAN interface for the VLAN ID Untag will be untagged for packets passing through the WAN interface selected. Vigor3900 Series User’s Guide...
Page 122 Mirrored Port Select a port to make the packets passing through it monitored by the administrator. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Vigor3900 Series User’s Guide...
Page 123 Flow Control – Click Enable to enable such function. When the data cache is approaching to full load, Vigor router will pause transmitting the packets till the system is able to accept new data again. It can avoid the network traffic congestion. Vigor3900 Series User’s Guide...
Page 124 Display the duplex used (full or half) by such profile. Speed Display the transmission rate (10M, 100M, 1000M or Auto) of the date for such profile. Flow Control Display the status (enable or disable) of such function. Note Display addition information for such interface. Vigor3900 Series User’s Guide...
Page 125: Lan
This page allows you to enable the profile, give a brief explanation for such profile, specify the VLAN ID, specify MAC address, and choose protocol type for such profile. Each item will be explained as follows: Item Description Add a new LAN profile. Vigor3900 Series User’s Guide...
Page 126 Display the subnet mask for such LAN profile. DHCP Server Display the status (Enable/Disable) of the DHCP server. IPv6 Protocol Display the IPv6 protocol type for the LAN profile. Open LAN>>General Setup and click the General Setup tab. Vigor3900 Series User’s Guide...
Page 127 Address profile. Disable – Click it to type the MAC address manually for such profile. MAC Address If Default MAC address is disabled, please specify a MAC address from the drop down list for such profile. Vigor3900 Series User’s Guide...
Page 128 – click the icon to remove the selected entry. DHCP Routers In general, this box will be blank. It means Vigor3900 will be regarded as the gateway for the user. However, if you want to use other gateway, please assign the IP address in this field.
Page 129 Except Link-Local, each type requires different parameter settings. Link-Local- Link-Local address is used for communicating with neighbouring nodes on the same link. It is defined by the address prefix fe80::/10. You don't need to setup Link-Local Vigor3900 Series User’s Guide...
Page 130 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. When you finish the above settings, please click Apply to save the configuration and exit the dialog. Vigor3900 Series User’s Guide...
Page 131 Display the status of the profile. False means disabled; True means enabled. Display the LAN or WAN profile for the DHCP server. DHCP Server Location DHCP Server IP Display the IP address of DHCP server. Open LAN>>General Setup and click the DHCP Relay tab. Vigor3900 Series User’s Guide...
Page 132 Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. When you finish the above settings, please click Apply to save the configuration and exit the dialog. The LAN profile has been edited. Vigor3900 Series User’s Guide...
Page 133 To make the users in different LAN communicating with each other, please check the box to enable Inter-LAN route function. Vigor3900 Series User’s Guide...
Page 134 10 ~ 150. It is used to control the lifetime of the prefix. A lifetime of 0 indicates that the router is not a default router and should not appear on the default router list. Vigor3900 Series User’s Guide...
Page 135 Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. When you finish the above settings, please click Apply to save the configuration and exit the dialog. The LAN profile has been edited. Vigor3900 Series User’s Guide...
Page 136 Display the starting IP address of the IP address pool for DHCP server. End IP Display the ending IP address of the IP address pool for DHCP server. Display the private IP address for DNS server. Vigor3900 Series User’s Guide...
Page 137 Automatic Setting – It is not necessary to configure Start IP, End IP and DNS setting. The system will assign suitable address automatically. Manual Setting – You should type the Start IP address and End IP address manually. Vigor3900 Series User’s Guide...
Page 138 It is available when Manual Setting is selected as Mode. Set the private IP address for DNS server. If this field is blank, users on LAN will treat Vigor3900 as the DNS server. Add – Click it to add a new IP address for DNS server.
Page 139: Pppoe Server
Renew current web page. Disconnect Click it to disconnect the profile connection. Auto Refresh Specify the interval of refresh time to obtain the latest status. The information will update immediately when the Refresh button is clicked. Vigor3900 Series User’s Guide...
Page 140 Type a specific string for authentication. It causes the named service to be advertised in a Service Name tagged in the PADO ( PPPoE Active Discovery Offer ) frame. Primary DNS Type an IP address as primary DNS. Vigor3900 Series User’s Guide...
Page 141 DHCP Relay can help to forward the DHCP request to the DHCP server. Apply Click it to save and exit the dialog. Cancel Click it to discard current page modification. Vigor3900 Series User’s Guide...
Page 142: Switch
Modify the selected VLAN ID setting. Edit To edit VALN ID setting, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the Vigor3900 Series User’s Guide...
Page 143 Type the number as the VLAN ID. Type a number used for VLAN ID identification on VLAN for your computer. Later, you have to type the same ID number for each PC which wants to be grouped within the same VLAN group. Vigor3900 Series User’s Guide...
Page 144 Click it to exit the dialog without saving anything. Enter all the settings and click Apply. The new profile will be added on the screen. Vigor3900 supports port mirroring function in LAN interfaces. This mechanism helps manager track the network errors or abnormal packets transmission without interrupting the flow of data access the network.
Page 145 Check the box to enable the Mirror function for the switch. Select a port to view traffic sent from mirrored ports. Mirroring Port Select which port is necessary to be mirrored. Mirrored Port Refresh Renew current web page. Apply Click it to save the settings. Vigor3900 Series User’s Guide...
Page 146 Display the duplex used (full or half) by such profile. Duplex Display the transmission rate (10M, 100M, 1000M or Auto) Speed of the date for such profile. Flow Control Display the status (enable or disable) of such function. Vigor3900 Series User’s Guide...
Page 147 It can avoid the network traffic congestion. Note Display addition information for such interface. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Vigor3900 Series User’s Guide...
Page 148 Enter all the settings and click Apply. The profile has been edited. Vigor3900 Series User’s Guide...
Page 149: Bind Ip To Mac
IP Bind List by clicking Move on IP Bind List IP Address - Display the IP address of one device. MAC Address - Display the MAC address of the device. It allows you to add one pair of IP/MAC address and display Vigor3900 Series User’s Guide...
Page 150 Strict_Bind – Only specified IP addresses will be assigned to the device with bind MAC address. Other devices which are not listed on the Bind Table shall still NOT get the IP address from DHCP server. Vigor3900 Series User’s Guide...
Page 151 Type a brief description for such profile. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new profile has been added onto Bind Table. Vigor3900 Series User’s Guide...
Page 152: Lan Dns
LAN DNS is a simple version of DNS server. It is not necessary for the user to build another DNS server in LAN. With such feature, the user can configure some services (such as ftp, www or database) with domain name which is easy to be accessed. Vigor3900 Series User’s Guide...
Page 153 Display the domain name configured for such profile. CNAME(Alias Domain Display the alias domain name for such profile. Name) Display the IP address of the domain name. IP Address IPv6 Address Display the IPv6 address of the domain name. Vigor3900 Series User’s Guide...
Page 154 CNAME (Alias redirect both Domain name and CNAME to an assigned IP. Domain Name) For example, Domain Name is set with “www.draytek.com”, and the CNAME is set as “www.dray.com”. If the IP address is set with “192.168.1.123”, then both “www.draytek.com”...
Page 155: Routing
Simply set rules to forward data to specified subnet through the specific gateway. The router offers IPv4 and IPv6 for you to configure the static route. Both protocols bring different web pages. Vigor3900 Series User’s Guide...
Page 156 Display the subnet / LAN or WAN profile of the gateway. Metric Display the distance to the target. Open Routing>>Static Routing and click the Static Route tab. Click the Add button. The following dialog will appear. Vigor3900 Series User’s Guide...
Page 157 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all of the settings and click Apply. The new profile will be added on the screen. Vigor3900 Series User’s Guide...
Page 158 Display the prefix length of the profile. Prefix Length Nexthop Display the nexthop address for such static route profile. WAN / LAN Profile Display the subnet LAN or WAN profile of the gateway. Metric Display the distance to the target. Vigor3900 Series User’s Guide...
Page 159 Choose one of the LAN/WAN profiles of the gateway for such static route. Metric Type the distance to the target (usually counted in hops). Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Vigor3900 Series User’s Guide...
Page 160 WAN. When the local device tries to transmit the data packets out, Vigor3900 will send it out through that certain WAN interface without passing through NAT. Meanwhile, remote device also can access the local device directly without any difficulty.
Page 161 Available parameters are listed as follows: Item Description Profile Type the name of the static route profile. Enable Check this box to enable such profile. Choose one of the WAN/USB profiles of the gateway for WAN Profile such profile. Vigor3900 Series User’s Guide...
Page 162: Rip Configuration
WAN2, and C supports RIP on WAN1/WAN2/WAN3/WAN4. B will tell A "if you want to send packets to C, please send it to me first", then A will create a routing rule to forward packet that destination is C to B. Vigor3900 Series User’s Guide...
Page 163 Check the box to enable the Mirror function for the switch. Profile Choose the LAN/WAN profile(s). Apply Click it to save the settings. Cancel Click it to exit the dialog without saving anything. After finished the settings, click Apply to save them. Vigor3900 Series User’s Guide...
Page 164: Ospf Configuration
Check the box to enable the Mirror function for the switch. Profile Choose a LAN/WAN profile from the drop down list to apply for such configuration. Apply Click it to save the settings. Cancel Click it to discard the settings configured in this page. Vigor3900 Series User’s Guide...
Page 165 If you are not satisfied the settings, simply click to remove the entry, and then re-type the settings. Click Apply to save the settings and exit the dialog. A new profile is created and displayed on the screen. Vigor3900 Series User’s Guide...
Page 166: Bgp Configuration
AS numbers indicate the full paths that the route information will be taken. It can be operated by one or several ISPs and follows the routing policies made by ISP. Such page displays current neighbors status in BGP routing environment. Vigor3900 Series User’s Guide...
Page 167 Display the autonomous system number of the neighbor configured successfully in the Neighbor tab in Routing >>BGP configuration. State Display the status of neighbor profile. If it is established successfully, “Established (time)” will be shown in this field. Vigor3900 Series User’s Guide...
Page 168 Profile Number Limit - Display the total number of the profiles to be created. IP – Type the IP address. Subnet Mask – Display subnet mask for the IP address automatically. After finished the settings, click Apply to save the configuration. Vigor3900 Series User’s Guide...
Page 169 Delete button. Refresh Renew current web page. Rename Allow to modify the selected profile name. Before using such function, there is one profile existed at least. Profile Display the name of the profile. Vigor3900 Series User’s Guide...
Page 170 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all of the settings and click Apply. A new profile has been added onto Neighbor table. Vigor3900 Series User’s Guide...
Page 171: Nat
Series is NAT-enabled by default and gets one globally routable IP addresses from the ISP by Static, PPPoE, or DHCP mechanism. The Vigor3900 Series assigns private network IP addresses according to RFC-1918 protocol and translates the private network addresses to a globally routable IP address so that local hosts can communicate with the router and access the Internet.
Page 172 Display the name of the profile. Enable Display the status of the profile. False means disabled; True means enabled. WAN Profile Display the WAN interface of this profile. Use IP Alias Display the type (no, Single_Alias, All) the IP Alias used. Vigor3900 Series User’s Guide...
Page 173 Display the ending number of the public port. Private Port Display the number of the private port. Open NAT>> Port Redirection. Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Item Description Vigor3900 Series User’s Guide...
Page 174 Specify the direction for the port to be redirected. Mode Public Port Start/ It is available when Range-to-One or Range-to-Range is Public Port End selected as Port Redirection Mode. Type the starting/ending number of the public port. Vigor3900 Series User’s Guide...
Page 175 Apply Click it to save and exit the dialog. Click it to exit the dialog without saving anything. Cancel Enter all the settings and click Apply. A new profile has been added onto Port Redirection table. Vigor3900 Series User’s Guide...
Page 176: Dmz Host
Delete Remove the selected profile. To delete a profile, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Rename Allow to modify the selected profile name. Vigor3900 Series User’s Guide...
Page 177 Display the selected WAN IP address if Use IP Alias is enabled. DMZ Host IP Display the IP address of the DMZ host. Allow DMZ Host to Display if such function is enabled or disabled. Access Network Open NAT>> DMZ Host. Simply click the Add button. Vigor3900 Series User’s Guide...
Page 178 Use the drop down list to choose the IP group profile(s) to apply to such profile. Allowed Service This is an optional setting. Type Use the drop down list to choose the type(s) to apply to such profile. Apply Click it to save and exit the dialog. Vigor3900 Series User’s Guide...
Page 179 Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new profile has been added onto DMZ Host table. Vigor3900 Series User’s Guide...
Page 180: Address Mapping
Change the order of selected profile by moving it down. Move Down Rename Allow to modify the selected profile name. Profile Display the name of the profile. Enable Display the status of the profile. False means disabled; True means enabled. Vigor3900 Series User’s Guide...
Page 181 Display if failover to the default route is enabled or disabled. Failback Display if the function of Failback is enabled or disabled. Open NAT>> Address Mapping. Simply click the Add button. The following dialog will appear. Vigor3900 Series User’s Guide...
Page 182 Use the drop down list to specify one IP group for such profile. If there is nothing to be specified, simply open Object Settings to create the one you want. Protocol Choose the protocol used for the entry. Vigor3900 Series User’s Guide...
Page 183 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new profile has been added onto Address Mapping table. Vigor3900 Series User’s Guide...
Page 184: Alg
Click it to save the settings. Click Apply to save the settings. The H.323 ALG allows incoming and outgoing VoIP calls passing through NAT. If required, check the box and click Apply to save the settings. Vigor3900 Series User’s Guide...
Page 185: Firewall
The firewall controls the allowance and denial of packets through the router. Firewall Setup in the Vigor3900 Series mainly consists of packet filtering, Denial of Service (DoS) and URL (Universal Resource Locator) content filtering facilities. These firewall filters help to protect your local network against attack from outsiders. A firewall...
Page 186 Display the description for such profile. To build an IP group containing IP filter rules, please follow the steps: Open Firewall>>Filter Setup and click the IP Filter tab. Simply click the Add button. The following dialog will appear. Vigor3900 Series User’s Guide...
Page 187 You can create filter rule by clicking on the left side of the selected IP filter group profile. A setting page will appear for you to add new IP filter rule profile. Move your mouse to click Add. Vigor3900 Series User’s Guide...
Page 188 When you choose Block_If_No_Further_Match or Next Group Pass_If_No_Further_Match as Block Action, you have to specify next IP filter group for further matching. Syslog Click Enable to make the history of firewall actions appearing on the System Maintenance >> Syslog/Mail Vigor3900 Series User’s Guide...
Page 189 Choose one or more IP object profiles from the drop down list. The selected profile will be treated as destination target. You can click to create another new IP object profile. Destination IP Group - Click the triangle icon Vigor3900 Series User’s Guide...
Page 190 Choose one or more user LDAP profiles from the drop down list. The selected profile will be treated as source target. You can click to create another new LDAP group profile. Vigor3900 Series User’s Guide...
Page 191 This page allows you to create new IPv6 filter group for your request. Each item will be explained as follows: Item Description Add a new group profile for IPv6 filter. Edit Modify the selected profile. To edit a profile, simply select the one you want to modify Vigor3900 Series User’s Guide...
Page 192 Display the total number of the profiles to be created. Group Display the name of the IP filter group profile. Enable Display the status of the profile. False means disabled; True means enabled. Comment Display the description for such profile. Vigor3900 Series User’s Guide...
Page 193 Give a brief description for the profile. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all of the settings and click Apply. A new filter group has been added. Vigor3900 Series User’s Guide...
Page 194 IP filter group profile. A setting page will appear for you to add new IP filter rule profile. Move your mouse to click Add. The following page for configuration will appear. Vigor3900 Series User’s Guide...
Page 195 Service Protocol Service Type Object –Click the triangle icon to display the profile selection box. Choose one or more service type object profiles from the drop down list. The selected profile Vigor3900 Series User’s Guide...
Page 196 Enter all of the settings and click Apply. 10. A new IPv6 filter rule has been added under the IPv6 Filter Group (named For_IPv61 in this case). Note: You can create multiple IPv6 filter rules under a certain IP Filter group. Vigor3900 Series User’s Guide...
Page 197 Display the status of the profile. False means disabled; True means enabled. Time Object If no time schedule is set, None will be shown in this field. Time Group Display the Time group profile selected for such application Vigor3900 Series User’s Guide...
Page 198 Open Firewall>>Filter Setup and click the Application Filter tab. Simply click the Add button. The following dialog will appear. Click the triangle icon to display the profile selection box (red rectangle). Available parameters are listed as follows: Vigor3900 Series User’s Guide...
Page 199 The selected IP will be filtered by the router when such application filter profile is applied. You can click to create another new IP object profile. Source IP Group - Click the triangle icon to display the Vigor3900 Series User’s Guide...
Page 200 Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new Application filter profile has been added. Vigor3900 Series User’s Guide...
Page 201 Remove the selected profile. To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Move Up Change the order of selected profile by moving it up. Vigor3900 Series User’s Guide...
Page 202 Disable – Type the message manually to display on the page that the user tries to access into the blocked web page through HTTPs. Default HTTPS WebSite The message will display on the user's browser when he/she Vigor3900 Series User’s Guide...
Page 203 Available parameters are listed as follows: Item Description Profile Type the name of the URL filter profile. Check the box to enable this profile. Enable Filter https Enable – Click it to enable the HTTPS filtering job. Vigor3900 Series User’s Guide...
Page 204 The selected profile will be treated as source target. You can click to create another new LDAP group profile. File Extension Accept / File Extension Block - Click the Action Policy Vigor3900 Series User’s Guide...
Page 205 Click it to save and exit the dialog. Apply Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new URL filter profile has been added. Vigor3900 Series User’s Guide...
Page 206 If no time schedule is set, None will be shown in this field. Source IP Display the IP object profile selected for each rule. QQ Account Pass Display the account name which is allowed to pass if the Vigor3900 Series User’s Guide...
Page 207 Item Description Profile Type the name of the QQ filter profile. Enable This Profile Check the box to enable this profile. Time Profile Use the drop down list to specify a time profile for such profile. Vigor3900 Series User’s Guide...
Page 208 A new QQ filter profile has been added. Default policy will be applied to all of the incoming packets, if IP Filter, Application Filter, URL/Web Category Filter and QQ Filter are not suitable for the incoming packets. Vigor3900 Series User’s Guide...
Page 209: Dos Defense
Flooding-type attacks attempt to use up all your system's resources while vulnerability attacks try to paralyze the system by offending the vulnerabilities of the protocol or operation system. Available parameters are listed as follows: Vigor3900 Series User’s Guide...
Page 210 Click Enable to block the packets attacks coming from Storm Defense unknown multicast storm. Storm Filtering Rate Type a number (1~4096, unit of 64Kpbs) as for the filtering rate. Refresh Renew current web page. Apply Click it to save the configuration. Vigor3900 Series User’s Guide...
Page 211 Click Enable to activate the UDP flood defense function. If the amount of UDP packets from the Internet exceeds the user-defined threshold value, the router will be forced to randomly discard the subsequent UDP packets within the Vigor3900 Series User’s Guide...
Page 212 Click Enable to activate the Block Unknown Protocol Protocol function. The router will block any packets with unknown protocol types. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Vigor3900 Series User’s Guide...
Page 213: Mac Block
Display the total number of the object profiles to be created. Profile Display the name of the profile. Enable Display the status of the profile. False means disabled; True means enabled. Display the MAC address for such profile. MAC Address Vigor3900 Series User’s Guide...
Page 214 Apply Click it to save and exit the dialog. Click it to exit the dialog without saving anything. Cancel Enter all the settings and click Apply. A new MAC Block profile has been created. Vigor3900 Series User’s Guide...
Page 215: Objects Setting
Vigor3900 allows users to set different filter profiles based on IP, service type, keyword, file extension, instant message application, P2P application, protocol application, web category, QQ application, time setting, SMS service, mail service and notification. These objects setting profiles can be applied in Firewall.
Page 216: Ip Object
Display the address type (single, range or subnet) for such profile. Display the IP address of the starting point for such profile. Start IP Address End IP Address Display the IP address of the ending point for such profile. Vigor3900 Series User’s Guide...
Page 217 Choose the address type (Single / Range /Subnet) for such profile. Type the IP address of the starting point for such profile. Start IP Address End IP Address Type the IP address of the ending point for such profile if Vigor3900 Series User’s Guide...
Page 218 Subnet as Address Type. Apply Click it to save and exit the dialog. Click it to exit the dialog without saving anything. Cancel Enter all the settings and click Apply. A new IP object profile has been created. Vigor3900 Series User’s Guide...
Page 219: Ip Group
Display the total number (32) of the object profiles to be created. Group Name Display the name of the object group. Description Display the description for such profile. Objects Display the object profiles grouped under such group. Vigor3900 Series User’s Guide...
Page 220 Setting>>IP Object will be seen here. To clear the selected one, click to remove current object selections. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 221: Ipv6 Object
Refresh Renew current web page. Profile Number Limit Display the total number (200) of the object profiles to be created. Profile Display the name of the object. Address Type Display the address type of the object. Vigor3900 Series User’s Guide...
Page 222 Apply Click it to save the configuration. Click it to exit the dialog without saving anything. Cancel Enter all of the settings and click Apply. A new IPv6 Object profile has been created. Vigor3900 Series User’s Guide...
Page 223: Country Object
Delete Remove the selected profile. To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Open Objects Setting>>Country Object. Simply click the Add button. Vigor3900 Series User’s Guide...
Page 224 Check the box(es) for the country/countries to be blocked by Firewall. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving anything. Enter all of the settings and click Apply. A new Country Object profile has been created. Vigor3900 Series User’s Guide...
Page 225: Service Type Object
Source Port Start Source Port End Display the ending source port for such profile. Destination Port Start Display the starting destination port for such profile. Destination Port End Display the ending destination port for such profile. Vigor3900 Series User’s Guide...
Page 226 Type a port number (0 – 65535) as the starting destination port. Destination Port It is available for TCP/UDP protocol. It can be ignored for ICMP. Type a port number (0 – 65535) as the ending destination port. Vigor3900 Series User’s Guide...
Page 227 Item Description Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving anything. Enter all the settings and click Apply. A new Service Type Object profile has been created. Vigor3900 Series User’s Guide...
Page 228: Service Type Group
Display the total number (32) of the object profiles to be created. Group Name Display the name of the service type group. Description Display the description for such profile. Objects Display the service type object profiles grouped under such group. Vigor3900 Series User’s Guide...
Page 229 To clear the selected one, click to remove current object selections. Click it to save the configuration. Apply Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 230: Keyword /Dns Object
A new Service Type Group profile has been created. Keyword can be set as a filter rule to be applied in Firewall. Vigor3900 allows users to set keyword profile with several keywords. Even, it allows users to group several keyword profiles within a keyword group.
Page 231 Save – Click it to save the setting. – click the icon to remove the selected entry. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Vigor3900 Series User’s Guide...
Page 232 To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Profile Number Limit Display the total number (100) of the object profiles to be Vigor3900 Series User’s Guide...
Page 233 Save – Click it to save the setting. – click the icon to remove the selected entry. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all of the settings and click Apply. Vigor3900 Series User’s Guide...
Page 234: File Extension Object
Edit button. The edit window will appear for you to modify the corresponding settings for the selected rule. Delete Remove the selected profile. To delete a rule, simply select the one you want to delete and click the Delete button. Vigor3900 Series User’s Guide...
Page 235 Display the selected file extension of activeX. Compression Display the selected file extension of compression. Execution Display the selected file extension of execution. Open Objects Setting>>File Extension Object. Simply click the Add button. The following dialog will appear. Vigor3900 Series User’s Guide...
Page 236 Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new File Extension Object profile has been created. Vigor3900 Series User’s Guide...
Page 237: App Object
Display the name of the IM object profile. Display the IM application specified in such profile. Display the P2P specified in such profile. Display the protocol specified in such profile. Protocol Others Display other types specified in such profile. Open Objects Setting>>APP Object. Vigor3900 Series User’s Guide...
Page 238 10. IM Application Several IM applications offered for you to choose. Check the one(s) you want to add for such profile. WebIM It lists a package of IM application based on web page. You Vigor3900 Series User’s Guide...
Page 239 Click Protocol to get the following page. Network services, e.g., DNS, FTP, HTTP, POP3, for LAN users can be blocked by Vigor3900. Common services will be listed in this function and can be selected to be blocked by the router.
Page 240: Web Category Object
If you want to purchase a formal edition, simply contact with your DrayTek dealer. powered by Commtouch. If you want to use such service (trial or formal edition), you have to perform the procedure of activation first.
Page 241 Business Display the items under certain category that you choose to block. Chatting Display the items under certain category that you choose to block. Computer Display the items under certain category that you choose to block. Vigor3900 Series User’s Guide...
Page 242 10. Child Protection The web pages which are not suitable for children will be classified into different categories. Simply check the one(s) that you don’t want the children to visit. Vigor3900 Series User’s Guide...
Page 243 Simply check the one(s) that you don’t want the user to visit. Apply Click it to save the configuration. Click it to exit the dialog without saving the configuration. Cancel Enter all the settings and click Apply. A new Web Category Object profile has been created. Vigor3900 Series User’s Guide...
Page 244 Move your mouse to the link of Activate URL and click it. The system will guide you to access into MyVigor website. After finishing the activation for the trial version of WCF, remember to purchase “Silver Card” for WCF service from your DrayTek dealer or distributor. Vigor3900 Series User’s Guide...
Page 245 Display the total number (16) of the object profiles to be created. Profile Display the name of the QQ object profile. Display the account name of the QQ object profile. Display a brief explanation of the QQ object profile. Description Vigor3900 Series User’s Guide...
Page 246: Qq Object
- Click this button to remove the selected account. Description Type a brief explanation for the QQ object profile. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 247 To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Profile Number Limit Display the total number (16) of the object profiles to be created. Group Name Display the name of the group. Vigor3900 Series User’s Guide...
Page 248: Qq Group
All the available objects that you have added on Objects Setting>>QQ Object will be seen here. To clear the selected one, click to remove current object selections. Apply Click it to save the configuration. Vigor3900 Series User’s Guide...
Page 249 Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new QQ group profile has been created. Vigor3900 Series User’s Guide...
Page 250: Time Object
Display the starting time of the time object profile. End Date Display the ending date of the time object profile. Display the ending time of the time object profile. End Time Weekdays Display the frequency of such time object profile. Vigor3900 Series User’s Guide...
Page 251 Specify the starting date of the time object profile. Start Time Specify the starting time of the time object profile. End Date Specify the ending date of the time object profile. Specify the ending time of the time object profile. End Time Vigor3900 Series User’s Guide...
Page 252 Specify which days in one week should perform the schedule. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new Time Object profile has been created. Vigor3900 Series User’s Guide...
Page 253: Time Group
Display the total number (8) of the object profiles to be created. Group Name Display the name of the group. Description Display the brief explanation for such group. Objects Display the time objects selected by such group. Vigor3900 Series User’s Guide...
Page 254 All the available time objects that you have added on Objects Setting>>Time Object will be seen here. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 255: Sms Service Object
To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Profile Number Limit Display the total number (8) of the object profiles to be created. Profile Display the name of the profile. Vigor3900 Series User’s Guide...
Page 256 Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Type a name for such SMS profile. The maximum length of the name you can set is 20 characters. Vigor3900 Series User’s Guide...
Page 257 SMS. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new SMS object profile has been created. Vigor3900 Series User’s Guide...
Page 258: Mail Service Object
Display the mail address of the sender. Display the port number used for the SMTP service. SMTP Port SMTP Server Display the IP address of the SMTP Server Enable means such profile must be authenticated by the Authentication server. Vigor3900 Series User’s Guide...
Page 259 Type a name for such SMS profile. The maximum length of the name you can set is 20 characters. Enable Check this box to enable such profile. Mail From Type the e-mail address of the sender. Vigor3900 Series User’s Guide...
Page 260 31 characters. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new mail service object profile has been created. Vigor3900 Series User’s Guide...
Page 261: Notification Object
Display if such function is enabled or disabled. VPN Reconnection Display if such function is enabled or disabled. Temperature Display if such function is enabled or disabled. Router Reboot Display if such function is enabled or disabled. Vigor3900 Series User’s Guide...
Page 262 Enable - When reconnection happened to WAN interface, WAN Reconnection the router system will send the alert message to the recipient. VPN Disconnection Enable – When disconnection happened to a VPN tunnel, the router system will send the alert message to the recipient. Vigor3900 Series User’s Guide...
Page 263: User Management
Enter all the settings and click Apply. A new notification object profile has been created. User Management can manage all the accounts (user profiles) to connect to Internet via different protocols. Below shows the menu items for User Management: Vigor3900 Series User’s Guide...
Page 264: Web Portal
Available parameters will be explained as follows: Item Description Renew current web page. Refresh Auto Refresh Specify the interval of refresh time to obtain the latest status. The information will update immediately when the Refresh button is clicked. Vigor3900 Series User’s Guide...
Page 265 Display the LDAP group used by such user. Logout/Clear It is a button which is used to disconnect the connection manually. This page configures the main settings of web portal function. Available parameters will be explained as follows: Vigor3900 Series User’s Guide...
Page 266 URL – Type the URL of specified web page for redirection. White List Select the source IP objects/groups that are ignored by web portal function. Vigor3900 Series User’s Guide...
Page 267 Internet or the desired web page through this router. That is, a company which wants to have an advertisement for its products to users can specify the URL in this page to reach its goal Vigor3900 Series User’s Guide...
Page 268 Reset the above message fields to default settings. Check the box and then press Apply. Apply Click it to save the configuration. Click it to discard the settings configured in this page. Cancel After finished the above settings, click Apply to save the configuration. Vigor3900 Series User’s Guide...
Page 269: User Profile
This function allows to configure all accounts (user profiles) in Vigor3900, including PPTP/L2TP, System user, and so on. User profile is used to configure different authorities, including web portal, VPN dial-in, PPPoE server, System Administration, etc., for different users. Each item will be explained as follows:...
Page 270 PPPoE Time Display the current PPPoE time quota usage portion for such Quota(min) user. PPPoE Traffic Display the current PPPoE traffic quota usage portion for Quota(MB) such user. Open User Management>>User Profile. Simply click the Add button. Vigor3900 Series User’s Guide...
Page 271 The user has to type the password specified here to pass the authentication. When the user passes the authentication, he/she can access Internet via this router with the limitation configured in this user profile. Vigor3900 Series User’s Guide...
Page 272 Remote clients using this profile to do PPTP/L2TP dial-in will be assigned IP addresses according to this DHCP pool. Static IP Address Type an IP address for such user profile which accesses Internet with PPTP/L2TP connection. Vigor3900 Series User’s Guide...
Page 273 It is used to set the maximum traffic (MB) for such user profile. Current Traffic Display the cumulative amount of data traffic that the user Quota (MB) used. Reset - Click it to reset the setting to default value (0). Vigor3900 Series User’s Guide...
Page 274 It is useful for administrator to edit the options of all users without opening profile one by one. You can click Apply to save the settings and apply all of the modifications to all user profiles. Vigor3900 Series User’s Guide...
Page 275 Modify PPPoE Server Check the box to configure detailed setting. Login Status Enable – Click it to enable the PPPoE authentication function all user profiles. After finished the above settings, click Apply to save the configuration. Vigor3900 Series User’s Guide...
Page 276: Usergroup
Display the total number (30) of the object profiles to be created. Usergroup Display the name of the user group. Enable Display the status of the profile. False means disabled; True means enabled. Display the user profiles under such group. Member Vigor3900 Series User’s Guide...
Page 277 Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new User Group Profile has been created. Vigor3900 Series User’s Guide...
Page 278: Guest Profile
Delete Remove the selected profile. To delete a rule, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Vigor3900 Series User’s Guide...
Page 279 The following dialog will appear. Available parameters are listed as follows: Item Description Group Type the name of such profile. Enable Check this box to enable such profile. Comment Give a brief description for the profile. Vigor3900 Series User’s Guide...
Page 280 You can create several guest names by clicking on the left side of the selected guest group profile. A setting page will appear for you to add new guest list. Move your mouse to click Add. Vigor3900 Series User’s Guide...
Page 281 The guest profile can be unlocked to be used by other users. Enter all of the settings and click Apply. 10. A new guest has been added under the Guest Group (named Carrie in this case). Vigor3900 Series User’s Guide...
Page 282 Then, the guests names generated will be: teashop_100 (starting) teashop_101 teashop_102 teashop_150 (ending) Random Password Length – Type a number to determine the length of the Settings random passwords which will be assigned to the mass guest profiles by the system. Vigor3900 Series User’s Guide...
Page 283 This function is used to export the guest profile names and random passwords. Available parameters are listed as follows: Item Description Guest Group Choose a group that you want to export the settings, including guest profile names and random passwords as a file for reference. Vigor3900 Series User’s Guide...
Page 284: Radius
Logout After(min) It means the maximum usage duration for RADIUS authentication. Click it to save the configuration. Apply Cancel Click it to discard the settings configured in this page. Vigor3900 Series User’s Guide...
Page 285: Ldap/Active Directory
Renew current web page. Profile Number Limit Display the total number (32) of the profiles to be created. Profile Display the name of the profile. Enable Display the status of the profile. False means disabled; True means enabled. Vigor3900 Series User’s Guide...
Page 286 Display the configured regular DN if Bind Type is set with Regular Mode. Display the maximum usage duration for RADIUS Logout After(min) authentication. Open User Management>>LDAP/Active Directory. Simply click the Add button. The following dialog will appear. Vigor3900 Series User’s Guide...
Page 287 Logout After(min) authentication. Apply Click it to save the configuration. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A new LADP/Active Directory Profile has been created. Vigor3900 Series User’s Guide...
Page 288: Application
Basically, Vigor routers are compatible with the DDNS services supplied by most popular DDNS service providers such as www.dyndns.org, www.no-ip.com, www.dtdns.com, www.changeip.com, www.dynamic- nameserver.com. You should visit their websites to register your own domain name for the router. Vigor3900 Series User’s Guide...
Page 289 The information will update immediately when the Refresh button is clicked. Profile Display the name of the DDNS. Display the connection status for the DDNS sever. Status Domain Name Display the domain name for the DDNS server. Vigor3900 Series User’s Guide...
Page 290 Display the domain name of such profile. Domain Name IP Source Display the interface (My WAN IP or My Internet IP) selected by such DDNS profile. Force update interval Display the interval setting to refresh the data for such profile. Vigor3900 Series User’s Guide...
Page 291 WAN interface first, then applied to other interface. Selected_wan_only – The DDNS profile will be applied to the traffic via WAN interface only. No other interface will be used. Select the service provider for the DDNS account. Service Provider Vigor3900 Series User’s Guide...
Page 292 Set the time for the router to perform auto update for DDNS interval service. Click it to save the configuration. Apply Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. The DDNS Profile has been modified. Vigor3900 Series User’s Guide...
Page 293: Gvrp
This function can define the method for the changing the VLAN information among devices. With supporting GVRP, the device can receive the VLAN information coming from other devices. Available parameters are listed as follows: Item Description Enable Check this box to enable GVRP function. Vigor3900 Series User’s Guide...
Page 294: Igmp Proxy
Use the drop down list to specify the LAN profile as the destination of data coming from WAN interface (defined in IGMP Proxy Channel). Click it to save the configuration. Apply Cancel Click it to discard the settings configured in this page. Vigor3900 Series User’s Guide...
Page 295: Upnp
After enabling UPNP service setting, an icon of IP Broadband Connection on Router on Windows XP/Network Connections will appear. The connection status and control status will be able to be activated. The NAT Traversal of UPnP enables the multimedia features of your Vigor3900 Series User’s Guide...
Page 296 Some Microsoft operating systems have found out the UPnP weaknesses and hence you need to ensure that you have applied the latest service packs and patches.  Non-privileged users can control some router functions, including removing and adding port mappings. Vigor3900 Series User’s Guide...
Page 297: High Availability
Slave (backup) device could replace the Master role to take over all jobs as soon as possible. However, once the original Master is working again, the Slave would be changed to original role to stand by. Vigor3900 Series User’s Guide...
Page 298 LAN, it routes user’s traffic while others stay in standby status. Settings under Config Synchronization Role(Hot-Standby) – Specify the Hot-Standby role for such Vigor router. Primary – It means such Vigor router is treated as the primary Vigor3900 Series User’s Guide...
Page 299 Authentication Key – Type a string as the authentication key. It is used for encrypting the HA session communication to prevent malicious attack. Advance Preemption Mode – Specify a mode for changing the Config Synchronization Role. Vigor3900 Series User’s Guide...
Page 300 WAN Connection Status Detection –Click Enable to make the router detecting WAN connection status. It is similar to "LAN Port Detection Mode" but will detect connection status of all enabled WAN profiles. If connection status of all enabled Vigor3900 Series User’s Guide...
Page 301 (router). When the primary device fails, one of the rest ones will be elected as the new master device. When the Master device fails, one of the slave devices will be chosen as the Master device to offer the network service for the connected PCs. Vigor3900 Series User’s Guide...
Page 302 Edit button. The edit window will appear for you to modify the corresponding settings for the selected profile. Delete Remove the selected HA profile. To delete a profile, simply select the one you want to delete and click the Delete button. Vigor3900 Series User’s Guide...
Page 303 WAN_Failed) of such HA profile. Open Applications>>High Availability and click the Hot-Standby Profile Setup tab. Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Type a name for such profile. Vigor3900 Series User’s Guide...
Page 304 Master will be backed up. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Enter all of the settings and click Apply. The profile has been edited. Vigor3900 Series User’s Guide...
Page 305 All the WAN interfaces can be active which provide more flexible utilization of network service. When LAN1 in Router A fails, one of the available line connections (e.g., LAN1 in Router C) will be selected to offer the network service for all the connected PCs. Vigor3900 Series User’s Guide...
Page 306 Display the virtual host ID number of the profile. Role Display the role of this profile in the corresponding HA group. HA Status Display the online status (Master, Backup, LAN_failed and WAN_Failed) of such HA profile. Vigor3900 Series User’s Guide...
Page 307 Therefore, LAN1 (Backup) of router A can be the backup of LAN1 (Master) of router B; LAN2 (Backup) of router B can the backup of LAN2 of router A(Master). Each HA LAN profile (configured under the same router) must Vigor3900 Series User’s Guide...
Page 308 Master or Backup. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Enter all of the settings and click Apply. The profile has been edited. Vigor3900 Series User’s Guide...
Page 309: Wake On Lan
LAN Profile – Use the drop down list to choose one of the LAN profiles. Click this button to wake up the selected IP. See the Wake Up following figure. The result will be shown on the box. Delete Click this button to remove all the settings. Vigor3900 Series User’s Guide...
Page 310: Sms / Mail Alert Service
Display the status of the profile. False means disabled; True means enabled. SMS Provider Display the name of the SMS provider. Recipient Display the one who will receive the SMS. Display the name of the notify profile. Notify Profile Vigor3900 Series User’s Guide...
Page 311 Such profiles can be created from Object Setting>>Notification Object. Apply Click it to save the configuration and exit the page. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 312 Display the status of the profile. False means disabled; True means enabled. Display the name of the mail profile. Mail Profile Recipient Display the one who will receive the mail alert. Notify Profile Display the name of the notify profile. Vigor3900 Series User’s Guide...
Page 313 Such profiles can be created from Object Setting>>Notification Object. Apply Click it to save the configuration and exit the page. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 314 The mail alert service profile has been modified. Vigor3900 Series User’s Guide...
Page 315: Vpn And Remote Access
Below shows the menu items for VPN and Remote Access. Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connection step by step. Vigor3900 Series User’s Guide...
Page 316 Create New VPN Profile – It allows you to create a new VPN LAN to LAN profile. Simply type the name in the field of Profile Name. The field of Profile Name is available only when you click this setting. Vigor3900 Series User’s Guide...
Page 317 Specify the type. Click Create New VPN Profile and type the name of the profile. Then, click Next. If you choose PPTP as the Type, you will get the following screen: Available parameters are listed as follows: Item Description Profile Display the name of the VPN profile. Vigor3900 Series User’s Guide...
Page 318 Available parameters are listed as follows: Item Description Profile Display the name of the VPN profile. Enable Check this box to enable such profile. WAN Profile Choose a WAN profile to be used by such profile. Vigor3900 Series User’s Guide...
Page 319 It is the timeout timer. The peer will be declared dead once DPD Timeout no acknowledge message is received after timeout value. Use the value 0 to disable this function. The recommended value is 120 seconds if enabled. Vigor3900 Series User’s Guide...
Page 320 Fill in the required information on this page and click Finish. A new profile has been created. Vigor3900 Series User’s Guide...
Page 321: Vpn Server Wizard
Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connection step by step. Open VPN and Remote Access >> VPN Server Wizard. The following dialog will appear. Available parameters are listed as follows: Item Description Vigor3900 Series User’s Guide...
Page 322 Choose a user for authentication in PPTP connection. Such profile shall be created in User Management>>User Profile previously. Otherwise, there are no selections displayed here. Local IP / Subnet Type the IP address and subnet mask of local host. Mask Vigor3900 Series User’s Guide...
Page 323 Signature. Choose PSK or RSA for such profile. Certificate Choose a local certificate from the drop down list if RSA is selected as Auth Type. Preshared Key Type a pre-shared key for authentication if PSK is selected as Auth Type. Vigor3900 Series User’s Guide...
Page 324 Fill in the required information on this page and click Finish. A pop-up window will appear. Click OK. Then, return to VPN and Remote Access>>VPN Server Wizard. The new added VPN server profile will be displayed on the screen. Vigor3900 Series User’s Guide...
Page 325: Remote Access Control
Enable SSL Tunnel Service IPSec Remote Dial-In Choose one of the services by clicking on the radio button. Service Apply Click it to save the configuration. Click it to discard the settings configured in this page. Cancel Vigor3900 Series User’s Guide...
Page 326: Ppp General Setup
CHAP protocol. MPPE Encryption Specify one of the encryptions for such server. It is available only when MS-CHAP or MS-CHAP_v2 is selected. User Authentication Set user authentication to Local server, RADIUS server or Type LDAP server. Vigor3900 Series User’s Guide...
Page 327 PPTP Acceleration Enable – Click it to make PPTP acceleration for VPN. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 328 Choose a LDAP profile for PPTP Server if LDAP is selected as user authentication type. To clear the selected one, click to remove current object selections. DHCP from Choose a LAN profile for L2TP Server if RADIUS is selected as user authentication type. Vigor3900 Series User’s Guide...
Page 329: Ipsec General Setup
(ESP), and through the use of cryptographic key management procedures and protocols. Available parameters are listed as follows: Item Description Preshared Key Specify a key for IKE authentication Confirm Pre-Shared Key- Retype the characters to confirm the pre-shared key. Vigor3900 Series User’s Guide...
Page 330: Vpn Profiles
Modify the selected profile. To edit a profile, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected Vigor3900 Series User’s Guide...
Page 331 Authentication Header (AH) and the Encapsulating Security Payload (ESP), and through the use of cryptographic key management procedures and protocols. Open VPN and Remote Access >> LAN to LAN. Simply click the Add button. Vigor3900 Series User’s Guide...
Page 332 Remote Host - Type the WAN IP address for the remote host. Remote IP / Subnet Mask - Type the LAN IP address and LAN subnet mask for the remote host. More Remote Subnet – Add more remote subnet in this Vigor3900 Series User’s Guide...
Page 333 Local Certificate - Choose a local certificate from the drop down list if RSA is selected as Auth Type. Local Peer ID –Type the ID for Vigor3900 which can be configured by the remote end. It is available for Aggressive Mode enabled only.
Page 334 Enable – Click it to enable Aggressive Mode. Disable – Click it to disable Aggressive Mode. Local Peer ID Type the ID for Vigor3900 which can be configured by the remote end. It is available only when Aggressive Mode is enabled.
Page 335 Click it to exit the page without saving the configuration. After filling the required information for Advanced, click the GRE tab to open the following page. Available parameters are listed as follows: Item Description Enable GRE Check the box to enable the function. Function Vigor3900 Series User’s Guide...
Page 336 Propose the local available algorithms to the VPN peers, and get its feedback to find a match. Authentication (Dial-Out) IKE Phase2 Propose the local available authentication schemes and Proposal (Dial-Out) encryption algorithms to the VPN peers, and get its feedback to find a match. Vigor3900 Series User’s Guide...
Page 337 Enter all the settings and click Apply. A new IPSec LAN-to-LAN profile has been created. Below will guide you to create a PPTP dial-out profile for VPN connection: Open VPN and Remote Access >> VPN Profiles. Simply click the Add button. Vigor3900 Series User’s Guide...
Page 338 Local IP/Subnet Mask - Type the IP address and subnet mask of local host. Remote IP / Subnet Mask - Type the LAN IP address and LAN subnet mask for the remote host. Route / NAT Mode - Specify the purpose for such profile. Vigor3900 Series User’s Guide...
Page 339 Enter all the settings and click Apply. A new PPTP Dial-Out profile has been created. Below will guide you to create a PPTP dial-in profile for VPN connection: Open VPN and Remote Access >>VPN Profiles. Simply click the Add button. Vigor3900 Series User’s Guide...
Page 340 Mask remote host. Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Enter all the settings and click Apply. A new PPTP Dial-In profile has been created. Vigor3900 Series User’s Guide...
Page 341: Vpn Trunk Management
Modify the selected profile. To edit a profile, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected profile. Vigor3900 Series User’s Guide...
Page 342 Display the backup interface for failover. Open VPN and Remote Access >>VPN TRUNK Management and click the Load Balance Pool tab. Simply click the Add button. The following dialog will appear. Available settings are listed below: Vigor3900 Series User’s Guide...
Page 343 Enter all the settings and click Apply. A new profile has been created. Refer to Chapter 3, How to Configure VPN Load Balance between Vigor3900 and Other Router for getting more detailed information about Load Balance application. Vigor3900 Series User’s Guide...
Page 344 Display the source IP address specified for this profile. Source Mask Display the subnet mask address specified for the source IP of this entry. Destination IP Address Display the destination IP address specified for this entry. Vigor3900 Series User’s Guide...
Page 345 Display the selection of load balance pool. Open VPN and Remote Access >>VPN TRUNK Management and click the Load Balance Rule tab. Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Item Description Vigor3900 Series User’s Guide...
Page 346 Then, such rule will be applied by the pool. Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Enter all the settings and click Apply. A new profile has been created. Vigor3900 Series User’s Guide...
Page 347: Connection Management
Display the virtual network established by such VPN profile. Up Time Display the connection time of this VPN tunnel. RX (Packets) Display the total received packets through this VPN. Display the total transmitted packets through this VPN. TX (Packets) Vigor3900 Series User’s Guide...
Page 348 This page displays the history of VPN connection. Each item will be explained as follows: Item Description Display the name of VPN profile. Action Display the connection status (UP or DOWN) of VPN profile. Display the time the VPN profile connects/disconnects. Time Vigor3900 Series User’s Guide...
Page 349: Certificate Management
Local certificate is created by the end user and must be signed by a trusted CA center. Vigor3900 can serve as a trusted CA and is called with “Root CA”. Therefore, any user can ask for certificate signed by Vigor3900.
Page 350: Local Certificate
This page allows users to generate certificate based on different work requests. Local certificate can be signed by itself or signed by a root CA (e.g., root CA on Vigor3900). Each item will be explained as follows: Item Description Upload Allow you to upload current configuration to the host as a CA certificate.
Page 351 Type the name of the local certificate. The ID type for such certificate. There are four types: ID Type Domain Name: Certificated by domain name. IP: Certificated by IP address. Email: Certificated by email address. None: Do not enter an ID value. Vigor3900 Series User’s Guide...
Page 352 Click it to create a new local certificate based on the configuration here. Cancel Click it to exit the web page without saving the configuration. Enter all the settings and click Apply. A new generated Local Certificate has been created. Vigor3900 Series User’s Guide...
Page 353: Trusted Certificate
This page allows you to build a RootCA certificate for Vigor3900. RootCA can be deleted but not edited. If you want to modify the settings for a RootCA, please delete the one and create another one by clicking Build RootCA.
Page 354 The following dialog will appear. Available parameters are listed as follows: Item Description Certificate Name Display the name of the trusted CA certificate. Organization Unit Type a description for the organization unit. Organization Type the name of the organization. Vigor3900 Series User’s Guide...
Page 355 Click it to create a new local certificate based on the configuration here. Cancel Click it to exit the web page without saving the configuration. Enter all the settings and click Apply. A new RootCA Certificate has been created. Vigor3900 Series User’s Guide...
Page 356: Remote Certificate
Vigor3900, as a Root CA, can sign any certificate coming from end users locally or remotely. The selected user-defined certificate must be uploaded to Root CA. Also, the processing result will be displayed on this page. Each item will be explained as follows:...
Page 357: Ssl Vpn
Modify the selected profile. To edit a profile, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected profile. Vigor3900 Series User’s Guide...
Page 358 Host IP Address If you type function variation as URL, you have to type corresponding IP address in this filed. Such field must match with URL setting. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 359: Ssl Application
To edit a profile, simply select the one you want to modify and click the Edit button. The edit window will appear for you to modify the corresponding settings for the selected profile. Delete Remove the selected profile. Vigor3900 Series User’s Guide...
Page 360 Specify the port used for this protocol. The default setting is 5900. Scaling Chose the percentage (100%, 80%, 60) for such application. Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Vigor3900 Series User’s Guide...
Page 361 Remove the selected profile. Delete To delete a profile, simply select the one you want to delete and click the Delete button. Refresh Renew current web page. Vigor3900 Series User’s Guide...
Page 362 Profile Type the name of the profile that you create. IP Address Type the IP address for this protocol. Port Specify the port used for this protocol. Screen Size Chose the screen size for such application. Vigor3900 Series User’s Guide...
Page 363 Apply Click it to save the configuration. Cancel Click it to exit the page without saving the configuration. Enter all the settings and click Apply. A new SSL Application profile has been created. Vigor3900 Series User’s Guide...
Page 364: Online User Status
If you have finished the configuration of SSL Web Proxy (server), users can find out corresponding settings when they access into DrayTek SSL VPN portal interface. Each item will be explained as follows: Item Description Refresh Renew current web page.
Page 365: Central Vpn Management
Vigor3900 can build virtual private network (VPN) between itself and any other TR-069 CPE by the function of central VPN management. In addition, it can be treated as a server (called CVM server) which can manage TR-069 CPE for periodical firmware upgrade, configuration backup and restoring configuration.
Page 366 Click it to save the configuration. Cancel Click it to discard the settings configured in this page. This page allows you to configure the basic settings for the VPN tunnel of Vigor3900. Available parameters are listed as follows: Item Description Choose a WAN interface profile to be used.
Page 367 IKE Phase1 Mode Choose Aggressive or Main as the IKE Phase1 Mode. Apply Click it to save the configuration. Cancel Click it to discard the settings configured in this page. Vigor3900 Series User’s Guide...
Page 368: Cpe Management
All the CPEs managed by Vigor3900 can be seen with icons from this page. This page allows you to manage the CPEs connected to Vigor3900.  Page without CPE connected  Page with CPE connected Available parameters are listed as follows:...
Page 369 Managed Devices Status This area displays icons for the CPE managed by Vigor3900. Edit – To modify the name and location of specific CPE, click the one you want and click the Edit button. A pop up window will appear. Simply change the name (for identification) and/or location manually.
Page 370 Profile – Display the name of the profile. Device – Display the name (named by Vigor3900) of the devices selected by such profile. Name – Display the name (can be modified by the administrator) of the device.
Page 371 Status – Display current status of the profile has been finished or not. Refer to sections “3.7 How to manage the CPE (router) through Vigor3900?” and “3.9 How to upgrade CPE firmware through Vigor3900?” for more detailed information. Follow the steps below to create a new maintenance profile.
Page 372 Usually, the name of the device will be assigned by Vigor3900 automatically. If you want to give a name easy for easy recognition, refer to 4.11.2.1 CPE Maintenance to specify another name for the device additionally. Display the name (can be modified by the administrator) of Name the device.
Page 373 A new maintenance profile has been created. An easy method is offered to configure VPN settings for building VPN connection between Vigor3900 (treated as VPN server) and other Vigor router (treated as CPE device, i.e., VPN client). Available parameters are listed as follows:...
Page 374 VJ Compression; then click Connect to build the VPN connection. Note: If the VPN connection has been established successfully, a new LAN to LAN profile will be created for the CPE automatically. See the following example. Vigor3900 Series User’s Guide...
Page 375 CPE from the Device drop down list. Then, click Apply to save the settings. Such profile will be applied to the device connecting to Vigor3900 with VPN. Delete – Click it to delete the profile. The VPN between the router and the client might not be guaranteed.
Page 376 To display the location of the selected CPE with a bird’s eye view, open Central VPN Management>>CPE Management and click the tab of Map. Vigor3900 Series User’s Guide...
Page 377: Log/Alert
The Log page offers brief information to identify the CPE connected to Vigor3900. The Alert page offers brief information to identify the CPE connected to Vigor3900. Vigor3900 Series User’s Guide...
Page 378: Bandwidth Management
Differentiated quality of service is therefore one of the most important issues over the Internet infrastructure. In Vigor router, DSCP (Differentiated Service Code Point) support is also taken into consideration in the design of the QoS-guaranteed control module. Vigor3900 Series User’s Guide...
Page 379: Quality Of Service
This page displays current QoS Status. This page displays current software QoS status and allows you to edit related settings, including bandwidth, queue (high, medium, normal and low) for each QoS WAN. Available parameters are listed as follows: Vigor3900 Series User’s Guide...
Page 380 Display bandwidth for the incoming data is enabled or disabled. Follow the steps below to create a new maintenance profile. Click one of the QoS WAN profiles to select the one you want to edit. Click Edit. Vigor3900 Series User’s Guide...
Page 381 Type the weight of queues in bytes, range from 0 to 1000000. Apply Click it to save and exit the dialog. Cancel Click it to exit the dialog without saving anything. Enter all of the settings and click Apply. Vigor3900 Series User’s Guide...
Page 382 Type the weight of queues in bytes, range from 0 to 1000000. Click it to save and exit the dialog. Apply Cancel Click it to exit the dialog without saving anything. Enter all of the settings and click Apply. Vigor3900 Series User’s Guide...
Page 383: Qos Rule
Local IP Object Display the source IP address for the filter. Remote IP Object Display the destination IP address for the filter. Service Type Display the service type (e.g., IKE, HTTP, AUTH and etc) for the filter. Vigor3900 Series User’s Guide...
Page 384 Open Bandwidth Management>> QoS Rule. Simply click the Add button. The following dialog will appear. Available parameters are listed as follows: Item Description Profile Type the name of the filter profile. Enable Check this box to enable such profile. Vigor3900 Series User’s Guide...
Page 385 IP objects for such rule profile. Local IP Group – Use the drop down list to choose one of the IP group for such rule profile. If you want to create a new IP object, simply click open the following dialog. Vigor3900 Series User’s Guide...
Page 386 Start IP Address - Type the IP address of the starting point for such profile.  End IP Address - Type the IP address of the ending point for such profile if you choose Range as Address Vigor3900 Series User’s Guide...
Page 387 Apply Click it to save the configuration and exit the page. Cancel Click it to exit the page without saving the configuration. Enter all the settings and click Apply. A QoS rule profiler has been created. Vigor3900 Series User’s Guide...
Page 388 Apply Click it to save and exit the dialog. Click it to discard the settings configured in this page. Cancel Vigor3900 Series User’s Guide...
Page 389: Sessions Limit
Change the order of selected profile by moving it down. Allow to modify the selected profile name. Rename Display the name of the profile. Profile Enable Display the status of the profile. False means disabled; True means enabled. Vigor3900 Series User’s Guide...
Page 390 Apply Click it to save and exit the dialog. Cancel Click it to discard the settings configured in this page. Open Bandwidth Management>> Sessions Limit. Simply click the Add button. The following dialog will appear. Vigor3900 Series User’s Guide...
Page 391 Source IP Object - Click the triangle icon to display the profile selection box. Choose one or more IP object profiles from the drop down list. The selected profile will be treated Vigor3900 Series User’s Guide...
Page 392: Bandwidth Limit
Please use Limit Bandwidth to make the bandwidth usage more efficient. In the Bandwidth Management menu, click Bandwidth Limit to open the web page. Each item will be explained as follows: Item Description Vigor3900 Series User’s Guide...
Page 393 The default limit will apply to LAN IP(s) not in the above configuration profiles Default TX Limit – Define the limitation for the speed of the upstream. Default RX Limit –Define the limitation for the speed of the upstream. Vigor3900 Series User’s Guide...
Page 394 Type the name of the profile. Enable Check this box to enable such profile. TX Limit(Kbps) Define the limitation for the speed of the upstream. If you do not set the limit in this field, the system will use the default Vigor3900 Series User’s Guide...
Page 395 Apply Click it to save the configuration and exit the dialog. Cancel Click it to exit the dialog without saving the configuration. Enter all the settings and click Apply. A bandwidth limit profile has been created. Vigor3900 Series User’s Guide...
Page 396 Vigor3900 Series User’s Guide...
Page 397: Usb Application
A USB Thermometer is now available that complements your installed DrayTek router installations that will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating. During summer in particular, it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures.
Page 398 Type the upper limit and lower limit for the system to send limit / Temperature Alert out temperature alert. Upper limit Calibration Type a value used for correcting the temperature error. Apply Click it to save the configuration and exit the dialog. Vigor3900 Series User’s Guide...
Page 399: System Maintenance
Below shows the menu items for System Maintenance. This device supports TR-069 standard. It is very convenient for an administrator to manage a Auto Configuration Server, e.g., TR-069 device through an VigorACS. Each item will be explained as follows: Vigor3900 Series User’s Guide...
Page 400 ACS Connection Status When it lights in green, it means the router has been detected and can be managed by VigorACS. Port Type the port number for Vigor3900 which will be recognized by VigorACS. Display the URL of such CPE. CPE URL Periodic Status The default setting is Enable.
Page 401: Administrator Password
Type the old password. New Password Type the new password. Confirm Password Re-type the new password for confirmation. Apply Click this button to save the configuration and exit the web page. Enter all of the settings and click Apply. Vigor3900 Series User’s Guide...
Page 402: Configuration Backup
Backup to Local File – The configuration file will be stored in local host. Backup to Remote TFTP Server – The configuration file will be stored in the remote TFTP server specified. Backup Selected Config – The configuration file will be Vigor3900 Series User’s Guide...
Page 403 Use the Browse.. button to locate the file for uploading to the router. Restore Click it to upload the selected file to the router. After finishing the restoration, the system will ask you to reboot the router. Vigor3900 Series User’s Guide...
Page 404: Syslog / Mail Alert
Save or open the Syslog file. Clear Syslog Remove all of the records. Specify the interval of refresh time to obtain the latest status. Auto Refresh The information will update immediately when the Refresh button is clicked. Vigor3900 Series User’s Guide...
Page 405 Click Enable to make the user access log recorded in the Syslog. WAN Log Click Enable to make the WAN log recorded in the Syslog. Others Log Click Enable to make other logs recorded in the Syslog. Vigor3900 Series User’s Guide...
Page 406 If you click Enable, you have to type user name and user password on the below fields. User Name Type the user name for authentication. User Password Type the password for authentication. Send A Test Mail Click it to send a test mail to the specified address. Vigor3900 Series User’s Guide...
Page 407: Time And Date
Select the time zone where the router is located. Time Zone Daylight Saving Click Enable to enable the daylight saving. Such feature is available for certain area. Apply Click this button to save the configuration and exit the web page. Vigor3900 Series User’s Guide...
Page 408: Access Control
Click Enable to allow system administrator to login from the HTTPS Allow HTTPS server and management the web page of the router. HTTPS Port Type the port number for the management through HTTPS server. Server Certificate Use the default setting. Vigor3900 Series User’s Guide...
Page 409: Snmp Setup
Click Enable to allow system administrator to ping the router from WAN interface. Block LAN Profile Choose the LAN profile(s) that the IPs controlled under such profile will be blocked by Vigor3900. Management WAN Only the interface selected here can be used to access into this router.
Page 410 23 characters. Apply Click this button to save the configuration and exit the web page. Cancel Click it to discard the settings configured in this page. Enter all of the settings and click Apply. Vigor3900 Series User’s Guide...
Page 411: Reboot System
Reboot with Customized Click it to reboot the router using the current configuration Configurations (only the configuration settings listed and selected below). If you choose this option, Select Config File will be available for you to select. Vigor3900 Series User’s Guide...
Page 412 Display the name of the schedule profile. Frequency Display the type (Once or Weekdays) of frequency selected for the profile. Start Date Display the starting date of the profile. Start Time Display the starting time of the profile. Vigor3900 Series User’s Guide...
Page 413 Specify the starting date of the schedule. Start Time Specify the starting time of the schedule. Specify the ending date of the schedule. End Date End Time Specify the ending time of the schedule. Enter all the settings and click Apply. Vigor3900 Series User’s Guide...
Page 414: Firmware Upgrade
The following web page will guide you to upgrade firmware by using such page. Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.DrayTek.com (or local DrayTek's web site) and the FTP site is ftp.DrayTek.com.
Page 415: Diagnostics
In some cases, a user may need to know some information about the router, such as static or dynamic databases, or other routing information. The Vigor3900 supports five functions, Routing Table, ARP Cache Table, DHCP Assignment Table, NAT Sessions Table and Traffic Graph for the user to review such information.
Page 416 Metric Display the distance to the target (usually counted in hops). It may be needed by routing daemons. Iface Display the direction of such route represented with LAN/WAN profile (starting from LAN/WAN profile to LAN/WAN profile). Vigor3900 Series User’s Guide...
Page 417 U (route is up) H (target is a host) G (use gateway) R (reinstate route for dynamic routing) D (dynamically installed by daemon or redirect) M (modified from routing daemon or redirect) A (installed by addrconf) Vigor3900 Series User’s Guide...
Page 418: Arp Cache Table
Remove all of the information from this page. Search Move the mouse cursor onto the box of Search. Click the mouse button and type the keyword inside the box. The system will display the records relating to the keyword. Vigor3900 Series User’s Guide...
Page 419 M means permanent entries. P means published entries. Profile Display the direction of such route represented with LAN/WAN profile (starting from LAN/WAN profile to LAN/WAN profile). User Display the identity of the user. Clear Delete the selected profile. Vigor3900 Series User’s Guide...
Page 420 PROBE - The neighbor is no longer to be reachable, and unicast Neighbor Solicitation probes are being sent to verify reachability. Vigor3900 Series User’s Guide...
Page 421: Dhcp Table
Display the IP address of the static DHCP server. Start Date Display the starting date that DHCP server is activated. Display the starting time that DHCP server is activated. Start Time End Date Display the end date that DHCP server is closed. Vigor3900 Series User’s Guide...
Page 422 Display the interface used by the DHCP server. IPv6 Address Display the IPv6 address of the static DHCP server. Display the starting time that DHCP server is activated. Start Time End Time Display the end time that DHCP server is closed. Vigor3900 Series User’s Guide...
Page 423: Nat Session Table
Display the destination IP address and port of remote host. Display the WAN IP address of the router. Protocol Display the protocol of such NAT session used. State Display the actual state of the TCP connection. Vigor3900 Series User’s Guide...
Page 424: Traffic Graph
Recent 7 Days – Display the information of CPU operation about recent 7 days. Recent 4 Weeks – Display the information of CPU operation about recent 4 weeks. Click the Memory tab. Memory There are three selections provided for you to specify. Vigor3900 Series User’s Guide...
Page 425 Recent 24 Hours – Display the information of WAN operation about recent 24 hours. Recent 7 Days – Display the information of WAN operation about recent 7 days. Recent 4 Weeks – Display the information of WAN operation about recent 4 weeks. Vigor3900 Series User’s Guide...
Page 426: Web Console
Below show a graphic for CPU: Click Diagnostics and click Web Console to pen the web page for typing commands used in console connection. A remote user can operate Vigor3900 from this web page without installing and opening other connection utility.
Page 427: Ping/Trace Route
Choose one of the LAN or WAN profile to be applied by such function. Start Click it to start the action of Ping or TraceRoute. Stop Click it to terminate the action of Ping or TraceRoute. Vigor3900 Series User’s Guide...
Page 428: Data Flow Monitor
Display the records with 1 hour/24 hours/7 days recently. 24 Hours / Recent 7 Days Auto Refresh Specify the interval of refresh time to obtain the latest status. The information will update immediately when the Refresh Vigor3900 Series User’s Guide...
Page 429: External Devices
External Devices to make detailed configuration. Each item will be explained as follows: Item Description Enable External Devices Check the box to detect the external device connected to Vigor3900. Click it to renew the web page. Refresh Vigor3900 Series User’s Guide...
Page 430: Product Registration
Note: Only DrayTek products can be detected by this function. Please refer to section 2.3 Register Vigor Router for more detailed information. Vigor3900 Series User’s Guide...
Page 431: Chapter 5: Trouble Shooting
Turn on the router. Make sure the ACT LED blink once per second and the correspondent LAN LED is bright. If not, it means that there is something wrong with the hardware status. Simply back to “1.3 Hardware Installation” to execute the hardware installation again. And then, try again. Vigor3900 Series User’s Guide...
Page 432 Go to Control Panel and then double-click on Network Connections. Right-click on Local Area Connection and click on Properties. Select Internet Protocol (TCP/IP) and then click Properties. Vigor3900 Series User’s Guide...
Page 433 Select Obtain an IP address automatically and Obtain DNS server address automatically. Double click on the current used Mac OS on the desktop. Open the Application folder and get into Network. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor3900 Series User’s Guide...
Page 434: Pinging The Router From Your Computer
Open the Application folder and get into Utilities. Double click Terminal. The Terminal window will appear. Type ping 192.168.1.1 and press [Enter]. If the link is OK, the line of “64 bytes from 192.168.1.1: icmp_seq=0 ttl=255 time=xxxx ms” will appear. Vigor3900 Series User’s Guide...
Page 435: Checking If The Isp Settings Are Ok Or Not
Open Online Status to check current network status. Be careful to check if the settings coming from your ISP have been typed correctly or not. Vigor3900 Series User’s Guide...
Page 436: Backing To Factory Default Setting If Necessary
Go to System Maintenance and choose Reboot System on the web page. The following screen will appear. Choose Reboot with Factory Default Configuration and click Reboot. After few seconds, the router will return all the settings to the factory settings. Vigor3900 Series User’s Guide...
Page 437 If the router settings are correct at all, and the router still does not connect to internet, please contact your ISP technical support representative to help you for configuration. Also, if the router still cannot work correctly, please contact your dealer for help. For any further questions, please send e-mail to support@draytek.com. Vigor3900 Series User’s Guide...
Page 438 This page is left blank. Vigor3900 Series User’s Guide...
Page 439 Move IP Routing from LAN to Static Route and rename as LAN/WAN Proxy ARP.  Move Inter-LAN Route from LAN>>Static Route to LAN>>General Setup.  Move status page to the first tab of each function menu. Vigor3900 Series User’s Guide...
Page 440 Improved: Support DHCP relay settings for PPTP/L2TP/PPPoE.  Improved: Support open port to the host in remote VPN network.  Fixed: Default route cannot work well when two WAN IPs are in the same IP network. Vigor3900 Series User’s Guide...

Draytek Vigor3900 User Manual

Chapter 1: Introduction

Chapter 2: Initialing Settings

Chapter 3: Application and Tutorial

Chapter 4: Advanced Web Configuration

Chapter 5: Trouble Shooting

Quick Links

Troubleshooting

Related Manuals for Draytek Vigor3900

Summary of Contents for Draytek Vigor3900

Table of Contents