Draytek Vigor 3100 Series User manual

Vigor 3100 Series Router
User’s Guide
Version: 1.01
Date: 2006/3/27
Copyright 2006 All rights reserved.
This publication contains information that is protected by copyright. No part may be reproduced, transmitted,
transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright
holders. The scope of delivery and other details are subject to change without prior notice.
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP and Explorer are trademarks of Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Computer Inc.
Other products may be trademarks or registered trademarks of their respective manufacturers.

Vigor3100 Series User’s Guide
ii

Vigor3100 Series User’s Guide iii
T
Ta ab bl le e o of f C Co on nt te en nt ts s
1
Preface ...............................................................................................................1
1.1 LED Indicators and Connectors.............................................................................................. 1
1.1.1 LED Explanation............................................................................................................... 1
1.1.2 Connector Explanation .....................................................................................................2
1.2 Hardware Installation .............................................................................................................. 2
1.2.1 Chassis Connections........................................................................................................ 3
2
Configuring Basic Settings ..............................................................................5
2.1 Changing Password................................................................................................................ 5
2.2 Quick Start Wizard .................................................................................................................. 7
2.2.1 Adjusting Protocol/Encapsulation..................................................................................... 7
2.2.2 PPPoE/PPPoA.................................................................................................................. 8
2.2.3 Bridged IP......................................................................................................................... 9
2.2.4 Routed IP........................................................................................................................ 10
2.3 Selecting Correct Annex Type................................................................................................11
2.4 Online Status......................................................................................................................... 12
2.5 Saving Configuration............................................................................................................. 13
3
Advanced Web Configuration ..........................................................................15
3.1 Internet Access...................................................................................................................... 15
3.1.1 Basics of Internet Protocol (IP) Network......................................................................... 15
3.1.2 PPPoE/PPPoA................................................................................................................ 16
3.1.3 MPoA.............................................................................................................................. 18
3.1.4 Multi-PVCs...................................................................................................................... 20
3.1.5 DSL Settings................................................................................................................... 21
3.2 LAN ....................................................................................................................................... 22
3.2.1 Basics of LAN................................................................................................................. 22
3.2.2 General Setup................................................................................................................. 24
3.2.3 Static Route.................................................................................................................... 26
3.2.4 VLAN............................................................................................................................... 29
3.3 NAT ....................................................................................................................................... 31
3.3.1 Port Redirection.............................................................................................................. 31
3.3.2 DMZ Host........................................................................................................................ 33
3.3.3 Open Ports...................................................................................................................... 35
3.4 Firewall.................................................................................................................................. 37
3.4.1 Basics for Firewall........................................................................................................... 37
3.4.2 General Setup................................................................................................................. 40
3.4.3 Filter Setup ..................................................................................................................... 41

Vigor3100 Series User’s Guide
iv
3.4.4 IM Blocking ..................................................................................................................... 44
3.4.5 P2P Blocking .................................................................................................................. 44
3.4.6 DoS Defense .................................................................................................................. 45
3.4.7 URL Content Filter.......................................................................................................... 48
3.4.8 Web Content Filter.......................................................................................................... 50
3.5 Applications........................................................................................................................... 51
3.5.1 Dynamic DNS................................................................................................................. 51
3.5.2 Schedule......................................................................................................................... 53
3.5.3 RADIUS .......................................................................................................................... 54
3.5.4 UPnP............................................................................................................................... 55
3.5.5 Quality of Service............................................................................................................ 57
3.6 VPN and Remote Access...................................................................................................... 60
3.6.1 Remote Access Control.................................................................................................. 60
3.6.2 PPP General Setup ........................................................................................................ 61
3.6.3 IPSec General Setup...................................................................................................... 62
3.6.4 IPSec Peer Identity......................................................................................................... 63
3.6.5 Remote Dial-In User.......................................................................................................64
3.6.6 LAN to LAN..................................................................................................................... 67
3.6.7 Connection Management................................................................................................ 73
3.7 Certificate Management........................................................................................................ 74
3.7.1 Local Certificate.............................................................................................................. 75
3.7.2 Trusted CA Certificate ....................................................................................................76
3.8 System Maintenance............................................................................................................. 77
3.8.1 System Status................................................................................................................. 77
3.8.2 Administrator Password.................................................................................................. 78
3.8.3 Configuration Backup ..................................................................................................... 78
3.8.4 Syslog/Mail Alert............................................................................................................. 80
3.8.5 Time and Date................................................................................................................ 81
3.8.6 Management................................................................................................................... 82
3.8.7 Reboot System............................................................................................................... 83
3.8.8 Firmware Upgrade..........................................................................................................83
3.9 Diagnostics............................................................................................................................ 84
3.9.1 WAN Connection............................................................................................................84
3.9.2 Dial-out Trigger............................................................................................................... 84
3.9.3 Routing Table ................................................................................................................. 84
3.9.4 ARP Cache Table...........................................................................................................85
3.9.5 DHCP Table.................................................................................................................... 85
3.9.6 NAT Sessions Table....................................................................................................... 86
4
Application and Examples..............................................................................87
4.1 Create a LAN-to-LAN connection between remote office and headquarter......................... 87
4.2 Create a remote dial-in user connection between the teleworker and headquarter............. 94
4.3 QoS Setting Example............................................................................................................ 98
4.4 LAN – Created by Using NAT ............................................................................................... 99
4-5 LAN – Created by using A Public Subnet ........................................................................... 102
4.6 Request a certificate from a CA server on Windows CA Server......................................... 103
4.7 Request a CA Certificate and Set as Trusted on Windows CA Server............................... 106

Vigor3100 Series User’s Guide v
5
Trouble Shooting...........................................................................................109
5.1 Checking If the Hardware Status Is OK or Not.................................................................... 109
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 109
5.3 Pinging the Router from Your Computer..............................................................................112
5.4 Checking If the ISP Settings are OK or Not.........................................................................113
5.5 Backing to Factory Default Setting If Necessary .................................................................114
5.6 Contacting Your Dealer........................................................................................................115

Vigor3100 Series User’s Guide 1
1
P Pr re ef fa ac ce e
Targeting requirement for residential, SOHO (Small Office and Home Office) and business
users, the Vigor3100 series are G.SHDSL enabled integrated access device. G.SHDSL is
going to be a prevailing standard for business and residential SDSL (Symmetrical DSL) in the
rapidly growing worldwide marketplace. It offers data at 192Kbps to 2.3Mbps over a single
pair. The Vigor3100 series provide exceptional bandwidth* for Internet access. (* The
available bandwidth also depends on the Internet Service Provider)
Embedded with sophistic VPN firewall security features, the Vigor3100 series provides 32
dedicated virtual private data networks tunneling through public Internet. Powered by
hardware-based DES/3DES engine, all the information transmitted is well encrypted, hence
against any snooping without performance degraded when VPN is enabled.
The Vigor3100 G models are embedded 802.11g compliant wireless module which provides
wireless LAN access with line rate as much as 108Mbps with Super G TM. The Vigor3100 G
models feature WPA2 (802.11i), wireless LAN isolation, and WDS (Wireless Distribution
System).
A Virtual Private Network (VPN) is an extension of a private network that encompasses links
across shared or public networks like an Intranet. A VPN enables you to send data between
two computers across a shared public Internet network in a manner that emulates the
properties of a point-to-point private link. The DrayTek Vigor3300 series VPN router supports
Internet-industry standards technology to provide customers with open, interoperable VPN
solutions such as X.509, DHCP over Internet Protocol Security (IPSec) up to 200 tunnels, and
Point-to-Point Tunneling Protocol (PPTP).
1
1. .1 1 L LE ED D I In nd di ic ca at to or rs s a an nd d C Co on nn ne ec ct to or rs s
The displays of LED indicators and connectors for the routers are different slightly.
For Vigor3100G
For Vigor3300
1
1. .1 1. .1 1 L LE ED D E Ex xp pl la an na at ti io on n
LED Status Explanation
ACT
(Activity) Blinking The router is powered on and running properly.
VPN On The VPN tunnel is launched.
QoS On The QoS function is active.
Printer On The USB interface printer is ready.

Vigor3100 Series User’s Guide
2
On The wireless LAN function is enabled.WLAN Blinking Ethernet packets are transmitting over wireless
LAN.
DSL On The G.SHDSL line is connected.
LNK Blinking It means that Ethernet packets are transmitting.
On It means that a normal 100Mbps connection is
through its corresponding port.
100
Off It means that a normal 10Mbps connection is
through its corresponding port.
On It means a full duplex connection.
Off It means a half duplex connection.
LAN
(1, 2, 3, 4)
FDX
Blinking It means that a packet collision happens.
1
1. .1 1. .2 2 C Co on nn ne ec ct to or r E Ex xp pl la an na at ti io on n
Interface Description
RST
(Factory Reset) Restore the default settings. Usage: Turn on the router (ACT LED is blinking). Press the hole and
keep for more than 5 seconds. When you see the ACT LED begins to
blink rapidly than usual, release the button. Then the router will restart
with the factory default configuration.
DSL Connect the G.SHDSL line to access the Internet.
LAN (1,2,3,4) Connect to the local networked devices.
PRN (Printer) Connect to the USB printer.
1
1. .2 2 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
Before starting to configure the router, you have to connect your devices correctly.
1. Connect the DSL port of the router to the wall outlet with a RJ-11 to RJ-45 (or RJ-45 to
RJ-45) cable.
2. Connect one port of 4-port switch to your computer with a RJ-45 cable.
3. Connect one end of the power cord to the power port of the router. Connect the other end
to the wall outlet of electricity.
4. Connect detachable antennas to the router for Vigor3100G.
5. Power on the router.
6. Check the ACT and WAN, LAN LEDs to assure network connections.
(For the detailed information of LED status, please refer to section 1.1.)

Vigor3100 Series User’s Guide 3
1
1. .2 2. .1 1 C Ch ha as ss si is s C Co on nn ne ec ct ti io on ns s
The Vigor3100 series can be mounted on a rack by using standard brackets in a 19-inch rack
or optional larger brackets on 23-inch rack (not included). The bracket for the racks are shown
below.

Vigor3100 Series User’s Guide
4
Use brackets to set the Vigor router on the rack as shown below.
After the bracket installation, the Vigor3100 chassis can be installed in a rack by using four
screws for each side of the rack.

Vigor3100 Series User’s Guide 5
2
C Co on nf fi ig gu ur ri in ng g B Ba as si ic c S Se et tt ti in ng gs s
For use the router properly, it is necessary for you to change the password of web
configuration for security and adjust primary basic settings.
This chapter explains how to setup a password for an administrator and how to adjust basic
settings for accessing Internet successfully. Be aware that only the administrator can change
the router configuration.
2
2. .1 1 C Ch ha an ng gi in ng g P Pa as ss sw wo or rd d
To change the password for this device, you have to access into the web browse with default
password first.
1. Make sure your computer connects to the router correctly.
Notice: You may either simply set up your computer to get IP dynamically
from the router or set up the IP address of the computer to be the same
subnet as the default IP address of Vigor router 192.168.1.1. For the
detailed information, please refer to the later section - Trouble Shooting of
this guide.
2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password. Please type default values (both username and
password are Null) on the window for the first time accessing and click OK for next
screen.
3. Now, the Main Screen will pop up.

Vigor3100 Series User’s Guide
6
4. Go to System Maintenance page and choose Administrator Password.
5. Enter the login password (the default is blank) on the field of Old Password. Type a new
one in the field of New Password and retype it on the field of Confirm Password. Then
click OK to continue.
6. Now, the password has been changed. Next time, use the new password to access the
Web Configurator for this router.

Vigor3100 Series User’s Guide 7
2
2. .2 2 Q Qu ui ic ck k S St ta ar rt t W Wi iz za ar rd d
If your Vigor3100 can be under an environment with high speed NAT, the configuration
provide here can help you to deploy and use the router quickly. There are two phases of quick
setup, one is protocol/encapsulation configuration; and the other is LAN configuration.
2
2. .2 2. .1 1 A Ad dj ju us st ti in ng g P Pr ro ot to oc co ol l/ /E En nc ca ap ps su ul la at ti io on n
In the Quick Start Wizard, you can configure the router to access the Internet with different
protocol/modes such as PPPoE, PPPoA, Bridged IP, or Routed IP. The router supports the
Ethernet WAN interface for Internet access.
Now, you have to select an appropriate WAN connection type for connecting to the Internet
through this router according to the settings that your ISP provided.
VPI Stands for Virtual Path Identifier. It is an 8-bit header inside each
ATM cell that indicates where the cell should be routed. The ATM,
is a method of sending data in small packets of fixed sizes. It is
used for transferring data to client computers.
VCI Stands for Virtual Channel Identifier. It is a 16-bit field inside
ATM cell’s header that indicates the cell’s next destination as it
travels through the network. A virtual channel is a logical
connection between two end devices on the network.
Protocol/Encapsulation Select an IP mode for this WAN interface. There are several
available modes for Internet access such as PPPoE, PPPoA,
Bridged IP and Routed IP.
Fixed IP Click Yes to specify a fixed IP for the router. Otherwise, click No
(Dynamic IP) to allow the router choosing a dynamic IP. If you
choose No, the following IP Address, Subnet Mask and Default
Gateway will not be changed.
IP Address Assign a private IP address for the protocol that you select.
Subnet Mask Assign a subnet mask value for the protocol of Routed IP and
Bridged IP.
Default Gateway Assign a private IP address to the gateway for the protocol of
Routed IP and Bridged IP.

Vigor3100 Series User’s Guide
8
Primary DNS Assign a private IP address to the primary DNS.
Second DNS Assign a private IP address to the secondary DNS.
2
2. .2 2. .2 2 P PP PP Po oE E/ /P PP PP Po oA A
PPPoE stands for Point-to-Point Protocol over Ethernet.It relies on two widely accepted
standards: PPP and Ethernet. It connects users through an Ethernet to the Internet with a
common broadband medium, such as a single DSL line, wireless device or cable modem. All
the users over the Ethernet can share a common connection. And the PPPoA stands for
Point-to-Point Protocol over ATM. PPPoA uses the PPP dial-up protocol with ATM as the
transport.
PPPoE or PPPoA is used for most of DSL modem users. All local users can share one PPPoE
or PPPoA connection for accessing the Internet. Your service provider will provide you
information about user name, password, and authentication mode.
If your ISP provides you the PPPoE or PPPoA connection, please select PPPoE or PPPoA
for this router. The following page will be shown:
ISP Name Assign a specific name for ISP requirement.
User Name Assign a specific valid user name provided by the ISP.
Password Assign a valid password provided by the ISP.
Confirm Password Retype the password.
Always On Check this box to allow the router connecting to Internet forever.
Idle Timeout Type in the value (unit is second) as the idle timeout of the
connection.
Click Next for viewing summary of such connection.

Vigor3100 Series User’s Guide 9
Click Finish. The online status of this protocol will be shown as below.
2
2. .2 2. .3 3 B Br ri id dg ge ed d I IP P
Click 1483 Bridged IP as the protocol. Type in all the information that your ISP provides for
this protocol.
After finishing the settings in this page, click Next to see the following page.
Click Finish. The online status of this protocol will be shown as below.

Vigor3100 Series User’s Guide
10
2
2. .2 2. .4 4 R Ro ou ut te ed d I IP P
Click 1483 Routed IP as the protocol. Type in all the information that your ISP provides for
this protocol.
After finishing the settings in this page, click Next to see the following page.

Vigor3100 Series User’s Guide 11
Click Finish. The online status of this protocol will be shown as below.
2
2. .3 3 S Se el le ec ct ti in ng g C Co or rr re ec ct t A An nn ne ex x T Ty yp pe e
After finishing Quick Start Wizard, please go to Internet Access and choose DSL Settings
for choosing correct annex type for your router.
Use the drop down list of Annex Type for choosing A or B according to the annex type of
your router. If you do not choose the correct one, you will not access into Internet. This is very
important.

Vigor3100 Series User’s Guide
12
2
2. .4 4 O On nl li in ne e S St ta at tu us s
Now, check the online status for your router. The online status shows the system status, WAN
status, ADSL Information and other status related to this router within one page. If you select
PPPoE or PPPoA as the protocol, you will find out a button of Dial PPPoE or Dial PPPoE in
the Online Status web page.
Online status for PPPoA
Online status for Routed IP
Primary DNS Displays the assigned IP address of the primary DNS.
Secondary DNS Displays the assigned IP address of the secondary DNS.
IP Address (in LAN) Displays the IP address of the LAN interface.
TX Packets Displays the total transmitted packets at the LAN interface.
RX Packets Displays the total number of received packets at the LAN interface.
GW IP Addr: Displays the assigned IP address of the default gateway.
IP Address (in WAN) Displays the IP address of the WAN interface.
TX Rate Displays the speed of transmitted packets at the WAN interface.
RX Rate Displays the speed of received packets at the WAN interface.
Up Time Displays the total system uptime of the interface.
ADSL Information Displays the firmware version of this router.

Vigor3100 Series User’s Guide 13
2
2. .5 5 S Sa av vi in ng g C Co on nf fi ig gu ur ra at ti io on n
Each time you click OK on the web page for saving the configuration, you can find messages
showing the system interaction with you.
Ready indicates the system is ready for you to input settings.
Settings Saved means your settings are saved once you click Finish or OK button.

Vigor3100 Series User’s Guide
14