Draytek Vigor3300V+ User manual

Vigor3300V+ Series User’s Guide
ii

Vigor3300V+ Series User’s Guide iii
Vigor3300 V+
Multi-WAN Security Router
User’s Guide
Version: 1.0
Date: 19/10/2009

Vigor3300V+ Series User’s Guide
iv
Copyright Information
Copyright
Declarations
Copyright 2009 All rights reserved. This publication contains information that is
protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a
retrieval system, or translated into any language without written permission from the
copyright holders.
Trademarks
The following trademarks are used in this document:
zMicrosoft is a registered trademark of Microsoft Corp.
zWindows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are
trademarks of Microsoft Corp.
zApple and Mac OS are registered trademarks of Apple Inc.
zOther products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
zRead the installation guide thoroughly before you set up the router.
zThe router is a complicated electronic unit that may be repaired only be
authorized and qualified personnel. Do not try to open or repair the router
yourself.
zDo not place the router in a damp or humid place, e.g. a bathroom.
zThe router should be used in a sheltered area, within a temperature range of +5 to
+40 Celsius.
zDo not expose the router to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
zDo not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
zKeep the package out of reach of children.
zWhen you want to dispose of the router, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the router will be free from any
defects in workmanship or materials for a period of two (2) years from the date of
purchase from the dealer. Please keep your purchase receipt in a safe place as it serves
as proof of date of purchase. During the warranty period, and upon proof of purchase,
should the product have indications of failure due to faulty workmanship and/or
materials, we will, at our discretion, repair or replace the defective products or
components, without charge for either parts or labor, to whatever extent we deem
necessary tore-store the product to proper operating condition. Any replacement will
consist of a new or re-manufactured functionally equivalent product of equal value, and
will be offered solely at our discretion. This warranty will not apply if the product is
modified, misused, tampered with, damaged by an act of God, or subjected to abnormal
working conditions. The warranty does not cover the bundled or licensed software of
other vendors. Defects which do not significantly affect the usability of the product will
not be covered by the warranty. We reserve the right to revise the manual and online
documentation and to make changes from time to time in the contents hereof without
obligation to notify any person of such revision or changes.
Be a Registered
Owner Web registration is preferred. You can register your Vigor router via
http://www.draytek.com.
Firmware & Tools
Updates Due to the continuous evolution of DrayTek technology, all routers will be regularly
upgraded. Please consult the DrayTek web site for more information on newest
firmware, tools and documents.
http://www.draytek.com

Vigor3300V+ Series User’s Guide v
European Community Declarations
Manufacturer: DrayTek Corp.
Address: No. 26, Fu Shing Road, HuKou Township, HsinChu Industrial Park, Hsin-Chu County, Taiwan
303
Product: Vigor3300V+
DrayTek Corp. declares that Vigor3300V+ of routers are in compliance with the following essential requirements
and other relevant provisions of R&TTE Directive 1999/5/EEC.
The product conforms to the requirements of Electro-Magnetic Compatibility (EMC) Directive 2004/108/EC by
complying with the requirements set forth in EN55022/Class A and EN55024/Class A.
The product conforms to the requirements of Low Voltage (LVD) Directive 2006/95/EC by complying with the
requirements set forth in EN60950-1.
Regulatory Information
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the equipment off and
on, the user is encouraged to try to correct the interference by one of the following measures:
zReorient or relocate the receiving antenna.
zIncrease the separation between the equipment and receiver.
zConnect the equipment into an outlet on a circuit different from that to which the receiver is connected.
zConsult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) This device may accept any interference received, including interference that may cause undesired operation.
Please visit http://www.draytek.com/user/AboutRegulatory.php.
This product is designed for the ISDN and POTS network throughout the EC region and Switzerland. Please see
the user manual for the applicable networks on your product.

Vigor3300V+ Series User’s Guide
vi
T
Ta ab bl le e o of f C Co on nt te en nt ts s
Chapter 1: Preface.............................................................................................................1
1.1 Web Configuration Buttons Explanation ...................................................................................... 1
1.2 LED Indicators and Connectors................................................................................................... 2
1.2.1 For Vigor3300V+ .....................................................................................................................3
1.3 Hardware Installation.................................................................................................................... 6
1.3.1 Network Connection ................................................................................................................6
1.3.2 ISDN Phone Adapter Installation.............................................................................................7
1.3.3 Rack-Mounted Installation.......................................................................................................9
Chapter 2: Configuring Basic Settings..........................................................................11
2.1 Changing Password....................................................................................................................11
2.2 Quick Setup................................................................................................................................ 13
2.2.1 Static Mode............................................................................................................................14
2.2.2 DHCP Mode...........................................................................................................................17
2.2.3 PPPoE ...............................................................................................................................18
2.2.4 PPTP ...............................................................................................................................21
Chapter 3: Applications...................................................................................................23
3.1 Application for 802.1 VLAN........................................................................................................ 23
3.1.1 Block LAN-to-LAN Communication .......................................................................................23
3.1.2 How to Check/Edit VLAN ID on Your PC? ............................................................................24
3.1.3 Four VLANs for Different Departments in A Company..........................................................30
3.1.4 Two VLANs for Different Departments in A Company ..........................................................32
3.1.5 Example for the Companies in the Same Building................................................................34
3.1.6 Example for A Company and Guest......................................................................................36
3.1.7 Example for Trunk Usage......................................................................................................38
3.2 Application for VoIP.................................................................................................................... 40
3.2.1 FXS and FXO ........................................................................................................................40
3.2.2 Practical Application of FXS card with PBX...........................................................................42
3.2.3 Practical Application of FXO card with PBX..........................................................................42
3.2.4 ISDN NT and TE....................................................................................................................43
3.2.5 Practical Application of ISDN-NT with PBX...........................................................................44
3.2.6 Practical Application of ISDN-TE with PBX...........................................................................44
3.2.7 VoIP Basic .............................................................................................................................45
3.3 VoIP and ISDN Examples ..........................................................................................................51
3.3.1 Example 1 - Basic Configuration and Registration................................................................51
3.3.2 Example 2 - Basic Configuration and Registration for ISDN.................................................56
3.3.3 Example 3 - Basic Calling Method.........................................................................................61
3.3.4 Example 4 - VoIP over VPN..................................................................................................68
3.3.5 Example 5 - Practical Application of FXS..............................................................................75
3.3.6 Example 6 - Practical Application of FXO..............................................................................77
3.3.7 Example 7: Practical Application of ISDN-NT .......................................................................80
3.3.8 Example 8: Practical Application of ISDN-TE........................................................................82
Chapter 4: Reference - Advanced Web Configuration..................................................85
4.1 System Setup............................................................................................................................. 85

Vigor3300V+ Series User’s Guide vii
4.1.1 Status ...............................................................................................................................85
4.1.2 Time ...............................................................................................................................89
4.1.3 Syslog ...............................................................................................................................90
4.1.4 Access Control.......................................................................................................................92
4.1.5 Configuration Setup...............................................................................................................93
4.1.6 Firmware Upgrade Setup ......................................................................................................94
4.1.7 Reboot ...............................................................................................................................97
4.1.8 Diagnostic Tools....................................................................................................................98
4.2 Network Setup.......................................................................................................................... 101
4.2.1 WAN .............................................................................................................................102
4.2.2 Load Balance Policy............................................................................................................109
4.2.3 Auto Load Balance ..............................................................................................................112
4.2.4 LAN .............................................................................................................................112
4.2.5 High Availability ...................................................................................................................115
4.2.6 RIP Configuration ................................................................................................................117
4.2.7 Limit Session .......................................................................................................................120
4.3 Advanced Setup....................................................................................................................... 122
4.3.1 Static Route Setup...............................................................................................................122
4.3.2 NAT Setup...........................................................................................................................123
4.3.3 RADIUS Setup.....................................................................................................................129
4.3.4 Port Block ............................................................................................................................130
4.3.5 DDNS Setup........................................................................................................................130
4.3.6 Call Schedule Setup............................................................................................................133
4.3.7 WAN Port Mirroring Setup...................................................................................................134
4.3.8 LAN Port Mirroring Setup.....................................................................................................136
4.3.9 LAN VLAN Setup.................................................................................................................136
4.3.10 SNMP .............................................................................................................................139
4.4 Firewall Setup........................................................................................................................... 142
4.4.1 IP Filter .............................................................................................................................142
4.4.2 DoS .............................................................................................................................146
4.4.3 URL Filter.............................................................................................................................148
4.4.4 Bind IP to MAC....................................................................................................................153
4.4.5 IM/P2P Blocking ..................................................................................................................154
4.5 Quality of Service Setup........................................................................................................... 155
4.5.1 Incoming/Outgoing Class Setup..........................................................................................156
4.5.2 Incoming/Outgoing Class Filter ...........................................................................................157
4.6 VPN and Remote Access Setup .............................................................................................. 159
4.6.1 IPSec .............................................................................................................................160
4.6.2 PPTP & L2TP ......................................................................................................................178
4.7 VoIP Setup ............................................................................................................................... 182
4.7.1 Protocol .............................................................................................................................182
4.7.2 Port Settings........................................................................................................................188
4.7.3 Speed Dial...........................................................................................................................196
4.7.4 Dial Plan .............................................................................................................................196
4.7.5 Miscellaneous......................................................................................................................200
4.7.6 Tone Settings.......................................................................................................................201
4.7.7 QoS .............................................................................................................................203
4.7.8 NAT Traversal......................................................................................................................204
4.7.9 Incoming Call Barring ..........................................................................................................205
4.7.10 Call History ........................................................................................................................207
4.7.11 Tone Upload......................................................................................................................208
4.7.12 Status .............................................................................................................................209
4.7.13 Config Activate...................................................................................................................210

Vigor3300V+ Series User’s Guide
viii
Chapter 5: Trouble Shooting.........................................................................................212
5.1 Checking If the Hardware Status Is OK or Not......................................................................... 212
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ...................... 213
5.3 Pinging the Router from Your Computer.................................................................................. 215
5.4 Checking If the ISP Settings are OK or Not............................................................................. 216
5.5 Backing to Factory Default Setting If Necessary...................................................................... 220
5.6 Contacting Your Dealer ............................................................................................................ 220
Appendix: Hardware Specifications.............................................................................222

Vigor3300V+ Series User’s Guide 1
C
Ch ha ap pt te er r 1 1: : P Pr re ef fa ac ce e
The Vigor3300V+ Series integrates a rich suite of functions, including NAT, firewall, VPN,
load balance, bandwidth management, and VoIP capability. These products are very suitable
for providing multi-integrated solutions to SME markets. An application scenario for the
Vigor3300 Series is depicted in the following figure, which illustrates interconnections
among branch offices through the Internet via the Vigor3300 Series routers. By combining
with an existing PABX, an Internet phone from a remote branch can also access any
extension number on a local PABX or a traditional phone via PSTN. In addition, by
combining load balancing, data security, and Internet phone features, the company can
benefit from reducing operation fees.
A Virtual Private Network (VPN) is an extension of a private network that encompasses
links across shared or public networks like an Intranet. A VPN enables you to send data
between two computers across a shared public Internet network in a manner that emulates
the properties of a point-to-point private link. The DrayTek Vigor3300 Series VPN router
supports Internet-industry standards technology to provide customers with open,
interoperable VPN solutions such as X.509, DHCP over Internet Protocol Security (IPSec)
up to 200 tunnels, and Point-to-Point Tunneling Protocol (PPTP).
Internet Telephony, also known as Voice over Internet Protocol (VoIP), is a technology that
allows you to make telephone calls using a broadband Internet connection instead of a
regular (analog) phone line. Combining a PABX with a V3300V allows you to call anyone
who has an Internet phone or a traditional telephone number – including local, long distance,
mobile, and international numbers. Internet Telephony offers features and services that are
unavailable with a traditional phone at no additional cost. Because Internet Telephony
requires strictly minimal packet delay and jitter (since voice quality is intolerant of packet
loss), the Vigor3300V integrates VoIP feature with QoS and packet loss concealment
mechanisms to effectively transport high priority voice traffic over IP with low latency.
Another feature is T.38 fax relay. By enabling and configuring fax rate on a dial peer, the
originating and the terminating V3300V can enter fax relay transfer mode. By using the T.38
function, customers can also save on fax expenses. Lastly, by enabling the load balance
feature on multiple WAN ports, lease lines can be replaced to provide a cost-effective
method for network infrastructure.
1
1. .1 1 W We eb b C Co on nf fi ig gu ur ra at ti io on n B Bu ut tt to on ns s E Ex xp pl la an na at ti io on n
Several main buttons appeared on the web pages are defined as the following:
Save and apply current settings.
Cancel current settings and recover to the previous saved settings.
Clear all the selections and parameters settings, including selection from
drop-down list. All the values must be reset with factory default settings.
Add new settings for specified item.
Edit the settings for the selected item.
Delete the selected item with the corresponding settings.

Vigor3300V+ Series User’s Guide
2
Note: For the other buttons shown on the web pages, please refer to Chapter 4 for detailed
explanation.
1
1. .2 2 L LE ED D I In nd di ic ca at to or rs s a an nd d C Co on nn ne ec ct to or rs s
Before you use the Vigor router, please get acquainted with the LED indicators and
connectors first. The displays of LED indicators and connectors for the routers are different
slightly. The following sections will introduce them respectively. If the model of router you
have does not support ISDN and/or VoIP function, simply ignore the relational description.
D
De ef fi in ni it ti io on ns s f fo or r I IS SD DN N P Po or rt ts s
Below shows the names that displayed on front panel of the device and the WEB UI of this
device.
ISDN TE (Terminal Equipment) means an interface for transmitting analog signal through
Internet between Switching and router. Such interface is also named with ISDN S0 extern in
Germany.
ISDN NT (Network Terminator) is a port that used to connect general phone. Such interface
is also named with ISDN S0 intern in Germany.
VoIP FXO (Foreign exchange office) is a port that used to connect to PSTN network.
VoIP FXS (Foreign exchange station) is a port that used to connect telephone set.

Vigor3300V+ Series User’s Guide 3
1.2.1 For Vigor3300V+
D
De es sc cr ri ip pt ti io on n f fo or r L LE ED D
LED Status Explanation
On The router is powered on.PWR (Power) Off The router is powered off.
Blinking The router is powered on and running normally.ACT (Activity) Off The router is not ready or failed.
On The WAN connection is ready.WAN Blinking It will blink while transmitting data.
On VPN tunnel is up and down.VPN Off VPN tunnel is closed.
On The Firewall function is active.
Firewall Off The Firewall function is inactive.
On The QoS function is active.QoS Off The QoS function is inactive.
On The Ethernet link is established on corresponding port.
LNK
Off No Ethernet link is established.
On It means that a normal 100 Mbps connection is through
its corresponding port.
100
Off It means that a normal 10 Mbps connection is through
its corresponding port.
On It means a full duplex connection on corresponding port.
LAN 1/2/3/4
FDX
Off It means a half duplex connection on corresponding
port.
On The Ethernet link is established.
Blinking The data transmission is done through the corresponding
port.
LNK
Off No Ethernet link is established.
On It means that a normal 100Mbps connection is through
its corresponding port.
100
Off It means that a normal 10Mbps connection is through its
corresponding port.
On It means a full duplex connection on corresponding port.
WAN/DMZ
(1, 2, 3, 4)
FDX
Off It means a half duplex connection on corresponding
port.

Vigor3300V+ Series User’s Guide
4
For the router supports functions of FXS, FXO, ISDN S0/TE, ISDN ALL TE modules that are
optional, users can purchase them and installed them into the router according to the real
requirement. The LED description for there four modules are different slightly. Please read the
following for detailed explanation.
LED Status Explanation
On It means VoIP port is connected and ready to use.
Off It means VoIP port is not connected.
FXS/FXO
Blinking It means a phone call is coming and the port is ringing.
On It means S0 port is connected and S0 mode is ready.
Off It means TE port is connected and TE mode is ready.
S0/TE
(Left LED)
Blinking No ISDN phone adapter connected.
On It means ISDN link is established.
Off It means ISDN link is off.
S0/TE
(Right LED)
Blinking It means the data and voice transmission is on-going.
ALL TE
(Left LED) On It means TE port is connected and TE mode is ready.
On It means ISDN link is established.
Off It means ISDN link is off.
ALL TE
(Right LED)
Blinking It means the data and voice transmission is on-going.

Vigor3300V+ Series User’s Guide 5
D
De es sc cr ri ip pt ti io on n f fo or r C Co on nn ne ec ct to or rs s
Interface Description
Console Provided for technician use.
LAN (P1 ~ P4) Connecter for local networked devices.
WAN/DMZ (P1 ~
P4) Connecter for remote networked devices.
FXS Connecter for telephone set.
FXO Connecter for FXS interface of PABX.
ISDN S0/TE Connecter for ISDN phone/ISDN line.
ISDN ALL TE Connecter for ISDN line.
Factory Reset button Used to restore the default settings. Turn on the router (ACT LED is
blinking). Press the hole and keep for more than 5 seconds. When you
see the ACT LED begins to blink rapidly than usual, release the
button. Then the router will restart with the factory default
configuration.
PWR Connecter for a power cord.
ON/OFF Power switch.

Vigor3300V+ Series User’s Guide
6
1
1. .3 3 H Ha ar rd dw wa ar re e I In ns st ta al ll la at ti io on n
1.3.1 Network Connection
Before starting to configure the router, you have to connect your devices correctly. In this
case, we suppose you have FXS/FXO module inserted into the router.
1. Connect the power cord to Vigor3300V+’s power port on the rear panel, and the other
side into a wall outlet.
2. Power on the device by pressing down the power switch on the rear panel. The PWR
LED should be ON.
3. The system starts to initiate. After completing the system test, the ACT LED will light
up and start blinking.
4. Connect one end of an Ethernet cable (RJ-45) to one of the LAN ports of Vigor3300.
5. Connect the other end of the cable (RJ-45) to the Ethernet port on your computer (that
device also can connect to other computers to form a small area network). The LAN
LED for that port on the front panel will light up.
6. Connect a server/modem/router (depends on your requirement) to any WAN port of
Vigor3300V+ with Ethernet cable (RJ-45). The WAN1 (to WAN4) LED will light up.
7. Connect telephone sets to the FXS ports of Vigor3300V+ with telephone lines (RJ-11
to RJ-11).
8. Connect the FXO ports to PABX with telephone lines (RJ-11 to RJ-11).
Below shows an outline of the hardware installation for your reference.
Caution: Each of the Phone ports can be connected to an analog phone only. Do not
connect the phone ports to the telephone wall jack. Such connection might damage
your router.

Vigor3300V+ Series User’s Guide 7
1.3.2 ISDN Phone Adapter Installation
I
IS SD DN N S S0 0/ /T TE E M Mo od de e
ISDN NT is always fixed to connect ISDN phone. However, ISDN S0/TE is configurable as
NT or TE mode. It can be adjusted in VoIP>> Port Settings.
Note:
When NT or TE port is dedicated with TE mode, the Green LED will flash while data
transmission.
However, if it is dedicated with NT mode, the Orange LED will light on whenit connect
to ISDN phone set.
And by using ISDN phone adapters (coming from the router package), the user can connect
several phones to the router for communication. Refer to the following figure for reference.
Note: When ISDN phone is connected, the Orange LED will light on.
When there is no ISDN phone connected, the Orange LED will flash.

Vigor3300V+ Series User’s Guide
8
I
IS SD DN N A AL LL L T TE E M Mo od de e
Such interface is used for connecting ISDN line. Each port is dedicated to TE mode only.
Therefore, you cannot use such interface to connect to any ISDN phone.
For the connection, refer to the following figure for reference.
Note: When data transmission through this interface, the Green LED will flash.

Vigor3300V+ Series User’s Guide 9
1.3.3 Rack-Mounted Installation
The Vigor3300V+ Series can be mounted on a rack by using standard brackets in a 19-inch
rack or optional larger brackets on 23-inch rack (not included). The bracket for 19- and
23-inch racks are shown below.
Attach the brackets to the chassis of a 19- or a 23-inch rack. The second bracket attaches the
other side of the chassis as above procedure.
After the bracket installation, the Vigor3300 Series chassis can be installed in a rack by using
four screws for each side of the rack.
D
De es sk kt to op p T Ty yp pe e I In ns st ta al ll la at ti io on n
Rubber pads are included with the Vigor3300V+ Series. These rubber pads improve the air
circulation and decrease unnecessary rubbing on the desktop.

Vigor3300V+ Series User’s Guide
10

Vigor3300V+ Series User’s Guide 11
C
Ch ha ap pt te er r 2 2: : C Co on nf fi ig gu ur ri in ng g B Ba as si ic c
S
Se et tt ti in ng gs s
For use the router properly, it is necessary for you to change the password of web
configuration for security and adjust primary basic settings.
This chapter explains how to setup a password for an administrator and how to adjust basic
settings for accessing Internet successfully. Be aware that only the administrator can change
the router configuration.
2
2. .1 1 C Ch ha an ng gi in ng g P Pa as ss sw wo or rd d
To change the password for this device, you have to access into the web browse with default
password first.
1. Make sure your computer connects to the router correctly.
Notice: You may either simply set up your computer to get IP
dynamically from the router or set up the IP address of the computer to be
the same subnet as the default IP address of Vigor router 192.168.1.1.
For the detailed information, please refer to the later section - Trouble
Shooting of this guide.
2. Open a web browser on your PC and type http://192.168.1.1. A pop-up window will
open to ask for username and password. Please type default values on the window for
the first time accessing. The default value for user name is draytek and the password is
1234. Next, click OK.

Vigor3300V+ Series User’s Guide
12
3. Now, the Main Screen will pop up.
.
4. Go to System page and choose Change Password.
5. Enter the login password (1234) on the field of Old Password. Type a new one in the
field of New Password and retype it on the field of Confirm Password. Then click
Apply to continue.
6. Now, the password has been changed. Next time, use the new password to access the
Web Configurator for this router.