Vigor 3300 Series Multi-WAN Security Router User’s Guide Version: 3.
Copyright Information Copyright Copyright 2009 All rights reserved. This publication contains information that is Declarations protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. The scope of delivery and other details are subject to change without prior notice.
Table of Contents 1 Preface ...............................................................................................................1 1.1 LED Indicators and Connection .............................................................................................. 2 1.1.1 LED Indicators and Connectors for Vigor3300V .............................................................. 2 1.1.2 LED Indicators and Connectors for Vigor3300................................................................. 4 1.1.
3.3.6 Call Schedule Setup ....................................................................................................... 73 3.3.7 WAN Port Mirroring Setup .............................................................................................. 74 3.3.8 LAN Port Mirroring Setup................................................................................................ 76 3.3.9 LAN VLAN Setup ...................................................................................................
5.1.5 Example for the Companies in the Same Building ....................................................... 168 5.1.6 Example for A Company and Guest ............................................................................. 170 5.1.7 Example for Trunk Usage ............................................................................................. 172 5.2 Application for VoIP ............................................................................................................. 174 5.2.
1 Preface The Vigor3300 Series integrates a rich suite of functions, including NAT, firewall, VPN, load balance, bandwidth management, and VoIP capability. These products are very suitable for providing multi-integrated solutions to SME markets. An application scenario for the Vigor3300 Series is depicted in the following figure, which illustrates interconnections among branch offices through the Internet via the Vigor3300 Series routers.
effectively transport high priority voice traffic over IP with low latency. Another feature is T.38 fax relay. By enabling and configuring fax rate on a dial peer, the originating and the terminating V3300V can enter fax relay transfer mode. By using the T.38 function, customers can also save on fax expenses. Lastly, by enabling the load balance feature on multiple WAN ports, lease lines can be replaced to provide a cost-effective method for network infrastructure. 1.
LED LNK LAN (1, 2, 3, 4) 100 FDX LNK WAN/DMZ (1, 2, 3, 4) 100 FDX Status Explanation On The Ethernet link is established on corresponding port. Off No Ethernet link is established. On It means that a normal 100 Mbps connection is through its corresponding port. Off It means that a normal 10 Mbps connection is through its corresponding port. On It means a full duplex connection on corresponding port. Off It means a half duplex connection on corresponding port.
1.1.2 LED Indicators and Connectors for Vigor3300 LED Status Explanation PWR On The router is powered on. Off The router is powered off. On/Blinking The system is active. Off The system is hanged. WLAN No Reserved for future use. VPN On The VPN tunnel is launched. Off The VPN tunnel is closed. On The Attack function is active. Off The Attack function is inactive. On The QoS function is active. Off The QoS function is inactive.
LED FDX Status Explanation Off It means that a normal 10Mbps connection is through its corresponding port. On It means a full duplex connection on corresponding port. Off It means a half duplex connection on corresponding port. Interface Description Console Provided for technician use. LAN (P1 ~ P4) Connecter for local networked devices. WAN/DMZ (WAN1 ~ WAN3) Connecter for remote networked devices.
1.1.3 LED Indicators and Connectors for Vigor3300B+ LED Status Explanation PWR On The router is powered on. Off The router is powered off. On/Blinking The system is active. Off The system is hanged. On The Attack function is active. Off The Attack function is inactive. On The QoS function is active. Off The QoS function is inactive. On The Ethernet link is established on corresponding port. Off No Ethernet link is established.
LED Status Explanation Off It means a half duplex connection on corresponding port. Interface Description Console Provided for technician use. LAN (P1 ~ P4) Connecter for local networked devices. WAN1 ~ WAN3 Connecter for remote networked devices.
1.2 Hardware Installation Before starting to configure the router, you have to connect your devices correctly. 1. Connect the power cord to the power port of Vigor3300 router on the rear panel, and the other side into a wall outlet. 2. Power on the device by pressing the power switch on the rear panel. The PWR LED should be ON. 3. The system starts to initiate. After completing the system test, the ACT LED will light up and start blinking. 4.
1.2.1 Detailed Explanation for the Connector Here provides you detailed explanation for some specific connectors that you have to be familiar. The RS232 Connector The RJ45 connection jet is used for CLI commands for system configuration and control functions in the Vigor3300 Series. The jet is used for initialization of the Vigor3300 Series during preliminary installation. The “management cable”, as shown in Figure 1-5, converts the RJ45 to the RS232 interface.
X Y After the bracket installation, the Vigor3300 Series chassis can be installed in a rack by using four screws for each side of the rack. Desktop Type Installation Rubber pads are included with the Vigor3300 Series. These rubber pads improve the air circulation and decrease unnecessary rubbing on the desktop.
2 Configuring Basic Settings For use the router properly, it is necessary for you to change the password of web configuration for security and adjust primary basic settings. This chapter explains how to setup a password for an administrator and how to adjust basic settings for accessing Internet successfully. 2.1 Changing Password To change the password for this device, you have to access into the web browser with default password first. 1. Make sure your computer connects to the router correctly.
3. Now, the Main Screen will pop up. 4. Go to System page and choose Change Password. 5. The following screen will appear.
6. Enter the login password (1234) on the field of Old Password. Type a new one in the field of New Password and retype it on the field of Confirm Password. Then click Apply to continue. 7. Now, the password has been changed. Next time, use the new password to access the Web Configurator for this router. 8. Next, you will see the login screen after clicking Apply. Please use new password to re-enter the system configuration. 2.
Now, you have to select an appropriate WAN connection type for connecting to the Internet through this router according to the settings that your ISP provided. MAC Address Default MACUse the default Mac address stored originally in router. User Defined MACUse a MAC address defined by the user. Downstream Rate Assign the downstream rate for this WAN interface. The default value is 102400 kbps (100 Megabit). This setting is very important for Vigor3300 Series incoming buffer adjustment.
IP Mode Select an IP mode for this WAN interface. There are four available modes for Internet access, Static, DHCP, PPPoE, and PPTP. On this page you may configure the WAN interface to use Static (fixed IP), DHCP (dynamic IP address), PPPoE or PPTP. Most of the cable users will use the DHCP mode to get a globally reachable IP address from the cable host system. 2.2.
IP Address Assign an IP address for the LAN interface. Subnet Mask Assign the subnet mask for the LAN interface. Status Click Enable to use DHCP server; click Disable to close DHCP server; click Relay Agent to activate relay agent function. Start IP Assign the start IP address of the IP pool that DHCP server can use for clients in LAN. End IP Assign the end IP address of the IP pool that DHCP sever can use for clients in LAN. Primary DNS Type the IP address for primary DNS.
2.2.2 DHCP Mode DHCP allows a user to obtain an IP address automatically from a DHCP server on the Internet. If you choose DHCP mode, the DHCP server of your ISP will assign a dynamic IP address for Vigor3300 automatically. It is not necessary for you to assign any setting. (Host Name and Domain Name are required for some ISPs). Simply click Next to setup LAN interface. IP Address Assign an IP address for the LAN interface. Subnet Mask Assign the subnet mask for the LAN interface.
Secondary DNS Assign a private IP address to the secondary DNS. Lease Time (Min) Set a lease time for the DHCP server. The time unit is minute. Gateway IP (Optional) Set a gateway IP address for the DHCP server. Next, click DHCP Relay Agent tab to set DHCP server if required. WAN Interface Choose the WAN interface for such connection. DHCP Server IP Address Assign an IP address for the DHCP server. Next, click IP Routing tab to set routing path for each WAN interface if required.
2.2.3 PPPoE This mode is used for most of DSL modem users. All local users can share one PPPoE connection to access the Internet. Your service provider will give you the user name, password, and authentication mode for PPPoE settings. If your ISP provides you the PPPoE (Point-to-Point Protocol over Ethernet) connection, please select PPPoE for this router to get the following page. Enter the username and password provided by your ISP on the web page.
IP Address Assign an IP address for the LAN interface. Subnet Mask Assign the subnet mask for the LAN interface. Status Click Enable to use DHCP server; click Disable to close DHCP server; click Relay Agent to activate relay agent function. Start IP Assign the start IP address of the IP pool that DHCP server can use for clients in LAN. End IP Assign the end IP address of the IP pool that DHCP sever can use for clients in LAN. Primary DNS Type the IP address for primary DNS.
2.2.4 PPTP This mode lets user get the IP group information by a DSL modem with PPTP service from ISP. Your service provider will give you user name, password, and authentication mode for a PPTP setting. If your ISP offers you PPTP (Point-to-Point Tunneling Protocol) mode, please select PPTP for this router. Next, enter the PPTP Subnet Mask (e.g., 255.255.255.0), PPTP Local Address (e.g., 10.66.99.88) and PPTP Server Address (e.g., 172.66.99.88) provided by your ISP on the web page.
IP Address Assign an IP address for the LAN interface. Subnet Mask Assign the subnet mask for the LAN interface. Status Click Enable to use DHCP server; click Disable to close DHCP server; click Relay Agent to activate relay agent function. Start IP Assign the start IP address of the IP pool that DHCP server can use for clients in LAN. End IP Assign the end IP address of the IP pool that DHCP sever can use for clients in LAN. Primary DNS Type the IP address for primary DNS.
3 Advanced Configuration After finished basic configuration of the router, you can access Internet with ease. For the user who wants to adjust more setting for suiting his/her request, please refer to this chapter for getting detailed information about the advanced configuration of this router. 3.
Every 20 Seconds: Refreshes the page every 20 seconds. Every 30 Seconds: Refreshes the page every 30 seconds. Basic Status General status of this router will be displayed in this page. Model Display the model name of the router. Hardware Version Display the hardware version of the router. Firmware Version Display the firmware version of the router. Build Date&Time Display the date and time of the current firmware build. System Uptime Display the amount of time that the router has been online.
LAN Status The status of LAN connection will be displayed in this page. Simply click LAN Status tag to get the detailed. IP Address Display the IP address of the LAN interface. MAC Address Display the MAC address of the LAN Interface. High Availability Status The High Availability Status is shown when it is enabled in Network>> High Availability. When there are two Vigor3300 devices in the same LAN, one can be set as Master device and the other can be set as Slave device.
WAN Status The status of WAN interface (Static, DHCP, PPPoE, PPTP or DMZ) is shown in this page. Simply click WAN Status tag to get the detailed. There are four sets of WAN status can be shown in this page at one time. The sample below just lists one set of WAN status for only WAN1 interface is used. IP Address Display the IP address of the WAN interface. MAC Address Display the MAC address of the WAN Interface. Primary DNS Display the IP address of the primary DNS.
3.1.2 Time As an NTP (Network Time Protocol) client, the router gets standard time from the time server. Some time-based functions, such as Call Schedule and URL Content filtering, cannot work properly until the system time functions run successfully. Typically, NTP achieves high accuracy and reliability with multiple redundant servers and diverse network paths. The Vigor3300 Series supports synchronization with a specific NTP server or the remote PC host of the administrator.
3.1.3 Syslog The Vigor3300 Series supports a Syslog function to keep a record of abnormal conditions. The router will send Syslog packets to a Syslog server on the remote site. The administrator can observe any abnormal events from Vigor3300. In the System group, click the Syslog option. The Syslog web page is shown below: Disable/Enable Click Enable to activate this function. The router will send system log message for your reference.
3.1.4 Access Control This page allows you to determine which services (HTTP/Telnet/SSH) is used for the user to access Vigor3300 Series. In addition, you can also limit some hosts to access Vigor3300 Series with specified IP address. In the System group, click the Access Control option. You will get the following page: Management Method There are three management methods provided here for you to choose for your router. Check HTTP/Telnet/SSH for the router.
Disable PING from the WAN - Choose this function to reject all ICMP packets from WAN side. 3.1.5 Configuration Setup Most of the settings can be saved locally as a configuration file, and can be applied to another router. The Vigor3300 Series supports the restore and upload functions of the configuration files. In the System group, click the Configuration Setup option. And you can see the following page.
3.1.6 Firmware Upgrade Setup Vigor3300 Series allows users to upgrade firmware through a Web interface. In the System group, click the Firmware Upgrade option. You can see the following page then. Before you execute the firmware upgrade, please download the newest firmware from Draytek’s website (www.draytek.com) or FTP site (ftp.draytek.com) on the computer first. Caution Display a caution for your reference. Current Version Display current firmware version that you are using.
The default setting of the console port is “baud rate 57600, no parity, and 8 bit with 1 stop bit.” 3. Power on Vigor3300, then press ENTER before the system reboots completely. 4. Open Hyper Terminal on the PC. Now, Vigor3300 can accept a TFTP download and will display the following message: **************************** * DrayTek V3300 Bootloader * **************************** Press [ENTER] key within 5 sec. to download image...2 Current LAN IP is 192.168.1.1 New IP: Prepare downloading. 5.
6. Now in the Console you will find the following information. When Updating flash block at bfXXXXXX appears, it means the firmware is under downloading. 7. When set flash0_0 "780000:800000:general" appears, it means the firmware downloading has been completed. The router will reboot itself and you will see the Firmware version: V2.X.X. Please wait about 20 seconds to relogin the router. The procedure is finished now.
3.1.7 Reboot The Vigor3300 Series system can be restarted from a Web browser. Reboot screen can appear after you finish the changing of WAN and LAN settings. You have to reboot the router to invoke the configured settings that you made before. Besides, you can select Reset to factory default to reboot the device and retrieve the default settings. In the System group, choose the Reboot option.
3.1.8 Diagnostic Tools In some cases, a user may need to know some information about the router, such as static or dynamic databases, or other routing information. The Vigor3300 Series supports four functions, Routing Table, ARP Cache Table, DHCP Assignment Table, and NAT Active Sessions Table for the user to review such information.
z z Select View ARP Cache Table to get the following page: IP Address Display the IP address for different ARP cache. MAC Address Display the MAC address for different ARP cache. Interface Denoted by eth0 if it is a LAN interface and eth1 if it is a WAN interface. Refresh Click Refresh to re-display this web page for getting newest ARP information. Select View DHCP Assignment Table to get the following page: Assigned IP Display the IP address of the static DHCP server.
z z Select View NAT Active Sessions Table to get the following page. This table can display about 30000 sessions with 20 pages. Type Display the protocol used for the active session. Expire in Display the remaining time (second) of this session. State Display the condition of this session. Source IP Display the source IP address of the packet transmitted. Dest IP Display the destination IP address of the packet transmitted. sPort Display the source port of the packet transmitted.
TX rate (kbps) Display the transmission speed of the monitored device. RX rate (kbps) Display the receiving speed of the monitored device. Sessions Display the session number that you specified in Limit Session web page. Action Block - can prevent specified PC accessing into Internet within 5 minutes. Unblock – the device with the IP address will be blocked in five minutes. The remaining time will be shown on the session column.
Load Balance Enables or disables the WAN load balance function. The Auto Weight option becomes available if Enable mode is selected. Load Balance allows the router distributing data in and out of the Internet by using different WAN interfaces at the same time. Backup Enables or disables backup function for WAN interfaces. If you enable this function, the backup-master/backup-slave will execute the job of master/slave device when the master/slave device fails to work.
Default MAC Uses the default Mac address. User Defined MAC Uses a MAC address defined by users. If you select this item, you have to type the MAC address in the box below. Downstream Rate Set downstream rate for this WAN interface. The default value is 102400 kbps (100 Megabit). Upstream Rate Set transmission rate for this WAN interface. The default value is 102400 kbps (100 Megabit). Type Set connection type for this WAN interface. Physical Mode Set connection speed mode.
IP Address Set the private IP address of WAN interface. Subnet Mask Set the subnet mask value of WAN interface. Default Gateway Set the private IP address of gateway. Primary DNS Set the private IP address of primary DNS. Secondary DNS Set the private IP address of secondary DNS. MTU Mean maximum transmission unit of one packet. The default value is 1500. Host Name Some ISP may ask you to type your host name. Please type in if necessary.
No-Reply Count Assign detecting times to ensure the connection of the WAN. After passing the times you set in this field and no reply received by the router, the connection of WAN interface will be regarded as breaking down. Detect Destination Host (IP or Domain Name) Assign an IP address or Domain name as a destination to be detected whether the host is active (sending reply to the router) or not. If not, the connection of WAN interface will be regarded as breaking down.
DHCP Client Setup If the WAN interface is set as a DHCP client, the Vigor3300 Series will ask for IP network settings from the DHCP server or DSL modem automatically. It is not necessary for users to manually configure the router. Detect Type Select a detecting type for this WAN interface. There are three ways Send ARP to Gateway, Send PING and Send HTTP Request supported in the router. Detect Interval (sec) Assign an interval period of time for each detecting.
PPPoE with a DSL Modem Setup Most DSL modem users will use this mode. All the local users can share one PPPoE connection to access the Internet. User Name Assign a specific valid user name provided by local ISP. Password Assign a valid password provided by local ISP. Authentication Select PAP, CHAP, MS-CHAP or MS-CHAP-V2 protocol for PPP authentication according to the feature that your ISP provided for widest compatibility. The default value is PAP.
No-Reply Count Assign detecting times to ensure the connection of the WAN. After passing the times you set in this field and no reply received by the router, the connection of WAN interface will be regarded as breaking down. Apply Click Apply to go back to the WAN Interface Configuration page. To apply all settings, click Apply on the WAN Interface Configuration page and reboot your router. Reset Click this button to clear all the configurations for this page.
Detect Interval Assign an interval time for detecting if the WAN connection is on or off. No-Reply Count Assign detecting times to ensure the connection of the WAN. After passing the times you set in this field and no reply received by the router, the connection of WAN interface will be regarded as breaking down. Apply Click Apply to go back to the WAN Interface Configuration page. To apply all settings, click Apply on the WAN Interface Configuration page and reboot your router.
DMZ Host Type Choose NAT Mode or Routing Mode as the DMZ host type. Outgoing Interface This setting is available when Routing Mode selected as DMZ host type. DMZ Host IP List When DMZ Host type is set as Routing Mode, please type the IP address here to be chosen in IP Alias in Advanced>>NAT>>DMZ Host. 3.2.2 Load Balance Policy Vigor3300 Series supports a load balancing function.
Network Interface Display the interface specified for this entry. Strict Bind Display the status of Strict Bind. Edit Click this button to open the edit page for adjusting the settings. Delete/Delete All Click this button to delete the selected setting or all settings. A confirmation dialog box will appear. Click OK to delete this entry from the Load Balance Policy table. In addition, click Delete All in the Load Balance Policy page to delete all of 10 entries on this page.
3.2.3 Auto Load Balance Because the network between China Telecom and China CNC are disconnected, such function is designed to do auto load balance and separate the packets among China Telecom, China CNC and other regions via different WAN interfaces. For example, if you check WAN1 and WAN4 for China Telecom, packets belong to China Telecom will pass through the specified WAN interfaces only; and load balance will be done between WAN1 and WAN4.
For LAN IP/DHCP In the Vigor3300 Series router, there are some IP address settings for the LAN interface. The IP address/subnet mask is for private users or NAT users. The IP address of the default gateway on other local PCs should be set as the Vigor3300 Series’ server IP address. When the DSL connection between the DSL and the ISP has been established, each local PC can directly route to the Internet. The IP address/subnet mask can also be used to connect to other private users (PCs).
Click Apply to reboot the system and apply the settings. Note: If both the Primary and Secondary DNS fields are left empty, the router will assign its own IP Address to local users as a DNS proxy server and maintain a DNS cache. If the IP address of a domain name is already in the DNS cache, the router will resolve the domain name immediately. Otherwise, the router forwards the DNS query packet to the external DNS server by establishing a WAN (e.g. DSL/Cable) connection.
For IP Routing This page allows users to type in secondary IP address for connecting to a subnet. You can set IP routing for each WAN interface respectively. Status Click Enable or Disable to activate or close the IP routing of specific WAN interface. IP Address Type an IP address for the WAN interface (WAN1/WAN2/WAN3/WAN4). Subnet Mask Type the subnet mask for the WAN interface (WAN1/WAN2/WAN3/WAN4). LAN Interface Select a proper LAN interface for WAN interface (WAN1/WAN2/WAN3/WAN4).
3.2.4 High Availability The High Availability (HA) feature refers to the awareness of component failure and the availability of backup resources. The complexity of HA is determined by the availability needs and the tolerance of system interruptions. Systems, that provides nearly full-time availability, typically have redundant hardware and software that makes the system available despite failures. The high availability of the V3300 Series is designed to avoid single points-of-failure.
In the Network group, click the High availability option.
High Availability Disables or enables this function. When the master device fails down, the slave device will take its work over. Group Number Assign a group number. The range is from 1 to 255. PCs on the same group (in LAN) can support for each other. Role Select a role for this device as Master or Slave. Virtual IP Assign an IP address as a virtual IP. Click Apply to reboot the system and apply the settings. 802.
Suppose Vigor3300 A supports RIP on WAN1/WAN2/WAN3/WAN4, Vigor3300 B supports RIP on WAN1 and WAN2, and Vigor3300 C supports RIP on WAN1/WAN2/WAN3/WAN4. Vigor3300 B will tell 3300 A "if you want to send packets to Vigor3300 C, please send it to me first", then Vigor3300 A will create a routing rule to forward packet that destination is Vigor3300 C to Vigor3300 B. In another direction, Vigor3300 C will do the same thing. Enable/Disable Disables or enables this function.
General Setup This function allows users to configure general settings for bandwidth management. In the Network group, choose Bandwidth Management and then General Setup. You will get the following page. Enable/Disable Disables or enables this function. Default TX Limit Define the default speed of the upstream for each computer in LAN. The default value is 1024. Default RX limit Define the default speed of the downstream for each computer in LAN. The default value is 1024.
TX Limit Display the size limit for the transmitted packets. RX Limit Display the size limit for the received packets. Edit Click this button to open the edit page for adjusting the settings. Delete/Delete All Click this button to delete the selected setting or all settings. A confirmation dialog box will appear. Click OK to delete this entry from the Load Balance Policy table. In addition, click Delete All in the Load Balance Policy page to delete all of 10 entries on this page.
General Setup This function allows users to configure general settings for limit session. In the Network group, choose Limit Session and then General Setup. You will get the following page. Enable/Disable Disables or enables this function. Default Session Limit Defines the default session number used for each computer in LAN. Apply After finishing the configuration, please click this button to invoke these settings. Limitation Table This function allows users to set limitation for limit session.
entry from the Load Balance Policy table. In addition, click Delete All in the Load Balance Policy page to delete all of 10 entries on this page. To edit an entry, select it by clicking the radio button (from 1 to 10). Then click the Edit button on the bottom to bring up the following Web page. Start IP Assign the start IP address for limit session. End IP Assign the end IP address for limit session.
3.3.1 Static Route Setup When you have several subnets in your LAN, sometimes a more effective and quicker way for connection is the Static routes function rather than other methods. You may simply set rules to forward data from one specified subnet to another specified subnet without the presence of RIP. This function allows users to assign static routing information. In the Advanced group, choose Static Route. You will get the following page.
Network Interface Select a network interface as a destination to be sent. It includes LAN, and WAN1~WAN4. Gateway IP Assign an IP address of the gateway for the interface selected above. Destination IP Assign the IP address of the destination that data will be transferred to. Packets ready to destination will be sent out through the network interface chosen in this page. Subnet Mask Assign a value of subnet mask for destination IP address. Click Apply to reboot the system and apply the settings.
There are four functions that NAT provides – Port Redirection, Address Mapping, DMZ Host and Common Ports List. Port Redirection Port Redirection means port forwarding. It may be used to expose internal servers to the public domain or open a specific port to internal hosts. Internet hosts can use the WAN IP address to access internal network services, such as FTP, WWW and etc. The internal FTP server is running on the local host addressed as 192.168.1.2.
Private Port End Display the end point in the range of private port. Use IP Alias Display the using status for WAN IP alias. WAN Interface Display the WAN interface of this profile. IP Alias Display the selected WAN IP address. Edit Allow users to edit the selected port redirection settings. Delete/Delete All Removes one/all the selected port redirection settings. To edit an item, click the radio button of the item that you want to modify.
IP Alias that you set. Please redirect only the ports that you have to forward rather than forward all ports. Otherwise, the intrinsic firewall type security of NAT facility will be affected. By the way, user can click Delete to remove one current existed NAT entry in the Advanced – NAT – Port Redirection page and click Delete All to remove all entries.
Protocol Select the transport layer protocol. It could be TCP, UDP, or All for selection. Public IP Select an IP address (the selections provided here are set in IP Alias List of Network >>WAN interface). Local host can use this IP to connect to Internet. If you want to choose any on of the Public IP settings, you must specify some IP addresses in the IP Alias List of the Static/DHCP Configuration page first.
In the Advanced group, move to NAT option and choose DMZ Host to get the corresponding page. WAN Interface Display the WAN interface chosen for this entry. Private IP Display the private IP address of this entry. Use IP Alias Display the activation status (enable or disable) of this DMZ host. IP Alias Display the WAN IP address. Edit Allow users to edit the selected DMZ host settings. Delete/Delete All Remove one/all the selected DMZ host settings.
Apply Click Apply to reboot the system and apply the settings. Common Ports List This page lists common ports used in Internet. The information includes service/application, protocol for that service and port number of that service. 3.3.3 RADIUS Setup A RADIUS (Remote Authentication Dial-In User Service) is a security authentication client/server protocol widely used by Internet service providers on other remote access service.
Enable/Disable Click Disable to disable this function. Click Enable to activate this function. Server IP Address Assign an IP address of a Radius server. Destination Port Assign a destination port number used for Radius function. Shared Secret Assign a code for authentication to server. The RADIUS server and client share a secret which is used to authenticate the messages sent between them. Both sides must be configured to use the same shared secret.
3.3.4 Port Block The Port Block function provides a user to set lots of proprietary port numbers. Packets will be dropped if destination ports (both TCP and UCP) of packets with these assigned port numbers are on WAN and LAN. The advantage of this feature is to filter some unnecessary packets or attacking packets on Internet environment or LAN network. Vigor3300 Series supports ten port numbers to be blocked. In the Advanced group, click Port Block option. You will get the following page.
Domain Name Display the domain name set for the entry. Service Provider Display the service provider that supports DDNS. Service Type Display the service type for the entry. Active Display the activation status (disable or enable) for this entry. Status Display the connection status of this entry. Click Refresh to re-display the whole page information. To modify DDNS setting, click an entry number to get into edit mode. Status Click Disable to disable this function.
Server Type Select Static, Dynamic or Custom type for this entry of DDNS settings. Domain Name Assign a private domain name to be accessed. Login Name Assign a name to login into DDNS server. Login Password Assign a password to login into DDNS server. Wild Card If you want anything-here.yourhost.dyndns.org to work (EX. To make things like www.yourhost.dyndns.org work), click “Enable” to active this function. Backup MX MX stands for Mail Exchanger.
3.3.6 Call Schedule Setup These call schedule profiles will control the up or down time of the router’s dialer or connection manager. In order to do the proper call schedule function, a user must have to setup time function and arrange schedules for specified Internet access profile or LAN-to-LAN profile. Vigor3300 Series support lots of profiles for call schedule usage. In the Advanced group, click the Call Schedule option. You will get the following page.
Enable/Disable Click Disable to disable this function. Click Enable to activate this function. Start Date Assign a date for starting this profile. Start Time Assign a time for starting this profile. Action Force down means to inactivate the Network Interface. Force up means to activate the Network Interface. How often Once means only for one time. Weekdays means that user can select some weekdays to apply. Network Interface Select one specific WAN interface to be applied.
the flow of data access the network. By the way, user can apply this function to monitor all traffics which user needs to check. There are some advantages supported in this feature. Firstly, it is more economical without other detecting equipments to be set up. Secondly, it may be able to view traffic on one or more ports within a VLAN at the same time. Thirdly, it can transfer all data traffics to be mirrored to one analyzer connect to the mirroring port.
3.3.8 LAN Port Mirroring Setup Port mirror can be applied for the users in LAN. It has the same mechanism like WAN port mirroring. In the Advanced group, click the LAN Port Mirroring option. Enable/Disable Click Disable to disable this function. Click Enable to activate this function. Mirroring Port Select a port to view traffic sent from mirrored ports. Mirrored Port(s) Click which ports are necessary to be mirrored. After finishing the settings, please click Apply. 3.3.
For Port Base VLAN In the Advanced group, click the LAN VLAN option. There are two VLAN settings offered here for you to configure. If you click Disable, no configuration can be completed. Please choose Port Base VLAN to open the following page. P1 – P4 Check the box to make the computer connecting to the port being grouped in the specified VLAN. Be aware that each port can be grouped in different VLAN at the same time only if you check the box.
For 802.1Q VLAN Another way to set VLAN is based on 802.1Q. Please choose 802.1Q VLAN to open the following page. This page is available only for the PCs with certain network cards which support 802.1Q VLAN feature. It is useless for general network cards. Active Check this box to activate the settings of this entry. If you check the Management Port box below, Index 4 will be unchangeable and locked. And, you have to set Port VLAN ID for P4 previously before you check Management Port.
operation for each VLAN in this page for obtaining proper control. Use the drop down list to choose a tag operation for each port. Tagged – All the computers behind that port must support VLAN and are tagged with certain VLAN groups with specified ID numbers. Untagged - All the computers behind that port do not support VLAN feature. Note: It is recommended to group computers that do not support VLAN feature or support VLAN feature but their Untagged VLAN settings are checked in one port with untagged.
This function is to define a community string name. An agent is a network-management software module that resides in a managed device. An agent has local knowledge of management information and translates that information into a form compatible with SNMP. An NMS executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs must exist on any managed network.
Community Type the community string (e.g., public) for SNMP. Host/mask Assign a value of subnet mask for host IP address. Max Access Select the authority as Read only or Read/Write. Read only means user only can monitor managed devices. Read/Write means user can control managed devices including change the values of variable stored within managed devices. Apply Click Apply to save this setting and return the previous page.
Trap server Assign an IP address of trap server. Trap community Assign a community string for Trap packet using. Trap server port Assign a port number for Trap server using. Apply Click Apply to save this setting and return the previous page.
3.4 Firewall Setup The firewall controls the allowance and denial of packets through the router. The Firewall Setup in the Vigor 3300 Series mainly consists of packet filtering, Denial of Service (DoS) and URL (Universal Resource Locator) content filtering facilities. These firewall filters help to protect your local network against attack from outsiders.
this list must exist and had been pre-configured. The system provides three types of filter for you to choose in default. The available settings provided here can be added or edited in Firewall>>IP Filter>>Group Table. Group Table Group Table allows you to set definitions for different groups of the filters that will be applied for the function of IP filter. Index Allow you to change current IP filter table or add new rule for current group.
Group Name Type in the name of the group. Next Group Name Select next group to filter packets. Comment Type in your comment or description for the group. To edit a select group, please click the number link to open the following page. You can change the next group name and modify the comment for your necessity. When you finish the modification, simply click Apply. Besides, you can add new filter rule for the group. On the edit page of IP Filter Table, click the Add Rule button.
Source Port It means the port for the source IP. Type the values in the boxes of start port and end port. As for the operators If the Start Port column is empty, the Start Port and the End Port column will be ignored. The filter rule will filter out any port number. (=) - If the End Port column is empty, the filter rule will set the port number to be the value of the Start Port column. Otherwise, the port number ranges from the Start Port to the End Port including the Start Port and the End Port.
directions. Fragments It is the response to fragmented packets. There are three options as below. Do not care - Specifies no fragment options. Unfragment - Applies the rule to unfragment packets. Fragmented - Applies the rule to fragmented packets. Block or Pass The action to be taken when packets match the rule. There are four options: Block immediately - Block the packet immediately. Pass immediately - Pass the packet immediately.
3.4.2 DoS The DoS function helps to detect and mitigates DoS attacks. These include flooding-type attacks and vulnerability attacks. Flooding-type attacks attempt to use up all your system's resources while vulnerability attacks try to paralyze the system by offending the vulnerabilities of the protocol or operation system. In the Firewall group, click the DOS option. You will see the following page. The DoS Defense Engine inspects each incoming packet against the attack signature database.
the subsequent TCP SYN packets within the user-defined timeout period. The default setting for threshold and timeout are 300 packets per second and 10 seconds, respectively. Enable UDP Flood Defense Activates the UDP flood defense function. If the amount of UDP packets from the Internet exceeds the user-defined threshold value, the router will be forced to randomly discard the subsequent UDP packets within the user-defined timeout period.
activities include no flag scan, FIN without ACK scan, SYN FIN scan, Xmas scan and full Xmas scan. Enable Tear Drop Activates the Block Tear Drop function. This attack involves the perpetrator sending overlapping packets to the target hosts so that target host will hang once they re-construct the packets. The routers will block any packets resembling this attacking activity. Enable Ping of Death Activates the Block Ping of Death function.
The URL content filter consists of the following functions: URL Access Control, Content Filter, Restrict Web Feature and Filter Schedule. URL Access Control The URL Access Control controls Web site access by inspecting the URL string against user-defined keywords. In the Firewall group, click the URL Filter option. You will see the following page. Enable/Disable Disable or Enable URL Filter function. Keyword The keyword(s) used to filter URLs. Keywords can be partial words or complete URLs.
Exception List The list of IP addresses where content filter rules are not applied. Content Filter Content Filter can help to avoid your employees accessing into improper websites and affecting the work efficiency; protect your children from viewing inappropriate websites and accessing chat rooms; and monitor and control web access from all computers connected to your router. Server Enable or Disable Content Filter. Select a Server The domain name is used to as a server.
Restrict Web Feature This feature blocks malicious codes hidden in Web pages, such as Java Applet, Active X, Cookies, Proxy, compressed files, and executable files. It is also able to block all downloads of multimedia files from Web pages in order to control the bandwidth usage. Malicious code may be embedded in some executable objects, such as ActiveX, Java Applet, compressed files, executable files, Proxy, and Multimedia.
Filter Schedule Filter Schedule function controls what times the URL content filter should be active. It can specify what times the URL content filtering facility should be active. Always Block The URL content filtering facility is always active. Block only at The URL content filtering facility is active during the specified times from H1:M1 to H2:M2 in one day, where H1 and H2 indicate the hours and M1 and M2 represent the minutes.
3.4.4 Bind IP to MAC This function is used to bind the IP and MAC address in LAN to have a strengthen control in network. When this function is enabled, all the assigned IP and MAC address binding together cannot be changed. If you modified the binding IP or MAC address, it might cause you not access into the Internet. Enable Click this radio button to invoke this function. However, IP/MAC which is not listed in IP Bind List also can connect to Internet.
Add It allows you to add the one you choose from the ARP table or the IP/MAC address typed in Add and Edit to the table of IP Bind List. Edit It allows you to edit and modify the selected IP address and MAC address that you create before. Remove You can remove any item listed in IP Bind List. Simply click and select the one, and click Remove. The selected item will be removed from the IP Bind List. Note: Before you select Strict Bind, you have to bind one set of IP/MAC address for one PC.
Source IP Specify an IP address for Vigor router to perform IM/P2P blocking. Subnet Mask Type the subnet mask for the IP address specified. Action Choose Allow to make the packet passing through. Choose Disallow to block the packet in or out. IM/VoIP/P2P Check the boxes for different applications filtering by this rule. 3.
For the web pages for incoming class setup and outgoing class setup (incoming class filter and outgoing class filter) are similar, they will be explained in the same sections. 3.5.1 Incoming/Outgoing Class Setup Incoming/Outgoing Class Setup allows you to configure bandwidth percentage for data and voice signals transmission. Click the QoS option and choose Incoming Class Setup/Outgoing Class Setup. There are eight queues that can be configured.
Priority You are allowed to set ten filters. The priority for the filter of number 1 is the highest; and the priority for number 10 is the lowest. Source IP Display the source IP address for the filter. Destination IP Display the destination IP address for the filter. Service Type Status Display the service type that you choose for the filter. DiffServ CodePoint Status Display the setting for DiffServ CodePoint. Class Display the class name that you specified for the incoming/outgoing class filter.
Source IP Type the source IP address with subnet mask value to be applied for this filter. Destination IP Type the destination IP address with subnet mask value to be applied for this filter. Service Type Status There are three options for you to choose: Basic – Only the Service Type field is allowed to be configured. Advanced – The Protocol and Port fields are allowed to be configured. None – No field is allowed to be configured. Service Type Select the service type that you want to use.
DiffServ CodePoint Type There are twenty-one types supported. DiffServ CodePoint The number (by hex mode) to be applied. Class Choose a filtering condition to be applied. All the class names set in Incoming/Outgoing Class Setup page will be displayed in this field. 3.6 VPN and Remote Access Setup This page allows you to setup the configuration of VPN and Remote Access to create a virtual private network for security in the Internet.
such as X.509 and DHCP over Internet Protocol Security (IPSec). This VPN feature is only supported for Vigor 3300, Vigor3300V routers. IPSec is the security architecture for IP networks. IPSec provides security services at the IP layer by enabling a system to select required security protocols. It determines the algorithms to use for the services, and puts in place any cryptographic keys required to provide the requested services.
Refresh Refresh the page information. Edit Configure an entry. Clicking this button can guide you accessing into editing page for that IPSec tunnel. For detailed information, refer to the following section of For Default Configuration. Delete Delete a designated entry. Delete All Delete all entries in the table. To edit or add a policy table, please click one of the radio buttons and click Edit.
z For Default Configuration Click Default tab. The following page of default configuration will be shown: Profile Status Set the initialization of IPSec Tunnel with this profile settings. Enable – Choose this one to invoke this profile manually. In addition to select Enable, you have to click Initiate under the page of VPN-IPSec Tunnel-Policy Table. Always-On – Choose this one to invoke this profile automatically by the system for every 30 seconds. Disable – Choose this one to inactivate this profile.
z Security Protocol AH - Specify the IPSec protocol for the Authentication Header protocol. The data will be authenticated but not be encrypted. ESP - Specify the IPSec protocol for the Encapsulating Security Payload protocol. The data will be encrypted and authenticated. NAT Traversal Click Enable to let multi IPSec tunnels passing through this router. Click Disable to close this function. WAN Interface The WAN interface to be used.
Key Lifetime (main) The rekey-renegotiated period of the IKE Phase1 keying channel of a connection. The acceptable range is from 5 to 480 minutes (8 hours). Proposal (main) The proposed encryption and/or authentication algorithms for IKE Phase1 negotiation. There are several proposals offered in this page with combination of three types of algorithms: Encryption algorithms - DES/3DES/AES Authentication algorithms - MD5/SHA1 DH (Diffie-Hellman) Group MODP768/MODP1024/MODP1536.
Encryption algorithms –NULL/DES/3DES/AES. Authentication algorithms - MD5/SHA1 Accepted Proposal If you choose Only accept proposal listed above, only the selected proposal will be accepted and applied by this device. If you choose Accept all supported proposal, all the proposals supported by this device will be accepted and applied. PFS Enables the PFS (Perfect Forward Secrecy) function. A new Diffie-Hellman Key Exchange is included every time an encryption and/or authentication key are computed on PFS.
admin status to be always on to automatically restart IKE negotiation. During the negotiation, you can press Refresh to show the latest status of all policies. VPN Trunk - Policy Table VPN trunk includes two features - VPN Backup and VPN load balance. Features of VPN TRUNK – VPN Backup Mechanism VPN TRUNK Management is a backup mechanism which can set multiple VPN tunnels as backup tunnel. It can assure the network connection not to be cut off due to network environment blocked by any reason.
Refresh Refresh the page information. Edit Configure an entry. Clicking this button can guide you accessing into editing page for that IPSec tunnel. For detailed information, refer to the following section of For Default Configuration. Delete Delete a designated entry. Delete All Delete all entries in the table.
z For Default Configuration To edit or add a policy, please click one of the radio buttons and click Edit. The following page of default configuration will be shown: Profile Status Set the initialization of IPSec Tunnel with this profile. Enable – Choose this one to active this profile. Disable – Choose this one to inactivate this profile. Name The name for VPN connection (ex. “VPN1”). The maximum length of name is 20 characters including spaces.
NAT Traversal Click Enable to let this IPSec tunnel pass through next router. Click Disable to close this function. WAN Interface The WAN interface to be used. Local Certificate The local certificate is active for authentication if the RSA Signature option is selected in the Authentication field. These options come from the user certificate file. Security Gateway The IP address of the local gateway's public-network interface.
z For Advanced Configuration Click Advanced tab. This page allows you to set advanced configuration for the specified policy. The following page of default configuration will be shown: Key Lifetime (main) The renegotiated period of the IKE Phase1 keying channel of a connection. The acceptable range is from 5 to 480 minutes (8 hours). Proposal (main) The proposed encryption and/or authentication algorithms for IKE Phase1 negotiation.
Key Lifetime (quick) The renegotiated period of the IKE Phase2 keying channel. The acceptable range is from 5 to 1440 minutes (24 hours). Proposal (quick) The proposed encryption and/or authentication algorithms for IKE Phase2 negotiations. There are 2 options. Encryption algorithms –NULL/DES/3DES/AES. Authentication algorithms - MD5/SHA1 Accepted Proposal If you choose Only accept proposal listed above, only the selected proposal will be accepted and applied by this device.
VPN Trunk - Group Table Vigor3300 series allows users to configure policies. In addition, it also allows users to combine several policies into one group for VPN usage. Each group can combine four policies for fitting different requirement of VPN application. Simply click VPN>>VPN Trunk>>Group Table to access into the following page. There are ten groups offered for users to configure. Edit Configure an entry. Clicking this button can guide you accessing into editing page for that group.
Profile Status Set the initialization of IPSec Tunnel with this profile. Enable – Choose this one to activate this profile. Disable – Choose this one to inactivate this profile. Name Type a name for this group. Local Subnet LAN subnet of this device. Remote Subnet LAN subnet of remote client. Tunnel 1~ Tunnel 4 Specify which tunnel will be included in this trunk. You can choose up to four tunnels at one time. Weight Determine how many flow rates can pass through on this tunnel.
Date/Time It displays the date and time for the operation of IPSec. Description It displays the results of the IPSec operation. Refresh It allows you to refresh the whole table. Clear It allows you to clear all the table information. Trust CA This page allows you to set up the CA configuration. Click the VPN>>IPSec >>Trust CA option. It can make users loading double key certificate issued by trusted CA server. To upload a new Trust CA, please select any one of the entry and click the Upload button.
User Certificate This page allows you to set up the CA configuration to generate user’s certificate. Click the VPN>>IPSec >>User Certificate option. Generate Generate a new entry for user certification. Download Download a certification file generated from router to be stored in local host. Import Import a certificated file from the local host. Delete Delete an assigned entry. View Show configuration of the assigned entry.
ID Type The ID type for this entry. There are three types: Domain Name: Certificated by domain name. IP: Certificated by IP address. Email: Certificated by email address. ID Value The ID value for this entry. Organization Unit The unit value of this organization. Organization The value of this organization. Locality (City) The local city name of this entry. State/Province The state name of this entry. Common Name The common name for this entry. Country The country name of this entry.
z To import a user certificate that you saved previously, please click index number one (with the status of Request Generated) and click the Import button. If not, you might see the following dialog to warn you. After you click the Import button, the system will guide you to import a saved file to a place that you want. z To delete a user certificate, please click the index number that you want to delete and click the delete button. A dialog box will appear to ask your confirmation.
Name Display the name of the IPSec tunnel. Status Display the status of the tunnel (up or down). Algorithm Display the algorithm used by this IPSec. Remote IP Display remote IP address of the tunnel. Remote Subnet Display remote subnet mask of the tunnel. Packet In Display the packets count received by this tunnel. Byte In Display the bytes count received by this tunnel. Packet Out Display the packets count sent out by this tunnel. Byte Out Display the bytes count sent out by this tunnel.
PPTP Authentication Allow you to choose an authentication mode to be used. The default setting is CHAP. PPTP Encryption Allow you to choose an encryption mode to be used. If PPTP authentication mode is set to CHAP or PAP, PPTP Encryption mode does not need to be set. User Authentication Set user authentication to Local server or RADIUS server. Enable/Disable Enables or disables the Mutual Authentication function.
Status Set the function to Active or Inactive. L2TP Authentication Allow you to choose an authentication mode to be used. The default setting is CHAP. User Authentication Set user authentication to Local server or RADIUS server. Enable/Disable Enable or disable the Mutual Authentication function. User Name Type the user name that the other side provides for carrying out mutual authentication whenever you want.
Start IP Type the starting IP address. The default group value is 192.168.1.224/28. Subnet Mask Select the value of subnet mask for the Start IP. Accessed IP Type the accessed IP address. Subnet Mask Select the value of subnet mask for the Accessed IP. User Profile This page allows you to set up to 30 sets of accounts. Profile Status Display status (disable or enable) for this entry. User Name The user name for this entry. Group The group for this entry.
entry. Next, click Apply. Delete Allow you to remove the selected group. Delete All Allow you to remove all of the groups. When you finish the configuration, please click Apply to invoke it. Status This page displays some relevant information about PPTP connection. It will refresh automatically every 10 seconds. Index Display the index number of the tunnel. Remote IP Display remote IP address of the tunnel. Assigned IP Display IP address assigned by Vigor3300.
3.7 VoIP Setup Voice over Internet Protocol (VoIP) is a technology that allows you to make telephone calls using a broadband Internet connection instead of a regular (or analog) phone line. The Vigor3300/Vigor3300V provides cost effective voice solution for SME customers which can be explained with the following diagram. 3.7.1 Protocol There are two protocols can be used for VoIP - SIP and MGCP. You should click either one of buttons to set corresponding settings for VoIP phones.
For SIP Configuration SIP Local Port Type the port number for SIP protocol. The default value is 5060. Active Click this box to activate this SIP proxy server setting. Outbound Proxy Check this box to enable this function for sending SIP protocol packets to an SIP proxy server. Proxy Name Type the name of the SIP proxy server. Proxy Address Type the IP address of the SIP proxy server. Proxy Port Type the port number of the SIP proxy server.
For MGCP Configuration MGCP Local Port The UDP port number in MGCP local terminal. MGCP Call Agent Address The IP address of the Call Agent server in MGCP. MGCP Call Agent Port The UDP port number for the Call Agent server. EndPoint Name Style Choose a proper name style for the VoIP settings. There are three options for you to choose. aaln/#@[ip_addr] - ex: aaln/1@[1.1.1.1] mac_addr/#@[ip_addr]- ex: 000504030201/1@[1.1.1.1] aaln/#@mac_addr- ex: aaln/1@000504030201 aaln/#@ - ex: aaln/1@v3300.draytek.
3.7.2 Port Settings Port Settings page allows users to set phone number and phone groups for different call receivers. For Phone Number Edit Click this button to access into the Edit page for each phone number. Type Display the type of the VoIP connection. Active Display the status (active or not) for the VoIP connection. Group Display the group number of the VoIP connection., Username Display the username that you typed for the VoIP connection.
Port 1 (FXS) Vigor3300 Series User’s Guide Click Enable to activate this port or Disable to close this port. User Name – Type the user name (a number) for each phone line. Password - Type the user password for each phone line. Display Name - Type the user name to be displayed on another phone terminal.
port. Proxy Server - Type the SIP proxy server to be applied on this port. Call without Registration – If the registration for this port is not successful, click Enable to call via this port. Play dial tone only when port registered – If the registration for this port is not successful, no dial tone appears when picking up the phone. VoIP IP Address - The interface is used to apply VoIP traffics. There are two options: WAN and LAN/VPN.
FAX FAX Mode -The FAX function mode. There are several options: Transparent: FAX will be transmitted via voice channel; no fax relay and no Codec change will be involved. T.38 Relay: Using T.38 Fax Relay. This is the default value. Bypass: Once FAX is detected, the Codec will automatically switch to a high bit rate type (G.711a/u or G.726) to make sure FAX can transmit successfully.
ringing the times that you set here. SIP URL - Assign a SIP URL site to receive forwarded calls. Call Waiting Click Enable to invoke this function. A notice sound will appear to tell the user new phone call is waiting for your response. Click hook flash to pick up the waiting phone call. CLIP Display Click Enable to display the call number. Apply When you finish all the configurations, please click this button to activate them.
Default Group Click this button to return to the factory group settings. 3.7.3 Speed Dial This page allows you to set a simple way to dial a specific number. Up to 150 numbers can be stored in Vigor3300V. Speed Dial Phone Number Type the phone number to be used as quick dial. Speed Dial Destination Type the destination address of the dial. Memo Type a description for the specified number. Apply Click this button to activate the page settings.
Append Display the appended number of the entry. Destination Display the IP address of the destination of the entry. Memo Display the brief description stated in memo field of the entry. Edit Click this button to access into the editing page of the speed dial. Delete/Delete All Click this button to delete the selected setting or all settings. To configure one entry, please click Edit to open the following page. Prefix Assign a prefix for checking the phone number that users dial out.
RTP Starting Port The starting port number for RTP protocol packet. The default setting is 13456. T.38 Starting Port The starting port number for T.38 protocol packet. The default setting is 49170. T.38 Redundancy Number The redundancy number (how many payloads attaching to the tail of the packet) for T.38 protocol. The default value is 1. Dialing Completion Timeout Users might dial with incomplete phone number and wait for several seconds but not finish the complete dialing.
Ringing Frequency Please select a proper setting as the ringing frequency. Ringing Cadence - On Determine the length of the ringing time for incoming calls. Ringing Cadence - Off Determine the length for the incoming calls to stop ringing. 3.7.6 Tone Settings This setting is provided for fitting the telecommunication custom for the local area of the router installed. Wrong tone settings might cause inconvenience for users.
will display ID type value automatically. Dial tone A tone means the phone line is ready to make a call. Ringing tone A tone means the call is ringing. Busy tone A tone means the phone line is busy. Congestion tone A tone means the network is busy. Low Frequency (Hz) Type the low frequency number in Hertz. High Frequency (Hz) Type the high frequency number in Hertz. TOn1 (10msec) Type the duration of the first ring. TOff1 (10msec) Type the silence duration after the first ring.
3.7.7 QoS This Quality of Service (QoS) function is only for the VoIP feature. When this function is enabled, the Vigor 3300 Series will set rate limitation for incoming and outgoing transmissions to ensure the best quality of service in VoIP. Disable Click this button to disable QoS function. The voice quality cannot be guaranteed and the data throughput will be higher. Enable Click this button to invoke QoS function. The voice quality can be good and the data throughput will be lower.
3.7.8 NAT Traversal NAT traversal is a challenge that all Service Providers looking to deliver public IP-based voice and multimedia services must solve. The goal of this function is to provide secure connection to subscribers behind NAT (Network Address Translation) devices and Firewalls. Overcoming this traversal problem will lead to widespread deployment of profitable voice and multimedia over IP services to any subscriber with broadband connection. Disable Disables this function.
click this function; the user does not configure NAT information. STUN Local Port - Type the port number of the STUN server. STUN Server Address - Type the IP address of the STUN server. STUN Server Port - Type the port number of the STUN server. Symmetric Media Disable symmetric RTP and T.38 – Click this button to make RTP and T.38 being not symmetrical. Enable symmetric RTP and T.38 - Click this button to make RTP and T.38 being symmetrical.
ends are accepted by this router. Allow only calls from allow list – Only the calls listed in the Allow List page will be accepted by this router. Allow only calls from speed dial entries – Only the calls listed in the speed dial entries will be accepted by this router. Deny only calls from deny list – The calls listed on Deny List page will not be accepted by this router. And others calls are accepted. Deny all incoming calls – All incoming calls from remote ends are not accepted by this router.
Name The name or number in the deny list. IP/Domain The IP address or domain name to be denied. If the peer is registered in SIP proxy server, use the domain name of the SIP proxy server. Otherwise, use the static IP address or DDNS domain name. 3.7.10 Call History This page lists the call history through Vigor3300. You can click Refresh to get the latest history information for these VoIP phones. Besides, this page refreshes automatically every 10 seconds.
system will not refresh this page until you click Refresh button. Port Number The port number of VoIP. Call Type The dialing direction for this call (Incoming/Outgoing). Caller Number The phone number of the caller. Callee Number The phone number of the receiver. Start Time The starting time of the call. End Time The ending time of the call. Duration The duration of the call. Release Reason The reason for the call termination. Remote RTP Address The IP address of remote voice site.
When a user wants to dial out via FXO port, a sound would be played to ask the user typing PIN code first. If the PIN code is correct, the user can dial out. If not, prompt sound of PIN Error would be played. 3.7.12 Status This page displays the connection status for VoIP phone calls. Refresh Option You can click Refresh to get the latest status information for these VoIP phones. In addition, you can set the time interval of refreshing.
an automatic refreshing setting. If you choose No Refresh, the system will not refresh this page until you click Refresh button. Register Status The status of registering in proxy server. Call Status The calling status. Call Type The dialing direction for this call (Incoming/Outgoing). Caller Number The phone number of the caller. Callee Number The phone number of the receiver. Start Time The starting time of the call. Remote RTP Address The IP address of the remote voice site.
This page is left blank.
4 Trouble Shooting This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow below sections to check your basic installation stage by stage. ¾ Checking if the hardware status is OK or not. ¾ Checking if the Network Connection Settings on your computer is OK or not. ¾ Pinging the Router from your computer. ¾ Checking if the ISP Settings are OK or not.
4.2 Checking If the Network Connection Settings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings. After trying the above section, if the link is stilled failed, please do the steps listed below to make sure the network connection settings is OK. For Windows The example is based on Windows XP. As to the examples for other operation systems, please refer to the similar steps or find support notes in www.draytek.com. 1.
3. Select Internet Protocol (TCP/IP) and then click Properties. 4. Select Obtain an IP address automatically and Obtain DNS server address automatically.
For MacOs 1. Double click on the current used MacOs on the desktop. 2. Open the Application folder and get into Network. 3. On the Network screen, select Using DHCP from the drop down list of Configure IPv4.
4.3 Pinging the Router from Your Computer The default gateway IP address of the router is 192.168.1.1. For some reason, you might need to use “ping” command to check the link status of the router. The most important thing for this command is that the computer will receive a reply from 192.168.1.1 for correct link. If not, please check the IP address of your computer. We suggest you setting the network connection as get IP automatically. (Please refer to the section 3.
4.4 Checking If the ISP Settings Are OK or Not 1. Go to the web configuration GUI (http://192.168.1.1), click Network >> WAN to check your ISP settings for IP modes. 2. Make sure the Active check box has been selected. For PPPoE Mode 1. Check if Username and Password are entered with correct values that you got from your ISP. 2. Check if the setting of Authentication is correct or not. You may need to try both PAP and CHAP.
3. Check if Service Name (optional) is correct or not. It is required by some ISPs. After finishing the settings, go to System - Status page and click WAN Status. You will get a correct web page of WAN settings. For Static Mode 1. Check if the values of IP Address, Subnet Mask, Gateway IP Address and Primary DNS that you got from ISP are set properly or not. If you forget, please contact with ISP for getting new ones.
2. If anything wrong, please retype correct values and try the network connection again. 3. After finishing the settings, go to System - Status page and click WAN Status. You will get a correct web page of WAN settings. For DHCP Mode 1. Check if Host Name (optional) and Domain Name (optional) are correct or not. Both them are required for some ISPs. 2. If anything wrong, please check and retype correct values. Then try the network connection again. 3.
For PPTP Mode 1. Check if the settings of Username and Password are correct or not. 2. Check if the setting of Authentication is correct or not. You may need to try both PAP and CHAP. 3. Check if the value of PPTP Local Address, PPTP Subnet Mask, and PPTP Remote Address are correct or not. 4. After finishing the settings, go to System - Status page and click WAN Status. You will get a correct web page of WAN settings. 4.
Warning: After pressing factory default setting, you will lose all settings you did before. Make sure you have recorded all useful settings before you pressing. The password of the factory default is null. Software Reset You can reset router to factory default via Web page. Go to System >> Reboot on the web page. The following screen will appear. Choose Reset to factory default and click Apply. After few seconds, the router will return all the settings to the factory settings.
5 Application Notes 5.1 Application for 802.1 VLAN 5.1.1 Block LAN-to-LAN Communication To control the communication of PCs among different network segments effectively, please adjust firewall setting to deny LAN to LAN communication from Firewall >IP Filter Group Table. Thus, PCs that belong to various LANs will not connect with each other through the router. To a company with several departments, such feature is useful for it to determine data sharing among different departments. 1.
4. Now you will get the following page. 5.1.2 How to Check/Edit VLAN ID on Your PC? Not all the network cards support VLAN features. If you cannot sure if the network card of your computer supports tagged VLAN or not, please do the following steps to check (or edit) VLAN ID on your PC. 1. Go to Control Panel and then double-click on Network Connections.
2. Right-click on Local Area Connection and click on Status. 3. On the following dialog, click Properties. 4. Click Configure to access into next screen.
5. On this dialog box, locate VLANs tag and click on it. If you cannot find out VLANs tag, that means your network card does not support VLAN feature. 6. In this screen, there is no VALN existed. You can create a new one. Please click the New…button.
7. In New VLAN dialog, please type a number in the box of VLAN ID. Here, “5” is entered. The corresponding VLAN Name will appear automatically. Next, click OK to create it. 8. After you click OK, the system will configure for the VLAN settings. Please wait for several seconds.
9. When the configuration is finished, the new VLAN settings with ID number and name will appear on previous dialog, Desktop Adapter Properties. Click OK to exit this dialog. 10. Now, the Desktop Adapter – VLAN dialog will appear as follows. Please click OK.
11. Next time, if you want to check VLAN setting again, please open Settings tag to modify it.
5.1.3 Four VLANs for Different Departments in A Company A company wants to separate the Engineer Department, Sales Department, Marketing Department and Other Department to limit their communication with each other to ensure the security. In this case, we can define four VLANs that are VLAN5, VLAN6, VLAN7 and VLAN8. The subnet of VLAN5 is 192.168.1.0; the subnet of VLAN6 is 192.168.2.0; the subnet of VLAN7 is 192.168.3.0, and the subnet of VLAN8 is 192.168.4.0.
7. After applying the settings, the web page will be redirected to “reboot” web page. You can ignore it and continue to configure the Network setting. After finishing Network setting, you can execute the reboot procedure. 8. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only. 9. In the Network setting, type the subnet 192.168.1.0 to LAN. For example, the VLAN5 LAN IP is 192.168.1.1 and the Subnet Mask is 255.255.255.0.
5.1.4 Two VLANs for Different Departments in A Company A company wants to separate the Engineer Department and Other Departments to limit their communication to protect the engineering data. In this case, we can define two VLANs that are VLAN5 and VLAN6. The subnet of VLAN5 is 192.168.1.0, and the subnet of VLAN6 is 192.168.2.0. Procedure: 1. Refer to A.1 to block LAN-to-LAN communication. 2. Create VLAN5 and VLAN6 Groups. 3. In the VLAN5, type “5” to VLAN ID. In the Member field, choose p1 and p2.
5. After applying the settings, the web page will be redirected to “reboot” web page. User can it and continue to configure the Network setting. After finishing Network setting, you can execute the reboot procedure. 6. After rebooting, the tagged ports will communicate with 802.1Q tagged devices only. 7. In the Network setting, type the subnet 192.168.1.0 to LAN. For example, the VLAN5 LAN IP is 192.168.1.1 and the Subnet Mask is 255.255.255.0.
5.1.5 Example for the Companies in the Same Building There are four companies in the same building. They share the broadband network and use the Vigor3300V router to achieve the load balance, security, and VoIP features. In this case, we can define four VLANs including VLAN5, VLAN6, VLAN7 and VLAN8. The subnet of VLAN5 is 192.168.1.0; the subnet of VLAN6 is 192.168.2.0; the subnet of VLAN7 is 192.168.3.0; and the subnet of VLAN8 is 192.168.4.0. Procedure: 1. Refer to A.1 to block LAN-to-LAN communication.
6. In the VLAN8, type “8” to VLAN ID. In the Member field, choose p4. Then choose the “Tagged” for Frame Tag Operation in p4. We can ignore the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from company D. 7. After applying the settings, the web page will be redirect to “reboot” web page. User can ignore it and continue to configure the Network setting. After finishing Network setting, you can execute the reboot procedure. 8.
5.1.6 Example for A Company and Guest A company wants to separate the Engineer Department, Sales Department, Marketing Department and guest to limit their communication with any department to ensure the security. In this case, we can define four VLANs that are VLAN5, VLAN6, VLAN7 and VLAN8. The subnet of VLAN5 is 192.168.1.0; the subnet of VLAN6 is 192.168.2.0; the subnet of VLAN7 is 192.168.3.0; and the subnet of VLAN8 is 192.168.4.0. However, the notebook of guest does not support 802.1Q. Procedure: 1.
6. In the VLAN8, type “8” to VLAN ID. In the Member field, choose p4. Then choose the “Untagged” for Frame Tag Operation in p4. We should configure the PVID to “8”, because the device does not support 802.1Q VLAN. 7. After applying the settings, the web page will be redirected to “reboot” web page. User can ignore it and continue to configure the Network setting. After finishing Network setting, you can execute the reboot procedure. 8. After rebooting, the tagged ports will communicate with 802.
5.1.7 Example for Trunk Usage A company wants to separate the Engineer Department, Sales Department, Marketing Department and other departments to limit their communication with each other to ensure the security. Many employees of the company use some switches supported 802.1Q VLAN to expand the network. In this case, we can define four VLANs that are VLAN5, VLAN6, VLAN7 and VLAN8. Each LAN port is Trunk port which supports multiple VLAN. The subnet of VLAN5 is 192.168.1.0; the subnet of VLAN6 is 192.168.2.
the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from the switch. 6. In the VLAN8, type “8” to VLAN ID. In the Member field, choose p1, p2, p3 and p4. Then choose the “Tagged” for Frame Tag Operation in p1, p2, p3 and p4. We can ignore the PVID (Port VLAN ID), because 802.1q tag will be inserted to the frame from some users. 7. After applying the settings, the web page will be redirected to “reboot” web page. User can ignore it and continue to configure the Network setting.
5.2 Application for VoIP 3300V has two expansion slots; each slot can be plugged into one 4-port VoIP card. The VoIP card involves two kinds of interface: FXS and FXO. You can deploy different VoIP applications according to the requirements. 5.2.1 FXS and FXO FXS (Foreign eXchange Station) and FXO (Foreign eXchange Office) are assembled with a pair. A telecommunications line from an FXO device must be connected to an FXS device. Similarly, an FXS device must be connected to an FXO device.
As for the Private Branch Exchange (PBX), it is more special because it has both FXS and FXO devices at the same time. Outside lines of the PBX are usually connected to the phone line, at this case, the PBX acts as FXO equipment; inside lines of the PBX are usually connected to telephones, so the PBX acts as FXS equipment.
FXO card This card can connect to PSTN, inside lines of PBX and FXS port on FXS cards.
5.2.2 Practical Application of FXS card with PBX By combining the FXS with headquarters’ PBX, it allows the internal telephones in headquarters to communicate with branch's telephones through the Internet. (For detailed configuration, please refer to the part of Practical Application of FXS.) 5.2.
5.2.4 VoIP Basic Protocol Select the communication protocol (SIP or MGCP) and the IP Address (WAN or LAN/VPN) used by VoIP. You need to configure relative settings at first. Please refer to the figure below as an example of Vigor 3300V. Port Settings This page displays the basic settings for each port. Click the Edit icon in the Phone Number page to enter the Edit page. Then you can configure this port.
Port Settings - Port – Edit Configure related VoIP settings for each port respectively.
Speed Dial Setup the Speed Dial Phone numbers, this function is more convenient to dial extension number or IP address. There are 150 entries available at most. Miscellaneous Other related VoIP settings. Tone Settings There are optional built-in 14 groups of tone for different regions, and a group of tone (User Defined) can be configured by users.
QoS Enable this function to ensure the quality of VoIP conversation. The default value is Enable. NAT Traversal When the WAN interface of 3300 is a private IP address, the VoIP traffics must pass through the upper-layer NAT router. User can enable STUN function in order to make VoIP function can work smoothly. Note: The upper-layer router must forward the UDP packets which port number are 5060, 13456~13470 and 49170~49184 to the WAN IP address of 3300V.
Call History It can display 50 groups of calling information. Status Display current VoIP registering status and calling status.
5.2.5 VoIP Examples There are many different kinds of applications about VoIP function. Most of VoIP callings must be via a VoIP Server by registering, except we can dial VoIP number by the IP address directly. We will set up a basic configuration and registration as an example 1. The other examples might be revised based on this example. The VoIP function mainly depends on the requirement and application.
Configuration Example for Vigor3300V 1. Enter VoIP - Protocol page and configure related settings on SIP Configuration. 2. Enter VoIP - Port Settings page, click the Edit icon of port 1. 3. Enter the Port 1 page. This page falls into six sections. Port1 (FXS) Display the port type, enable or disable the port, setup the account, etc. Disable or Enable: By default is Enable. Username & Password: Type the registrar's account 888833 and password. Display Name: Display incoming call's information.
Codec: Setup the voice compression mode and transfer rate, etc. Preferred Codec: Preferred voice compression mode. It will affect the voice quality and the transferred data size. By default is G.729A – 8kbps. Codec Rate: Transfer rate of the voice packets. By default is 20ms. Codec VAD: This feature can reduce the number of transmitted bits and packets during silence periods. But it may slightly affect the voice quality. By default is Disable. CAS: Adjust the volume of the conversation.
4. Set Port 2 ~ Port 8 one by one in turn. Type: Port 1 ~Port 4 are FXS, Port 5 ~Port 8 are FXO. Active: Port 1 ~Port 8 are all active (v=Enable). Group: Port 1 ~Port 8 are Group 1~ Group 8 independently. Username: Phone Number of Port 1 ~ Port 8. Proxy: Port 1, 2, 5, and 6 are registered to iptel Proxy, and Port 3, 4, 7, 8 are registered to fwd Proxy. Codec: Port 1 ~Port 8 all prior use G.729A - 8kbps. 5.
Note: This page will automatically refresh every 6 second, so as to display the latest status. You may click Refresh button to renew immediately. Configuration Example for Vigor2900V 1. Open the Web of 2900V and click VoIP Setup.
Click SIP Related Functions Setup. Setup Port1 and Port2. This page falls into two sections, SIP: Setup relevant SIP Servers used for registration respectively. Ports: Type account and password. After configuration, please click OK to save the settings. 2900V will go to VoIP – Setup page automatically.
2. Click Voice Call Status. 3. Wait one or two minutes (The time depends on SIP Server's response speed and the network condition). Channel: R means Port 1 and Port 2 register successfully. Status: IDLE means there is no conversations on Port 1~ Port 8. Now the configuration is completed.
5.2.7 Example 2- Basic Calling Method We will introduce three basic VoIP calling methods, involving Direct IP Call, Intercommunication with one SIP Proxy Server and Intercommunication with different SIP Proxy Servers. All the settings are based on the VoIP Example 1(Basic Configuration and Registration). Direct IP Call (Call with each other without registration) Connect a telephone into 3300V's Port 1 and 2900V's Port 1 respectively.
Configuration table WAN IP Port Number Phone Number Proxy Codec 3300V 220.135.240.20 7 Port1(FXS) 888833 iptel G.729A 2900V 61.31.167.135 Port1(FXS) 888829 iptel G.729A Furthermore, do NOT enable the Outbound Proxy feature when you set up 3300V and 2900V to use Direct IP Call. (It is not active in the Example 1; please see Figure 30-2 shown below) Otherwise, even if you dial the IP address, the call will be sent to the SIP Proxy Server still.
Configuration Example for Vigor2900V 1. Click DialPlan Setup in the VoIP Setup page. 2. Click Index 1. 3. Enter relevant settings for 3300V's Port 1. Click OK to save the settings. Enable: click (√) to activate the entry. Phone Number: type 3301. Display Name: To facilitate ease differentiation please type 3300V_Port1_IP. SIP URL: Cal lee’s Number@IP, please type 888833@220.135.240.207.
4. Confirm the settings are correct, and then finish the configuration. Start to dial by using telephones. Phone 1 calls Phone 2 --->Press 2901# or 888829*61*31*167*135#. Phone 2 calls Phone 1--->Press 3301#. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out. Or you may wait 3 seconds if you do not press #. With 2900V you can't only dial alphanumeric addresses or @ symbols.
Intercommunication with one SIP Proxy Server (registration) Connect telephones into 3300V's Port 1 & Port 3 and 2900V's Port 1 & Port 2 respectively. Each port needs to register in the SIP Server. Below shows a scenario architecture graph: Configurations between Vigor 3300V and 2900V WAN IP 3300V 2900V 220.135.240.207 61.31.167.135 Port Number Phone Number Proxy Codec Port1(FXS) 888833 iptel G.729A Port3(FXS) 660533 fwd G.729A Port1(FXS) 888829 iptel G.729A Port2(FXS) 660529 fwd G.
Configuration Example for Vigor3300V Enter the VoIP - Speed Dial page and add the second and third group of Speed Dial number. Then click Apply to save the settings and finish the configuration. Start to dial by using telephones. Phone 1 call Phone 3---> Press 888829# or 291#. Phone 2 call Phone 4--->Press 660529# or 292#. Phone 3 call Phone 1--->Press 888833#. Phone 4 call Phone 2--->Press 660533#. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out.
Intercommunication with different SIP Proxy Servers Connect telephones into 3300V's Port 1 & Port 3 and 2900V's Port 1 & Port 2 respectively. Each phone registers to the SIP Server. The settings and scenario are the same as the above example. But they must be set up in conjunction with the Speed Dial. Configuration Example for Vigor3300V Enter the VoIP - Speed Dial page and add the 4th and 5th group of Speed Dial number. Then press Apply to save the settings and finish the configuration.
5.2.8 Example 3 - VoIP over VPN Based on the VoIP Example 1(Basic Configuration and Registration), we will introduce how to dial the VoIP call through an encrypted VPN tunnel. In this example 3300V acts as a bridge accepting incoming VPN connections from the other two routers (2900V and 2200V). The VPN traffic between 2900V and 2200V are all passed through 3300V. These three sites internal networks must be within the same subnet (192.168.X.X). Either site can ping the other two routers.
Configuration table 3300V Headquarters 2900V Branch Offices 220.135.240.207 PPPoE, fixed IP WAN IP 61.31.167.135 PPPoE, dynamic IP 61.230.207.146 PPPoE, dynamic IP 219.81.160.206 PPPoE, fixed IP LAN IP 2200V Teleworker 192.168.33.1 192.168.29.1 192.168.22.1 Internal network 192.168.33.X 192.168.29.X 192.168.22.X Encryption method Preshared Key DES-SHA1 3300 1234 WAN IP 1234 Port Number Phone Number Proxy Codec 3300V 220.135.240.207 Port1(FXS) 888833 G.729A 2900V 61.31.167.
Note: In 3300V firmware v2.5.5, you can only choose WAN or LAN/VPN. The call can be received or dialed just in one direction (WAN or LAN/VPN). Or, select none as Proxy Server for each Port. 2. Enter the VoIP - Port Settings page, now the Proxy entries all display Disable. (If you select none as Proxy Server for each Port, the Proxy entries are blank.) 3. Enter the VoIP - Speed Dial page and input the first and second group of Speed Dial Phone Number. Click Apply to save the settings.
Configuration Example for Vigor2900V 1. Enter VoIP Setup - SIP Related Functions Setup page and change Register via from WAN to LAN/VPN for Port1 and Port2. Press OK to save the settings. Note: Do not set up the Outbound Proxy and Stun Server when calling through VPN. 2. Click DialPlan Setup in the VoIP Setup page and add the first and second group of Speed Dial Phone Number.
Note: Do not set up the Display Name when calling through the VPN with 2900V firmware v2.5.6. Otherwise you can't get ring back and communicate with remote user after getting through. Configuration Example for Vigor2200V 1. Enter 2200V's Web and click VoIP - SIP Related Function page. SIP related function of 2200V 2. Setup Port 1. This page falls into two sections, SIP: Set up the SIP Server used for registration. Ports: Set up the account details.
3. Enter VoIP - DialPlan page and the first and second group of Speed Dial Phone Number. After configuration, please confirm that the VPNs are established and they can communicate with each other. (Please refer to VPN - IPSec - LAN to LAN Usage Example 2). Start to dial by using telephones. Phone 1 call Phone 2---->Press 2901# or 888829*192*168*29*1#. Phone 1 call Phone 3---->Press 2201# or 888822*192*168*22*1#. Phone 2 call Phone 1---->Press 3301#. Phone 2 call Phone 3---->Press 2201# or #192*168*22*1#.
5.2.9 Example 4 - Practical Application of FXS Based on the VoIP Example 1(Basic Configuration and Registration), we will introduce the practical application of FXS. Generally, the practical application of FXS falls into the following two sections. z Connect the telephones (Please refer to VoIP Example 1). Two VoIP equipments call with each other. z Connect PBX's Outside Lines. The usage is the same as that of PSTN line. Different PBX has its own settings and required configuration by you.
Example of lines connections PBX Phone Number Line3(3) Outside Lines 888833 Phone1 Inside Lines 101 Start to dial by using telephones. Phone 1 calls Phone 2---->Press 3, after hearing the dial tone press VoIP number 888829#. Phone 2 calls Phone 1---->Press 888833#, after getting through you will hear the auto reply from the PBX. Then press the extension 101. Note: # indicates termination of the phone number. After pressing #, VoIP is immediately called out.
5.2.10 Example 5 - Practical Application of FXO Based on the VoIP Example 1(Basic Configuration and Registration), we will introduce the practical application of FXO. Generally the practical application of FXO falls into the following two sections: z Connect to PSTN line By connecting 3300V's FXO Port 5 to a PSTN line, VoIP is seamlessly integrated to PSTN line and allows you to call not only the remote VoIP user, but also the remote PSTN user. Also the PSTN user can call the VoIP user.
About VoIP basic settings please refer to VoIP Example 1(Basic configuration and registration) Start to dial by using telephones. Phone 1 calls Phone 3---->Press 888835#. After getting through you will hear the dial tone, then press the PSTN number 87654321#. Phone 2 calls Phone 3---->Press 888835#. After getting through you will hear the Dial tone, then press the PSTN number 87654321#. Phone 3 calls Phone 2---->Press 12345678.
Configuration table between 3300V and 2900V WAN IP 3300V 2900V 220.135.240.207 61.31.167.135 Port Number Phone Number Proxy Codec Port1(FXS) 888833 iptel G.729A Port5(FXO) 888835 iptel G.729A Port1(FXS) 888829 iptel G.729A Suppose the number of PBX's Outside Line is 12345678. One Inside Line is connected to a telephone with the extension 101. If you want to use PSTN from the extension, you must firstly press 0, and then dial the phone number.
