Vigor 3200 v3372更新

[門神]

Vigor 3200 v3372更新

- 1 -
NO:AP1101-2 V.1
Release Note for Vigor3200 Series
Firmware Version: 3.3.7.2 v3372
Built Date: July 17, 2012
Applied Models:
Vigor3200/Vigor3200n
Vigor3200 Series is a broadband router with multi-WAN feature. It integrates IP layer QoS, NAT
session/bandwidth management to help users control works well with large bandwidth.
By adopting hardware-based VPN platform and hardware encryption of AES/DES/3DES, the router
increases the performance of VPN greatly, and offers several protocols (such as IPSec/PPTP/L2TP)
with up to 64 VPN tunnels.
New Features
.. Support Common E-mail / Send Syslog via email.
.. Support hardware MD5/SHA1 encryption.
.. Allow Mail Alert to send emails with VPN notifications.
.. Support LAN2/3/4 subnet for VPN and Remote Access >> PPP General Setup for
Dial-In Users.
.. Support System Maintenance > Login Customization.
.. Support three different LDAP binding methods (simple, anonymous and regular).
.. Support group configuration for SSL VPN. With this, you may specify and detail the
applications and the authentication methods for different groups of user accounts.
.. Support LDAP over SSL connection (LDAPs). It will secure LDAP communication with
an SSL tunnel.
.. Support multiple profiles for LDAP/AD. The administrator may use them for binding
different groups of users (for example, staff from different departments).
Improvement
.. Improved: Safari browser doesn’t work with user management.
.. Improved: Support browsing LDAP/AD tree and entries.
.. Improved: Add new DDNS providers (UBDdns, Oray, and Peanut Shell )
.. Improved: Support ZTE MF190J modem.
.. Improved: Improve VPN Profile web user interface.
- 2 -
.. Improved: Support RADIUS parameters setting for TR-069.
.. Improved: Support Maintenance >> SysLog / Mail Alert Setup parameters setting for
TR-069.
.. Improved: Modify the default pool size of LAN DHCP server from 50 to 150.
.. Improved: Add a "Protocol" column in NAT >> Port Redirection page.
.. Improved: DHCP table shows many additional DHCP entries when LAN subnet mask is
changed.
.. Improved: The SNMP server only reports details for WAN1 & 2.
.. Improved: Modify some SNMP information for LAN status.
.. Improved: Add a new telnet command "srv dhcp custom_option" which allows a user to
enter user-defined DHCP option.
.. Improved: Support disable/enable user mode on WUI. The factory default setting is
disabled.
.. Improved: Improve the compatibility with VigorACS SI v1.08 and after.
.. Corrected: PPPoE WAN with VLAN does not work.
.. Corrected: The system cannot determine which LAN subnet shall be regarded as the static
route in LAN>>Static route, if there are three LAN Subnets configured and VLAN1 is
enabled.
.. Corrected: Only 20 port redirection rules can work simultaneously although Vigor 3200
supports 40 rules.
.. Corrected: The index 21~40 for Open Ports do not work.
.. Corrected: Using the telnet command will not able to add more than 20 port redirections.
.. Corrected: Schedule setting does not work for WAN3/WAN4.
.. Corrected: Data Flow Monitor WAN sessions does not display values (---).
.. Corrected: Data Flow Monitor shows incorrect Session Limit value.
.. Corrected: WAN status shows “down” when the WAN connection detection is set as
"ping detection".
.. Corrected: The WAN load-balance failover can not work well when there are more than
three WANs.
.. Corrected: QoS function does not sort in correct service type.
.. Corrected: The user can not access Vigor3200 (http, https) through DMZ port when he
disables 802.1q on LAN.
.. Corrected: DHCP for DMZ port can not assign IP to stations when 802.1q is enabled.
.. Corrected: The bandwidth limit for DMZ range can not be set.
.. Corrected: The session limit for DMZ host can not be set.
.. Corrected: PCs in VLAN1/VLAN2 cannot login Vigor3200's Web UI but can use Telnet
to configure the router.
.. Corrected: User-Based mode of user management does not work if HTTPS management
port has been changed.
.. Corrected: WAN cannot get IP from DHCP server when Block Fraggle Attack is checked
- 3 -
in Firewall>>DoS Defense.
.. Corrected: Firewall can not block internal routing subnet packets.
.. Corrected: When authenticated by RADIUS server with options MS-CHAP and MPPE
encryption, the router does not get the session key.
.. Corrected: VPN assigns wrong IP when the subnet is smaller than /24 and the DHCP
server is disabled.
.. Corrected: Cannot login web user interface successfully through VPN tunnel (but it works
through Telnet).
.. Corrected: Ping detection would be failed when target IP and gateway are in the same
subnet.
.. Corrected: RIP over VPN does not work.
.. Corrected: My WAN IP setting does not work for PPTP in VPN NAT mode.
.. Corrected: Buffer leakage occurs when IPSec Aggressive mode is used and set with local
IP address.
.. Corrected: VigorPhone350 can not be registered behind NAT after one or two weeks
later.
.. Corrected: When HTTPS is disabled for User Management (with port setting 443 for
HTTPS, port setting 443 for SSL VPN), the PC in WAN cannot use Smart VPN Client
utility to build SSL Tunnel.
.. Corrected: An URL block profile is created with keyword object “ebank.bot.com”.
However, the Syslog still displays http://ebank.bot.com.tw when a user visits
https://ebank.bot.com.tw after enabling Syslog.
.. Corrected: Remove "Ultrasurf" from WUI.
.. Corrected: URL Content filter only sporadically blocks the configured file extension.
.. Corrected: When using UCF (e.g., keyword object is set as “A”) is used, then, not only
website A , but also other website will be blocked.
.. Corrected: Online Status shows wrong value for Secondary DNS.
.. Corrected: Always shows LAN1 while any static route for LAN2/3/4 is set.
.. Corrected: FTP in active mode data plan doesn't work well when the user management is
enabled.
Known Issue
.. None
- 4 -
Notes
Modifications
.. None