Questions[draytek](server)

I've setup a Draytek 3510 IP PBX with 10 VigorPhone 350 handsets. It's all connected through an unmanaged 48port gigabit switch - all structured cabling except patch leads are Cat6. Dhcp is handed out by a Linux server. All PC's and phones are on the same LAN, in the same subnet. Outgoing calls are made through 4 channels of ISDN2e, using th Draytek FXO ISDN card.

I've not setup an IP PBX before. Probably due to inexperience, I'm getting a lot of echo and delay on the phone lines. So, a few questions:

1. Should the phones be running through a different switch to the PC's?
2. Which codec should I be using to avoid echo and delays? (spec here: http://www.draytek.co.uk/products/vigorippbx3510.html)
3. Are there any other best practices a novice IP PBX'er should follow?

Thanks for your help....

I'm a bit of a VPN newbie, so please go easy on me ...

I'm trying to use the VPN trunking capabilities of the DrayTek Vigor 2930 firewall to bond two IPSec VPN connections to a Cisco ASA 5520 device and I'm getting myself tied in knots and hope someone here with more knowledge / experience can help.

I have a remote site with two ADSL connections and the DrayTek box. The main office site has the Cisco ASA device. I am able to setup a single IPSec connection between the two sites on either of the ADSL connections' public IP addresses, but as soon as I try to use the VPN bonding, nothing works. The VPN tunnels are both still up, but the traffic is getting lost somewhere. I suspect it's due to the ASA not knowing how to route the traffic back over the VPN - one minute, traffic from my remote office's network is coming from public ip address #1, the next it's coming from public address #2 and it doesn't know what to do. Well, that's my newbie impression of what's going wrong, but I don't really know:

1. If this is really what's happening

2. If what I'm trying to do (bond two VPN connections from a single remote network to improve the bandwidth / resiliency) is possible with the kit I've got

Could anyone help?

I have a Draytek Vigor 2820 router which is connected to our ADSL provider (British Telecom, BT).

We currently have one static IP address which is accessible from anywhere outside of our network and points at a simple web server on port 80.

We have just been given 5 more static IP addresses which I would like to point at five servers that have static IP's.

As an example:

Current static IP -      80.123.123.123
New Static IP's   -      100.100.100.100-105


Server IP's       -      192.168.1.129-133

I have confused myself completely between NAT addresses, static routes and WAN IP aliases. If anyone can give me a clear idea of what I need to do it would be greatly appreciated.

I know this one is a tricky one because the problem could potentially be caused by quite a few different things. However maybe you've come across something similar or have some hints or tips of how I may be successful in debugging the current setup.

Basically we are running a small/medium sized office network with the current setup:

1. Load balancer (Draytek Vigor 3300)
2. Inside the load balancer we have 2 Cisco managed switches
3. The load balancer is connected to 3 routes which supply the connection to the internet.

The problem is that every now and then the network(LAN and External) either slows down considerably, or the LAN is fine but external traffic comes to a complete standstill. This doesn't even occur in set intervals, we sometimes go weeks without noticing any problems. Restarting the load balancer solves the issue until the next time it happens.

Now, I appreciate that this is near impossible to solve without actually looking at the setup however I thought that maybe someone had been in a similar situation before or has any ideas what the problem might be.

If you need any more information please let me know

Currently we have a Vigor 3300 router that acts as our VPN server. At the moment we set up connections for home workers manually in the device.

What I would like to do is remove this extra step and instead allow them to use their Active Directory credentials to login to the VPN. I understand RADIUS is the way to do this. Unfortunately the manual for the Vigor is quite cryptic, although it give details on how to set up the unit itself I am unsure about how I set up the actual RADIUS server.

Can any one offer some generic advice on how to do this, or point to a resource on the internet that is idiot proof.

Much appreciated.