Billion Electric Company 7402NX Bedienungsanleitung

Last Revision Date: 28-0 5-2008 BiP AC 7402NX(L) 802.1 1n 3G/ADSL2+ (VPN) Firewall Rou ter User ’ s Manual[...]

T able of Content s i T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s CHAPTER 1: INTRODUCTION ............................................................................................................. 3 INTRODUCTION TO YOUR ROUTER ................................................................................................. 3 FEA [...]

T able of Content s iii DHCP Server .................................................................................................................................. 39 W AN - W id e Ar ea Network .................................................................................................................. 40 W AN Interface ...................[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 1: Intr o ductio n 3 Chapter 1: Introductio n Introduction to y o ur Router Welco me to the B iP AC 7402NX(L) 802 .1 1n 3G/ ADSL2+ (VPN) Firew a ll Router . The router is an “all-in-one” ADSL router , combinin g an ADSL modem, ADSL router an d Ethernet network sw itch[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 1: Intr o ductio n 4 This protocol is used to enable simple and robust connectivity among s tan d-alone dev ices and PCs from many different vendors. It makes netw ork simple and affordable for users. UPnP architecture leverages T CP/IP and t he Web to enable seamless pro[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 1: Intr o ductio n 5 S tatic and RIP1/2 Routin g It has routing capa bility and suppor ts easy static routing t able or RIP1/2 routing protocol. Simple Net w ork Management Protocol (SNMP) It is an easy way to remotely manage the router via SNMP . W eb based GUI It s uppo[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 2: In st alling th e router 6 Chapter 2: Inst allin g the Router Import ant no te for using th is router Package Content s BiP A C 7402NX(L) 802.1 1n 3G/ A DSL2+ (VPN) Firewa ll Router CD cont aining the on-line manual RJ-1 1 ADSL/ telephone ca ble Ethernet (CA T -5 LAN) [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 2: In st alling th e router 7 The Front LEDs LED Meaning 1 Power Lit when pow er turns ON. Lit in red means the system is failed. To restart the devi ce or connect Billi on for searching suppor t. 2 LAN Port 1X — 4X (RJ-45 connector) Lit when one of LAN por ts connected[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 2: In st alling th e router 8 The Rear Port s Port Meanin g 1 A ntenna Connect the det achable antenna to this port. 2 DSL Connect the supplied RJ-1 1 (“telephone”) cable on t his port when connecting to the ADSL /telephone network. 3 LAN 1X — 4X (RJ-45 connector) C[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 2: In st alling th e router 9 Cabling One of the most common causes of problems is the bad cabling or ADSL line(s). Make sure that all connected devices ar e turned on. On the front of the product is a bank of LEDs. V erify that the LAN Link and ADSL line LEDs are lit. If[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 10 A ny TCP/IP cap able w orkst ation can be used to communicate with or through the rou ter . T o configure other types of w orkst ations, please consult the manufacturer’s documen t at ion. Chapter 3: Basic Inst allati on The router can be con f[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 1 1 Connecting Y our Router 1. Connect this router to a LA N ( Local Area Netwo rk) and the ADS L/telephone ( A D SL ) network. 2. Power on the device. 3. Make sure the Power is lit steadily and that the L A N LED is lit. 4. Connect RJ-1 1 cable to [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 12 Configuring PCs i n Wind ows in Win do w XP 1. Go t o St art / Con t rol Panel (in Classic View ). In the Control Panel, double-clic k Network Connections . 2. Double-click Local A rea Connection . (See Figur e 3.1) 3. In the LA N A rea Connectio[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 13 Configuring PCs i n Wind ows 2000 1. Go to S t art / Se ttings / Control Panel . In the Control Panel, double-click Network an d Dial-up Connec tions . 2. Double-click Local A rea (“L A N”) Connection . (S ee Figure 3.5) 3. In the LA N A rea [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 14 Configuring PC in W indo w s 95/98/ME 1. Go to S t art / Se ttings / Control Panel . In the Control Panel, double-click Network an d choose the Con figuration ta b. 2. Select T CP / IP -> NE2000 Comp atible , or the name of any Network Interfa[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 15 Configuring PC in W indo w s NT4.0 1. Go to S t art / Set tings / Control Pane l . In the Control Panel, double-clic k Network and choose the Protocols t ab. 2. Select TCP/IP Protocol and click Properties . ( See Figure 3.12) 3. Select t he Obta [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 16 Factory Default Settings Before configuring your , you need to know the foll owing default set tings. Web Interface (Username and Password) Username: admin Password: admin The default username and passw ord are “ adm in ” and “ ad min ” r[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 17 Information from y our ISP Before configuring this device, you have t o check with your ISP (Internet Service Provider) to f ind out what k ind of serv ice is provided such as DHCP (Obtai n an IP Address Automatically , S ta tic I P (Fixed IP Add[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 3: Basic Inst allation 18 Configuring w ith y our Web Bro wser Open your web browser , enter t he IP address of your router , which by default is 192.168. 1.254 , and click “ Go ”, a user na me and passw ord window prompt will appear . Th e default username and pa ssw[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 19 Chapter 4: Configuration At the configuration hom epage, the left navigation pane where bookmarks are provided links you direct ly to the desired setup pa ge, including: S t atus - ADSL S tatus - 3G S tatus - ARP T able - DHCP T able - Routing T able [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 20 St atus A DSL St atus This section displays the A DSL overall status , which shows a number of help f ul information such as DSP firmware version. 3G St atus This section displays the 3 G Card’ s overall st atus, w hich show s y ou a number of help [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 21 Signal Strength: The sig nal strength bar ind icates current 3G signal strength. Network Name: The network nam e that the device is connected to. Card Name: The name of the 3G card. Card Firmware : The current firmware for the 3G card. Current TX Byte[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 22 Leased T able IP Add ress: The IP add ress that assigned to client. MAC Address: The MAC address o f client. Client Host Name: The Host Name (Co mputer Name) of client. Expiry: The current lease time of client. Routing T able Routing T able V alid: It[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 23 NA T Sessions This section list s all current NA T sessions betw een interface of ty pes external ( WAN) and internal (LAN). UPnP Portmap The section lists all port-mappin g establishe d using UPnP (Universal Plug and Play . See Advanced section of th[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 24 T unnel Connected: W h et her the VPN T unnel is cu rrently connected. Call Connected: If the Call for this VPN en try is currently connected. Encryption: The encry ption type used for this VPN connection. IPSec St atus This shows det ails of your con[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 25 Encryption: The encry ption type used for this VPN connection. Email St atus Details and status for the Email Account you have conf igured the router to check. Please see the A dvanced section of this manual for details on this function. Event Log Thi[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 26 Diagnostic It tests the connection to computer(s) which is connected t o LAN ports and also t he WAN Internet connection. If PING www. google.co m is show n F AIL and the r est is P ASS, you oug ht to check your PC’ s DNS settings is set correctly .[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 27 4. The list b elow has dif f erent mode appli ed for y our choice. Choose 0/33/PP PoE(Recommende d) and click Apply . 5. Please enter “ Username ” and “ Password ” as supplied by your ISP(Internet Service Provider) and click Apply to continue.[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 28 Profile Port: Select the connection mode. There are ADSL and 3G . Encap sulation : Select the encapsula tion mode. The default mode is PPPoE. VPI/VCI : Enter the VPI and VCI information p rovided by your ISP . Username : Enter the username provided by[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 29 7. W ait for the configuration. 8. If connection is successful the following image will be shown . Configuration W he n you clic k this item, you get foll owin g sub-items to configure the ADS L router . - LAN , W AN, System, Fire wall, VPN, QoS, V i [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 30 Y ou can setup member p or ts for ea ch VLAN group u nder Bridge Interface section. From the example, two VLAN groups need to be crea ted. Ethernet: P1 and P2 (Po rt 1, 2). Ethernet1: P3, P4 and Wireless (Port 3, 4, W ireless). Uncheck P3, P4 and W ir[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 31 IP Alias This f unction cr eates multiple virtual IP interfaces on this router . It helps to c onnect t wo or more local networks to the ISP or re mote node. In this case, an internal route r is not required. IP Add ress: S pecify an IP address on thi[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 32 Ethernet Client Fi lter The Ethernet Client Filter support s up t o 16 Eth ernet net wor k machines th at helps you to mana ge your network con trol to accep t traffic from speci f ic auth orized machi nes or ca n r estrict un wanted m achine(s) to ac[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 33 Active PC in LAN displays a list of individual Ethernet device’ s I P Address & MA C Address which connecting to the route r . Y ou can easily by checking the box next to the IP address to be bloc ked or allowed. Then, A dd to insert to the Ethe[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 34 Parameters WLAN Service: Default setting is set to Enable . If you do not have any wireless, 802.1 1n, 8 02.1 1g and 802 .1 1b , device in y our network, select Dis able. Mode: T he de fault setting is 802.1 1b+g+n (Mixed mode). If you do not k now or[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 35 Wireless Secur ity (Wire less Router on ly) Y ou can disable or enable with W P A or W EP for protecting wirele ss network. The default mode o f wireless security is disabled . WP A-PSK / WP A2-PSK Securit y Mode: Y ou can disable or enable with WP A [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 36 WEP WEP Authentication: T o prev ent unauthoriz ed wireless sta tions from ac cessing da ta transmit ted over the network, the route r of f ers secure da ta encry ption, known as W EP . If you require high secu rity for transmissions, there a re two o[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 37 Wireless C lient / MAC Address Filter The MAC Address supports up t o 16 wireless network machines and help s you manage your netw ork control to accept tr af f ic from specific authorized machines or t o r estrict u nwan ted machine(s) to access your[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 38 WPS W PS feature is follo w W i-Fi Alli ance W PS sta ndard and it easily set up security -enabled W i-Fi networks i n the ho me and small o f fice env ironment. It reduce s hal f t he user steps to con f igure a ne t work and s upport s two methods t[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 39 DHCP Server Y ou can di sable or enab le the DHCP (Dynamic Host Co nfiguration P rotocol) server or enabl e the r outer ’s DHCP relay f unctions. The DHCP protocol allows your r outer to dynamically assign IP addresses to PCs on your networ k if the[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 40 W AN - Wide Area Netw ork WA N refers to your W ide Area Network connection, i.e. your r outer ’ s connection to your ISP and the Internet. Here are the items within the W A N section: W A N I nterface , W A N Profile and A DSL Mode . W AN Interface[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 41 Cycle”. The host must be an IP address. W AN Connection-3G Mode In the ADSL mode , as the ADSL is not available(failover/failba ck), it w ill turn to 3G mode for supporting WA N Connection. However , in the 3G Mode, the ADSL ca n not support W AN Co[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 42 W AN Profile PPPoE Conne ction PPPoE ( PPP over Ethernet) provides access control in a manner which is similar t o dial-up servi ces using PPP . Profile Port: Select the profile port ei ther ADSL or 3G . Protocol: The A TM protocol will be used in the[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 43 Idle T imeout: Auto-disconnect the broadband f ir ewall gateway when there is no activity on the line for a predetermined period o f time.     Detail : Y ou can define the destination port and pac ket type (TCP/UDP ) without checking by ti[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 44 NA T: The NA T (Networ k Address Transla tion) f eature allow s multiple u sers to access the I nternet t hr ough a single IP account, sha ring the single IP address. If users on your LAN have public IP addresses and can access the Inte rnet directly [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 45 MPo A Co nnection Profile Port : Select the profile port ei ther ADSL or 3G . Protocol: The A TM protocol will be used in the device. Description: A g iven na me for the connec tion. VPI/VCI: Enter the in formation provi ded by your ISP . A TM Class: [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 46 IPoA Rou ted Connection Profile Port : Select the profile port ei ther ADSL or 3G . Protocol: The A TM protocol will be used in the device. Description: A g iven na me for the connec tion. VPI/VCI: Enter the in formation provi ded by your ISP . A TM C[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 47 Pure Bridge Profile Port : Select the profile port ei ther ADSL or 3G . Protocol: The A TM protocol will be used in the device. Description: A g iven na me for this connec tion. VPI/VCI: Enter the in formation provi ded by your ISP . A TM Class: The Q[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 48 A DSL Mode Connect Mode : This mode will automaticall y detect your ADSL line code, A D SL2+, ADSL2, A nnexM2 and A nnexM2+, A DSL, All. Please keep the f actory setting unless ADSL is detected as the symptom of synchronization proble m . Modulation: [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 49 System Here are the ite ms within the System section: T ime Zone, Remote A ccess, Firmware Upgrade, Backup/Restore, Rest art and User Manageme nt. T i me Zone The router does not have a real t ime clock on board; instead, it uses the Simple Network Ti[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 50 DO NOT power down the router or interrupt the firmware upgrading while it is still in process. Improper ope ration could damage the route r . Remote A ccess T o temporarily permit remote administration o f the router ( i.e. fr om out side your LAN), s[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 51 Backup / Restore These functions allow you to save and backup your router ’s current settings to a f ile on your PC, or t o restore a previously saved backup. This is useful if you wish to experiment with different settings, knowing that you have a [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 52 Rest art Router Click Rest art with option Current Settings to r eboot your router (and restore your las t saved configuration). If you wi sh to restar t the router using the f actory de fault settin gs (for exampl e, af ter a firmware upgr ade or if [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 53 User Management In order to prevent unauthoriz ed access t o your router ’ s configuration interface, it requires all users to login with a pas sword. Y ou can set up multiple user accoun ts, each w ith their ow n passw ord. Y ou are able to Edit ex[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 54 For deleting the user account, you choose Delete option. In the end, you click Edit/Dele te button to delete the chosen user account. Firewall and A cces s Control Y our rout er includes a full SPI ( S ta teful Packet Inspection) firewall f or control[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 55 When using V irtual Serve rs your PCs will be exposed to the degree specified in your Virtual Server settings provided the ports specified are opened in y our firewall p acket filter settings. Firewall : P revents access from outside your n etwork. Th[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 56 add their own filter rules for further access to the Internet.     High/Medium/Low security level: the predefined port f ilter rules f or High, Medium and Low security are display ed in Port Filters of Pac ket Filter . Select either H igh,[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 57 Packet Filter This function is only available w hen the Fi rewall is enabled and one of thes e four s ecurity leve ls i s c hosen (All blocked, Hi gh, Medium and Low). The preset port f ilter rules in the Pac ket Filter must modify accordingly to t he[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 58 Example: Predefined Port Fil ters Rules The predefined port fil ter rules for High, M edium and Low security leve ls are listed. See T able 1. Note: Firewall – A ll Bloc ked/User-defin ed, you m ust define a nd cr eate the port f ilter r ules yourse[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 59 MSN (7001) UDP(17) 7001 7001 YES YES N/A N/A N/A N/A MSN VEDIO (9000) TCP(6) 9000 9000 NO YES N/A N/A N/A N/A Inbound: Internet to LAN ; Outbound: LAN to Internet. YES: Allowed ; N O: Blocked ; N/A : Not Applicable Packet Filter – Add TCP/UDP Filter[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 60 Rule Name Helper: Users-define description to identify this entry or choosing “Select” drop-down m enu to select existing prede fined rules. T i me Schedule: It is self-defined time period. Y ou may specify a time schedule f or your prioritization[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 61 Example: Configur ing your firewall to allow a public ly accessible we b server on you r LAN The p redefined por t filter rule for HTTP (TCP port 8 0) is t he sam e no matter whether the f irewall is set to a high, m edium or low sec urity level. T o [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 62 Configuring Packe t Filter: 1. Click Packet Filte rs . Y ou will then be presented with the predefined port f ilter rules screen (in this case for the low security lev el), shown below: Note: You ma y c lick Edit the predef ined rule instead of Delete[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 63 Inbound and Outbound . Example : Application: Cindy_H TTP T ime Schedule: Always On Source / Destination IP Address( es): 0.0.0.0 (I do not wish to active t he address-filter , i nstea d I use the port-filter) T ype: TCP (Please refer to T able1: Pred[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 64 Intrusion Detection The router ’s Intrusion Detection System (IDS) is used to detect hacker attac ks and intrusion attempts from t he Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and blocked depending on whe[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 65 Default value is 86400 seconds.     DoS Att ack Block Duration : This is the duration for blocking hosts t hat attempt a possible Denial of Servi ce (DoS) at ta ck. Possible DoS attacks this attempts to block include Ascend Kill and WinNuk[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 66 T able 2: Hacker att ack t y pe s recognized by the IDS Intrusion Name Detect Parameter Blacklist T ype of Block Duration Drop Packet Show Log A scend Kill Ascend Kill dat a Src IP DoS Y es Y es WinNuke TCP Por t 135, 137~139, Flag: URG Src IP DoS Y e[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 67 URL Filter URL (Uni form Resou rce Locator – e.g. an address in the form of http ://www .abcde.com or http://www .example.com ) filter rules all ow you to pr event use r s o n your ne twork from accessin g p articular websites by their URL. There ar[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 68 Domains F iltering: T his function chec ks the w hole URL not t he IP address, in URLs accessed against your list of domains to block or allow . If it is matched, the URL request will be sent (T rusted) or dropped (Forbidden). For this function to be [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 69 IM / P2P Blocking IM, short for Instan t Message, is r equired to use client program sof tware that allow s users to communicate, in exchanging t ext message, with other IM users in real time over the I nternet. A P2P application, k nown as Pe er-to-p[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 70 Firewall Log Firewall Log display log information of any unexpected action w ith your firew a ll settings. Check the Enable box to activate the lo gs. Log information can be seen in the S tatus – Ev ent Log a fter enabling.[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 71 VPN - Virtual Private Net w orks (BiP A C 7402NX only) V irtual P rivate Networ ks i s w ays to e stabl ish se cured communication tunnels t o an organiz ation’ s network via t he Internet. Y our router supports thr ee main types of VPN (Virtual Priv[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 72 Authentication Protocol) if you k now which type the server is using ( wh en acting as a client), o r else the authentication t ype you w ant cli ents connecting to you to use (w hen acting a s a server). W hen using P AP , the pa sswo rd is sent unen[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 73 Example: Configur ing a Remote Access PPTP VPN Dial-out Connectio n A company ’s office es tabl ishes a PPTP VPN conn ection with a file serv er located at a separate location. The router is ins talled in th e of fice, connected to a co uple of PCs a[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 74 Configuring the PPT P VPN in the Office Click Configuration /VPN/PPT P . Choose Rem ote A ccess from Connect T yp e drop-down menu. Y ou can either input the IP address (69.121.1 .33 in this case) or hostname to reach the server . Item Function Descrip[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 75 PPTP Connection - L A N to L AN Name: A give n name of the connection . Connection T ype: Remo te A ccess or LAN to LA N. T ype: Check Dial Out if you want your router to operate as a client (connecting to a remote VPN server , e.g. your of f ice serve[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 76 Example: Configur ing a PPTP LAN-to-LAN VP N Connection The branch of f ice est ablishes a PP TP VPN tunnel wi th head of fice to connect tw o private networks ov er the Internet. T he routers are insta lled in the head office and branch of f ices acco[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 77 Configuring PPT P VPN in the Head O ffice The IP add ress 192.168 .1.201 wil l be assigned to the router located in the branch of fice. Please ma ke sure this IP is not used in the head of fice LAN. Item Function Description 1 Name HeadOf fice Giv en [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 78 Configuring PPT P VPN in the Branch O ffice The IP addres s 69.121.1 .33 is the Publ ic IP add ress o f the route r located in head of f ice. If y ou regi stered the DDNS (please refer to t he DDNS section of t hi s manual), you can also use t he doma[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 79 IPSec (IP Security Protocol) A ctive: This function activates or deactiv ates the IP Sec connection. Check Active checkbox if you want the protocol of tunnel to be activated and v ice versa. Note: W hen the Ac tive checkbox is chec k ed, the function [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 80 IPSec VPN C onnection Name: A give n name for the connection (e.g. “connectio n to of fice”). Local Network: Set the IP address, subnet or address range of the local ne twork.     Single A ddress: The IP address o f the local host. [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 81     Content: Input ID’ s in formation, like domain name www .ipsectest.com . Remote ID:     Identifier: Input remote ID’ s inf ormation, li k e domain name w ww .ipsectest.com . Hash Functi on: It is a Message Digest algori[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 82 negotiates and est ablish es SA on behal f of IPSec, an IKE SA is used by IKE.     Phase 1 (IKE): T o issue an initial connection r equest for a new VPN tunnel. The range can be from 5 to 15,000 minutes, and the de fault is 480 minutes . ?[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 83 Example: Configur ing a IPSec LAN-to-LAN VPN Con nection T able 3: Network Configuration and Security Plan Branch Of f ice Head Of fice Local Network ID 192.168.0.0/24 192.168.1.0/24 Local Router IP 69.121.1.30 69.121.1.3 Remote Network ID 192.168.1.0/[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 84 Configuring IPSec VP N in the Head Office Item Function Description 1 Name IPSec_HeadOf f ice Given a name of IPSec connection Local Network Subnet Select Subnet from Local Netw ork drop-down menu. IP Address 192.168.1.0 2 Netmask 255.255.255.0 Head o[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 85 Configuring IPSec VP N in the Branch Of fice Item Function Description 1 Name IPSec_Branch Of fice Given a name of IPSec connection Local Network Subnet Select Subnet from Loca l Network drop-down menu. IP Address 192.168.0.0 2 Netmask 255.255.255.0 B[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 86 Example: Configur ing a IPSec Hos t-to-LAN VPN Connection[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 87 Configuring IPSec VP N in the Office Item Function Description 1 Name IPSec Given a name of IPSec connection Local Network Subnet Select Subnet from Netw ork drop-dow n menu IP Address 192.168.1.0 2 Netmask 255.255.255.0 Head of f ice network 3 Remote [...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 88 L2TP (La y er T w o T unneling Protocol) T wo t ypes of L2 TP VPN are supported Remote Access and LAN-to-LAN ( please refer below for more information.). Fill in the b lank with in formation yo u need and click Add to create a new VPN connection accoun[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 89 A ctive: This function activates or deactiv ates the L2TP connectio n. Check Active chec kbox if you w ant the protocol of tunnel to be activated and v ice versa. Note: W hen the Ac tive checkbox is chec k ed, the function of Edi t and Delete w ill no[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 90 allows two parties t o establ ish a shared secret o ver an unsecured communication channel (i.e. over the Internet). There are three modes, MODP 768-bit, MODP 1024-bit and MODP 1536-bit. MODP stands for Modular Exp onentiation Groups. Pre-shared Key: [...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 91 Example: Configur ing a L2TP VPN - Remote Access Dial-in Con nection A remote wo rker establis hes a L2TP VPN connec t ion wi th the head of fice using Mi crosoft's VPN Adapter (included wi th Windows XP/2000/M E, etc.). T he router is ins talled [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 92 Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assi gned to t he r emote worker . Please make sure this IP is not used in the O ffice LA N. Item Function D escription 1 Name VPN_L2TP G iven a name of L2TP connection 2 Co[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 93 Example: Configur ing a Remote Access L2TP VPN Dial-out Con nection A company’ s of fice establi shes a L2TP VPN connection with a f ile server located at a sep arate location. The router is ins talled in th e of fice, connected to a co uple of PCs a[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 94 Configuring the L2T P VPN in the Office Item Function Description 1 Name VPN_L2TP Giv en name of L2TP con nection 2 Connection T ype Remote Access Select Remote Access fr om Connection Type drop-down menu T ype Di al out Select Dial out from Type drop[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 95 Example: Configur ing your Router to Dial-in to the Server Currently , Microsoft W indow s operation system does not support L2TP incoming service . Additional softw are may be required to set up your L2 TP inc oming service. L2TP Connection - L A N to[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 96 Secret: The secure passw ord leng th should be 16 characters which may include numbers and characters. A ctive as default route : As the connection type is LAN to LAN , this function w ill become to disabl e. Remote Host Name (Optional): Enter hostnam[...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 97 Example: Configuring L2TP LAN-to-LAN VPN Conne ction The branch of f ice est ablishes a L2TP VPN tunnel wi th head of fice to connect tw o private networks ov er the Internet. T he routers are insta lled in the head office and branch of f ice accordin [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 98 Configuring L2TP VPN in the Head Office The IP address 192.168.1.200 will be assigned to the router located in the branch of fice. Please make sure this IP is not used in the head of fice LAN. Item Function Description 1 Name HeadOf fice Given a name [...]

Billion BiP AC 7402NX(L) 802.1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 99 Configuring L2TP VPN in the Branch Office The IP addres s 69.121.1 .33 is the Publ ic IP add ress o f the route r located in head of f ice. If y ou regi stered the DDNS (please refer to t he DDNS section of t hi s manual), you can also use t he domain [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 100 QoS - Quality of Service QoS function helps you to control your network traffic for each application from LAN (Ethernet and/or W ir eless) to WAN (Intern et). It facilitates you to control the di fferent quality and speed of through put for each appl[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 101 Note: To be sure the router(s ) in the backbones network have the capab ility in executing and check ing t he DSC P through-out the Q oS netwo rk. T able 4: DSCP Mapping T able DSCP Mapping T able (Wireless) A DSL Router S t andard DSCP Disabled None[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 102 Outbound IP Throttl ing (LA N to W AN) IP Throttling allows you t o limit the speed of IP traf f ic. The v alue entered wi ll limit the speed of the application that you set to the specified val ue’ s multiple o f 32kbps. Name : User-define desc ri[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 103 Inbound IP Throttling (W AN to LA N) IP Throttling allows you t o limit the speed of IP traf f ic. The v alue entered wi ll limit the speed of the application that you set to the specified val ue’ s multiple o f 32kbps. Name : User-define desc ript[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 104 Example: QoS for you r Network Connection Diagra m Information and Set tings Upstream: 928 k bps Downstream: 8 M bps V oIP User : 192.16 8.1.1 Normal Users : 192.1 68.1.2~192.168.1.5 Restricted User: 192.168 . 1.100 Restricted PC Normal PCs V oIP[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 105 0 10 0 20 0 30 0 40 0 50 0 kbps VoI P/ V PN HIGH Ot he rs NO RMA L Res tricte d LOW Th rough put VoIP/V PN HI GH Others NOR MA L Re st rict ed LOW[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 106 Mission-critical application Mostly the VPN connection is mission-critical application f or doing data exchange between head and branch of fice. The mission-critical appli cation must be sent out s moothly w ithout any dropping. Set priority as hi gh[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 107 W it h above settings that help to limit u tiliz ation of up stream of FTP . Time schedule also help you to only limit utilization at daytime. A dvanc ed setting by using IP throttling W it h I P throttling you can speci f y m ore de tail for al loca[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 108 downstream bandw idth. T he settings bel ow help y ou to limit bandwid th for the restric ted application.[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 109 Virtual Serv er (known as P ort Forwarding) In TCP/IP and UD P ne t wor ks a port is a 16-bit nu m ber used to identi fy w hich app lication progra m (usually a server) incoming connections should be delive red to. Some ports have numbers t hat are p[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 10 A dd Virtual Server Because NA T can act as a “natural” Internet f irewall, your router protects your network from being accessed by outside users when using NA T , as all incoming connection attempts will point to your router unless you speci f[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 1 1 Example: If you like to remote accessing your Router through the Web/HTTP at all time, you would need to enable port number 80 ( Web/HTTP) and map to Router’s IP Address. T hen all incoming HTTP request s f rom you (Remote si de) wi ll be forward[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 12 Edit DMZ Host The DMZ Host is a local computer exposed to the I nternet. W hen setting a particular internal IP address as the D MZ Host, all incoming packets w ill be checked by t he Firewall and N A T algorithms then p assed to the DMZ host, when [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 13 Edit One-to-One NA T (Netw ork Address T ranslation) One-to-One NA T maps a specific priv ate/local IP address to a global /public IP address. If you have m ultiple public/ WAN IP addresses f rom y ou ISP , y ou are eli gible for One-to- One NA T to[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 14 application. M ost applications wi ll use TCP or UD P; T i me Schedule: U ser-de fined time pe riod to enable you r virtual server . Y ou may sp ecify a time schedule or Always on for the usage of this Vi rtual Server Entry . For setup and detail , [...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 15 Example: List of some well- known and registered por t numbers. The Internet Assigned Numbers Authority (IANA) is the central coordinator for t he assignment of unique parameter value s for Internet protocols. Port numbers range f rom 0 to 65535, bu[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 16 Time Schedule The T ime Schedule supports up to 16 time slot s w hich help s y ou to manage your Internet connectio n. I n each time profil e, y ou may schedule specific day(s ) i.e. Mond ay throu gh Su nday to restric t or allow in g the usage of t[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 17 Configuration of T ime Schedule Edit a T i me Slot 1. Choose any T ime Slot (ID 1 to ID 16) to edit, clic k Edit radio button . Note: W atch it carefully, the da ys you have se lected will present in cap ital lette r. Lower case letter s hows the da[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 18 A dvanc ed Configuration options w ithin the A dvanced section are for users who wi sh to take adv anta ge of the more advanced f eatures of the router . Users who do not understand t he features should not attempt to reconfigure their route r , unl[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 1 19 Dynamic DNS The Dynamic DNS function a llows y ou to al ias a d ynamic IP address to a s tatic hostname, allow ing users whose I SP does not assign them a static IP address to u se a domain name. This is especially useful for hosting servers via you[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 120 Check Email This function allows you to have the router check your POP3 mailbox f or new Email messages. The Mail LED on your router will light when it detects new messages waiting f or dow nload. Y ou may also view the status of t his f unction usin[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 121 Device Managemen t The Dev ice Management advanced configuration settings allow you to control your router ’s security options and dev ice monitoring features. Device Host Name Host Name: Give a na me for it. (The Host Name canno t be used w ith on[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 122 Universal Plug and P lay (UPnP) UPnP of fers peer-to-peer netw ork connectivi ty for PCs and other netw ork devi ces, along with control and data transfer between devices. UPnP offers many advantages for users running NA T routers through UPnP NA T T[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 123  TCP group  UDP group  EGP (not appli cable)  T ransmission  SNMP group From RFC1650 (Ethe rLike-MIB):  dot3S tats From RFC 1493 (Bridge MIB):  dot1dBase group  dot1dTp group  dot1dS tp group (if configu red as spannin g tr[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 124 IGMP IGMP , known as I nterne t Group Management Protocol , is used to management hosts from multicas t group. IGMP For w arding: Acce pting multicast p acket. Default is set to Enable. IGMP Snoop ing: Allowing switched Ethernet to check and make cor[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Chapter 4: Configurati on 125 Logou t T o exit the rou ter ’s w eb interface, choose Logout . Please ensu r e that you have saved the con figuration settings before you lo g out. Be aware that the router is restricted to only one PC accessing the configuration web pages at a ti[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Appendix A: Product Support and Cont act Informati on 126 Chapter 5: T roubleshoo ting If the router is not functioning properly , f irst check this chapter f or simple troubleshooting before contacting your service prov ider or Billion suppor t. Problems st arting up the route r[...]

Billion BiP AC 7402NX(L) 802 .1 1n 3G/A DSL2+ (VPN) Fire w all Router Appendix A: Product Support and Cont act Informati on 127 A PPENDIX A : Product Support and Cont act Inf ormation Most problems can be solv ed by referring to the T roubleshooting sectio n in the User ’ s Man ual . If you cannot resolve the problem with the T roublesh ooting ch[...]