Billion Electric Company BiPAC 8500/8520 manual

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Last re vision 1 1-08-08 BiPAC 8500/8520 SHDSL VPN Firewall Bri d ge/ Router BiP AC 8501/8521 SHDSL.bis (VPN) Fi rew all Bri d ge/Router User Manual[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router i T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s C C H H A A P P T T E E R R 1 1 : : I I N N T T R R O O D D U U C C T T I I O O N N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

ii NA T Sessions ............................................................................................................................... 34 Diagnostic ..................................................................................................................................... 34 UPnP Portmap .........................................[...]

[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 1: Introduction 1 Chapter 1: Introductio n Introduction to y o ur Router W el come to the Billion BiPAC 8500 / 8501/ 8520/ 8521 SHDSL Router. Your SHDSL rou ter is an “all-in-one” unit, co m bining an SHDSL modem, SHDSL router an d Ethe rnet network sw itch, prov[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 1: Introduction 2 devices. W ith this feature enabled, users can now connect to Net meeting or MSN Messenger seamlessly . Network Address Translation (N A T) Allows multi-users to access o utside resources such as the Internet simultaneously with one IP address/one I[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 1: Introduction 3 Rich Packet Filtering Not only f ilters the packet based on IP address, but also based on P ort numbe rs. It will filter packets from and to t he Internet. It also provi des a h igher level of security control. Dynamic Host Configuration Protocol (D[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 4 Chapter 2: Inst alling the Router Import ant note for using thi s Router Package Content s SHDSL Firewall Bridge/Router (BiP AC 8500/8520) or SHDSL.bis Firew all Bridge/Router (BiP AC 850 1/8521) CD-ROM containing the online manual RJ-1 [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 5 The Front LEDs of BiP A C 8500 LED Meaning 1 LINE Lit when successfully connected to SHDSL line and when it is synchronized. 2 LAN Port 1X — 4X (RJ-45 conne ctor) Lit when connected to an E thernet device. Green for 100Mbps; Orange for[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 6 The Front LEDs of BiP A C 8520 LED Meaning 1 2 LINE 1 & 2 Lit when successfully connected to SHDSL line and when it is synchronized. 3 LAN Port 1X — 4X (RJ-45 conne ctor) Lit when connected to an E thernet device. Green for 100Mbps[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 7 The Front LEDs of BiP A C 8501 LED Meaning 1 PWR Lit when power is ON. 2 SYS Lit when the system is read y . 3 LAN Port 1X — 4X (RJ-45 conne ctor) Lit when connected to an E thernet device. Green for 100Mbps; Orange for 10Mbps. Blinkin[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 8 The Front LEDs of BiP A C 8521 LED Meaning 1 PWR Lit green when power is ON. 2 SYS Flashes when the system is being started. Then lit green when the system is ready . 3 LAN Port 1X — 4X (RJ-45 conne ctor) Lit when connected to an E the[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 9 The Rear Port s of BiP A C 8500 / 8520 Port Meaning 1 Power Switch Power ON/OFF switch 2 PWR Connect the supplied power adap ter to this jack. 3 RESET T o be sure the device is being turned o n  press RESET button for: 1-3 seconds : q[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 10 The Rear Port s of BiP A C 8501 Port Meaning 1 Power Switch Power ON/OFF switch 2 PWR Connect the supplied power adap ter to this jack. 3 RESET T o be su re the device is being turned on->press RESET button for: 1-3 seconds : quick r[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 1 1 The Rear Port s of BiP A C 8521 Port Meaning 1 Power Switch Power ON/OFF switch 2 PWR Connect the supplied power adap ter to this jack. 3 RESET T o be su re the device is being turned on->press RESET button for: 1-3 seconds : quick [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 12 Cabling One of the most common causes to problem is bad cabling or SHDSL line(s). Make sure t hat all connected devices are turn ed on. On the front p a nel of the product is a row of LEDs. V erify that the LAN Link and SHDSL line LEDs [...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 3: Basic Inst allation 13 Chapter 3: Basic Inst allation The router can be configured with your web browser . A web browser is in cluded as a standard application in the following operatin g systems: Lin ux, Ma c OS, W indows 9 8/NT/2000/XP/Me, etc. The product provides an easy [...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 3: Basic Inst allation 14 Netw ork Configuration For Windo w s V ist a 1. Go to St art . Click on Network . 2. Then click on Network and Sharing Center at the top bar . 3. W hen t h e Network and Sharing Center window pops up, select and click on Manage network connections on th[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 15 5. Select Internet Protocol V ersion 4 (TCP/IPv4) then click Properties . 6. In the TCP/IPv4 properties window , select the Obtain an IP a ddress automatically and Obt ain DNS Server address automatically radio buttons. Then click OK to exit[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 16 For Windo w s XP 1. Go to Start / Control Panel (in Classic View) . In the Control Panel, double-click on Network Connections 2. Double-click Local A rea Connection . 3. In the Local A rea Connection Status windo w, click Properties .[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 17 4. Select Internet Protocol (TCP/IP) and click Properties . 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration.[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 18 For Windo w s 2000 1. Go to Start / Settings / Control Panel . In the Control Panel, double-click on Network and Dial-up Connections . 2. Double-click Local Area Connection . 3. In the Local A rea C onnection Status window click Properties .[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 19 4. Select Internet Protocol (TCP/IP) and click Properties . 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration.[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 20 For Windo w s 98/M e 1 . Go to Start / Settings / Control Panel . In the Control Panel, double-click on Network and choose the Configuration tab. 2. Select TCP/IP ->NE2000 Compatible , or the name of your Network Interface Card (NIC) in y[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 21 4. Then select the DNS Configuration tab. 5. Select the Disable DNS radio button and click OK to f inish the configuration.[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 22 For Windo w s NT4.0 1. Go to Start / Settings / Control Panel . In the Control Panel, double-click on Network a nd choose the Protocols tab. 2. Select TCP/IP Protocol and click Properties . 3. Select the Obtain an IP address from a DHCP serv[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 23 Factory Default Settings Before configuring your route r , you n eed to know the following default settings. Web Interface (Username an d Passw ord): Userna me: admin Password: a dmin The default username and p assword are “ admin ” and [...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 3: Basic Inst allation 24 Information from y our ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of service is provided su ch as DHCP (Obtain an IP Address Automatically , S tatic IP (Fixed IP Address) and PPP[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 25 Configuring w ith y our W eb Browser Open your web browser , enter the IP address of your router , which by default is 192.168.1.254 , and click “ Go ”, a user name and password windo w prompt will appear . The default username and p a s[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 26 Chapter 4: Configuration At the configuration hom ep age, the left navigation pane where bookm arks a re provided links you directly to the desired setup page, including: St atus - ARP T ab le - Routing T able - DHCP T able - PPTP S t atu s - IPSec S tatus -[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 27 St atus ARP T abl e This section d isplays th e router ’s ARP (Address Resolution Protocol) T able, which sho ws th e mapping of In ternet (IP) addresses to Ethernet (MAC) addresses. This is a useful & quick way to dete rmine the MAC addres[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 28 Routing T able Routing T able V alid: It indicates a successful routing status. Destination: The IP add ress of the destination network. Netmask: The destination netmask address. Gateway/Interface: The IP address of the gateway or existing interf ace that th[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 29 DHCP T able Leased: The DHCP assigned IP addresses information. IP Ad dress: A list of IP add resses of devices on your LAN (Local Ar ea Network). Expired: The expired IP addresses information. Permanent: The fixed host mappin g information Leased T a ble IP[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 30 PPTP S t atus (BiP A C 8500/ 8501/ 8520 Onl y) This shows details of your configured PPTP VPN Connections. • Name: The name you assigned to the particular PPTP connection in your VPN configuration. • T y pe: T he type of connection (dial-in/d[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 31 IPSec St atus (BiP A C 8500/ 8501/ 8520 O nly) This shows details of your configured IPSec VPN Connect ions. • Name: The name you assigned to the particular VPN entry . • A cti v e: W hether the VPN Connection is currently A ctive. • Connec[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 32 L2TP S t atus (BiP AC 8500/ 8501/ 8 520 Only) This shows details of your configured L2TP VPN Connections. • Name: T he name you assigned to the particular L2TP connection in your VPN configuration. • T y pe: T he type of connection (dial-in/d[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 33 Event Log This page displa ys the router ’s E vent Lo g entries. Major events a re logged to this window , su ch as when the router ’ s ADSL co nnection is disconnected, and Firewall events such as when you have enabled Intrusion or Blockin g Logging in [...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 34 NA T S essions This section lists all curren t NA T s ession s between i nt erface of types e xternal (WAN ) and internal (LAN). Diagnostic It te st s the connection of computer(s) which is co nnected to LAN ports and a lso the WAN Internet connection. If PI[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 35 UPnP Portmap The section lists all port-mapping established using UP nP (Universal Plu g and Play). Please see the Advanced se ction of this manual for m ore details on UPnP and the router ’ s UPnP configuration options.[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 36 Quick S tart For detailed instructions on configuring your WA N settings, p lease see the W A N section of this manual. Usually , the only de tail s you will ne ed for the Quick S tart wizard to get you online are your login (often in the form of username@is[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 37 Select the desired option f rom the list and click A p ply to retu rn to the Quick S tart interface to continue configuring your ISP connection. Please note that the conte nt s of this list will vary , depending on what is supported by y ou r ISP[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 38 Configuration W hen y ou click this item, you will get the following sub-items to configure your router: LAN, W AN, System, Firewall, VPN (not available in 8521), QoS, Virtual Server , Time Schedule and A dvan ced These functions are described be[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 39 Edit Ethernet Interface Parameter Click on a specific Ethernet you tha t y o u wish to edit its interface parameter under the Bridged Interface section. Y ou can also edit the Ethernet Interface parameter such as its Acceptable Frame T ype; Filter T ype or P[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 40 IP A lias This function supports the creation of multiple virtual IP interfaces on this router . It helps to connect two or more local ne tworks to the ISP or a remote node. In this case, an internal router is not required. Click A dd to add a ne[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 41 Ethernet Client Fi lter The Ethernet Client Filter supports up to 16 Ethernet network mach ines that helps you to manage your network con trol t o accept t raf fic from specific authorized ma chines o r to restrict unwanted machine(s) to a ccess your LAN. Th[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 42 Active PC in LAN displays a list of IP Ad dress & MAC Addres s of ea ch individual Ethernet device which is connected to the router . Y ou can check the box next to the IP address to b lock or allow . Then, click Add to insert to the Ethernet[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 43 Port Setting This section allows you to configure th e settings for the router ’s Ethernet ports to solve some of the compatibility problem s that may be encountered while connecting to the Inte rnet, as well allowing users to tweak the performance of thei[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 44 DHCP Server Y ou can disab le or e nable the DHCP (Dynamic Host Configuration Protocol) server or enable the router ’ s DHCP relay functions. Th e DHCP protocol a llows your router to dynamically assign IP addresses to P Cs on your network if t[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 45 If you check DHCP Rela y Agent and click Next , t hen you will have to enter the IP ad dress of the DHCP server which will assign an IP address back to the DHCP client in the LAN. Use this function only if advised to do so by y o ur network admin[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 46 W A N (Wide A r ea Netw ork) WAN refe rs to your W ide Area Network connection, i.e. your router ’ s connection to your ISP and the Internet. There are three items within the W A N se ction: ISP , DNS and S HDSL . ISP The factory def ault is PP PoE. If you[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 47 RFC 1483 Routed Conn ections • Description: User-definab le name for the connection. • VPI and VCI: Enter the inf ormation provided by y ou r ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T : Th e NA T (Netw o rk Address T ransla[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 48 given by you our ISP . • RIP: RIP v1, RIP v2, and RIP v2 Multicast. C heck to enable RIP function. • MTU: Maximum T ransmission Unit. The size of the largest datagram (excluding media- specific headers) that IP wi ll attemp t to send through [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 49 RFC 1483 Bridged Connections • Description: User-definab le name for the connection. • VPI and VCI: Enter the inf ormation provided by y ou r ISP . • A TM Class: T he Quality o f Service for A TM layer . • Encapsul a tion method: Select t[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 50 PPPoA R outed Conn ections • Description: User-definab le name for the connection. • VPI/VCI: Enter the informat ion provided by y o ur ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T: T he NA T (Network A ddress T ran slation) f[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 51 Provider (ISP) au to matically or not. Please click Obtain an IP address automatically via DHCP client to enable the DHCP client function or click S pecify a n IP address to disable the DHCP client fun ction, a nd specify th e IP address manually[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 52 A dvanc ed Options (PPPoA) • LLC Header: Select encapsulation mode, true for using LLC or false for using VC-Mux. • Create Route: T his setting specifies whether a route is to be added to the system after IPCP (Internet Proto col Control P ro[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 53 IPoA Routed Connections • Description: User-definab le name for the connection. • VPI/VCI: Enter the informat ion provided by y o ur ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T : Th e NA T (Netwo rk Add ress T ran[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 54 • RIP: RIP v1, RIP v2, and RIP v2 Multicast. C heck to enable RIP function. • MTU: Maximum T ransmission Unit. The size of the largest datagram (excluding media- specific headers) that IP wi ll attemp t to send through the interface. • TCP [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 55 PPPoE Connectio ns • Description: User-definab le name for this connect ion. • VPI/VCI: Enter the informat ion provided by y o ur ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T : Th e NA T (Netwo rk Add ress T ran sl[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 56 alphanumeric characters (case sensitive). T his will usually b e in t he format of “username@ispname” instead of simp ly “ username”. • Password: Ente r the password provided by your ISP . Y ou can input up to 128 alphanumeric character[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 57 A dvanc ed Options (PPPoE) • LLC Header: Selects encapsulation mode, true for using LLC or false for using VC-Mux. • Create Route: This setting specify wheth er a route is to be added to the system after IPCP (Internet Protocol Control Protoc[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 58 PPPoE with Pass- t hroug h Connection s T o acce ss PPPoE with Pass-through Connection: Press Change > PPPoE Routed with Pass- Through > Quick St art PPPoE with pass-through adapts the follow in g method: PPPoE Routed mode + 148 3 Bridge Mo[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 59 • Description: User-definab le name for this connect ion. • VPI/VCI: Enter the informat ion provided by y o ur ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T : Th e NA T (Netwo rk Add ress T ran slation) feature allo[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 60 • Service Name: This item is f or identification p urposes. If it is required, your ISP will provide you the information. Maximum input i s 20 alphanumeric characters. • IP A ddress : specify if the Router can get an IP address from the Inter[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 61 A dvanc ed Options (PPPoE) LLC Header: Select encapsulation mode, true for using LLC or false for using VC-Mux. Create Route: Th is setting specifies whether a route is to be added to the system after IP CP (Internet Protocol Control Protocol) ne[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 62 Discover Prima ry NBNS / Discover Secondary NBNS: T his setting enables/disables whether the primary/secondary NBNS server addre ss is request ed from a remote PPP p eer u sing IPCP . The default setting for this comman d is disabled. Discover Su[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 63 DNS A Domain Name System (DNS) contains a mapping table fo r domain name a nd IP addresses. On the Internet, every h ost h as a unique a nd use r- f riendly n ame (domain name) such a s www .h elloworld.com a n d an IP a ddress. An IP a ddress is[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 64 SHDSL-BiP A C 8500 • Mode: T he S HDSL device can fu nction a s a CPE (Customer Premises Equipment) or CO (Central Office). Select CPE mode when the BiP AC 8500 is connected to your ISP . • Back – to – back: it is a direct connection betw[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 65 • Bit Rate: Display SHDSL line synch speed rate. Click Apply button to apply your chan ges.[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 66 SHDSL – Bi P A C 8520 Standard 4-wired connection: the 4-w ired handshaking procedure that is compliant with IT U-T standard. False 4-wired connection: Th is mode is used when 4-wired connection is disabled.[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 67 Enhanced 4-wired connection: Conexant enhanced 4-wired mo de and compliant with Conexant Legacy codes. Sust a in2W 4-wired connection: This mode is used to auto detect whether the device use s 2- wired connection or 4-wired con nection. • 4-Wir[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 68 Note: W hen select 2-wired mode , on ly Port 1 settings need to be configured and the SHDSL (RJ-1 1 ca ble) must be connected to LINE 1 on the back of the device.[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 69 • Mode: T he S HDSL device can fu nction a s a CPE (Customer Premises Equipment) or CO (Central Office). Select CPE mode when the BiP AC 8520 is connected to your ISP . • Back – to – back: it is a direct connection between two SHDSL devic[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 70 SHDSL – Bi P A C 8501 • Mode : The SHDSL.bis device can function as a CPE (Customer Premises Equipment) or CO. Select CPE mode when the BiP AC 8501 is connecting to your ISP . • A nnex T ype: I t is the DSL operating mode standard. Select A[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 71 SHDSL – Bi P A C 8521 Standard 4-wired connection: the 4-w ired handshaking procedure that is compliant with ITU-T standard. False 4-wired connection: Th is mode is used when 4-wired connection is disabled.[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 72 Enhanced 4-wired connection: Conexant enhanced 4-wired mo de and compliant with Conexant Legacy codes.[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 73 • 4-Wired Connec tion: BiP AC 8521 supports 3 types of SHDSL.bis con nection: St andard, False & Enahnced . Select the type of S HDSL.bis connection from the 4-wired connection drop down menu, then se lect A pp ly to activate the configurat[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 74 System Listed are items within the S y stem se ction: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Rest art and User Management. T i me Zone The router does no t have a re al tim e clo ck on board; instead, it uses the Simple Ne tw[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 75 Remote A ccess T o temporarily permit remote administration of the router (i.e. f rom outside your LAN), se lect a time period the ro uter will perm it rem ote access a nd click Enable. Y ou may chan ge o ther configuration options for the web ad[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 76 DO NOT power do wn the router or interrupt the f irmware upgradin g while it is still in process. Improper operation could dama ge the router . Firmware Upgrade Y our router ’s “firmware” is the software t hat allow s it to operate and provides a ll it[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 77 Backup / Restore These function s allow you to save and to create a backup of your router cu rrent settings to a f ile on your PC, or to restore a p reviously save d setting. This is useful if you wish to e xperi ment with different settings, kn owing that y[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 78 Rest art Router Click Rest a rt with op tion Current Settings to reboot your router (and restore your last saved configuration). If you wish to restart the router using the fa ctory default settings (for e xample, after a f irmware upgrade or if you ha ve sa[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 79 User Management In order to prevent unau thoriz ed access to your rou ter ’s configuration int erface, all use r s are required t o login to t he system with a password. Y ou can set up m ultiple user accounts, each with their own password. Y o[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 80 W hen using V irtual Servers, your PCs will be expose d at a certain degree specified in your Virtual Server settin gs when th e ports specified are opened in your firewall packet filter settings. Firewall a nd A c cess Contr ol Y our router incl[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 81 • Firewall Securi ty a nd Policy (General S ettings) : Outbound direction of P acket Filter rules to prevent unauthorized com puters or applications accessing the Internet. • URL Filter : T o block PCs on your local network from unwanted webs[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 82 Any remote u ser who is atte mpting t o perform this action may result in blocking all the access to conf igure and m anagement of the device from the Internet. General Settings Y ou ca n choo se not to enable Firewall, you will not ab le t o add[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 83 Packet Filter This function is only available when Firewall is enabled and one of th ese f our security leve ls is chosen (All blocked, High, Mediu m and Low). The predefined port f ilter rules in the Packet Filter must mod ify according to the l[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 84 Example: Predefined Port Filters Rules The predefined port f ilter rules for High, Medium and Low security levels are listed. See T able 1. Note : Firewall – All Blocked/User-defined , you m ust define and create the p ort filter rules yourself[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 85 Packet Filter – A d d TCP/UDP Filter • Rule Name: User-define description to identify this entry or click to select existing predefined rules. The maximum name length is 32 characters. • Time S chedule: It is self-defined time period. Y ou [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 86 Packet Filter – A d d Raw IP Filter • Rule Name: A user-defined name for identifying the rule. • Time Schedule: It is self-defined time period. Y ou may specify a t ime schedule for your prioritization policy . Fo r setup and detail, refer [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 87 Example: Configuring your firewall to allow for a publicly a ccessible web server on your LAN The predefined p ort filter rule f or HTTP (TCP port 80) is the same whether the firewall is set to a high, med ium or low security level. T o setup a w[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 88 Configuring Packet Filter: 1. Click Port Filters . Y o u w ill then be presented wi th the predefined port filter rules screen (in this case for the low security level), shown below: Note : Y ou may click Edit th e predefined rule instead of Delete it. This [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 89 5. The new port filter rule for HTT P is shown below : 6. Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP request s on port 80 will be forwarded to the PC running your web server: Note: For how to configure th[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 90 Intrusion Detection The router ’s In trusion Detection System (IDS) is used to detect hacker attacks a nd intrusion attempts f rom the Internet. If the IDS function of the f irewall is en abled, inbound packets a re filtered and blocked depending on whethe[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 91 (PING). For SYN Flo od , ICMP Echo S torm and ICMP flood , IDS wi ll just warn the user in the Event Lo g. It cannot protect against such att a cks. T able 2: T ypes of Hacker attack recognized by the IDS. 1 Detect Parameter Blacklist T y pe of B[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 92 ICMP Flood Max ICMP Count (Default 100 c/sec) Y es ICMP Echo Max PING Count (Default 15 c/sec) Y es Src IP : Source IP Src Port : Source Port Dst Port : Destination Port Dst I P : Destination IP[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 93 URL Fil tering URL (Uniform Resource Locator – e.g. an address in the f orm of http ://www .abcde.com or http://www .e xample.com ) filter rules allow you to prevent u sers on your network f rom accessing particular websites by their URL. There[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 94 dropped. 3. If the packet does not match either of the abo ve two items, it is sent to the remote web server . 4. Ple ase be noted that the comp leted URL, “www” + domain name , shall be specified. For example to block traffic to www .goo gle[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 95 IM / P2P Blocking IM, sho rt f or Instant Message, is required to use clien t p rogram softw are t hat a llows u sers to communicate, in exchanging te xt message, with other IM users in real time o ver the Internet. A P2P application, known as Pe[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 96 Firewall Log Firewall Log displays log information of all unexpected action take n by your firewall settings. Check the Enable box to a ctivate the logs. Log information can be seen in the St atus – Event Log after enabling.[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 97 VPN (Virtual Private Netw orks) (BiP AC 8500/ 85 01/ 8520 Onl y ) Vir tual Private Networks is a way to est ab lish a secured communication tunnel to an organization’s network via th e Internet. Y our router supports three main t ypes of VPN (V irtual Priv[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 98 PPTP Conn ecti on - Remo te A ccess ( BiP A C 8500/ 8501/ 8520 Only) • Connection Name: A user-defined name for the connection (e.g. “connection to office”). • T y pe: Check Dia l Out if you want your router to operate as a client (connec[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 99 • Mode: Y ou may se lect St ateful or St ateless m ode. The ke y will be c hanged every 256 packets when you select S tateful mode. If you select S tateless m ode, the key will be changed in each packet. • Idle Time : Auto-disconnect the VPN [...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 100 Example: Configuring a Remote Acces s PPTP VPN Dial-out Connection An office of a comp a ny est a blishes a PPTP V PN connection with a file server located at a different location. The router is installed at the office, connecting to a couple of PCs an d Se[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 101 Configuring the PPTP VPN in the Office Y ou can either input the IP address (69.1.121.33 in this case) or the hostname to reach the server . Item Function Description 1 Conne ction Name VPN_PPTP Given name of PPTP connection Dial out Check Dial out 2 Server[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 102 PPTP Conn ecti on - LA N to L A N (BiP AC 8500/ 8501/ 8520 Only ) • Connection Name: A user-define description of the connection. • T y pe: Check Dia l Out if you want your router to operate as a client (connecting to a remote VPN server , e[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 103 connection or you can manually Enable or Di sable encryption. • Key Length: The d at a can b e e ncrypted by MPP E algorithm with 40 bits o r 128 bits. Default is Auto , it is negotiated when establishing a co nnection. 1 28 bit keys p rovide [...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 104 Example: Configuring a PP TP LAN-to-LAN VPN Connection The branch office est ablishes a PPTP VPN tunnel w ith the head office to connect two private networks over the Internet. The routers are installed in the head of f ice and the branch of f ice respectiv[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 105 Configuring PPTP VPN in the Hea d Office The IP address 192.168.1.201 will be assigned to the router located in the branch o ffice. Please make sure this IP is not used in the head of f ice LAN. Item Function Description 1 Conne ction Name HeadO[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 106 connection is always on. Configuring PPTP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in t he head of fice. If you registered the DDNS (please refer to the DDNS section of this ma nual), you[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 107 IPSec (IP Secu rity Protocol) (BiP A C 8500/ 8501/ 8520 Only ) Click Create to create a new IPSec VP N connection account. After y o u h a ve created the IPSec connection, account information wi ll be displayed. (See example above). • Enable / Disa ble : [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 108 IPSec VPN Connection (BiP A C 8500/ 8501/ 8520 Only ) • Connection Name: User-defined name for the connection (e.g. “conne ction to of f ice”). • Local Network: Set the IP address, subnet or address range of the local network. o Single A[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 109 o SHA1: A one-way hashing algorithm that produces a 160−bit ha sh. • Encryption: Select the encryption m ethod f rom the pu ll-down menu. There are several options, DES , 3DES , AES (128, 192 and 256) and NULL . NULL means it is a tunn el o [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 10 A dvanc ed Option This fun ction is only av ailable after finish creating an IPSec a ccount. Click A d vanced Option to change the following settings: • IKE (Internet key Excha nge) Mode: Select IKE mode to Main mode or Aggressive mode. This [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 1 1 more powerful but increase the latency .  DES: S tands fo r Data En cryption S tandard, it uses 56 bit s encry ption method.  3DES: S tands for Trip le Data Encryption S ta n dard, it u ses 168 (56*3) bits encryption method.  A ES: S [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 12 from 0 to 3600 second; 0 se cond disables the function. Ping to the IP Internal (sec) Ping to the IP Action 0.0.0.0 0 No 0.0.0.0 2000 No xxx.xxx.xxx.xx x (A valid IP Address) 0 No xxx.xxx.xxx.xx x(A valid IP Address) 2000 Y es, activate it in e[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 13 Branch O ffice Head Of f ice Local Network ID 192.168.0.0/24 192.168.1.0/24 Local Router IP 69.1.121.30 69.1.121.3 Remote Network ID 192.168.1.0/24 192.168.0.0/24 Remote Router IP 69.1.121.3 69.1.121.30 IKE Pre-shared Key 12345678 12345678 VPN [...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 1 14 Configuring IPSec VPN in the Head Office Item Function Description 1 Conn ection Name IP Sec_HeadOf f ice Given a name of IPSec connection Subnet Check the Subnet radio button IP Add ress 192.168.1.0 2 Netmask 255.255.255.0 Head office network 3 Secure Gat[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 15 Prefer Forward Security None Pre-shared Key 12345678[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 1 16 Configuring IPSec VPN in the Branc h Offiece Item Function Description 1 Connection Name IP Sec_BranchOf f ice Given a name of IPSec connection Subnet Check the Subnet radio button IP Add ress 192.168.0.0 2 Netmask 255.255.255.0 Branch office network 3 Sec[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 17 Prefer Forward Security None Pre-shared Key 12345678 Example: Configuring a IPSec Host-t o-LAN VPN Connection[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 1 18 Configuring IPSec VPN in the Office Item Function Description 1 Connection Name IPSec Given a name of IPSec connection Subnet Che ck the Subnet radio button IP Add ress 192.168.1.0 2 Netmask 255.255.255.0 Head office network 3 Secure Gateway Address (or Ho[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 1 19 L2TP (La y er T w o T unneling Protocol) (BiP A C 8500/ 8501/ 8520 Only) Support t wo types of L2TP VPN, Remote Access and L A N-to-L A N (p lease refer below for more information.). Click Crea te to create a new VPN connection account. After you ha ve cre[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 120 L2TP Connection - Remote A ccess (BiP A C 8500/ 8501/ 8520 Only ) L2TP VPN Connection • Connection Name: User-defined name for the connection (e.g. “conne ction to of f ice”). • T y pe: Check the Dial Out radio button if you want your ro[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 121 • Idle Time : Auto-disconnect the VPN connection when there is no ac tivity on th e connection for a pre-determ ined period of time. 0 means this connection is always on. • A cti v e as defaul t ro ute : Commonly used by th e Dial-out connec[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 122 • Remote Host Name (Optional): Enter ho stname of remote VPN device. It is a tunnel identifier from the Remote VPN device that will match th e Remote hostname provided. If the remote hostname is m atched, the tunnel will be connected; oth erwi[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 123 Example: Configuring a L2TP VPN - Remote A c cess Dial-in Connection A remote worker establishes a L2TP VPN connection with the head office using Microsoft VPN Adapter (included with W ind ows XP/2000/ME, etc.). The route r is installed in the head office, [...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 124 Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assigned to the remote worker . Please make sure this IP is not used by the Of fice LAN. Item Function Description 1 Conne ction Name VPN_L2TP Given a n ame of L2TP co nnection Di[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 125 IPSec Enabled for enhancing your L2TP VPN security . Authentication MD5 Encryption 3DES Perfect Forward Secrecy None 6 Pre-shared Key 12345678 Both sites should use the same value. Example: Configuring a Remote A cces s L2TP V PN Dial-out Connec[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 126 Configuring the L2TP VPN in the Office Item Function Description 1 Conne ction Name VPN_ L2TP Given name of L2TP c o nnection Dial out Check the Dial out radio b utton 2 Server IP Address (or Hostname) 69.121.1.33 A Dialed server IP Username username 3 Pass[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 127 Authentication MD5 Encryption 3DES Perfect Forward Secrecy None Pre-shared Key 12345678 Both sites should use the same value. Example: Configuring your Router to Dial-in to the Se rv er Currently , Microsoft Windows operation system does not sup[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 128 L2TP Connection - LAN to LAN (BiP A C 8500/ 8501/ 8520 Only ) L2TP VPN Connection • Connection Name: User-defined description of the connection. • T y pe: Che ck the Dial Out radio button if you want your router to operate as a client (connecting to a r[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 129 type the server is using (when a cting a s a client), o r the authentication type you want clients to use (when actin g as a server). W hen using P AP , the password is sent unencrypted, w h ilst CHAP e ncrypts th e password bef ore sending, a n[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 130 must be ab le to verify th e identity of it s pee r . T his can be done b y manua lly entering the pre-shared key into the router or hosts at both ends. • Remote Host Name (Optional): E nter hostname of remote V PN d evice. It is a tunnel iden[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 131 Example: Configuring L2TP L A N-to-L AN VPN Connection The branch office est ablishes a L2TP VPN tu nnel with the head office to connect two private networks over the Internet. The routers are installed in the head of f ice and branch of f ice r[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 132 Configuring L2TP VPN in the Head Office The IP address 192.168.1.200 will be assigned to the router located at the b ranch of fice . Pl ease make sure this IP is not used by the head of f ice LAN. Item Function Description 1 Conne ction Name Hea dOf f ice G[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 133 Username username 4 Password 123456 Input username & password to authenticate branch office network 5 Auth.T ype Chap(Auto) Kept as a default value in most cases. 6 Idle T imeout 0 The connection will be disconnected when there Is no traffic[...]

Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 134 Configuring L2TP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP ad dress of the router located at head office. If you registered the DDNS (plea se refer t o the DDNS section of th is manual), you can also use the domain name instead of[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 135 6 Idle T imeout 0 The connection will be disconnected when there Is no traffic for a predefined period of time. Idle time 0 means the connection is always on. IPSec Enabled for enhancing your L2T P VPN security . Authentication MD5 Encryption 3D[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 136 QoS (Qualit y of Ser v ice ) QoS function helps you to control your network traffic fo r each application from LAN (Ethernet and/or W ireless) to WAN (Interne t). It facilitates you to control the d if fe rent quality and speed of throughput for[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 137 Prioritization There are three priority settings pro vided in the Router: • High • Normal (The default is normal p riority for all of traffic without setting) • Low Av e rage utilization of each priority type: High (60%), No rmal (30%) and[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 138 monitored. • DSCP Marking : Dif f erentiated Services Code Point (DSCP), it is the first 6 bits in the T oS byte. DSCP Marking allows users to classify traffic based on DSCP value an d send packets to next Router . See T able 4. Th e DSCP Map [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 139 Outboun d IP Throttling (LAN to W AN ) IP T hrottling allows you to limit the speed of IP traffic. The value entered will limit the speed of the application that you set to the specified value multiple of 32kbps . • A pplica tion : A user-def [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 140 Inbound IP Throttling (W A N to L A N) IP T hrottling allows you to limit the speed of IP traffic. The value entered will limit the speed of the application that you set to the specified value multiple of 32kbps . • A pplica tion : A user-def [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 141 • Inbound Rate Limit : T o limit the speed of inbound traffic. Example: QoS for y o ur Network Connection Diagram Information and Settings Upstream: 928 kbps Downstream: 8 Mbps V oIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Re[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 142 0 10 0 20 0 30 0 40 0 50 0 kbps VoI P/ VP N HIGH Ot he rs NO RMAL Res tricted LOW Th r oug hpu t VoIP/V PN HI GH Others NOR MA L Re s t r ic ted LOW Mission-critical application VPN connection is a mission-critical ap plication u sed fo r data e[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 143 A dvanc ed setting by using IP throttling W it h IP th rottling y ou can set more det a iled p a rameters to manage bandwidth allocation ev e n when the applications are located on the same level. Upstream: 928kbps (2 9*32kbps) Mission-critical [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 144 Virtual Server (“Port Forw arding”) In TCP/IP a nd UDP network, a port is a 16 -bit num ber u sed to identify which a pplication program (u sually a server) incom ing connections should be deliv ered t o. Some ports have numbers that are p r[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 145 internal server . • Time Schedule: A self -de fined time period to enable your virtu al server . Y ou m ay specify a time schedule or Always on fo r the usage of this Virtual Server Entry . For setup and detail, refer to T i me Schedule sectio[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 146 Example: If you like to access your Route r remotely through the Web/HTTP at a ll time, you would nee d to enable p ort number 80 (Web/HTTP) and map to the Router IP Address. Then all incoming HTTP requests f rom you (Remote side) will b e fo rw[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 147 Edit DMZ Host The DMZ Host is a local computer exposed to the Internet. W hen setting a p a rticular internal IP address a s the DMZ Host, all incoming packets that use the port num ber dif f erent from th e one used by other Virtual Server entr[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 148 Edit One-to-One N A T (Network A ddress T ranslation) One-to-One NA T maps a specific private/local IP address to a global/public IP address. If you have multiple public/WAN IP addresses from you ISP , you are eligible for One-to-One NA T to uti[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 149 • Time Schedule: A self -de fined time period to enable your virtu al server . Y ou m ay specify a time schedule or Always on fo r the usage of this Virtual Server Entry . For setup and detail, refer to T i me Schedule section • A pplica tio[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 150 Example: List of some we ll-kno w n and registered port numbers. The In ternet Assigned Numb ers Authority (IANA) is the central coordin ator f or the assigning unique parameter values to the Internet protocols. Port numbers range from 0 to 6553[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 151 T ime Schedule The Ti me Schedule supports up to 16 time slo ts which helps you to ma nage your In ternet connection. In each time profile, you m ay schedule specific day(s) i.e. Monday through Sunday to restrict or allow the usage of the Intern[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 152 Configuration of T ime Schedule Edit a T ime Slot 1. Choose any T ime Slot (ID 1 to ID 16) to edit, click Edit. Note: Wat ch it carefully , the days you have selected will present in capital letter . Lower case letter shows the day(s) is not sel[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 153 Advanced Configuration options within the A dvanced section are for us ers who wish to t ake advantage of the more advanced features of the ro uter . Users who do n ot underst and the features should not attempt to reconfigure the ir router , un[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 154 Dynamic DNS The Dynamic DNS function allo ws you to alias a dynam ic IP a ddress to a static hostname, allowing users whose ISP does not assign them a static IP address t o use a domain name . This is espe cially use ful for ho sting servers via[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 155 Check Emails This function allo ws you to have the router check your POP3 m ailbox f or new Email messages. The Mail LED on your router will lit when it detects new m essages waiting f or download. Y ou may also view the status of this f unction[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 156 Device Managemen t The Device Man agement a dvanced configuratio n s ettings a llows you to control your router security options and device mon itoring features. Embedded Web Server ( to Manage ment IP accounts) • HTTP Port: T his is the port [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 157 For Exampl e: User A changes HTTP p ort n umber to 100 , specifies their own IP address of 192.168.1.55 , and sets the logout time to be 100 seconds. The route r will only allo w User A access from the IP address 192.168.1.55 to logon to the Web[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 158 SNMP V3: S pecify a name and p a ssword for authentication. And define the access right from an identified IP address. Once the au thentication has succeeded, user from this IP ad dress will be able to view and modify the data. SNMP V ersion: SN[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 159  dot1dTp group  dot1dS tp group (if configured as spanning tree)  From RFC 1471 (PPP/LCP MIB):  pppLink group  pppLqr group  From RFC 1472 (PPP/Securi ty MIB):  PPP Security Group)  From RFC 1473 (PPP/IP MIB):  PPP IP [...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 160 IGMP IGMP , known a s Internet Gro up Management Proto col , is used to mana ge hosts from mu lticast group. • IGMP For warding: Accept multicast p a cket. Default is set to Enable. • IGMP Snooping: Allow switche d Ethernet to check and m ak[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 161 A dvanc ed VLAN Setup Example (T riply Play) VLAN_dat a: Ethernet Port 1, W ireless and W ireless WDS are reserved fo r Intern e t - On Ethernet port 1 I also need VC 0/40 bridged. VLAN_V e dio Ethernet ports: 2, 3 and 4: - 0/33 Bi-directional I[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 162 From the example, 0/40 is use d for data/internet and with the assumption that PPPoE is used ; click the Edit button to chan ge the VPI/VCI to 0/40. Click Create to setup up an additional WAN inter face f or video ap plications. A total of 8 VLA[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 163 • A ccep t able Fra me T y pe: S pecify what kind of traffic can pass through this connection, whether all traffic or only VLAN tagg ed traffic. • Filter T y pe: S pecify the type of Ethernet filtering performed by the named bridge interface[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 164 From the example: VLAN untagged ports f or Data/Internet: ethernet, wireless and wireless_wds. VLAN untagged ports f or Vi deo: ethernet1, rfc-1483-0 ~ rfc-1483-6. Click Apply to made changes effective immediately . Mapping the VLAN Bridge wi th[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 165 Save Configu ration to Flash After changing the rout er configuration settings, you mu st save all of the configuration parameters to FLASH to avoid them being lost after turning of f or rese tting your router . Click Save to write your new conf[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 5: T roubleshooting 166 Chapter 5: T roubleshoo ting If the router is not f unctioning properly , f irst check this chapter f or simple t roubleshooting befo re contacting your service provider . Problems st arting up the router Problem Correc tive Action None of the[...]

Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Appendix A: P roduct Support and Cont act Information 167 A PPENDIX A : Prod uct Support and Cont act Information Most problems can be solved by ref erring to the T rouble shooting section in the User ’s Manual . If you cannot resolve the problem with the T roubleshooting [...]