English dropdown-ico

Billion Electric Company BiPAC 8500/8520 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171

Go to page of

Similar user manuals

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Billion Electric Company BiPAC 8500/8520, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Billion Electric Company BiPAC 8500/8520 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Billion Electric Company BiPAC 8500/8520. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Billion Electric Company BiPAC 8500/8520 should contain:
- informations concerning technical data of Billion Electric Company BiPAC 8500/8520
- name of the manufacturer and a year of construction of the Billion Electric Company BiPAC 8500/8520 item
- rules of operation, control and maintenance of the Billion Electric Company BiPAC 8500/8520 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Billion Electric Company BiPAC 8500/8520 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Billion Electric Company BiPAC 8500/8520, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Billion Electric Company service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Billion Electric Company BiPAC 8500/8520.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Billion Electric Company BiPAC 8500/8520 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Last re vision 1 1-08-08 BiPAC 8500/8520 SHDSL VPN Firewall Bri d ge/ Router BiP AC 8501/8521 SHDSL.bis (VPN) Fi rew all Bri d ge/Router User Manual[...]

  • Page 2

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router i T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s C C H H A A P P T T E E R R 1 1 : : I I N N T T R R O O D D U U C C T T I I O O N N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

  • Page 3

    ii NA T Sessions ............................................................................................................................... 34 Diagnostic ..................................................................................................................................... 34 UPnP Portmap .........................................[...]

  • Page 4

    [...]

  • Page 5

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 1: Introduction 1 Chapter 1: Introductio n Introduction to y o ur Router W el come to the Billion BiPAC 8500 / 8501/ 8520/ 8521 SHDSL Router. Your SHDSL rou ter is an “all-in-one” unit, co m bining an SHDSL modem, SHDSL router an d Ethe rnet network sw itch, prov[...]

  • Page 6

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 1: Introduction 2 devices. W ith this feature enabled, users can now connect to Net meeting or MSN Messenger seamlessly . Network Address Translation (N A T) Allows multi-users to access o utside resources such as the Internet simultaneously with one IP address/one I[...]

  • Page 7

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 1: Introduction 3 Rich Packet Filtering Not only f ilters the packet based on IP address, but also based on P ort numbe rs. It will filter packets from and to t he Internet. It also provi des a h igher level of security control. Dynamic Host Configuration Protocol (D[...]

  • Page 8

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 4 Chapter 2: Inst alling the Router Import ant note for using thi s Router Package Content s SHDSL Firewall Bridge/Router (BiP AC 8500/8520) or SHDSL.bis Firew all Bridge/Router (BiP AC 850 1/8521) CD-ROM containing the online manual RJ-1 [...]

  • Page 9

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 5 The Front LEDs of BiP A C 8500 LED Meaning 1 LINE Lit when successfully connected to SHDSL line and when it is synchronized. 2 LAN Port 1X — 4X (RJ-45 conne ctor) Lit when connected to an E thernet device. Green for 100Mbps; Orange for[...]

  • Page 10

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 6 The Front LEDs of BiP A C 8520 LED Meaning 1 2 LINE 1 & 2 Lit when successfully connected to SHDSL line and when it is synchronized. 3 LAN Port 1X — 4X (RJ-45 conne ctor) Lit when connected to an E thernet device. Green for 100Mbps[...]

  • Page 11

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 7 The Front LEDs of BiP A C 8501 LED Meaning 1 PWR Lit when power is ON. 2 SYS Lit when the system is read y . 3 LAN Port 1X — 4X (RJ-45 conne ctor) Lit when connected to an E thernet device. Green for 100Mbps; Orange for 10Mbps. Blinkin[...]

  • Page 12

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 8 The Front LEDs of BiP A C 8521 LED Meaning 1 PWR Lit green when power is ON. 2 SYS Flashes when the system is being started. Then lit green when the system is ready . 3 LAN Port 1X — 4X (RJ-45 conne ctor) Lit when connected to an E the[...]

  • Page 13

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 9 The Rear Port s of BiP A C 8500 / 8520 Port Meaning 1 Power Switch Power ON/OFF switch 2 PWR Connect the supplied power adap ter to this jack. 3 RESET T o be sure the device is being turned o n  press RESET button for: 1-3 seconds : q[...]

  • Page 14

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 10 The Rear Port s of BiP A C 8501 Port Meaning 1 Power Switch Power ON/OFF switch 2 PWR Connect the supplied power adap ter to this jack. 3 RESET T o be su re the device is being turned on->press RESET button for: 1-3 seconds : quick r[...]

  • Page 15

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 1 1 The Rear Port s of BiP A C 8521 Port Meaning 1 Power Switch Power ON/OFF switch 2 PWR Connect the supplied power adap ter to this jack. 3 RESET T o be su re the device is being turned on->press RESET button for: 1-3 seconds : quick [...]

  • Page 16

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 2: Instal ling the r o uter 12 Cabling One of the most common causes to problem is bad cabling or SHDSL line(s). Make sure t hat all connected devices are turn ed on. On the front p a nel of the product is a row of LEDs. V erify that the LAN Link and SHDSL line LEDs [...]

  • Page 17

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 3: Basic Inst allation 13 Chapter 3: Basic Inst allation The router can be configured with your web browser . A web browser is in cluded as a standard application in the following operatin g systems: Lin ux, Ma c OS, W indows 9 8/NT/2000/XP/Me, etc. The product provides an easy [...]

  • Page 18

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 3: Basic Inst allation 14 Netw ork Configuration For Windo w s V ist a 1. Go to St art . Click on Network . 2. Then click on Network and Sharing Center at the top bar . 3. W hen t h e Network and Sharing Center window pops up, select and click on Manage network connections on th[...]

  • Page 19

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 15 5. Select Internet Protocol V ersion 4 (TCP/IPv4) then click Properties . 6. In the TCP/IPv4 properties window , select the Obtain an IP a ddress automatically and Obt ain DNS Server address automatically radio buttons. Then click OK to exit[...]

  • Page 20

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 16 For Windo w s XP 1. Go to Start / Control Panel (in Classic View) . In the Control Panel, double-click on Network Connections 2. Double-click Local A rea Connection . 3. In the Local A rea Connection Status windo w, click Properties .[...]

  • Page 21

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 17 4. Select Internet Protocol (TCP/IP) and click Properties . 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration.[...]

  • Page 22

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 18 For Windo w s 2000 1. Go to Start / Settings / Control Panel . In the Control Panel, double-click on Network and Dial-up Connections . 2. Double-click Local Area Connection . 3. In the Local A rea C onnection Status window click Properties .[...]

  • Page 23

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 19 4. Select Internet Protocol (TCP/IP) and click Properties . 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration.[...]

  • Page 24

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 20 For Windo w s 98/M e 1 . Go to Start / Settings / Control Panel . In the Control Panel, double-click on Network and choose the Configuration tab. 2. Select TCP/IP ->NE2000 Compatible , or the name of your Network Interface Card (NIC) in y[...]

  • Page 25

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 21 4. Then select the DNS Configuration tab. 5. Select the Disable DNS radio button and click OK to f inish the configuration.[...]

  • Page 26

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 22 For Windo w s NT4.0 1. Go to Start / Settings / Control Panel . In the Control Panel, double-click on Network a nd choose the Protocols tab. 2. Select TCP/IP Protocol and click Properties . 3. Select the Obtain an IP address from a DHCP serv[...]

  • Page 27

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 23 Factory Default Settings Before configuring your route r , you n eed to know the following default settings. Web Interface (Username an d Passw ord): Userna me: admin Password: a dmin The default username and p assword are “ admin ” and [...]

  • Page 28

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 3: Basic Inst allation 24 Information from y our ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of service is provided su ch as DHCP (Obtain an IP Address Automatically , S tatic IP (Fixed IP Address) and PPP[...]

  • Page 29

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 3: Basic Inst allation 25 Configuring w ith y our W eb Browser Open your web browser , enter the IP address of your router , which by default is 192.168.1.254 , and click “ Go ”, a user name and password windo w prompt will appear . The default username and p a s[...]

  • Page 30

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 26 Chapter 4: Configuration At the configuration hom ep age, the left navigation pane where bookm arks a re provided links you directly to the desired setup page, including: St atus - ARP T ab le - Routing T able - DHCP T able - PPTP S t atu s - IPSec S tatus -[...]

  • Page 31

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 27 St atus ARP T abl e This section d isplays th e router ’s ARP (Address Resolution Protocol) T able, which sho ws th e mapping of In ternet (IP) addresses to Ethernet (MAC) addresses. This is a useful & quick way to dete rmine the MAC addres[...]

  • Page 32

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 28 Routing T able Routing T able V alid: It indicates a successful routing status. Destination: The IP add ress of the destination network. Netmask: The destination netmask address. Gateway/Interface: The IP address of the gateway or existing interf ace that th[...]

  • Page 33

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 29 DHCP T able Leased: The DHCP assigned IP addresses information. IP Ad dress: A list of IP add resses of devices on your LAN (Local Ar ea Network). Expired: The expired IP addresses information. Permanent: The fixed host mappin g information Leased T a ble IP[...]

  • Page 34

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 30 PPTP S t atus (BiP A C 8500/ 8501/ 8520 Onl y) This shows details of your configured PPTP VPN Connections. • Name: The name you assigned to the particular PPTP connection in your VPN configuration. • T y pe: T he type of connection (dial-in/d[...]

  • Page 35

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 31 IPSec St atus (BiP A C 8500/ 8501/ 8520 O nly) This shows details of your configured IPSec VPN Connect ions. • Name: The name you assigned to the particular VPN entry . • A cti v e: W hether the VPN Connection is currently A ctive. • Connec[...]

  • Page 36

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 32 L2TP S t atus (BiP AC 8500/ 8501/ 8 520 Only) This shows details of your configured L2TP VPN Connections. • Name: T he name you assigned to the particular L2TP connection in your VPN configuration. • T y pe: T he type of connection (dial-in/d[...]

  • Page 37

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 33 Event Log This page displa ys the router ’s E vent Lo g entries. Major events a re logged to this window , su ch as when the router ’ s ADSL co nnection is disconnected, and Firewall events such as when you have enabled Intrusion or Blockin g Logging in [...]

  • Page 38

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 34 NA T S essions This section lists all curren t NA T s ession s between i nt erface of types e xternal (WAN ) and internal (LAN). Diagnostic It te st s the connection of computer(s) which is co nnected to LAN ports and a lso the WAN Internet connection. If PI[...]

  • Page 39

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 35 UPnP Portmap The section lists all port-mapping established using UP nP (Universal Plu g and Play). Please see the Advanced se ction of this manual for m ore details on UPnP and the router ’ s UPnP configuration options.[...]

  • Page 40

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 36 Quick S tart For detailed instructions on configuring your WA N settings, p lease see the W A N section of this manual. Usually , the only de tail s you will ne ed for the Quick S tart wizard to get you online are your login (often in the form of username@is[...]

  • Page 41

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 37 Select the desired option f rom the list and click A p ply to retu rn to the Quick S tart interface to continue configuring your ISP connection. Please note that the conte nt s of this list will vary , depending on what is supported by y ou r ISP[...]

  • Page 42

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 38 Configuration W hen y ou click this item, you will get the following sub-items to configure your router: LAN, W AN, System, Firewall, VPN (not available in 8521), QoS, Virtual Server , Time Schedule and A dvan ced These functions are described be[...]

  • Page 43

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 39 Edit Ethernet Interface Parameter Click on a specific Ethernet you tha t y o u wish to edit its interface parameter under the Bridged Interface section. Y ou can also edit the Ethernet Interface parameter such as its Acceptable Frame T ype; Filter T ype or P[...]

  • Page 44

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 40 IP A lias This function supports the creation of multiple virtual IP interfaces on this router . It helps to connect two or more local ne tworks to the ISP or a remote node. In this case, an internal router is not required. Click A dd to add a ne[...]

  • Page 45

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 41 Ethernet Client Fi lter The Ethernet Client Filter supports up to 16 Ethernet network mach ines that helps you to manage your network con trol t o accept t raf fic from specific authorized ma chines o r to restrict unwanted machine(s) to a ccess your LAN. Th[...]

  • Page 46

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 42 Active PC in LAN displays a list of IP Ad dress & MAC Addres s of ea ch individual Ethernet device which is connected to the router . Y ou can check the box next to the IP address to b lock or allow . Then, click Add to insert to the Ethernet[...]

  • Page 47

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 43 Port Setting This section allows you to configure th e settings for the router ’s Ethernet ports to solve some of the compatibility problem s that may be encountered while connecting to the Inte rnet, as well allowing users to tweak the performance of thei[...]

  • Page 48

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 44 DHCP Server Y ou can disab le or e nable the DHCP (Dynamic Host Configuration Protocol) server or enable the router ’ s DHCP relay functions. Th e DHCP protocol a llows your router to dynamically assign IP addresses to P Cs on your network if t[...]

  • Page 49

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 45 If you check DHCP Rela y Agent and click Next , t hen you will have to enter the IP ad dress of the DHCP server which will assign an IP address back to the DHCP client in the LAN. Use this function only if advised to do so by y o ur network admin[...]

  • Page 50

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 46 W A N (Wide A r ea Netw ork) WAN refe rs to your W ide Area Network connection, i.e. your router ’ s connection to your ISP and the Internet. There are three items within the W A N se ction: ISP , DNS and S HDSL . ISP The factory def ault is PP PoE. If you[...]

  • Page 51

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 47 RFC 1483 Routed Conn ections • Description: User-definab le name for the connection. • VPI and VCI: Enter the inf ormation provided by y ou r ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T : Th e NA T (Netw o rk Address T ransla[...]

  • Page 52

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 48 given by you our ISP . • RIP: RIP v1, RIP v2, and RIP v2 Multicast. C heck to enable RIP function. • MTU: Maximum T ransmission Unit. The size of the largest datagram (excluding media- specific headers) that IP wi ll attemp t to send through [...]

  • Page 53

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 49 RFC 1483 Bridged Connections • Description: User-definab le name for the connection. • VPI and VCI: Enter the inf ormation provided by y ou r ISP . • A TM Class: T he Quality o f Service for A TM layer . • Encapsul a tion method: Select t[...]

  • Page 54

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 50 PPPoA R outed Conn ections • Description: User-definab le name for the connection. • VPI/VCI: Enter the informat ion provided by y o ur ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T: T he NA T (Network A ddress T ran slation) f[...]

  • Page 55

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 51 Provider (ISP) au to matically or not. Please click Obtain an IP address automatically via DHCP client to enable the DHCP client function or click S pecify a n IP address to disable the DHCP client fun ction, a nd specify th e IP address manually[...]

  • Page 56

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 52 A dvanc ed Options (PPPoA) • LLC Header: Select encapsulation mode, true for using LLC or false for using VC-Mux. • Create Route: T his setting specifies whether a route is to be added to the system after IPCP (Internet Proto col Control P ro[...]

  • Page 57

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 53 IPoA Routed Connections • Description: User-definab le name for the connection. • VPI/VCI: Enter the informat ion provided by y o ur ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T : Th e NA T (Netwo rk Add ress T ran[...]

  • Page 58

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 54 • RIP: RIP v1, RIP v2, and RIP v2 Multicast. C heck to enable RIP function. • MTU: Maximum T ransmission Unit. The size of the largest datagram (excluding media- specific headers) that IP wi ll attemp t to send through the interface. • TCP [...]

  • Page 59

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 55 PPPoE Connectio ns • Description: User-definab le name for this connect ion. • VPI/VCI: Enter the informat ion provided by y o ur ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T : Th e NA T (Netwo rk Add ress T ran sl[...]

  • Page 60

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 56 alphanumeric characters (case sensitive). T his will usually b e in t he format of “username@ispname” instead of simp ly “ username”. • Password: Ente r the password provided by your ISP . Y ou can input up to 128 alphanumeric character[...]

  • Page 61

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 57 A dvanc ed Options (PPPoE) • LLC Header: Selects encapsulation mode, true for using LLC or false for using VC-Mux. • Create Route: This setting specify wheth er a route is to be added to the system after IPCP (Internet Protocol Control Protoc[...]

  • Page 62

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 58 PPPoE with Pass- t hroug h Connection s T o acce ss PPPoE with Pass-through Connection: Press Change > PPPoE Routed with Pass- Through > Quick St art PPPoE with pass-through adapts the follow in g method: PPPoE Routed mode + 148 3 Bridge Mo[...]

  • Page 63

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 59 • Description: User-definab le name for this connect ion. • VPI/VCI: Enter the informat ion provided by y o ur ISP . • A TM Class: T he Quality o f Service for A TM layer . • NA T : Th e NA T (Netwo rk Add ress T ran slation) feature allo[...]

  • Page 64

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 60 • Service Name: This item is f or identification p urposes. If it is required, your ISP will provide you the information. Maximum input i s 20 alphanumeric characters. • IP A ddress : specify if the Router can get an IP address from the Inter[...]

  • Page 65

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 61 A dvanc ed Options (PPPoE) LLC Header: Select encapsulation mode, true for using LLC or false for using VC-Mux. Create Route: Th is setting specifies whether a route is to be added to the system after IP CP (Internet Protocol Control Protocol) ne[...]

  • Page 66

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 62 Discover Prima ry NBNS / Discover Secondary NBNS: T his setting enables/disables whether the primary/secondary NBNS server addre ss is request ed from a remote PPP p eer u sing IPCP . The default setting for this comman d is disabled. Discover Su[...]

  • Page 67

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 63 DNS A Domain Name System (DNS) contains a mapping table fo r domain name a nd IP addresses. On the Internet, every h ost h as a unique a nd use r- f riendly n ame (domain name) such a s www .h elloworld.com a n d an IP a ddress. An IP a ddress is[...]

  • Page 68

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 64 SHDSL-BiP A C 8500 • Mode: T he S HDSL device can fu nction a s a CPE (Customer Premises Equipment) or CO (Central Office). Select CPE mode when the BiP AC 8500 is connected to your ISP . • Back – to – back: it is a direct connection betw[...]

  • Page 69

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 65 • Bit Rate: Display SHDSL line synch speed rate. Click Apply button to apply your chan ges.[...]

  • Page 70

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 66 SHDSL – Bi P A C 8520 Standard 4-wired connection: the 4-w ired handshaking procedure that is compliant with IT U-T standard. False 4-wired connection: Th is mode is used when 4-wired connection is disabled.[...]

  • Page 71

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 67 Enhanced 4-wired connection: Conexant enhanced 4-wired mo de and compliant with Conexant Legacy codes. Sust a in2W 4-wired connection: This mode is used to auto detect whether the device use s 2- wired connection or 4-wired con nection. • 4-Wir[...]

  • Page 72

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 68 Note: W hen select 2-wired mode , on ly Port 1 settings need to be configured and the SHDSL (RJ-1 1 ca ble) must be connected to LINE 1 on the back of the device.[...]

  • Page 73

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 69 • Mode: T he S HDSL device can fu nction a s a CPE (Customer Premises Equipment) or CO (Central Office). Select CPE mode when the BiP AC 8520 is connected to your ISP . • Back – to – back: it is a direct connection between two SHDSL devic[...]

  • Page 74

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 70 SHDSL – Bi P A C 8501 • Mode : The SHDSL.bis device can function as a CPE (Customer Premises Equipment) or CO. Select CPE mode when the BiP AC 8501 is connecting to your ISP . • A nnex T ype: I t is the DSL operating mode standard. Select A[...]

  • Page 75

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 71 SHDSL – Bi P A C 8521 Standard 4-wired connection: the 4-w ired handshaking procedure that is compliant with ITU-T standard. False 4-wired connection: Th is mode is used when 4-wired connection is disabled.[...]

  • Page 76

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 72 Enhanced 4-wired connection: Conexant enhanced 4-wired mo de and compliant with Conexant Legacy codes.[...]

  • Page 77

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 73 • 4-Wired Connec tion: BiP AC 8521 supports 3 types of SHDSL.bis con nection: St andard, False & Enahnced . Select the type of S HDSL.bis connection from the 4-wired connection drop down menu, then se lect A pp ly to activate the configurat[...]

  • Page 78

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 74 System Listed are items within the S y stem se ction: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Rest art and User Management. T i me Zone The router does no t have a re al tim e clo ck on board; instead, it uses the Simple Ne tw[...]

  • Page 79

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 75 Remote A ccess T o temporarily permit remote administration of the router (i.e. f rom outside your LAN), se lect a time period the ro uter will perm it rem ote access a nd click Enable. Y ou may chan ge o ther configuration options for the web ad[...]

  • Page 80

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 76 DO NOT power do wn the router or interrupt the f irmware upgradin g while it is still in process. Improper operation could dama ge the router . Firmware Upgrade Y our router ’s “firmware” is the software t hat allow s it to operate and provides a ll it[...]

  • Page 81

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 77 Backup / Restore These function s allow you to save and to create a backup of your router cu rrent settings to a f ile on your PC, or to restore a p reviously save d setting. This is useful if you wish to e xperi ment with different settings, kn owing that y[...]

  • Page 82

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 78 Rest art Router Click Rest a rt with op tion Current Settings to reboot your router (and restore your last saved configuration). If you wish to restart the router using the fa ctory default settings (for e xample, after a f irmware upgrade or if you ha ve sa[...]

  • Page 83

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 79 User Management In order to prevent unau thoriz ed access to your rou ter ’s configuration int erface, all use r s are required t o login to t he system with a password. Y ou can set up m ultiple user accounts, each with their own password. Y o[...]

  • Page 84

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 80 W hen using V irtual Servers, your PCs will be expose d at a certain degree specified in your Virtual Server settin gs when th e ports specified are opened in your firewall packet filter settings. Firewall a nd A c cess Contr ol Y our router incl[...]

  • Page 85

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 81 • Firewall Securi ty a nd Policy (General S ettings) : Outbound direction of P acket Filter rules to prevent unauthorized com puters or applications accessing the Internet. • URL Filter : T o block PCs on your local network from unwanted webs[...]

  • Page 86

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 82 Any remote u ser who is atte mpting t o perform this action may result in blocking all the access to conf igure and m anagement of the device from the Internet. General Settings Y ou ca n choo se not to enable Firewall, you will not ab le t o add[...]

  • Page 87

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 83 Packet Filter This function is only available when Firewall is enabled and one of th ese f our security leve ls is chosen (All blocked, High, Mediu m and Low). The predefined port f ilter rules in the Packet Filter must mod ify according to the l[...]

  • Page 88

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 84 Example: Predefined Port Filters Rules The predefined port f ilter rules for High, Medium and Low security levels are listed. See T able 1. Note : Firewall – All Blocked/User-defined , you m ust define and create the p ort filter rules yourself[...]

  • Page 89

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 85 Packet Filter – A d d TCP/UDP Filter • Rule Name: User-define description to identify this entry or click to select existing predefined rules. The maximum name length is 32 characters. • Time S chedule: It is self-defined time period. Y ou [...]

  • Page 90

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 86 Packet Filter – A d d Raw IP Filter • Rule Name: A user-defined name for identifying the rule. • Time Schedule: It is self-defined time period. Y ou may specify a t ime schedule for your prioritization policy . Fo r setup and detail, refer [...]

  • Page 91

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 87 Example: Configuring your firewall to allow for a publicly a ccessible web server on your LAN The predefined p ort filter rule f or HTTP (TCP port 80) is the same whether the firewall is set to a high, med ium or low security level. T o setup a w[...]

  • Page 92

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 88 Configuring Packet Filter: 1. Click Port Filters . Y o u w ill then be presented wi th the predefined port filter rules screen (in this case for the low security level), shown below: Note : Y ou may click Edit th e predefined rule instead of Delete it. This [...]

  • Page 93

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 89 5. The new port filter rule for HTT P is shown below : 6. Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP request s on port 80 will be forwarded to the PC running your web server: Note: For how to configure th[...]

  • Page 94

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 90 Intrusion Detection The router ’s In trusion Detection System (IDS) is used to detect hacker attacks a nd intrusion attempts f rom the Internet. If the IDS function of the f irewall is en abled, inbound packets a re filtered and blocked depending on whethe[...]

  • Page 95

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 91 (PING). For SYN Flo od , ICMP Echo S torm and ICMP flood , IDS wi ll just warn the user in the Event Lo g. It cannot protect against such att a cks. T able 2: T ypes of Hacker attack recognized by the IDS. 1 Detect Parameter Blacklist T y pe of B[...]

  • Page 96

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 92 ICMP Flood Max ICMP Count (Default 100 c/sec) Y es ICMP Echo Max PING Count (Default 15 c/sec) Y es Src IP : Source IP Src Port : Source Port Dst Port : Destination Port Dst I P : Destination IP[...]

  • Page 97

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 93 URL Fil tering URL (Uniform Resource Locator – e.g. an address in the f orm of http ://www .abcde.com or http://www .e xample.com ) filter rules allow you to prevent u sers on your network f rom accessing particular websites by their URL. There[...]

  • Page 98

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 94 dropped. 3. If the packet does not match either of the abo ve two items, it is sent to the remote web server . 4. Ple ase be noted that the comp leted URL, “www” + domain name , shall be specified. For example to block traffic to www .goo gle[...]

  • Page 99

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 95 IM / P2P Blocking IM, sho rt f or Instant Message, is required to use clien t p rogram softw are t hat a llows u sers to communicate, in exchanging te xt message, with other IM users in real time o ver the Internet. A P2P application, known as Pe[...]

  • Page 100

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 96 Firewall Log Firewall Log displays log information of all unexpected action take n by your firewall settings. Check the Enable box to a ctivate the logs. Log information can be seen in the St atus – Event Log after enabling.[...]

  • Page 101

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 97 VPN (Virtual Private Netw orks) (BiP AC 8500/ 85 01/ 8520 Onl y ) Vir tual Private Networks is a way to est ab lish a secured communication tunnel to an organization’s network via th e Internet. Y our router supports three main t ypes of VPN (V irtual Priv[...]

  • Page 102

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 98 PPTP Conn ecti on - Remo te A ccess ( BiP A C 8500/ 8501/ 8520 Only) • Connection Name: A user-defined name for the connection (e.g. “connection to office”). • T y pe: Check Dia l Out if you want your router to operate as a client (connec[...]

  • Page 103

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 99 • Mode: Y ou may se lect St ateful or St ateless m ode. The ke y will be c hanged every 256 packets when you select S tateful mode. If you select S tateless m ode, the key will be changed in each packet. • Idle Time : Auto-disconnect the VPN [...]

  • Page 104

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 100 Example: Configuring a Remote Acces s PPTP VPN Dial-out Connection An office of a comp a ny est a blishes a PPTP V PN connection with a file server located at a different location. The router is installed at the office, connecting to a couple of PCs an d Se[...]

  • Page 105

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 101 Configuring the PPTP VPN in the Office Y ou can either input the IP address (69.1.121.33 in this case) or the hostname to reach the server . Item Function Description 1 Conne ction Name VPN_PPTP Given name of PPTP connection Dial out Check Dial out 2 Server[...]

  • Page 106

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 102 PPTP Conn ecti on - LA N to L A N (BiP AC 8500/ 8501/ 8520 Only ) • Connection Name: A user-define description of the connection. • T y pe: Check Dia l Out if you want your router to operate as a client (connecting to a remote VPN server , e[...]

  • Page 107

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 103 connection or you can manually Enable or Di sable encryption. • Key Length: The d at a can b e e ncrypted by MPP E algorithm with 40 bits o r 128 bits. Default is Auto , it is negotiated when establishing a co nnection. 1 28 bit keys p rovide [...]

  • Page 108

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 104 Example: Configuring a PP TP LAN-to-LAN VPN Connection The branch office est ablishes a PPTP VPN tunnel w ith the head office to connect two private networks over the Internet. The routers are installed in the head of f ice and the branch of f ice respectiv[...]

  • Page 109

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 105 Configuring PPTP VPN in the Hea d Office The IP address 192.168.1.201 will be assigned to the router located in the branch o ffice. Please make sure this IP is not used in the head of f ice LAN. Item Function Description 1 Conne ction Name HeadO[...]

  • Page 110

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 106 connection is always on. Configuring PPTP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in t he head of fice. If you registered the DDNS (please refer to the DDNS section of this ma nual), you[...]

  • Page 111

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 107 IPSec (IP Secu rity Protocol) (BiP A C 8500/ 8501/ 8520 Only ) Click Create to create a new IPSec VP N connection account. After y o u h a ve created the IPSec connection, account information wi ll be displayed. (See example above). • Enable / Disa ble : [...]

  • Page 112

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 108 IPSec VPN Connection (BiP A C 8500/ 8501/ 8520 Only ) • Connection Name: User-defined name for the connection (e.g. “conne ction to of f ice”). • Local Network: Set the IP address, subnet or address range of the local network. o Single A[...]

  • Page 113

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 109 o SHA1: A one-way hashing algorithm that produces a 160−bit ha sh. • Encryption: Select the encryption m ethod f rom the pu ll-down menu. There are several options, DES , 3DES , AES (128, 192 and 256) and NULL . NULL means it is a tunn el o [...]

  • Page 114

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 10 A dvanc ed Option This fun ction is only av ailable after finish creating an IPSec a ccount. Click A d vanced Option to change the following settings: • IKE (Internet key Excha nge) Mode: Select IKE mode to Main mode or Aggressive mode. This [...]

  • Page 115

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 1 1 more powerful but increase the latency .  DES: S tands fo r Data En cryption S tandard, it uses 56 bit s encry ption method.  3DES: S tands for Trip le Data Encryption S ta n dard, it u ses 168 (56*3) bits encryption method.  A ES: S [...]

  • Page 116

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 12 from 0 to 3600 second; 0 se cond disables the function. Ping to the IP Internal (sec) Ping to the IP Action 0.0.0.0 0 No 0.0.0.0 2000 No xxx.xxx.xxx.xx x (A valid IP Address) 0 No xxx.xxx.xxx.xx x(A valid IP Address) 2000 Y es, activate it in e[...]

  • Page 117

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 13 Branch O ffice Head Of f ice Local Network ID 192.168.0.0/24 192.168.1.0/24 Local Router IP 69.1.121.30 69.1.121.3 Remote Network ID 192.168.1.0/24 192.168.0.0/24 Remote Router IP 69.1.121.3 69.1.121.30 IKE Pre-shared Key 12345678 12345678 VPN [...]

  • Page 118

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 1 14 Configuring IPSec VPN in the Head Office Item Function Description 1 Conn ection Name IP Sec_HeadOf f ice Given a name of IPSec connection Subnet Check the Subnet radio button IP Add ress 192.168.1.0 2 Netmask 255.255.255.0 Head office network 3 Secure Gat[...]

  • Page 119

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 15 Prefer Forward Security None Pre-shared Key 12345678[...]

  • Page 120

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 1 16 Configuring IPSec VPN in the Branc h Offiece Item Function Description 1 Connection Name IP Sec_BranchOf f ice Given a name of IPSec connection Subnet Check the Subnet radio button IP Add ress 192.168.0.0 2 Netmask 255.255.255.0 Branch office network 3 Sec[...]

  • Page 121

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 1 17 Prefer Forward Security None Pre-shared Key 12345678 Example: Configuring a IPSec Host-t o-LAN VPN Connection[...]

  • Page 122

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 1 18 Configuring IPSec VPN in the Office Item Function Description 1 Connection Name IPSec Given a name of IPSec connection Subnet Che ck the Subnet radio button IP Add ress 192.168.1.0 2 Netmask 255.255.255.0 Head office network 3 Secure Gateway Address (or Ho[...]

  • Page 123

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 1 19 L2TP (La y er T w o T unneling Protocol) (BiP A C 8500/ 8501/ 8520 Only) Support t wo types of L2TP VPN, Remote Access and L A N-to-L A N (p lease refer below for more information.). Click Crea te to create a new VPN connection account. After you ha ve cre[...]

  • Page 124

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 120 L2TP Connection - Remote A ccess (BiP A C 8500/ 8501/ 8520 Only ) L2TP VPN Connection • Connection Name: User-defined name for the connection (e.g. “conne ction to of f ice”). • T y pe: Check the Dial Out radio button if you want your ro[...]

  • Page 125

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 121 • Idle Time : Auto-disconnect the VPN connection when there is no ac tivity on th e connection for a pre-determ ined period of time. 0 means this connection is always on. • A cti v e as defaul t ro ute : Commonly used by th e Dial-out connec[...]

  • Page 126

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 122 • Remote Host Name (Optional): Enter ho stname of remote VPN device. It is a tunnel identifier from the Remote VPN device that will match th e Remote hostname provided. If the remote hostname is m atched, the tunnel will be connected; oth erwi[...]

  • Page 127

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 123 Example: Configuring a L2TP VPN - Remote A c cess Dial-in Connection A remote worker establishes a L2TP VPN connection with the head office using Microsoft VPN Adapter (included with W ind ows XP/2000/ME, etc.). The route r is installed in the head office, [...]

  • Page 128

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 124 Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assigned to the remote worker . Please make sure this IP is not used by the Of fice LAN. Item Function Description 1 Conne ction Name VPN_L2TP Given a n ame of L2TP co nnection Di[...]

  • Page 129

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 125 IPSec Enabled for enhancing your L2TP VPN security . Authentication MD5 Encryption 3DES Perfect Forward Secrecy None 6 Pre-shared Key 12345678 Both sites should use the same value. Example: Configuring a Remote A cces s L2TP V PN Dial-out Connec[...]

  • Page 130

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 126 Configuring the L2TP VPN in the Office Item Function Description 1 Conne ction Name VPN_ L2TP Given name of L2TP c o nnection Dial out Check the Dial out radio b utton 2 Server IP Address (or Hostname) 69.121.1.33 A Dialed server IP Username username 3 Pass[...]

  • Page 131

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 127 Authentication MD5 Encryption 3DES Perfect Forward Secrecy None Pre-shared Key 12345678 Both sites should use the same value. Example: Configuring your Router to Dial-in to the Se rv er Currently , Microsoft Windows operation system does not sup[...]

  • Page 132

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 128 L2TP Connection - LAN to LAN (BiP A C 8500/ 8501/ 8520 Only ) L2TP VPN Connection • Connection Name: User-defined description of the connection. • T y pe: Che ck the Dial Out radio button if you want your router to operate as a client (connecting to a r[...]

  • Page 133

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 129 type the server is using (when a cting a s a client), o r the authentication type you want clients to use (when actin g as a server). W hen using P AP , the password is sent unencrypted, w h ilst CHAP e ncrypts th e password bef ore sending, a n[...]

  • Page 134

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 130 must be ab le to verify th e identity of it s pee r . T his can be done b y manua lly entering the pre-shared key into the router or hosts at both ends. • Remote Host Name (Optional): E nter hostname of remote V PN d evice. It is a tunnel iden[...]

  • Page 135

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 131 Example: Configuring L2TP L A N-to-L AN VPN Connection The branch office est ablishes a L2TP VPN tu nnel with the head office to connect two private networks over the Internet. The routers are installed in the head of f ice and branch of f ice r[...]

  • Page 136

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 132 Configuring L2TP VPN in the Head Office The IP address 192.168.1.200 will be assigned to the router located at the b ranch of fice . Pl ease make sure this IP is not used by the head of f ice LAN. Item Function Description 1 Conne ction Name Hea dOf f ice G[...]

  • Page 137

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 133 Username username 4 Password 123456 Input username & password to authenticate branch office network 5 Auth.T ype Chap(Auto) Kept as a default value in most cases. 6 Idle T imeout 0 The connection will be disconnected when there Is no traffic[...]

  • Page 138

    Billion BiP AC SHDSL/SHD SL.bis (VPN) Fire wall Bridge/ Router Chapter 4: Configuratio n 134 Configuring L2TP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP ad dress of the router located at head office. If you registered the DDNS (plea se refer t o the DDNS section of th is manual), you can also use the domain name instead of[...]

  • Page 139

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 135 6 Idle T imeout 0 The connection will be disconnected when there Is no traffic for a predefined period of time. Idle time 0 means the connection is always on. IPSec Enabled for enhancing your L2T P VPN security . Authentication MD5 Encryption 3D[...]

  • Page 140

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 136 QoS (Qualit y of Ser v ice ) QoS function helps you to control your network traffic fo r each application from LAN (Ethernet and/or W ireless) to WAN (Interne t). It facilitates you to control the d if fe rent quality and speed of throughput for[...]

  • Page 141

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 137 Prioritization There are three priority settings pro vided in the Router: • High • Normal (The default is normal p riority for all of traffic without setting) • Low Av e rage utilization of each priority type: High (60%), No rmal (30%) and[...]

  • Page 142

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 138 monitored. • DSCP Marking : Dif f erentiated Services Code Point (DSCP), it is the first 6 bits in the T oS byte. DSCP Marking allows users to classify traffic based on DSCP value an d send packets to next Router . See T able 4. Th e DSCP Map [...]

  • Page 143

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 139 Outboun d IP Throttling (LAN to W AN ) IP T hrottling allows you to limit the speed of IP traffic. The value entered will limit the speed of the application that you set to the specified value multiple of 32kbps . • A pplica tion : A user-def [...]

  • Page 144

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 140 Inbound IP Throttling (W A N to L A N) IP T hrottling allows you to limit the speed of IP traffic. The value entered will limit the speed of the application that you set to the specified value multiple of 32kbps . • A pplica tion : A user-def [...]

  • Page 145

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 141 • Inbound Rate Limit : T o limit the speed of inbound traffic. Example: QoS for y o ur Network Connection Diagram Information and Settings Upstream: 928 kbps Downstream: 8 Mbps V oIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Re[...]

  • Page 146

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 142 0 10 0 20 0 30 0 40 0 50 0 kbps VoI P/ VP N HIGH Ot he rs NO RMAL Res tricted LOW Th r oug hpu t VoIP/V PN HI GH Others NOR MA L Re s t r ic ted LOW Mission-critical application VPN connection is a mission-critical ap plication u sed fo r data e[...]

  • Page 147

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 143 A dvanc ed setting by using IP throttling W it h IP th rottling y ou can set more det a iled p a rameters to manage bandwidth allocation ev e n when the applications are located on the same level. Upstream: 928kbps (2 9*32kbps) Mission-critical [...]

  • Page 148

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 144 Virtual Server (“Port Forw arding”) In TCP/IP a nd UDP network, a port is a 16 -bit num ber u sed to identify which a pplication program (u sually a server) incom ing connections should be deliv ered t o. Some ports have numbers that are p r[...]

  • Page 149

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 145 internal server . • Time Schedule: A self -de fined time period to enable your virtu al server . Y ou m ay specify a time schedule or Always on fo r the usage of this Virtual Server Entry . For setup and detail, refer to T i me Schedule sectio[...]

  • Page 150

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 146 Example: If you like to access your Route r remotely through the Web/HTTP at a ll time, you would nee d to enable p ort number 80 (Web/HTTP) and map to the Router IP Address. Then all incoming HTTP requests f rom you (Remote side) will b e fo rw[...]

  • Page 151

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 147 Edit DMZ Host The DMZ Host is a local computer exposed to the Internet. W hen setting a p a rticular internal IP address a s the DMZ Host, all incoming packets that use the port num ber dif f erent from th e one used by other Virtual Server entr[...]

  • Page 152

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 148 Edit One-to-One N A T (Network A ddress T ranslation) One-to-One NA T maps a specific private/local IP address to a global/public IP address. If you have multiple public/WAN IP addresses from you ISP , you are eligible for One-to-One NA T to uti[...]

  • Page 153

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 149 • Time Schedule: A self -de fined time period to enable your virtu al server . Y ou m ay specify a time schedule or Always on fo r the usage of this Virtual Server Entry . For setup and detail, refer to T i me Schedule section • A pplica tio[...]

  • Page 154

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 150 Example: List of some we ll-kno w n and registered port numbers. The In ternet Assigned Numb ers Authority (IANA) is the central coordin ator f or the assigning unique parameter values to the Internet protocols. Port numbers range from 0 to 6553[...]

  • Page 155

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 151 T ime Schedule The Ti me Schedule supports up to 16 time slo ts which helps you to ma nage your In ternet connection. In each time profile, you m ay schedule specific day(s) i.e. Monday through Sunday to restrict or allow the usage of the Intern[...]

  • Page 156

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 152 Configuration of T ime Schedule Edit a T ime Slot 1. Choose any T ime Slot (ID 1 to ID 16) to edit, click Edit. Note: Wat ch it carefully , the days you have selected will present in capital letter . Lower case letter shows the day(s) is not sel[...]

  • Page 157

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 153 Advanced Configuration options within the A dvanced section are for us ers who wish to t ake advantage of the more advanced features of the ro uter . Users who do n ot underst and the features should not attempt to reconfigure the ir router , un[...]

  • Page 158

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 154 Dynamic DNS The Dynamic DNS function allo ws you to alias a dynam ic IP a ddress to a static hostname, allowing users whose ISP does not assign them a static IP address t o use a domain name . This is espe cially use ful for ho sting servers via[...]

  • Page 159

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 155 Check Emails This function allo ws you to have the router check your POP3 m ailbox f or new Email messages. The Mail LED on your router will lit when it detects new m essages waiting f or download. Y ou may also view the status of this f unction[...]

  • Page 160

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 156 Device Managemen t The Device Man agement a dvanced configuratio n s ettings a llows you to control your router security options and device mon itoring features. Embedded Web Server ( to Manage ment IP accounts) • HTTP Port: T his is the port [...]

  • Page 161

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 157 For Exampl e: User A changes HTTP p ort n umber to 100 , specifies their own IP address of 192.168.1.55 , and sets the logout time to be 100 seconds. The route r will only allo w User A access from the IP address 192.168.1.55 to logon to the Web[...]

  • Page 162

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 158 SNMP V3: S pecify a name and p a ssword for authentication. And define the access right from an identified IP address. Once the au thentication has succeeded, user from this IP ad dress will be able to view and modify the data. SNMP V ersion: SN[...]

  • Page 163

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 159  dot1dTp group  dot1dS tp group (if configured as spanning tree)  From RFC 1471 (PPP/LCP MIB):  pppLink group  pppLqr group  From RFC 1472 (PPP/Securi ty MIB):  PPP Security Group)  From RFC 1473 (PPP/IP MIB):  PPP IP [...]

  • Page 164

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 160 IGMP IGMP , known a s Internet Gro up Management Proto col , is used to mana ge hosts from mu lticast group. • IGMP For warding: Accept multicast p a cket. Default is set to Enable. • IGMP Snooping: Allow switche d Ethernet to check and m ak[...]

  • Page 165

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 161 A dvanc ed VLAN Setup Example (T riply Play) VLAN_dat a: Ethernet Port 1, W ireless and W ireless WDS are reserved fo r Intern e t - On Ethernet port 1 I also need VC 0/40 bridged. VLAN_V e dio Ethernet ports: 2, 3 and 4: - 0/33 Bi-directional I[...]

  • Page 166

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 162 From the example, 0/40 is use d for data/internet and with the assumption that PPPoE is used ; click the Edit button to chan ge the VPI/VCI to 0/40. Click Create to setup up an additional WAN inter face f or video ap plications. A total of 8 VLA[...]

  • Page 167

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 163 • A ccep t able Fra me T y pe: S pecify what kind of traffic can pass through this connection, whether all traffic or only VLAN tagg ed traffic. • Filter T y pe: S pecify the type of Ethernet filtering performed by the named bridge interface[...]

  • Page 168

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 164 From the example: VLAN untagged ports f or Data/Internet: ethernet, wireless and wireless_wds. VLAN untagged ports f or Vi deo: ethernet1, rfc-1483-0 ~ rfc-1483-6. Click Apply to made changes effective immediately . Mapping the VLAN Bridge wi th[...]

  • Page 169

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 4: Configuratio n 165 Save Configu ration to Flash After changing the rout er configuration settings, you mu st save all of the configuration parameters to FLASH to avoid them being lost after turning of f or rese tting your router . Click Save to write your new conf[...]

  • Page 170

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Chapter 5: T roubleshooting 166 Chapter 5: T roubleshoo ting If the router is not f unctioning properly , f irst check this chapter f or simple t roubleshooting befo re contacting your service provider . Problems st arting up the router Problem Correc tive Action None of the[...]

  • Page 171

    Billion BiP AC 8500/8501/8 520/8521 SHD SL (VPN) F irewall Bridg e/ Router Appendix A: P roduct Support and Cont act Information 167 A PPENDIX A : Prod uct Support and Cont act Information Most problems can be solved by ref erring to the T rouble shooting section in the User ’s Manual . If you cannot resolve the problem with the T roubleshooting [...]