Billion Electric Company 800VGT manual

Billion 800VGT Route r[...]

Billion 800VGT Route r Table of Contents C HA P T ER 1: IN TR O D U CT I ON ........................................................................................................................................ 4 I NTRODUCTION TO YOUR R OUTER .........................................................................................................[...]

Billion 800VGT Route r Int rusi on De tect ion .................................................................................................................................................... 64 UR L Fi lte r .........................................................................................................................................[...]

Billion 800VGT Route r Chapter 1: Introduct ion Introducti on to your Router Y our Billion 800VGT router is an “all-in-one” ADSL V o I P router , combining an ADSL 2 / 2+ modem/router, network switch and 2 telephon e port s for V oice over IP functionality, providing everything you need to get you connected to the Internet using your ADSL conne[...]

Billion 800VGT Route r Universal Plug and Play (UPnP) This protocol is used to enable simple and robust connectivity among stan d-alone devices and computers from many different vendors. It makes networking simple and affo rdable for users. UPnP architecture leverages TCP/IP and the W eb to enable seamless proximity networking in addition to contro[...]

Billion 800VGT Route r Dynamic Host Configuration Protocol (DHCP) Client and Server On the W AN interface, the DHCP client can get an IP address from the Internet Service Provider (ISP) automatically . On the LAN interface, the DHCP server can allocate a range of client IP addresses and distribute them, including IP address, subnet mask as well as [...]

Billion 800VGT Route r Chapter 2: Inst alling the Router Important note for using this router W ar ning  Do not use this router in high humidity or high temperatures.  Do not use the same power source for this router and other equipment.  Do not open or rep ai r the casing yourself. If this router is too hot, turn off the power immediately[...]

Billion 800VGT Route r The Front LEDs LED Me anin g 1 PWR Lit when power is ON. 2 SYS Lit when the system is ready . 3 – 6 LAN Port 1X — 4X (RJ-45 connector) Lit when connected to an Ethernet device. Green for 100Mbps; Orange for 10Mbps. Blinking when data is Transmitted / Received. 7 WLAN Green when the wireless connection is established. Flas[...]

Billion 800VGT Route r The Rear Ports The Ethernet Port # 4 can be used as a console port. Y ou need a special console tool w hich is included in the p ackage, to connect between LAN port 4 and a PC’ s RS-232 port (9-pin serial port). Port Meaning 1 Powe r Switch Power ON/OFF switch 2 PWR Connect the supplied power adapter to this jack. 3 RESET W[...]

Billion 800VGT Route r Cablin g One of the most common causes of ADSL problems is bad cabling or ADSL lines. Make sure that all devices connected to your telephone line are turned on, and that all telepho nes used on the line are connected via micro filters. On the front of the product is a bank of LEDs. Once you have installed you router , verify [...]

Billion 800VGT Route r Chapter 3: Basic Inst allation The router can be configured with your web browser . A web browser is included as a standa rd application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP /Me, etc. The product provides an easy and user-friendly interfac e for confi guration. Please check your Computer’[...]

Billion 800VGT Route r Connecti ng Y our Router 1. Conn ect t he p ower ad apter as illus trate d be low and power on the device, m ake sur e t hat t he PW R and SYS LEDs are lit steadily. 2. Connect your network or c omputer to the router usin g the LAN (Local Area Network) ca ble . 3. Connect the ADSL/tele phone ( ADSL ) cable to the router’s D[...]

Billion 800VGT Route r Config uring PCs in Window XP 1. Go to St art / Control Panel (in Classic Vi ew). In the Control Panel, double-click Network Connections . 2. Double-click Local Area Connection . (See Figure 3.1) 3. In the LAN Area Connection St atus window , click Properties . ( See Figure 3.2) 4. Select I n t e r n e t P r o t o c o l (TCP/[...]

Billion 800VGT Route r Config uring PCs in Windows 2000 1. Go to St art / Settings / Control Panel . In the Control Panel, double-click Netw ork and Dial-up Connections . 2. Double-click Local Area (“LAN”) Connection . (See Figure 3.5) 3. In the LAN Area Connection St atus window , click Properties . (See Figure 3.6) 4. Select Internet Protoc o[...]

Billion 800VGT Route r Config uring PC in Windows 95/98/ ME 1. Go to St art / Settings / Control Panel . In the Control Panel, double-click Netw ork and choose the Configuration tab. 2. Select TCP / IP -> NE2000 Comp at ible , or the name of the Network Interface Card (NIC) in your PC. ( See Figure 3.9) 3. Click Properties . 4. Select the IP Add[...]

Billion 800VGT Route r Config uring PC in Windows NT4.0 1. Go to St art / Settings / Control Panel . In the Control Panel, double-click Network and choose the Protocols tab. 2. Select TCP/IP Protocol and click Properties . ( See Figure 3.12) 3. Select the Obt ain an IP address from a DHCP server radio button and click OK . ( See Figure 3.13) Figure[...]

Billion 800VGT Route r Factory Default Setting s Before configuri ng your r o u t e r , you need to know the following default settings. Web I nte rfac e ( Use rna me and Pas sw ord) Username: admin Password: admin The default username and password are “ admin ” and “ admin ” respectively . If you ever forget the username/password to login [...]

Billion 800VGT Route r Informati on from your IS P T elkom ADSL connections use PPPoE, and automatically assign a W AN IP address to your router. The following information is provided should you wish to connect to an alternativ e ISP . . Gather the information as illustrated in the following tabl e and keep it for reference. PPPoE VPI/VCI, VC / LLC[...]

Billion 800VGT Route r Config uring wi th your W eb Browse r Open your web browser , enter the IP address of your router , which by default is 10.0.0.2 , and click “ Go ”, a user name and passwor d window prompt will appear . The default username and p assword are “admin” and “admin” respectively . (See Figure 3.14 ) Figure 3.14: User n[...]

Billion 800VGT Route r Chapter 4: Configuration On the configuration homepage, the left navigation pane, where bookma rks are provided, links you directly to the various setup pages, including: St atus - ARP T a b le - W ir e less Associati on - Routing T a b l e - D H CP T a b l e - P P T P S tat u s - IP Sec S ta tus - L2 TP S tat us - Emai l S t[...]

Billion 800VGT Route r Sta tus ARP T abl e This section displays the router ’s ARP (Address Resolution Protocol) T able, which shows the mapping of Internet (IP) addresses to Ethernet (MAC) address es. This is useful as a quick way of determining the MAC address of the network interface of your PCs when you wish to use wi th the router ’s Firew[...]

Billion 800VGT Route r RIP Routing T a b l e D e s t i n a t i o n : T h e IP address of the destination network. Netmask: The destination IP networks’ Netmask . Gatew ay: The IP addres s of the gateway that this route will use. Cost: The number of hops counted as the cost of the route. DHC P T a bl e Leased: The DHCP assigned IP addresses inform[...]

Billion 800VGT Route r PPT P St at us This shows detail s of your configured PPTP VPN Connections. Name: The name you assigned to the particular PPT P connection in your VPN configuration. T ype: The type of connection (dial-in/dial-out). Enable: Whether the connection is currently enabled. Active: Whether the connection is currently active. T unne[...]

Billion 800VGT Route r L2 TP St atus This shows detail s of your configured L2TP VPN Connections. Name: The name you assigned to the particular L2TP connection in your VPN configuration. T ype: The type of connection (dial-in/dial-out). Enable: Whether the connection is currently enabled. Active: Whether the connection is currently active. T unnel [...]

Billion 800VGT Route r Even t Log This page displays the router ’s Event Log entries. Major events are logged to this window , such as when the router’s ADSL connection is disconnected , as well as Firewall events when you have enabled Intrusion or Blocking Loggi ng in the Configuration – Firewall section of the interface. Please see the Fire[...]

Billion 800VGT Route r Di agn osti c It tests the connection to computer(s) which is connected to LAN ports and also the W AN Internet connection. If PING www.goog le.com shows F AIL and the rest show P ASS, you ought to check that your Computers’ DNS settings are correctly set. UPn P Port ma p The section lists all port-mappings established usin[...]

Billion 800VGT Route r Quick Start While it is recommended that you use the installati on utility that was supplied with your router , It is also possible you use the built-in Quick S tart function in order to configure your router . For detail ed instructions on configuring your W AN settings, please see the W AN section of this manual. Usually , [...]

Billion 800VGT Route r Click St art to begin scanning for encapsul ation types offered by your ISP . If the scan is successful you will then be presented with a list of supported options: Select the desired option from the list and click Apply to return to the Quick S tart interface to continue configuring your ISP connection . Please note that the[...]

Billion 800VGT Route r Config uration When you click this item, you will be able to following sub-items to configure the ADSL router . - LAN, W an, System, Firew all, VPN, V oIP , QoS, Vir tual Server , T ime Schedule and Advanced These functions are descri bed below in the following sections. LAN - Local Area Network Here are the items within the [...]

Billion 800VGT Route r Ethernet Primary IP Address IP Address: The default IP on this router . SubNetmask: The default subnet mask on this router . RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function. IP Alias This function supports to create multiple virtual IP interfaces on this router . this helps if you wish to connect two o[...]

Billion 800VGT Route r Ethernet Client Filter The Ethernet Client Filter supports up to 16 Ethernet network machines and helps you to manage your network control, accepting traffic from specific authorized machines or restricti ng unwanted machine (s) from access your LAN. There are no pre-define Ethernet MAC address filter rules; you can add the f[...]

Billion 800VGT Route r Wireless Parameters WLAN Service: Default setting is Enable . If you do not have any wireless devises (802.1 1g or 802.1 1b) on your network, select Disable. Mode: The default setting is 802.1 1b+g (Mixed mode). If you do not know what type of wireless devises you have, or have both 1 1g and 1 1b devices on your network, then[...]

Billion 800VGT Route r TX PowerLevel: This function enhanc es the wireless transmitting signal strength. Users may adjust this power level from minimum 0 up to maximum 255. Not e: Maxi mum power Level is not neces sarily the best choic e in all cas es. choose the mos t suit able level for your netw ork and envir onm ent. Connected: Shown as true or[...]

Billion 800VGT Route r Wireless Security Y ou can disable or enable WP A or WEP for protecting your wireless network. The default mode of wireless security is Enabled. And the default security mode is WP A WP A- PSK (TKIP) / WP A- PSK (AES) Pre-Shared Key WP A Algorithms: There are two types of WP A-PSK security : WP A1 and WP A2. WP A1 adopts the [...]

Billion 800VGT Route r WEP WEP Encryption: T o prevent unauthoriz ed wireles s stations from accessing data transmitted over the network, the router offers highly secure data encryption, known as WEP . If you require high security for transmissions, there are two alternatives to select from: WEP 64 and WEP 128 . WEP 128 will offer increased securit[...]

Billion 800VGT Route r Wireless Client / MAC Address Filter The MAC Address support s up to 16 wireless network machines and helps you to manage your network control to accept traf fic from specific authorized machines or to restrict unwanted machine(s) from accessing your LAN. There are no pre-define MAC Address filter rules; you can add the filte[...]

Billion 800VGT Route r Port Setting This section allows you to configure the settings for the router ’s Ethernet ports to solve some of the compatibili ty problems that may be encountered whil e connecting to the Internet, as well as allowing users to tweak the performance of their network. Port # Connection T ype: this is w here you can customiz[...]

Billion 800VGT Route r DHCP Server Y ou can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router ’s DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP addresses to computers on your network if they are configur ed to obtain IP addresses automaticall y . T o disable the route[...]

Billion 800VGT Route r W AN - Wide Area Network W AN refers to your Wide Area Network connec tion, i.e. your router ’s connection to your ISP and the Internet. Here are the items within the W AN section: ISP , DNS and ADSL . ISP The factory default is PPP oE. T elkom uses this access protocol. If you wish to change any of these parameters, click [...]

Billion 800VGT Route r RF C 148 3 Rout ed Co nne cti ons Descript ion: User-definable name for the connection . VPI and VCI: Enter the informati o n provided by your ISP . A TM Class: The Quality of Service for A TM layer . NA T: The NA T (Network Address T r anslation ) feature allows multiple users to access the Internet through a single IP accou[...]

Billion 800VGT Route r RF C 1483 Bri dge d Co nne cti ons Descript ion: User-definable name for the connection . VPI and VCI: Enter the informati o n provided by your ISP . A TM Class: The Quality of Service for A TM layer . Encapsulation method: Select the encapsul ation format, this is provided by your ISP . Acceptable Frame T ype: S pecify what [...]

Billion 800VGT Route r PPPoA Ro ute d Con ne cti ons Descript ion: User-definable name for the connection . VPI/VCI: Enter the information provided by your ISP . A TM Class: The Quality of Service for A TM layer . NA T: The NA T (Network Address T r anslation ) feature allows multiple users to access the Internet through a single IP account, sharin[...]

Billion 800VGT Route r RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function . MTU: Maximum T ransmission Unit. The size of the largest datagram (excluding media-specific headers) that IP will attempt to send through the interface. Advanced Options (PPP oA) LLC Header: Select s encapsulation mode, select true for using LLC or fals[...]

Billion 800VGT Route r IPo A Rout ed Co nne ctions Descript ion: User-definable name for the connection . VPI/VCI: Enter the information provided by your ISP . A TM Class: The Quality of Service for A TM layer . NA T: The NA T (Network Address T r anslation ) feature allows multiple users to access the Internet through a single IP account, sharing [...]

Billion 800VGT Route r PPPoE Conn ec tions Descript ion: User-definable name for this connection. VPI/VCI: Enter the information provided by your ISP . The T elkom stand ard setti ngs are 8 and 35. A TM Class: The Quality of Service for A TM layer . NA T: The NA T (Network Address T r anslation ) feature allows multiple users to access the Internet[...]

Billion 800VGT Route r Idle T ime out: Auto-disconnect the router when there is no activity on the line for a predetermined period of time.  Detail: Y ou can define destination port and packe t type (TCP/UDP) information that will not result in the router checking the timer . It allows you to set which outgoing traf fic will not trigger and rese[...]

Billion 800VGT Route r PP PoE (mul tise ssi on ) PPPoE multisession allows the user to create multiple PPPoE sessions using a single PVC, using the exact same principles as normal PPP oE as described above. PPPoE wit h Pas s-thr oug h Conn ecti ons PPPoE with pass-through adopts the following method: PPPoE Routed mode + 1483 Bridge Mode. With pure [...]

Billion 800VGT Route r Authentication Protocol: Default is Chap(Auto). Y our ISP will advise you whether to use Chap or Pap. Connection:  Always on: If you want the router to establish a PPPoE session when starting up and to automatically re-establis h the PPPoE session when disconnected by the ISP .  Connect on Demand: If you want to establi[...]

Billion 800VGT Route r DNS A Domain Name System (DNS) contains a mapping table for mapping between Domain Names and IP addresses. On the Internet, every host has a unique and user-frie ndly name (domain name) such as www .helloworld.com as well as an IP address. An IP address is a 32-bi t number in the form of xxx.xxx.xxx.xxx , for examp le 10.0.0.[...]

Billion 800VGT Route r ADSL Connect Mode: This mode will automatically detect your ADSL line mode, ADSL2+, ADSL2, G .dmt, G .lite, T1.413, AnnexM2 or AnnexM2+. But in some areas, multimode cannot detect the ADSL line mode very well. If it is the case, please adjust the ADSL line code to G .dmt first. If it still fails, ,please check with your ISP f[...]

Billion 800VGT Route r Advanced Options ADSL Parameters help to interp ret your ADSL line sta tistics. SNR Margin: This is known as Signal to Noise Ration Margin. It is the ratio between DSL strength and signal noise. This margin is measured in decibels (dB). Higher the dB figures better the DSL strength is relative to the noise, and better chance [...]

Billion 800VGT Route r System Here are the items within the System section: T ime Zone, Remote Access, Firmware Upgrade, Backup/Restore, Restar t and User Manageme nt. Time Zone This router does not have a real time clock on board; instead, it uses the Simple Network T ime Protocol (SNTP) to get the current time from an SNTP server outside your net[...]

Billion 800VGT Route r Remote Acce ss T o temporarily permit remote administration of the router (i.e. from outside your LAN), select a time period the router will permit remote access for and click Enable. Y ou may change other configuration options for the web administr ation interface using Device Management options in the Advanced section of th[...]

Billion 800VGT Route r Backup / Restore These functions allow you to save and backup your router ’s current settings to a file on your Computer, or to restore a previously saved backup. This is useful if you wish to experiment with different settings, knowing that you have a backup handy in the case of any mistakes. It is advisable to backup your[...]

Billion 800VGT Route r User Management In order to prevent unauthorized access to your router ’s configuration interfa ce, it requires all users to login with a passwor d. Y ou can set up multiple user accounts , each with their own password. Y ou are able to Edit existing users and Create new users who are able to access the device’s configura[...]

Billion 800VGT Route r Firewall and Access Control Y our router includes a full SPI (S tateful Packet Inspecti on) firewall for controlling Internet access from your LAN, as well as helping to prevent attacks from hackers. In addition to this, when using NA T , the router acts as a “natural” Internet firewall, as all PCs on your LAN will use pr[...]

Billion 800VGT Route r General Settings Y ou can choose not to enable the Firewall and still have access to URL Filter and IM/P2P Blocki ng, or you can enable the Firewall using preset filter rules and modify the port filter rules as required. The Packet Filter is used to filter packet s based-on Applications (Port) or IP addresses. There are four [...]

Billion 800VGT Route r Packet Filter This function is only available when the firewall function is enabled and one of these four security levels is chosen (All blocked, High, Medium and Low). The preset port filter rules in the Packet Filter must be modified according to the level of Firewall which is selected. See T able1: Predefined Port Filter f[...]

Billion 800VGT Route r Exa mple: Pre defi ned Por t Fil ter s R ules The predefined port filter rules for High, Medium and Low security levels are listed. See T able 1. Not e: Firewall – For Bloc ked/U ser-d efined , you must define and crea te the port filter rules your self. No pred efine d rules are co nfigur ed for thes e modes . T ab le 1: P[...]

Billion 800VGT Route r Packet Filter – Add TCP/UDP Filter Rule Name: Specify a User-defined description identifying this entry or click to select existing predefined rules. The maximum name length is 32 characters. Time Schedule: T his is the user-defined time period applicable to the rule. Y ou may specify a time schedule for your prioritization[...]

Billion 800VGT Route r Packet Filter – Add Raw IP Filter Rule Name: S pecifies a user-defined description identifying this entry or click to select existing predefined rules. Time Schedule: this is the user-defined time period applicable to the rule. Y ou may specify a time schedule for your prioritization policy . For setup and detail, refer to [...]

Billion 800VGT Route r Configuring Packet Filter: 1. Click Port Filters . Y ou will then be presented with the predefined port filter rules screen (in this case, for the low security level) shown below: Note: You may edit the prede fined ru le inst ead of dele ting it. This is an exam ple sho wing to how you add a filter on your own. Cli ck Dele te[...]

Billion 800VGT Route r 5. The new port filter rule for HTTP is shown below: 6. Configure your Vi rtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server: Note: For how to confi gure the HT TP in Virtual Server mo de , go to Add Virt ual Ser ver in the V irtual S erv[...]

Billion 800VGT Route r Intrusion Detection The router ’s Intrusion Detection System (IDS) is used to detect hacker attac ks and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbou nd packet s are filtered and blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or ot[...]

Billion 800VGT Route r T ab le 2: Ha cke r at t a ck type s r ec ogni zed b y the IDS Intrusion Name Detect Parameter Blacklist T ype of Block Duration Drop Packet Show Log Ascend Kill Ascend Kill data Src IP DoS Y es Y es WinNuke TCP Port 135, 137~ 139, Flag: URG Src IP DoS Y es Y es Smurf ICMP type 8 Des IP is broadcast Dst IP Vi ctim Protection [...]

Billion 800VGT Route r URL Filter URL (Uniform Resource Locator – e.g. an address in the form of http://www .abcde.com or http://www .exam ple.c om ) filter rules allow you to prevent users on your network from accessing particular websites by their URL. There are no pre-defined URL filter rules; you can add filter rules to meet your requirement [...]

Billion 800VGT Route r 3. If the packet does not match either of the above two items, it is sent to the remote web server . 4. Please note that the completed URL, “www” + domai n name should be specified. For example to block traffic to www .google.com.au , enter “ www .google ” or “ www .googl e.co m ” In the example below , the URL re[...]

Billion 800VGT Route r IM / P2P Blocking IM, short for Instant Messaging, is required to use client program softw are that allows users to communicate, exchangi ng text message, with other IM users, in real time, over the Internet. A P2P application, known as Peer-to-Peer , is a group of computer users who share files to specific groups of people a[...]

Billion 800VGT Route r Firewall Log The Firewall Log displays log information of any unexpecte d action with your firewall settings. Select the Enable box to activate the logging. Log information can be seen in the St at us – Event Log screen after enabling. 69 Chapter 4: Configuration[...]

Billion 800VGT Route r VPN - V irtual Private Networks Vir tual Private Netw orks are a way to establish secured communication tunnels to an organizati on’s network via the Internet. Y our router supports three main types of VPN (Virtua l Private Network), PPTP , IPSec and L2TP . PPTP (Point-to-Point T unnelling Protocol) There are two types of P[...]

Billion 800VGT Route r PP TP Conne cti on - Remo te A c ce ss Connection Name: A user-defined name for the connection (e.g. “connection to office ”). T ype: Select Dial Out if you want your router to operate as a client (connecti ng to a remote VPN server , e.g. your office server), select Dial In if you want your router to operate as a VPN ser[...]

Billion 800VGT Route r Example: Configuring a Remote Access PPTP VPN Dial- out Connection A company’ s office establishes a PPTP VPN connection with a file server located at a sep arate location. The router is installed in the office, and connected to a couple of PCs and Servers. Di al- out 72 Chapter 4: Configuration[...]

Billion 800VGT Route r Configuring the PPTP VPN in the Office Y ou can either input the IP address (69.1.121.33 in this case) or hostname to reach the server . 1 2 3 4 5 Item Function Descript ion 1 Connection Name VPN_PPTP Given name of PPTP connection Dial out Select Dial out 2 Server IP Address (or Hostname) 69.121.1.33 The Dialed server’s IP [...]

Billion 800VGT Route r PP TP Conne cti on - LAN to L AN Connection Name: User-defined description of the connection. T ype: Select Dial Out if you want your router to operate as a client (connecti ng to a remote VPN server , e.g. your office server) or select Dial In operates as a VPN server .  When configuring your router as a Client, enter the[...]

Billion 800VGT Route r Example: Configuring a PPTP LAN-to-LAN VPN Connect ion The branch offi ce establish es a PPTP VPN tunnel wit h head office to connect two private networks over the Internet. The routers are installed in the head office and branch office accordingly . Attention Both office LAN networks MUST in different subnet when using the L[...]

Billion 800VGT Route r Configuring PPTP VPN in the Head Office The IP address 192.168.1. 200 will be assigned to the router located in the branch office. Please make sure this IP is not used in the head office LAN. 1 2 3 4 5 6 Item Fun ctio n Des cri pti on 1 Connection Name HeadOffice Given name of the PPTP connection Dial in Select Dial in 2 Priv[...]

Billion 800VGT Route r Configuring PPTP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you registered a DDNS account (please refer to the DDNS section of this manual ), you can also use the domain name instead of the IP address to reach the router . 1 2 3 4 5 6 Item Fun ctio n D[...]

Billion 800VGT Route r IPSec (IP Security Protoc ol) Click Create to create a new IPSec VPN connectio n account. After you have created the IPSec connection, account information will be displayed. (See example above). Enable / Disable: This functi on activates or deactivates the IPSec connection. If you wish to disable the tunnel, select Disable an[...]

Billion 800VGT Route r IP Sec VPN Co nne cti on Connection Name: The user-defined name for the connection (e.g. “connection to office”). Local Network: Set the IP address, subnet or addres s range of the local networ k.  Single Address: The IP address of the local host.  Subnet: The subnet of the local network. For example, IP: 192.168.1.[...]

Billion 800VGT Route r  3DES: S tands for T riple Data Encryption S tandard, it uses 168 (56*3) bits as an encryption method.  AES: S tands for Advanced Encryption S tandards, you can use 128, 192 or 256 bits as encryption method. Perfect Forward Secrecy: Choose whether to enable PFS using Dif fie-Hellma n public-key cryptography to change en[...]

Billion 800VGT Route r IKE (Inter net key Exchange) Mode: Select IKE mode to Main mode or Aggressive mode. This IKE provides secured key generation and key management. IKE Proposal: Hash Function: This is a Message Digest algorithm which coverts any length of a message into a unique set of bits. Y ou can use either MD5 (Message Digest) or SHA-1 (Se[...]

Billion 800VGT Route r Ping to the IP Interval (sec) Pi n g to the IP Action 0.0.0.0 0 No 0.0.0.0 2000 No xxx . xxx . x x x . x x x (A n y v a lid IP Addre s s ) 0 No x x x.x x x . xxx . x x x(A n y v a lid IP Address) 2000 Y es, a c ti v a t e it in every 2000 s econd. Disconnection Time after no traffic: This is the “NO Response” timer. When [...]

Billion 800VGT Route r Configuring IPSec VPN in the Head Office 1 2 3 4 5 Ite m Fun ctio n Des cri pti on 1 Connection Name IPSec_HeadOf fice Given name of the IPSec connection Subnet Select the Subnet button IP Address 192.168.1. 0 2 Netmask 255.255.255. 0 Head office network 3 Secure Gateway Address (or Hostname) 69.121.1.30 IP address of the hea[...]

Billion 800VGT Route r Configuring IPSec VPN in the Branch Office 1 2 3 4 5 Item Fun ctio n Des cri ptio n 1 Connection Name IPSec_Branch Office Given name of the IPSec connection Subnet Select the Subnet button IP Address 192.168.0. 0 2 Netmask 255.255.25 5.0 Branch office network 3 Secure Gateway Address (or Hostname) 69.1 21.1. 3 IP address of t[...]

Billion 800VGT Route r Example: Configuring a IPSec Host-to-LAN VPN Connection 85 Chapter 4: Configuration[...]

Billion 800VGT Route r Configuring IPSec VPN in the Office 1 2 3 4 5 Item Fun ctio n Des cri ptio n 1 Connection Name IPSec Given name of the IPSec connection Subnet Select the Subnet button IP Address 192.168.1. 0 2 Netmask 255.255.255. 0 Head office network 3 Secure Gateway Address (or Hostname) 69.121.1.30 IP address of the head offi ce router ([...]

Billion 800VGT Route r L2TP (Layer T w o T unnellin g Protoc ol) T wo types of L2TP VPN are supported Remote Access and LAN-to-LAN (ple ase refer below for more information.). Click Create to create a new VPN connection account. After you have created L2TP connectio n, the account status will be displayed. (As shown above).  Enable / Disable: Th[...]

Billion 800VGT Route r L2T P Conn ec tion - Re mot e A cc ess L2TP VPN C onnecti on Connect ion Name: A User-defined name for the connection (e.g. “connecti on to office” ). T ype: Select Dial Out if you want your router to operate as a client (connecti ng to a remote VPN server , e.g. your office server), select Dial In if you wish your router[...]

Billion 800VGT Route r Active as default route : Normally used when the mode is set to Dial -out. If this is selected, all packet s, including internet packet s, will route through the VPN tunnel; If this function is enabled, the performance of your Internet connection may be degraded Click Apply after changing the settings. L2TP over IPSec (L2TP/I[...]

Billion 800VGT Route r Example: Configuring a L2TP VPN - Remote Acce ss Dial-in Connection A remote worker establish es a L2TP VPN connectio n with the head office using Microsof t's VPN Adapter (included with Windows Vista/ XP/2000 /ME, etc.). The router is install e d in the head office and is connected to a couple of PCs and Servers. Dial -[...]

Billion 800VGT Route r Configuring L2TP VPN in the Off ice The LAN IP address 192.168.1.200 will be assigned to the remote computer (client). Please make sure this IP is not used on the Office LAN. 1 2 3 4 5 6 Item Fun ctio n Des cripti on 1 Connection Name VPN_L2TP Given name of the L2TP connection Dial in select Dial in 2 Private IP Address Assig[...]

Billion 800VGT Route r Example: Configuring a Remote Access L2TP VPN Dial-out Connection A company’ s office establ ishes a L2TP VPN connection with a file server located at a separa te location. The router is installed in the office and is connected to a couple of computers and Servers. Di al- out Configuring the L2TP VPN in the Office 1 2 3 4 5[...]

Billion 800VGT Route r Item Function Descript ion 1 Connection Name VPN_L2TP G iven name of the L2TP connection Dial out select Dial out 2 Server IP Address (or Hostname) 69.121.1.33 The Dialed server’s IP address. Username username 3 Password 123456 The username & password that is required to connect to the VPN server. 4 Auth.T ype Chap(Auto[...]

Billion 800VGT Route r Example: Configuring your Router to Dial-in to the Server Currently , Microsoft Windows operation system does not support L2TP incoming service. Additional sof tware may be required to set up your L2TP incoming service. L2TP Conne ctio n - LAN to L AN L2TP VPN C onnecti on Connect ion Name: A User-define description of the co[...]

Billion 800VGT Route r PPP Authentication T ype: Default is Auto. Use this setting if you want the router to determine which authentication type to use. Y ou can manually specify CHAP (Challenge Handshake Authentication Protocol) or P AP (Password Authentication Protocol) if you know which type the server is using (when acting as a client) If the r[...]

Billion 800VGT Route r Example: Configuring L2TP LAN-to-LAN VPN Connect ion The branch offi ce establis hes a L2TP VPN tunnel with head office , connecting the two private networks over the Internet. The routers are installed in both the head office and branch office. Both LAN networks MUST be on different subnets when using the LAN to LAN applicat[...]

Billion 800VGT Route r Configuring L2TP VPN in the Head Office The IP address 192.168.1. 200 will be assigned to the router located in the branch office. Please make sure this IP is not used in the head office LAN. 1 2 3 4 5 6 7 Item Fun ctio n Des cri ptio n 1 Connection Name HeadOffic e Given name of the L2TP connection Dial in select Dial in 2 P[...]

Billion 800VGT Route r Configuring L2TP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you registered a DDNS account, (please refer to the DDNS section of this manual), you can also use the DDNS domain name instead of the IP address to reach the router . 1 2 3 4 5 6 7 Item Fun c[...]

Billion 800VGT Route r V oIP - V oice over Internet Protocol The V oIP functionality enables telephone calls to be placed through your existing Internet connectio n instead of going through the PSTN (Public Switched T elephone Network). It is not only cost-effec tive, especially for long dista nce telephone calls, but also allows toll-quality voice[...]

Billion 800VGT Route r Setting for Phone Port 1 SIP Service Provider: This section allows you to select your service provider . When the selection is done, the para meters below are automatically displayed. Select Profile: T his allows you to select a desired V oIP provider whom is not already defined in the SIP Service Provider list. Y ou may manu[...]

Billion 800VGT Route r Profile Name: A user-defined name to identify the profil e. Registrar Address(or Hostname) : Indicate the V oIP SIP registrar’s IP address. Registrar Port: S pecify the port on which the V oIP SIP registrar will listen for register requests from V oIP devices. Expire: Expire time for the registration message sending. User D[...]

Billion 800VGT Route r SIP Device Pa rameters SIP: Select w hether you w ish to use SIP as V oIP call signaling protocol. The default setting is Disable. Silence Suppression (V AD): V oice Activation Detection (V AD) prevents the transmission of silence since it will unnecessaril y consume your bandwid th. This function is also known as Silence Sup[...]

Billion 800VGT Route r Advanced – Parameters V oIP through IP Interface: IP Interface decides where to send/receive the V oIP traffic. Options include: ipwan and iplan. An easy way to select the interface option is to check the location of the SIP server . If it is located somewhere on the Internet, then select ipwan. If the V oIP SIP server is o[...]

Billion 800VGT Route r Phone Port This section displays status and allows you to edit the account information of your Phones. Click Edit to update your phone informati o n. Login Accou nt Configu ration Phone Number: This parameter is the registration ID of the user as recorded in the V oIP SIP registrar . Authentication Username: Same as Phone Num[...]

Billion 800VGT Route r Codec Preference A codec is a Coder-Decoder and is used for data signal conversion. The priority position sets the priority of each codec; Priority 1 is the top priority . G .729: This type of codec encodes and decodes the voice informati o n into a single packet which reduces the bandwidth consumption. 8kbps of bandwid th is[...]

Billion 800VGT Route r PSTN Dial Plan This section enables you to configure “V oIP with PSTN switching” on your system. Y ou can define a range of dial plans to select which calls are routed over V oIP and which are routed over the PSTN line. Prefix numbers are the essential key to distinguish between V oIP and Regular (PSTN) phone calls. If th[...]

Billion 800VGT Route r PSTN Dial Plan Examples: 1) Dial w ith Prefix If you dial 01223 707070, the number 012237070 70 will be dialled out via the FXO port, to make a regular (PSTN) phone call. 2) Dial w ithout Prefix If you dial 9102, the number 102 will be dialled out via the FXO port, to make a regular (PSTN) phone call. 3) Dial at Timeout If yo[...]

Billion 800VGT Route r 4) Dial at Timeout no Prefix If you dial 97070 and no more numbers, afte r the timeout activates, 7070 will be dialled (without the prefix ), to make a regular (PSTN) call via the FXO port. Even though 7070 (only 4 digits) does not match the number of digits (6) define d in the Number of Digit s field, 7070 is still a valid p[...]

Billion 800VGT Route r V oIP Dial Plan This section helps you to make a V oIP call as easily as a regular call. Y ou no longer need to memorize a long dial string of numbers in order to make a V oIP call. Parameters A list of special dial features comes handy when you have a miss call or need to transfer a call to a third party . For details, pleas[...]

Billion 800VGT Route r Dial Plan Rule s Lis t Click Add to create and define V oIP dial-plan rule(s). Prefix Processing: Prepend xxx unconditionally: The entered number , xxx, is appended uncondi tionally to the front of the dialling number when making a call. This prefix can incl ud e any number and/or character such as + , *, # . Not e: For spec [...]

Billion 800VGT Route r <@ PSTN>: This refers to making calls via the PSTN line. <@ENUM>: This referes to making a V oIP SIP call, via an E.164 number (“ENUM”), to an ENUM callee. Electronic Number (ENUM) is a system that uses DNS (Domain Network System) based technology to map between a traditional phone numbe r (PSTN) and an Intern[...]

Billion 800VGT Route r Localcheap.com is the d e f a u l t V oIP provider I set on phone port 1. When I dial any number starting with 1 or 2 or 3 , , 03 is always prepended in front of these number . If 23295 is dialled, 03-2-32935 is the actual phone number dialled using localcheap.co m as a provider . 2) Phone 1: For International calls: I use lo[...]

Billion 800VGT Route r Mobilecheap.com is the default V oIP provider I set on phone port 2. When I call out 123-39-45678 for a mobile call, 123 is replaced with 09 and 09-39-45678 is the actual phone number dialled using Mobilecheap.com as a provider . The Intelligent Call Gateway not only saves time when changing V oIP settings to diffe rent provi[...]

Billion 800VGT Route r Special Dial Codes The following table lists the special dial codes that are built into the router. Note that Telkom’s VoIP service may provide the sa me type of features, and therefore these features might be disabled on the 800VGT platform. Option Description Flash-hook Switch to PSTN line Note: This is a quick press of t[...]

Billion 800VGT Route r QoS - Quality of Serv ice The QoS function helps you to control your network traf fic for each LAN (Ethernet and/or Wireless) application that accesses the W AN (Internet). It allows you to control the quality and speed of throughput for each application, when the system is running with a fully loaded upstream channel. Here a[...]

Billion 800VGT Route r Source IP Address Range : The source IP address or range of packet s to be monitored. Destination IP address Range : The destination IP address or range of packet s to be monitored. DSCP Marking : Differentiated Services Code Point (DSCP), it is the first 6 bits in the T oS byte. DSCP Marking allows users to assign specific a[...]

Billion 800VGT Route r Outbound IP Throttling (LAN to W AN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the specified application to the specified value (Set in mul tiples of 32kbps.) Cli ck Clea r Y o u can c li ck Clear to d ele te t he ex ist in g App lic at io n. Application : A user-defi[...]

Billion 800VGT Route r Inbound IP Throttling (W AN to LAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the specified application to the specified value (Set in multiples of 32kbps. ) Cli ck Cle ar Y o u can c li ck Clear to d ele te t he ex ist in g App lic at io n. Application : A user-defin[...]

Billion 800VGT Route r Example: QoS for your Netw ork Connection Diagram V oI P No rma l P Cs Re stric te d P C Information and Settings Upstream: 928 kbps Downstream: 8 Mbps V oIP User : 192.168.1. 1 Normal Users : 192.168.1. 2~19 2.168.1.5 Restricted User: 192.168.1.100 Throug hpu t 500 kbps 400 300 200 100 VoIP/ VP N HI GH Others NORMAL Rest ric[...]

Billion 800VGT Route r Mis si on-c riti cal appl icat ion s Often, a VPN connection is a mission-critical application for exchanging data between Head and Branch offices. This mission-critical application must be connected smoothly, without any droppi ng. T o ensure this, you should set the priori ty to the high level to preventing any other applic[...]

Billion 800VGT Route r Sometime your customers or friends may upload thei r files to your FTP server and that will saturate your downstream bandwidt h. The settings below will help you to limit bandwid th for such a application that needs restriction. V irtual Server (known as Port Forwarding) In TCP/IP and UDP networks, a port is a 16-bit number u[...]

Billion 800VGT Route r Add Virtual Server Because NA T can act as a “natural” Internet firewall , your router prote cts your network from being accessed by outside users when NA T is enabled - all incoming connection attempts will point to your router unless you specifically created Virtual Server entries to forward those ports to a computer on[...]

Billion 800VGT Route r Example: If you would like to remotely access your routers’ W eb/HTTP interface all the time, you would need to enable port number 80 (W eb/HTTP) and map it to the Router ’ s LAN IP Address. All incoming HTTP requests on the W AN network will then be forwarded to the route r’s IP address of 192.168.1.254. Since port num[...]

Billion 800VGT Route r Edit DMZ Host A DMZ Host is a computer on the LAN that is completely exposed to the Internet. When you have configured a parti cular internal IP address as the DMZ Host, all incomin g packe ts will be checked by the routers firewall and NA T algori thms, and if the packet does not use a port number that has been assigned by a[...]

Billion 800VGT Route r Edit One-to-O ne NA T (Network Address T r anslation) One-to-One NA T maps a specific private/local (LAN) IP address to a particula r global/public (W AN) IP address. If you have multiple public/W AN IP addresses provided by your ISP , you are will be able to use the One-to-One NA T function to utilize these IP addresses. NA [...]

Billion 800VGT Route r Time Schedule: T he user-defined time period during which your virtual server is enabled. Y ou m a y specify a time schedule or you can select Always on for this Vi rtual Server Entry . For setup and details, refer to the Time Schedule section Application : This is a user-define d descripti on to identify this entry. Y ou can[...]

Billion 800VGT Route r The Internet Assigned Numbers Authority (IANA) is the central coordin ator for the assignment of unique parameter values for Internet protocols. Port numbers range from 0 to 65535, but only ports numbers 0 to 1023 are reserved for privileged services and are desi gnated as “well-known port s” (Please refer to T able 5). R[...]

Billion 800VGT Route r Time Schedule The T ime Schedule function supports up to 16 time slots, helping you to manag e your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allowi ng the usage of the Internet by users or applications. This T ime Schedule correl ates closely to real[...]

Billion 800VGT Route r Configuration of Time Schedule Edit a T ime Slot 1. Choose any T i me Slot (ID 1 to ID 16) to edit, click Edit. Cli ck Edi t Not e: The days that you have selec ted will show as capi tal let ters. Lower cas e letters show the day(s) that are not selec ted, and no rule will apply on these days . 2. The setting of this T ime Sl[...]

Billion 800VGT Route r Advanced The Configurati on options of the Advanced section are for users who wish to take advantage of the more advanced features of the router . Users who do not understa n d the features should not attempt to reconfigure their router , unless advised to do so by support staf f. Here are the items within the Advanced sectio[...]

Billion 800VGT Route r Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your ADSL connection, so that anyone wishing to connect to you may use your domain name, [...]

Billion 800VGT Route r Check Email This function allows you to have the router check your POP3 mailbox for new Email messages. Y ou may view the status of this function using the S tatus – Email Checking section of the web interface, which also provides details on the number of new messages waiting. See the S tatus section of this manual for more[...]

Billion 800VGT Route r Device Manag ement The Device Management configuration settings allow you to control your router ’s security options and device monitoring features. Embedded We b Ser ver ( 2 Man age m en t I P Ac count s) HT TP Port: This is the port number of the router’s embedded web server (for web-based configuration.) The default va[...]

Billion 800VGT Route r Universal Plug and Play (UPnP) UPnP offers peer-to-peer network connectivity for PCs and other network devices, along with control and data transfer between devices. UPnP offers many advanta ges for users running NA T routers through UPnP NA T T raversal. On supported systems, it makes tasks such as port forwarding much easie[...]

Billion 800VGT Route r From RFC 1213 (MIB-II):  System group  Interfaces group  Address T ranslation group  IP group  ICMP group  TCP group  UDP group  EGP (not applicable)  T ransmission  SNMP group From RFC1650 (EtherLike-MIB):  dot3S tats From RFC 1493 (Bridge MIB):  dot1dBase group  dot1dTp group  dot1d[...]

Billion 800VGT Route r IGMP IGMP , known as Internet Group Management Protocol , is used to management hosts from multicast group. IGMP Forwarding: Accepting multicast packet. Default is Enable. IGMP Snooping: Allowing switched Ethernet to check and make correct forwarding decisions. Def ault is Disable. VLAN Bridg e This section allows you to crea[...]

Billion 800VGT Route r Bridge Interface VLAN Port (Alw ays st art s w ith) Ethernet P1 / P2 / P3 / P4 Ethernet1 P2 / P3 / P4 Ethernet2 P3 / P4 Ethernet3 P4 Step 2: Create W AN Interface Go to Configuration  W A N  ISP w anlink is the factory default W AN interface which is used for data/i nternet access. If your ISP uses this access protocol,[...]

Billion 800VGT Route r S paces next to VPI and VCI, type 0 and 33 in respectively . Select appropriate A TM Class, Encapsulation Method, Accept able Frame T ype, Filter T ype and PVID for Untag ged Frames. VPI and VCI: Enter the informati o n provided by your ISP . A TM Class: The Quality of Service for A TM layer . Encapsulation method: Select the[...]

Billion 800VGT Route r Step 3: Setup VLAN Service Go to Configuration  Advanced  VLAN Bridge DefaultVla n list s all member ports. It is necessary to group speci fic member ports for each VLAN. From the example, two VLAN groups are requested: Data and Vi deo. T o create another VLAN group for Video, click on Create VLAN. Give a name and ID (P[...]

Billion 800VGT Route r Having mapped the VLAN Bridge with the Bridge Interface created in S tep1, you will see the comfortable relationship in these two screenshots. Step 4: IGMP Snooping Enable Select Configuration  Advanced  IGMP . IGMP Snooping must be enabled in order to allow the video stream forwarding to correctly function. Save Config[...]

Billion 800VGT Route r Logout T o exit the router ’s web interface, choose Logout . Please ensure that you have saved the configuration settings before you logout. Be aware that the router is restricted to only one PC accessing the configuration web pages at a time. Once a PC has logged into the web interface, other PCs cannot get access until th[...]

Billion 800VGT Route r Chapter 5: T r o u b l e shoot ing If the router is not functioning properly , first check this chapter for simple troubleshooting before contacting the Help desk . Problems sta rti ng up the router Problem Corrective Action None of the LEDs are on w hen you turn on the router . Check the connection between the power adapter [...]

Billion 800VGT Route r If you do not succeed in solving the problem using the diagnostics u tility please contact either Telkom’s or Sizwe’s router helpdesk – please see contact details and operating hours below . Note that both Telko m and Sizwe support p ersonnel will request tha t you run the diagnostic te st and relay the results back to [...]