Billion BiPAC 7402G manual

BiP AC 7402G 802.1 1g ADSL2+ VPN Firewall Router User ’ s Manual V ersion Release 5.07 Last Revision Date: 1 1-13-2006[...]

T T a a b b l l e e o o f f C C o o n n t t e e n n t t s s CHAPTER 1: INTRODUCTION ............................................................................................................. 3 I NTRODUCTION TO YOUR R OUTER ............................................................................................................. 3 F EA TURES .[...]

ISP .................................................................................................................................................. 42 ADSL .............................................................................................................................................. 53 System ......................................[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 1: Introduction Chapter 1: Introduction Introduction to your Router Welcome to the Billion BiP AC 7402G Router . The router is an “all-in-one” unit, combining an ADSL modem, IEEE 802.1 1g wireless access point, ADSL rout er with four-port 10/100M auto-crossover Switch, and Firewall, enabling you to m[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 1: Introduction Quick Inst allation Wizard It supports a WEB GUI p age to install this device quickly . With this wizard, end users can enter the information easily which they get from their ISP , then surf the Internet immediately . Universal Plug and Play (UPnP) and UPnP NA T T raversal This protocol i[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 1: Introduction Dynamic Host Configuration Protocol (DHCP) client and server In the W AN site, the DHCP client can get an IP address from the Internet Service Provider (ISP) automatically . In the LAN site, the DHCP server can allocate a range of client IP addresses and distribute them including IP addre[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 1: Introduction BiP AC 7402G ADSL Router Application Figure 1.1 Application Diagram of BiP AC 7402G Thank you for your purchase, and welcome to the world of broadband Internet! 6[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 2: Installing the router Chapter 2: Inst alling the Router Import ant note for using this router War n i n g  Do not use this router in high humidity or high temperatures.  Do not use the same power source for this router as othe r equipment.  Do not open or rep air the case yourself. If this ro[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 2: Installing the router The Front LEDs LED Meaning 1 PPP / MAIL Lit Orange when there is a PPPoA / PPPoE connection. Lit and flashed periodically when there is email in the Inbox. 2 ADSL Lit Green when successfully connected to an ADSL DSLAM (“linesync”). 3 LAN Port 1X — 4X (RJ-45 connector) Lit w[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 2: Installing the router The Rear Port s 4 1 6 3 2 5 Port Meaning 1 Power Switch Power ON/OFF switch 2 PWR Connect the supplied power adapter to this jack. 3 RESET T o be sure the device is being turned on  press RESET button for: 1-3 seconds : quick reset the device. 6 seconds above, and power off, p[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 2: Installing the router Cabling One of the most common causes of problems is bad cabling or ADSL line(s). Make sure that all connected devices are turned on. On the front of the product is a bank o f LEDs. V erify that the LAN Link and ADSL line LEDs are lit. If they are not, verify that you are using t[...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 11 Chapter 3: Basic Inst allation The router can be configured with your web browser . A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me, etc. The product provides a very easy and user-friendly interface fo[...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 12 Connecting your router 1. Connect this router to a LAN (Local Area Network) and the ADSL/telephone ( ADSL ) network. 2. Power on the device.x 3. Make sure the PWR and SYS LEDs are lit steadily and that the LAN LED is lit.[...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 13 Configuring PCs in Windows in Window XP 1. Go to St art / Control Panel (in Classic View). In the Control Panel, double-click Network Connections . 2. Double-click Local Area Connection . (See Figure 3.1) 3. In the LAN Area Connection S tatus window , click Properties . ( See Figu[...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 14 Configuring PCs in Windows 2000 1. Go to St art / Settings / Control Panel . In the Control Panel, double-click Network and Dial-up Connections . 2. Double-click Local Area (“LAN”) Connection . (See Figure 3.5) 3. In the LAN Area Connection S tatus window , click Properties . [...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 15 Configuring PC in Windows 95/98/ME 1. Go to St art / Settings / Control Panel . In the Control Panel, double-click Network and choose the Configuration tab. 2. Select TCP / IP -> NE2000 Compatible , or the name of any Network Interface Card (NIC) in your PC. ( See Figure 3.9) 3[...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 16 Configuring PC in Windows NT4.0 1. Go to St art / Settings / Control Panel . In the Control Panel, double-click Network and choose the Protocols tab. 2. Select TCP/IP Protocol and click Properties . ( See Figure 3.12) 3. Select the Obt a in an IP address from a DHCP server radio b[...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 17 Factory Default Settings Before configuring your , you need to know the following default settings. Web Interface (Username and Password) Username: admin Password: admin The default username and password are “ admin ” and “ admin ” respectively . A ttention If you ever for[...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 18 Information from your ISP Before configuring this device, you have to check wi th your ISP (Internet Service Provider) to find out what kind of service is provided such as DHCP (Obt ain an I P Address Automatically , S tatic IP (Fixed IP Address) and PPPoE. Gather the information [...]

802.1 1g ADSL2+ VPN Firewall Router Chapter 3: Basic Installation 19 Configuring with your W eb Browser Open your web browser , enter the IP address of your router , which by default is 192.168.1.254 , and click “ Go ”, a user name and password window prompt will appear . The default username and password are “admin” and “admin”. (See F[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Chapter 4: Configuration At the configuration homep age, the left navigation p ane where bookmarks are provided links you directly to the desired setup page, including: St atus - ARP T able - Wireless Association - Routing T able - DHCP T able - PPTP S tatus - IPSec S tatus - L2TP S tatu[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration S t atus ARP T able This section displays the router’s ARP (Address Resolution Protocol) T able, which shows the mapping of Internet (IP) addresses to Ethernet (MAC) addresses. This is useful as a quick way of determining the MAC address of the network interface of your PCs to use with[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Routing T able Routing T able V alid: It indicates a successful routing status. Destination: The IP address of the destination network. Netmask: The destination netmask address. Gateway/Interface: The IP address of the gateway or existing interface that this route will use. Cost: The num[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration DHCP T able Leased: The DHCP assigned IP addresses information. IP Address: A list of IP addresses of devices on your LAN (Local Area Network). Expired: The expired IP addresses information. Permanent: The fixed host mapping information Leased T able IP Address: The IP address that assig[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration PPTP S tatus This shows details of your configured PPTP VPN Connections. Name: The name you assigned to the p articular PPTP connection in your VPN configuration. T ype: The type of connection (dial-in/dial-out). Enable: Whether the connection is currently enabled. Active: Whether the co[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration L2TP S tatus This shows details of your configured L2TP VPN Connections. Name: The name you assigned to the p articular L2TP connection in your VPN configuration. T ype: The type of connection (dial-in/dial-out). Enable: Whether the connection is currently enabled. Active: Whether the co[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Event Log This page displays the router’s Event Log entries. Major events are logged to this window , such as when the router ’s ADSL connection is disconnected, as well a s Firewall events when you have enabled Intrusion or Blocking Logging in the Configuration – Firewall section [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration NA T Sessions This section lists all current NA T sessions between interface of types external (W AN) and internal (LAN). Diagnostic It tests the connection to computer(s) which is connected to LAN port s and also the WAN Internet connection. If PING www.google.com is shown F AIL and the[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration UPnP Portmap The section lists all por t-mapping established using UPnP (Universal Plug and Play). Please see the Advanced section of this manual for more details on UPnP and the router ’ s UPnP configuration options. 28[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Quick S t art For detailed instructions on configuring your W AN settings, please see the WA N section of this manual. Usually , the only details you will need for the Qui ck S tart wizard to get you online are your login (often in the form of username@ispname ), your password and the en[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Select the desired option from the list and click Apply to return to the Quick S tart interface to continue configuring your ISP connection. Pl ease note that the contents of this list will vary , depending on what is supported by your ISP . 30[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuration When you click this item, you get following sub-items to configure the ADSL router . LAN, W AN, System, Firewall, VPN, QoS, Virtual Server , Time Schedule and Advanced These functions are described below in the following sections. LAN (Local Area Netw ork) There are seven i[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Ethernet Primary IP Address IP Address: The default IP on this router . Subnet Mask: The default subnet mask on this router . RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function. IP Alias This function support s to create multiple virtual IP interfaces on this router [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration DMZ: S pecify this network to DMZ area. There is no NA T on this interface. Ethernet Client Filter The Ethernet Client Filter supports up to 16 Ethernet network machines that help s you to manage your network control to accept traf fic from specific aut horized machines or can restrict u[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router . Y ou can easily by checking the box next to the IP address to be blocked or allowed. Then, Add to insert to the Ethernet Client Filter table. The maximum Ether[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Wireless Parameters WLAN Service: Default setting is set to Enable . If you do not have any wireless, both 802.1 1g and 802.1 1b, device in your network, select Disable. Mode: The default setting is 802.1 1b+g (Mixed mode). If you do not know or have both 1 1g and 1 1b devices in your ne[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Note: Wireless performance may degrade if select ID c hannel is already being occupied by other AP(s). TX PowerLevel: It is function that enhances the wireless transmitting signal stren gth. User may adjust this power level from minimum 0 up to maximum 255. Note: The Power Level m a ybe [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Wireless Security Y ou can disable or enable with WP A or WEP for protecting wireless network. The default mode of wireless security is disabled . WP A-PSK (TKIP) / WP A-PSK (AES) Pre-Shared Key WP A Algorithms: There are two types of the WP A-PSK, WP A1 and WP A2. The WP A1 adapts the T[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration WEP WEP Encryption: T o prevent unauthorized wireless st ations from accessing dat a transmitted over the network, the router offers highly secure dat a encryption, known as WEP . If you require high security for transmissions, there are two alternatives to select from: WEP 64 and WEP 12[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Wireless Client (MAC Address) Filter The MAC Address support s up to 16 wireless network machines and help s you to manage your network control to accept traffic from specific authorized mach ines or to restrict unwanted ma chine(s) to access your LAN. There are no pre-define MAC Address[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Associate Wireless Client displays a list of in di vidual wireless device’s MAC Address that currently connects to the router . Y ou can easily by checking the box next to th e MAC address to be blocked or allowed. Then, Add to insert to the Wireless Client (MAC Address) Filter table. [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration DHCP Server Y ou can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router ’s DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP addresses to PCs on your network if they are configured to obtain IP addresses automa[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration W AN (Wide Area Network) W AN refers to your Wide Area Ne twork connection, i. e. your router ’s connection to your ISP and the Internet. There are two items within the W AN section: ISP , DNS and ADSL . ISP The factory default is PPPoE. If your ISP uses this access protocol, click Edit[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration RFC 1483 Routed Connections Description: Y our description of this connection. VPI and VCI: Enter the information provided by your ISP . A TM Class: The Quality of Service for A TM layer . NA T: The NA T (Network Address T ranslation) feature allows multiple users to access th e Internet [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration RFC 1483 Bridged Connections Description: User-definable name for the connection. VPI and VCI: Enter the information provided by your ISP . A TM Class: The Quality of Service for A TM layer . Encap sulation method: Select the encapsulation format, this is provided by your ISP . Accept abl[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration PPPoA Routed Connections Description: User-definable name for the connection. VPI/VCI: Enter the information provided by your ISP . A TM Class: The Quality of Service for A TM layer . NA T: The NA T (Network Address T ranslation) feature allows multiple users to access th e Internet throu[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration  Connect on Demand: If you want to establish a PPPoA session only when there is a packet requesting access to the Internet ( i .e. when a pr ogram on your computer attempt s to access the Internet). Idle Timeout: Auto-disconnect the broadband firewall gateway w hen there is no activity[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration IPoA Routed Connections Description: User-definable name for the connection. VPI/VCI: Enter the information provided by your ISP . A TM Class: The Quality of Service for A TM layer . NA T: The NA T (Network Address T ranslation) feature allows multiple users to access th e Internet throug[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration PPPoE Connections Description: A user-definable name for this connection. VPI/VCI: Enter the information provided by your ISP . A TM Class: The Quality of Service for A TM layer . NA T: The NA T (Network Address T ranslation) feature allows multiple users to access th e Internet through a[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration Connection:  Always on: If you want the router to establish a PPPoE session when starting up and to automatically re-establish the PPPoE session when disconnected by the ISP .  Connect on Demand: If you want to establish a PPPoE session only when there is a packet requesting access [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration PPPoE with Pass-through Connections PPPoE with pass-through adapt s the following method: PPPoE Routed mode + 1483 Bridge Mode. With pure PPPoE connection, the router can get one W AN ad dress to the router . With the PPPoE and PPPoE pass-through, concurrently , it allows user to have a W[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration IP address manually . The setting of this item is specified by your ISP . Authentication Protocol: Default is Chap(Auto). Y our ISP will advise you whether to use Chap or Pap. Connection:  A l w a y s o n : If you want the router to establish a PPPoE session when st arting up and to au[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration DNS A Domain Name System (DNS) contains a mapping t able for domain name and IP addresses. On the Internet, every host has a unique and user-friendly name (domain name) such as www .helloworld.com and an IP address. An IP address is a 32-bit number in the form of xxx.xxx.xxx.xxx , for exa[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration ADSL Connect Mode: This mode will automatically detect your ADSL line code, ADSL2+, ADSL2, G .dmt, G .lite , T1.413, AnnexM2 and AnnexM2+. But in some area, multimode cannot detect the ADSL line code well. If it is the case, please adjust the ADSL line code to G .dmt or T1.413 first. If i[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration Up stream: Display current upstream rate of your ADSL line. Downstream: Display current downstream rate of your ADSL line. Advanced Options ADSL Parameters help to interpret your ADSL line statistics. SNR Margin: It is known as Signal to Noise Ration Margin. It is the relative of DSL stre[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration  BIS+/BIS/T1413: ADSL connection will be limited to ADSL2+, ADSL2 and T1.413.  BIS+/BIS/GDMT : ADSL connection will be limited to ADSL2+, ADSL2 and ADS1 (G .DMT/G .Lite) only .  DISABLE: This disable function will disconnect your ADSL synch. Select it with cautious. S=1/2 Mode: I[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration System There are six items within the System sectio n: T ime Zone, Remote Access, Firmware Upgrade, Backup/Restore, Rest art and User Management. Time Zone The router does not have a real time clock on board; instead, it uses the Simple Network T ime Protocol (SNTP) to get the current tim[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration Remote Access T o temporarily permit re mote administration of the r outer (i.e. from outside your LAN), select a time period the router will permit remote access for and click Enable. Y ou may change other configuration options for the web administration interface using Device Management[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration Firmware Upgrade Y our router ’s “firmware” is the sof tware that allows it to operate and provides all its functionality . Think of your router as a dedicated computer , and the firmware as the software it runs. Over time this sof tware may be improved and modified, and your router[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4:Configuration Backup / Restore These functions allow you to save and backup your router ’s current se ttings to a file on your PC, or to restore a previously saved backup. This is us eful if you wish to experiment with different settings, knowing that you have a backup handy in the case o f any mista[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Rest art Router Click Rest art with option Current Settings to reboot your router (and restore your last saved configuration). If you wish to restart the router using the factory default settings (for example, after a firmware upgrade or if you have saved an incorrect configuration), sel[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration User Management In order to prevent unauthorized access to your router’s configuration interface, it r equires all users to login with a password. Y ou can set up multiple user accounts, each with their own password. Y ou are able to Edit existing users and Create new users who are abl[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Firewall and Access Control Y our router includes a full SPI (S tateful Packet Inspection) firewall for controlling Internet access from your LAN, as well as helping to prevent attacks from hackers. In a ddition to this, when using NA T (Network Address T ranslation. Please see the WA N [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Here are the items within the Firewall section: General Settings, Packet Filter , Intrusion Detection, URL Filter , IM/P2P Blocking and Firewall Log. General Settings Y ou can choose not to enable Firewall, to add all filter rules by yourself, or enable the Firewall using preset filter r[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Packet Filter This function is only available when the Firewall is enabled and one of these four security levels is chosen (All blocked, High, Medium and Low). The predefined port filter rules in the Packet Filter must modify accordingly to the level of Firewall, which is selected. See T[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: Predefined Port Filters Rules The predefined port filter rules for High, Medium and Low security levels are listed. See T able 1. Note : Firewall – All Blocked/User-defin ed , you must define and create the port f ilter rules yourself. No predefined rule is being preconfigured[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration 66 MSN (7001) UDP(17) 7001 7001 YES YES N/A N/A N/A N/A MSN VEDIO (9000) TCP(6) 9000 9000 NO YES N/A N/A N/A N/A Inbound: Internet to LAN; Outbound: LAN to Internet. YES: Allowed; NO: Blocked; N/A: Not Applicable[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Packet Filter – Add TCP/UDP Filter Rule Name: Users-define description to identify this entry or click to sel ect exis ting predefined rules. The maximum name length is 32 characters. Time Schedule: It is self-defined t ime period. Y ou may specify a time schedule for your prioritizati[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Packet Filter – Add Raw IP Filter Rule Name: Users-define description to identify this entry or click to sel ect exis ting predefined rules. Time Schedule: It is self-defined time period. Y ou may specify a time schedule for your prioritization policy . For setup and detail, refer to T[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: Configuring your firewall to allow for a publicly accessible web server on your LAN The predefined port filter rule for HTTP (TCP port 80) is the same no matter whether the firewall is set to a high, medium or low security level. T o setup a web serv er located on the local netw[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring Packet Filter: 1. Click Port Filters . Y ou will then be presented with the predefined port filter rules screen (in this case for the low security level), shown below: Note : Y ou may click Edit the predefined rule instead of Dele te it. This is an example to show to how you [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration 5. The new port filter rule for HTTP is shown below: 6. Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server: Note: For how to configure the HTTP in V irtual Server , go to Add Virtual[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Intrusion Detection The router ’s Intrusion Detection System (IDS) is used to detect hacker att acks and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbound packet s are filtered and blocked depending on whether they are detected as possible h [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration T able 2: Hacker att ack types recognized by the IDS Intrusion Name Detect Parameter Blacklist T ype of Block Duration Drop Packet Show Log Ascend Kill Ascend Kill data Src IP DoS Y es Y es WinNuke TCP Port 135, 137~139, Flag: URG Src IP DoS Y es Y es Smurf ICMP type 8 Des IP is broadcas[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration URL Filter URL (Uniform Resource Locator – e.g. an address in the form of http://www .abcde.com or http://www .example.com ) filter rules allow you to prevent users on your network from accessing particular websites by their URL. There are no pre-defined URL filter rules; you can add f[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration is sent to the remote web server . 2. If not, check if it is listed in the forbidden list. If yes, then the connection attempt will be dropped. 3. If the packet does not match either of the above two items, it is sent to the remote web server . 4. Please be note that the completed URL, ?[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration IM / P2P Blocking IM, short for Instant Message, is required to use client program software that allows users to communicate, in exchanging text message, with other IM users in real time over the Internet. A P2P application, known as Peer-to-peer , is group of computer users who share fi[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Firewall Log Firewall Log display log information of any unexpected action with your firewall settings. Check the Enable box to activate the logs. Log information can be seen in the St atus – Event Log after enabling. 77[...]

Billion BiP AC 7402G 802.1 1g ADSL2+ VPN Firewall Router Chapter 4: Configuration VPN (V irtual Private Networks) Virtual Private Networks is ways to est ablish secured communication tunnels to an organization’s network via the Internet. Y our router support s three main types of VPN (Virtual Private Network), PPTP , IPSec and L2TP . PPTP (Point-[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration PPTP Connection - Remote Access Connection Name: A user-defined name for the connection (e.g. “connection to office”). T ype: Check Dial Out if you want your router to operate as a client (con necting to a remote VPN server , e.g. your office server), check Dial In operates as a VPN [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Active as default route : Enables the default route. Click Apply button to apply your changes. 80[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: Configuring a Remote Access PPTP VPN Dial-out Connection A company’ s office establishes a PPTP VPN connection with a file server located at a separate location. The router is installed in the of fice, connected to a couple of PCs and Servers. Dial-out 81[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring the PPTP VPN in the Office Y ou can either input the IP address (69.1.121.33 in this case) or hostname to reach the server . 1 2 3 4 5 Item Function Description 1 Connection Name VPN_PPTP Given name of PPTP connection Dial out Check Dial out 2 Server IP Address (or Domain nam[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration PPTP Connection - LAN to LAN Connection Name: A user-define description of the connection. T ype: Check Dial Out if you want your router to operate as a client (con necting to a remote VPN server , e.g. your office server), check Dial In operates as a VPN server .  When configuring yo[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Idle Time : Auto-discon nect the VPN connection when there is no activity on the connection for a predetermined period of time. 0 means this connection is always on. Click Apply button to apply your changes. 84[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: Configuring a PPTP LAN-to-LAN VPN Connection The branch office est ablishes a PPTP VPN tunnel with head office to connect two private networks over the Internet. The routers are inst alled in the head office and branch office accordingly . A ttention Both office LAN networks MUS[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring PPTP VPN in the Head Office The IP address 192.168.1.201 will be assigned to the router located in the branch of fice. Please make sure this IP is not used in the head of fice LAN. 1 2 3 4 5 6 Item Function Description 1 Connection Name HeadOffice Given a name of PPTP connect[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring PPTP VPN in the Branch Office The IP address 69.1.1 21.30 is the Public IP address of the router located in head office. If you registered the DDNS (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the route[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration IPSec (IP Security Protocol) Click Create to create a new IPSec VPN connection account. After you have created the IPSec connection, account information will be displayed. (See example above).  Enable / Disable: This function activates or deactivates the IPSec connection. T o wish int[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration IPSec VPN Connection Connection Name: A user-defined name for the connection (e.g. “connection to office”). Local Network: Set the IP address, subnet or address range of the local network.  Single Address: The IP address of the local host.  Subnet: The subnet of the local netwo[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Encryption: Select the encryption method from the pull-down menu. There are several options, DES , 3DES , AES (128, 192 and 256) and NULL . NULL means it is a tunnel only with no encryption. 3DES and AES are more powerful but increase latency .  DES: S tands for Dat a Encryption S tan[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Advanced Option This function is only available after completed creating an IPSec account. Click Advanced Option to change the following settings: IKE (Internet key Exchange) Mode: Select IKE mode to Main mode or Aggressive mode. This IKE provides secured key generation and key managemen[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration  3DES: S tands for T riple Dat a Encryption S tandard, it uses 168 (56*3) bits as an encryption method.  AES: S tands for Advanced Encryption S tandards, you can use 128, 192 or 256 bits as encryption method. Diffie-Hellman Group: It is a public-key cryptography protocol that allow[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Disconnection Time af ter no traffic: It is the NO Response time clock. When no traffic stage time is beyond the Disconnection time set, Router will autom atically halt the tunnel connection and re- establish it base on the Reconnection T ime set. Default setting is 1200 seconds ; 180 se[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: Configuring a IPSec LAN-to-LAN VPN Connection T able 3: Network Configuration and Security Plan Branch Office Head Office Local Network ID 192.168.0.0/24 192.168.1.0/24 Local Router IP 69.1.121.30 69.1.121.3 Remote Network ID 192.168.1.0/24 192.168.0.0/24 Remote Router IP 69.1.1[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring IPSec VPN in the Head Office 1 2 3 4 5 Item Function Description 1 Connection Name IPSec_HeadOffice Given a name of IPSec connection Subnet Check Subnet radio button IP Address 192.168.1.0 2 Netmask 255.255.255.0 Head office network 3 Secure Gateway Address (or Hostname) 69.1[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring IPSec VPN in the Branch Office 1 2 3 4 5 Item Function Description 1 Connection Name IPSec_Branch Office Given a name of IPSec connection Subnet Check Subnet radio button IP Address 192.168.0.0 2 Netmask 255.255.255.0 Branch office network 3 Secure Gateway Address (or Hostnam[...]

Billion BiP AC 7402G 802.1 1g ADSL2+ VPN Firewall Router Chapter 4: Configuration Example: Configuring a IPSec Host-to-LAN VPN Connection 97[...]

Billion BiP AC 7402G 802.1 1g ADSL2+ VPN Firewall Router Chapter 4: Configuration Configuring IPSec VPN in the Office 1 2 Item Function Description 1 Connection Name IPSec Given a name of IPSec connection Subnet Check Subnet radio button IP Address 192.168.1.0 2 Netmask 255.255.255.0 Head office network 3 Secure Gateway Address (or Hostname) 69.121[...]

Billion BiP AC 7402G 802.1 1g ADSL2+ VPN Firewall Router Chapter 4: Configuration L2TP (Lay er T wo T unneling Protocol) T wo types of L2TP VPN are supported, Remote Access and LAN-to-LAN (please refer below for more information.). Click Create to create a new VPN connection account. After you have created L2TP connection, account stat us will be d[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration L2TP Connection - Remote Access L2TP VPN Connection Connection Name: This allows you to identify this particular connection, e.g. “Connection to of fice”. T ype: Check Dial Out if you want your router to operate as a client (con necting to a remote VPN server , e.g. your office serve[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Idle Time : Auto-discon nect the VPN connection when there is no activity on the connection for a predetermined period of time. 0 means this connection is always on. Active as default route : Commonly used by the Dial-out connection which all packets will route through the VPN tunnel to [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: Configuring a L2TP VPN - Remote Access Dial-in Connection A remote worker establishes a L2TP VPN connection with the head office using Microsoft's VPN Adapter (included with Windows XP/2000/ME, etc.). The router is installed in the head of fice, connected to a couple of PCs[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assigned to the remote worker . Please make sure this IP is not used in the Office LAN. 1 2 5 3 4 6 Item Function Description 1 Connection Name VPN_L2TP Given a name of L2TP connection Dial in Check Dial in 2 P[...]

Billion BiP AC 7402G 802.1 1g ADSL2+ VPN Firewall Router Chapter 4: Configuration Example: Configuring a Remote Access L2TP VPN Dial-out Connection A company’ s office establishes a L2TP VPN connection with a file server located at a sep arate location. The router is installed in the of fice, connected to a couple of PCs and Servers. Dial-out 104[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring the L2TP VPN in the Office 1 2 3 5 4 6 Item Function Description 1 Connection Name VPN_L2TP Given name of L2TP connection Dial out Check Dial out 2 Server IP Address (or Hostname) 69.121.1.33 An Dialed server IP Username username 3 Password 123456 A given username & passw[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: Configuring your Router to Dial-in to the Server Currently , Microsof t Windows operation system does not support L2TP incoming service. Additional sof tw are may be required to set up your L2TP incoming service. 106[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration L2TP Connection - LAN to LAN L2TP VPN Connection Connection Name: A user-define description of the connection. T ype: Check Dial Out if you want your router to operate as a client (con necting to a remote VPN server , e.g. your office server), check Dial In operates as a VPN server . [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration P AP , the password is sent unencrypted, whilst CHAP encrypts the p as sword before sending, and also allows for challenges at different periods to ensure that the client has not been replaced by an intruder . Idle Time : Auto-discon nect the VPN connection when there is no activity on t[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: Configuring L2TP LAN-to-LAN VPN Connection The branch office est ablishes a L2TP VPN tunnel with head office to connect two private networks over the Internet. The routers are inst alled in the head office and branch office accordingly . A ttention Both office LAN networks MUST [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring L2TP VPN in the Head Office The IP address 192.168.1.200 will be assigned to the router located in the branch of fice. Please make sure this IP is not used in the head of fice LAN. 1 2 3 7 5 6 4 Item Function Description 1 Connection Name HeadOf fice Given a name of L2TP conn[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuring L2TP VPN in the Branch Office The IP address 69.1.1 21.30 is the Public IP address of the router located in head office. If you registered the DDNS (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the route[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration QoS (Quality of Service) QoS function helps you to control your network traf fic for each application from LAN (Ethernet and/or Wireless) to W AN (Internet). It facilitates you to control the different quality and speed of through put for each application when the system is running with [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Destination Port : The destination port of p ackets to be monitored. Source IP Address Range : The source IP address or range of packets to be monitored. Destination IP address Range : The destination IP address or range of packet s to be monitored. DSCP Marking : Differe ntiated Service[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Outbound IP Throttling (LAN to W AN) IP Throttling allows you to limit the speed of IP traffic. The value entered will lim it the speed of the application that you set to the specified value’s multiple of 32kbp s. Click Clear Y ou can click Clear to delete the existin g A pp lication. [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Inbound IP Throttling (W AN to LAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will lim it the speed of the application that you set to the specified value’s multiple of 32kbp s. Click Clear Y ou can click Clear to delete the existin g A pp lication. A[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: QoS for your Network Connection Diagram Normal PCs Vo I P Restricted Information and Settings Upstream: 928 kbp s Downstream: 8 Mbps V oIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Restricted User: 192.168.1.100 0 100 200 300 400 500 kbps VoIP/VP N HI GH Othe rs [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Mission-critical application Mostly the VPN connection is mission-critical application for doing data exchange between head and branch office. The mission-critical application must be sent out smoothly without any dropping. Set priority as high level for preventing any other applications[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Advanced setting by using IP throttling With IP throttling you can specify more det ail for allocating bandwidth; even the applications are located in the same level. Upstream: 928kbp s (29*32kbps) Mission-critical Application: 192kbps (6*32kbp s V oice Application: 128kbp s (4*32kbps) R[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration V irtual Server (“Port Forwarding”) In TCP/IP and UDP net works a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be de livered to. Some ports have numbers that are pre- assigned to them by the IANA (the Internet Assig[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Add Virtual Server Because NA T can act as a “natu ral” Internet firewall, your router protect s your network from being accessed by outside users when usi ng NA T , as all incoming connection attempts will point to your router unless you specifically create Virtual Server entries to[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Internal IP Address: The private IP in the LAN network, which will be providing the virtual server application. List all existing PCs connecting to the network. Y ou may assign a PC with IP address and MAC from this list. Example: If you like to remote accessing your Router through the W[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Edit DMZ Host The DMZ Host is a local computer exposed to the Internet. When setting a p articular internal IP address as the DMZ Host, all incoming packet s will be checked by the Firewall and NA T algorithms then p assed to the DMZ host, when a packet received does not use a port numbe[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Edit One-to-One NA T (Network Address T ranslation) One-to-One NA T maps a specific private/local IP address to a global/public IP address. If you have multiple public/W AN IP addresses from y ou ISP , you are eligible for One-to-One NA T to utilize these IP addresses. NA T T ype: Select[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Time Schedule: A self-defined time period to enable your virtual server . Y ou may specify a time schedule or Always on for the usage of this V irtual Server Entry . For setup and detail, refer t o Tim e Schedule section Application : Users-defined description to identify this entry or c[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Example: List of some well-known and registered port numbers. The Internet Assigned Numbers Authority (IANA) is the central coordinator for the assignment of unique parameter values for Internet protocols. Port numbers range from 0 to 65535, but only port s numbers 0 to 1023 are reserved[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Time Schedule The T ime Schedule supports up to 16 time slots which help s you to manage your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allowing the usage of the Internet by users or applications. This T ime Sche[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Configuration of Time Schedule Edit a Time Slot 1. Choose any T ime Slot (ID 1 to ID 16) to edit, click Edit. Click Edit Note: W atch it carefully , the days you have selected will presen t in capit al letter . Lower case letter shows the day(s) is not selected, and no rule will apply on[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Advanced Configuration options within the Advanced section are for users who wish to take advant age of the more advanced features of the router . Users who do not understand the features should not attempt to reconfigure their router , unless advised to do so by support staf f. There ar[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Dynamic DNS The Dynamic DNS function allows you to alias a dyna mic IP address to a st atic hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your ADSL conn ection, so that anyone wishing to[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Check Email This function allows you to have the router che ck your POP3 mailbox for new Email messages. The Mail LED on your router will light when it detects new messages waiting for download. Y ou may also view the status of this function using the S tatus – Email Checking section o[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Device Management The Device Management advanced configuration settings a llow you to control your router ’s security options and device monitoring features. Embedded Web Server ( 2 Management IP Account s) HTTP Port: This is the port number the router’s embedded web server (for web-[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration For Example: User A changes HTTP port number to 100 , specifies their own IP address of 192.168.1.55 , and sets the logout time to be 100 seconds. The router will only allow User A access from the IP address 192.168.1.55 to logon to the Web GUI by typing: http:// 192.168.1.254:100 in the[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration SNMPv3 is a strong authentication mechanism, authorization with fine granularity for remote monitoring. T raps supported: Cold S tart, Authentication Failure. The following MIBs are supported: From RFC 1213 (MIB-II):  System group  Interfaces group  Address Translation group [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration From RFC 1473 (PPP/IP MIB):  PPP IP Group From RFC 1474 (PPP/Bridge MIB):  PPP Bridge Group From RFC1573 (IfMIB):  ifMIBObjects Group From RFC1695 (atmMIB):  atmMIBObjects From RFC 1907 (SNMPv2):  only snmpSetSerialNo OID 134[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration IGMP IGMP , known as Internet Group Management Protocol , is used to management host s from multicast group. IGMP Forwarding: Accepting multicast packet. Default is set to Enable. IGMP Snooping: Allowing switched Ethernet to check and make correct forwarding decisions. Default is set to [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Note: Y ou should setup each VLAN group with caution. Each Bridge Interface is arranged in this order . Bridge Interface VLAN Port (Always st arts with) Ethernet P1 / P2 / P3 / P4 Ethernet1 P2 / P3 / P4 Ethernet2 P3 / P4 Ethernet3 P4 Step 2: Create W AN Interface Go to Configuration  [...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration S paces next to VPI and VCI, type 0 and 33 in respectively . Select appropriate A TM Class, Encapsulation Method, Acceptable Frame T ype, Filter T ype and PVID for Unt agged Frames. VPI and VCI: Enter the information provided by your ISP . A TM Class: The Quality of Service for A TM laye[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration DefaultVlan lists all member port s. It is necessary to group specific member ports for each VLAN. From the example, two VLAN groups are requested: Dat a and Video. T o create another VLAN group for Video by clicking Create VLAN. Given a name and ID (PVID) to identify the Video group. Th[...]

802.1 1g ADSL2+ VPN Firew all Router Chapter 4: Configuration Save Configuration to Flash After changing the router’s configuration settings, you must save all of the configuration parameters to FLASH to avoid them being lost aft er turning of f or resetting your router . Click Save to write your new configuration to FLASH. Logout T o exit the ro[...]

Billion BiP AC 7402G 802.1 1g ADSL2+ VPN Firewall Router Chapter 5: T roubleshooting Chapter 5: T roubleshooting If the router is not functioning properly , first check this chapter for simple troubleshooting before contacting your service provider or Billion support. Problems st arting up the router Problem Corrective Action None of the LEDs are o[...]

Billion BiP AC 7402G 802.1 1g ADSL2+ VPN Firewall Router 141 APPENDIX A: Product Support and Cont act Information Most problems can be solved by referring to the T roubleshooting section in the User ’s Manual . If you cannot resolve the problem with the T roubleshooting chapter , please cont act the dealer where you purchased this product. Cont a[...]