1. Manuals
  2. Brands
  3. Billion Manuals
  4. Network Router
  5. BiPAC 8500/8520
  6. User manual

Billion BiPAC 8500/8520 User Manual

Shdsl vpn firewall bridge/ router, shdsl.bis (vpn) firewall bridge/router
Hide thumbs
Table of Contents

Advertisement

Quick Links

Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router
BiPAC 8500/8520
SHDSL VPN Firewall Bridge/ Router
BiPAC 8501/8521
SHDSL.bis (VPN) Firewall Bridge/Router

User Manual

Last revision 11-08-08

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the BiPAC 8500/8520 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Billion BiPAC 8500/8520

Summary of Contents for Billion BiPAC 8500/8520

  • Page 1: User Manual

    Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router BiPAC 8500/8520 SHDSL VPN Firewall Bridge/ Router BiPAC 8501/8521 SHDSL.bis (VPN) Firewall Bridge/Router User Manual Last revision 11-08-08...

  • Page 2: Table Of Contents

    NTRODUCTION TO YOUR ... 1 EATURES MPORTANT NOTE FOR USING THIS ... 4 ACKAGE ONTENTS RONT S OF RONT S OF RONT S OF RONT S OF ORTS OF ORTS OF ORTS OF ... 12 ABLING ONNECTING YOUR ROUTER Network Configuration... 14 ACTORY EFAULT ETTINGS...
  • Page 3 NAT Sessions ... 34 Diagnostic... 34 UPnP Portmap ... 35 ... 36 UICK TART ... 38 ONFIGURATION LAN (Local Area Network) ... 38 WAN (Wide Area Network) ... 46 System ... 74 Firewall and Access Control... 80 VPN (Virtual Private Networks) (BiPAC 8500/ 8501/ 8520 Only) ... 97 QoS (Quality of Service)...

  • Page 5: Chapter 1: Introduction

    Introduction to your Router Welcome to the Billion BiPAC 8500/ 8501/ 8520/ 8521 SHDSL Router. Your SHDSL router is an “all-in-one” unit, combining an SHDSL modem, SHDSL router and Ethernet network switch, providing everything you need to get the machines on your network connected to the Internet over your SHDSL broadband connection.
  • Page 6 devices. With this feature enabled, users can now connect to Net meeting or MSN Messenger seamlessly. Network Address Translation (NAT) Allows multi-users to access outside resources such as the Internet simultaneously with one IP address/one Internet access account. Many application layer gateways (ALG) are supported such as web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping, NetMeeting, IP phone and others.
  • Page 7 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Rich Packet Filtering Not only filters the packet based on IP address, but also based on Port numbers. It will filter packets from and to the Internet. It also provides a higher level of security control. Dynamic Host Configuration Protocol (DHCP) client and server In the WAN site, the DHCP client can get an IP address from the Internet Service Provider (ISP) automatically.

  • Page 8: Chapter 2: Installing The Router

    Attention Package Contents SHDSL Firewall Bridge/Router (BiPAC 8500/8520) or SHDSL.bis Firewall Bridge/Router (BiPAC 8501/8521) CD-ROM containing the online manual RJ-11 SHDSL/telephone Cable (One Cable for BiPAC 8500/8501) (Two Cables for...

  • Page 9: The Front Leds Of Bipac 8500

    The Front LEDs of BiPAC 8500 LINE LAN Port 1X — 4X (RJ-45 connector) Chapter 2: Installing the router Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Lit when successfully connected to SHDSL line and when it is synchronized. Lit when connected to an Ethernet device. Green for 100Mbps;...

  • Page 10: The Front Leds Of Bipac 8520

    The Front LEDs of BiPAC 8520 LINE 1 & 2 LAN Port 1X — 4X (RJ-45 connector) Chapter 2: Installing the router Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Lit when successfully connected to SHDSL line and when it is synchronized.

  • Page 11: The Front Leds Of Bipac 8501

    The Front LEDs of BiPAC 8501 LAN Port 1X — 4X (RJ-45 connector) LINE Chapter 2: Installing the router Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Lit when power is ON. Lit when the system is ready. Lit when connected to an Ethernet device. Green for 100Mbps;...

  • Page 12: The Front Leds Of Bipac 8521

    The Front LEDs of BiPAC 8521 LAN Port 1X — 4X (RJ-45 connector) LINE 1 & 2 Chapter 2: Installing the router Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Lit green when power is ON. Flashes when the system is being started. Then lit green when the system is ready.

  • Page 13: The Rear Ports Of Bipac 8500 / 8520

    The Rear Ports of BiPAC 8500 / 8520 Port Power Switch RESET 1X — 4X (RJ-45 connector) CONSOLE LINE 1X — 2X (RJ-11 connector) Only BiPAC 8520 has two Line jack ports. BiPAC 8500 has one. Chapter 2: Installing the router Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Power ON/OFF switch Connect the supplied power adapter to this jack.

  • Page 14: The Rear Ports Of Bipac 8501

    The Rear Ports of BiPAC 8501 Port 1 Power Switch Power ON/OFF switch 2 PWR Connect the supplied power adapter to this jack. To be sure the device is being turned on->press RESET button for: 1-3 seconds: quick reset the device. 6 seconds above, and power off, power on the device: restore to 3 RESET factory default settings.

  • Page 15: The Rear Ports Of Bipac 8521

    The Rear Ports of BiPAC 8521 Port Power Switch Power ON/OFF switch Connect the supplied power adapter to this jack. To be sure the device is being turned on->press RESET button for: 1-3 seconds: quick reset the device. Press 6 seconds above to power off the device, then power on the device to restore the factory default settings.

  • Page 16: Cabling

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Cabling One of the most common causes to problem is bad cabling or SHDSL line(s). Make sure that all connected devices are turned on. On the front panel of the product is a row of LEDs. Verify that the LAN Link and SHDSL line LEDs are lit.

  • Page 17: Chapter 3: Basic Installation

    The router can be configured with your web browser. A web browser is included as a standard application in the following operating systems: etc. The product provides an easy and user-friendly interface for configuration. Please check your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter must be installed.

  • Page 18: Network Configuration

    Network Configuration For Windows Vista Go to Start. Click on Network. Then click on Network and Sharing Center at the top bar. When the Network and Sharing Center window pops up, select and click on Manage network connections on the left window pane.
  • Page 19 Select Internet Protocol Version 4 (TCP/IPv4) then click Properties. In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. Click OK again in the Local Area Connection Properties window to apply the new configuration.

  • Page 20: For Windows Xp

    For Windows XP 1. Go to Start / Control Panel (in Classic View). In the Control Panel, double-click on Network Connections 2. Double-click Local Area Connection. 3. In the Local Area Connection Status window, click Properties. Chapter 3: Basic Installation Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router...
  • Page 21 4. Select Internet Protocol (TCP/IP) and click Properties. 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration. Chapter 3: Basic Installation Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router...

  • Page 22: For Windows 2000

    For Windows 2000 1. Go to Start / Settings / Control Panel. In the Control Panel, double-click on Network and Dial-up Connections. 2. Double-click Local Area Connection. 3. In the Local Area Connection Status window click Properties. Chapter 3: Basic Installation Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router...
  • Page 23 4. Select Internet Protocol (TCP/IP) and click Properties. 5. Select the Obtain an IP address automatically and the Obtain DNS server address automatically radio buttons. 6. Click OK to finish the configuration. Chapter 3: Basic Installation Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router...

  • Page 24: For Windows 98/Me

    For Windows 98/Me 1. Go to Start / Settings / Control Panel. In the Control Panel, double-click on Network and choose the Configuration tab. 2. Select TCP/IP ->NE2000 Compatible, or the name of your Network Interface Card (NIC) in your PC. Then click Properties.
  • Page 25 4. Then select the DNS Configuration tab. 5. Select the Disable DNS radio button and click OK to finish the configuration. Chapter 3: Basic Installation Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router...

  • Page 26: For Windows Nt

    For Windows NT4.0 1. Go to Start / Settings / Control Panel. In the Control Panel, double-click on Network and choose the Protocols tab. 2. Select TCP/IP Protocol and click Properties. 3. Select the Obtain an IP address from a DHCP server radio button and click OK.

  • Page 27: Factory Default Settings

    Factory Default Settings Before configuring your router, you need to know the following default settings. Web Interface (Username and Password): Username: admin Password: admin The default username and password are “admin” and “admin” respectively. If you ever forget the username/password to login to the router, you may press the RESET button up to 6 seconds to restore the factory default settings.

  • Page 28: Information From Your Isp

    Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of service is provided such as DHCP (Obtain an IP Address Automatically, Static IP (Fixed IP Address) and PPPoE. Gather the information as illustrated in the following table and keep it for reference.

  • Page 29: Configuring With Your Web Browser

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Configuring with your Web Browser Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click “Go”, a user name and password window prompt will appear. The default username and password are “admin”...

  • Page 30: Chapter 4: Configuration

    At the configuration homepage, the left navigation pane where bookmarks are provided links you directly to the desired setup page, including: Status - ARP Table - Routing Table - DHCP Table - PPTP Status - IPSec Status - L2TP Status - Email Status - Event Log - Error Log...

  • Page 31: Status

    Status ARP Table This section displays the router’s ARP (Address Resolution Protocol) Table, which shows the mapping of Internet (IP) addresses to Ethernet (MAC) addresses. This is a useful & quick way to determine the MAC address of your PCs network interface through the router’s Firewall – MAC Address Filter function.

  • Page 32: Routing Table

    Routing Table Routing Table Valid: It indicates a successful routing status. Destination: The IP address of the destination network. Netmask: The destination netmask address. Gateway/Interface: The IP address of the gateway or existing interface that this route will use. Cost: The number of hops counted as the cost of the route. RIP Routing Table Destination: The IP address of the destination network.

  • Page 33: Dhcp Table

    DHCP Table Leased: The DHCP assigned IP addresses information. IP Address: A list of IP addresses of devices on your LAN (Local Area Network). Expired: The expired IP addresses information. Permanent: The fixed host mapping information Leased Table IP Address: The IP address that assigned to client. MAC Address: The MAC address of client.

  • Page 34: Pptp Status (Bipac 8500/ 8501/ 8520 Only)

    PPTP Status (BiPAC 8500/ 8501/ 8520 Only) This shows details of your configured PPTP VPN Connections. • Name: The name you assigned to the particular PPTP connection in your VPN configuration. • Type: The type of connection (dial-in/dial-out). • Enable: Whether the connection is currently enabled. •...

  • Page 35: Ipsec Status (Bipac 8500/ 8501/ 8520 Only)

    IPSec Status (BiPAC 8500/ 8501/ 8520 Only) This shows details of your configured IPSec VPN Connections. • Name: The name you assigned to the particular VPN entry. • Active: Whether the VPN Connection is currently Active. • Connection State: Whether the VPN is Connected or Disconnected. •...

  • Page 36: L2Tp Status (Bipac 8500/ 8501/ 8520 Only)

    L2TP Status (BiPAC 8500/ 8501/ 8520 Only) This shows details of your configured L2TP VPN Connections. • Name: The name you assigned to the particular L2TP connection in your VPN configuration. • Type: The type of connection (dial-in/dial-out). • Enable: Whether the connection is currently enabled. •...

  • Page 37: Event Log

    Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router Event Log This page displays the router’s Event Log entries. Major events are logged to this window, such as when the router’s ADSL connection is disconnected, and Firewall events such as when you have enabled Intrusion or Blocking Logging in the Configuration –...

  • Page 38: Nat Sessions

    Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router NAT Sessions This section lists all current NAT sessions between interface of types external (WAN) and internal (LAN). Diagnostic It tests the connection of computer(s) which is connected to LAN ports and also the WAN Internet connection.

  • Page 39: Upnp Portmap

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router UPnP Portmap The section lists all port-mapping established using UPnP (Universal Plug and Play). Please see the Advanced section of this manual for more details on UPnP and the router’s UPnP configuration options. Chapter 4: Configuration...

  • Page 40: Quick Start

    Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router Quick Start For detailed instructions on configuring your WAN settings, please see the WAN section of this manual. Usually, the only details you will need for the Quick Start wizard to get you online are your login (often in the form of username@ispname), your password and the encapsulation type.
  • Page 41 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Select the desired option from the list and click Apply to return to the Quick Start interface to continue configuring your ISP connection. Please note that the contents of this list will vary, depending on what is supported by your ISP.

  • Page 42: Configuration

    Configuration When you click this item, you will get the following sub-items to configure your router: LAN, WAN, System, Firewall, VPN (not available in 8521), QoS, Virtual Server, Time Schedule and Advanced These functions are described below in the following sections. LAN (Local Area Network) There are seven items within the LAN section: Bridge Interface, Ethernet, IP Alias, Ethernet Client Filter, Port Setting and DHCP Server.
  • Page 43 Edit Ethernet Interface Parameter Click on a specific Ethernet you that you wish to edit its interface parameter under the Bridged Interface section. You can also edit the Ethernet Interface parameter such as its Acceptable Frame Type; Filter Type or PVID for Untagged Frames. When the editing is complete, click Apply to save the changes and then click Return to go back to the Bridged Interface page.
  • Page 44 IP Alias This function supports the creation of multiple virtual IP interfaces on this router. It helps to connect two or more local networks to the ISP or a remote node. In this case, an internal router is not required. Click Add to add a new IP alias.

  • Page 45: Ethernet Client Filter

    Ethernet Client Filter The Ethernet Client Filter supports up to 16 Ethernet network machines that helps you to manage your network control to accept traffic from specific authorized machines or to restrict unwanted machine(s) to access your LAN. There are no pre-define Ethernet MAC address filter rules; you can add the filter rules to meet your requirements.
  • Page 46 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Active PC in LAN displays a list of IP Address & MAC Address of each individual Ethernet device which is connected to the router. You can check the box next to the IP address to block or allow. Then, click Add to insert to the Ethernet Client Filter table.

  • Page 47: Port Setting

    Port Setting This section allows you to configure the settings for the router’s Ethernet ports to solve some of the compatibility problems that may be encountered while connecting to the Internet, as well allowing users to tweak the performance of their network. •...
  • Page 48 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router DHCP Server You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router’s DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP addresses to PCs on your network if they are configured to obtain IP addresses automatically. To disable the router’s DHCP Server, check Disabled and click Next, then click Apply.
  • Page 49 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router If you check DHCP Relay Agent and click Next, then you will have to enter the IP address of the DHCP server which will assign an IP address back to the DHCP client in the LAN. Use this function only if advised to do so by your network administrator or ISP.

  • Page 50: Wan (Wide Area Network)

    Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router WAN (Wide Area Network) WAN refers to your Wide Area Network connection, i.e. your router’s connection to your ISP and the Internet. There are three items within the WAN section: ISP, DNS and SHDSL. The factory default is PPPoE.
  • Page 51 RFC 1483 Routed Connections Description: User-definable name for the connection. • VPI and VCI: Enter the information provided by your ISP. • ATM Class: The Quality of Service for ATM layer. • NAT: The NAT (Network Address Translation) feature allows multiple users to access the •...
  • Page 52 given by you our ISP. RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function. • MTU: Maximum Transmission Unit. The size of the largest datagram (excluding media- • specific headers) that IP will attempt to send through the interface. •...
  • Page 53 RFC 1483 Bridged Connections • Description: User-definable name for the connection. • VPI and VCI: Enter the information provided by your ISP. • ATM Class: The Quality of Service for ATM layer. • Encapsulation method: Select the encapsulation format, this is provided by your ISP. •...
  • Page 54 PPPoA Routed Connections • Description: User-definable name for the connection. • VPI/VCI: Enter the information provided by your ISP. • ATM Class: The Quality of Service for ATM layer. • NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing a single IP address.
  • Page 55 Provider (ISP) automatically or not. Please click Obtain an IP address automatically via DHCP client to enable the DHCP client function or click Specify an IP address to disable the DHCP client function, and specify the IP address manually. The setting of this item is specified by your ISP.
  • Page 56 Advanced Options (PPPoA) • LLC Header: Select encapsulation mode, true for using LLC or false for using VC-Mux. • Create Route: This setting specifies whether a route is to be added to the system after IPCP (Internet Protocol Control Protocol) negotiation is complete. If set to enabled, a route will be created which directs packets to the remote end of the PPP link.
  • Page 57 IPoA Routed Connections • Description: User-definable name for the connection. • VPI/VCI: Enter the information provided by your ISP. • ATM Class: The Quality of Service for ATM layer. • NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing a single IP address.
  • Page 58 • RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function. • MTU: Maximum Transmission Unit. The size of the largest datagram (excluding media- specific headers) that IP will attempt to send through the interface. • TCP MSS Clamp: This option helps to auto detect the optimal MTU size. Default is enabled.

  • Page 59: Pppoe Connections

    PPPoE Connections • Description: User-definable name for this connection. • VPI/VCI: Enter the information provided by your ISP. • ATM Class: The Quality of Service for ATM layer. • NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing a single IP address.
  • Page 60 alphanumeric characters (case sensitive). This will usually be in the format of “username@ispname” instead of simply “username”. • Password: Enter the password provided by your ISP. You can input up to 128 alphanumeric characters (case sensitive). • Service Name: This item is for identification purposes. If it is required, your ISP will provide you the information.
  • Page 61 Advanced Options (PPPoE) • LLC Header: Selects encapsulation mode, true for using LLC or false for using VC-Mux. • Create Route: This setting specify whether a route is to be added to the system after IPCP (Internet Protocol Control Protocol) negotiation is completed. If set to enabled, a route will be created which directs packets to the remote end of the PPP link.
  • Page 62 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router PPPoE with Pass-through Connections To access PPPoE with Pass-through Connection: Press Change > PPPoE Routed with Pass- Through > Quick Start PPPoE with pass-through adapts the following method: PPPoE Routed mode + 1483 Bridge Mode.
  • Page 63 • Description: User-definable name for this connection. • VPI/VCI: Enter the information provided by your ISP. • ATM Class: The Quality of Service for ATM layer. • NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing a single IP address.
  • Page 64 • Service Name: This item is for identification purposes. If it is required, your ISP will provide you the information. Maximum input is 20 alphanumeric characters. • IP Address: specify if the Router can get an IP address from the Internet Server Provider (ISP) automatically or not.
  • Page 65 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Advanced Options (PPPoE) LLC Header: Select encapsulation mode, true for using LLC or false for using VC-Mux. Create Route: This setting specifies whether a route is to be added to the system after IPCP (Internet Protocol Control Protocol) negotiation is complete.
  • Page 66 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Discover Primary NBNS / Discover Secondary NBNS: This setting enables/disables whether the primary/secondary NBNS server address is requested from a remote PPP peer using IPCP. The default setting for this command is disabled. Discover Subnet Mask: Specify if the subnet mask given by IPCP negotiation process is to be used.
  • Page 67 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router A Domain Name System (DNS) contains a mapping table for domain name and IP addresses. On the Internet, every host has a unique and user-friendly name (domain name) such as www.helloworld.com and an IP address. An IP address is a 32-bit number in the form of xxx.xxx.xxx.xxx, for example 192.168.1.254.
  • Page 68 SHDSL-BiPAC 8500 • Mode: The SHDSL device can function as a CPE (Customer Premises Equipment) or CO (Central Office). Select CPE mode when the BiPAC 8500 is connected to your ISP. • Back – to –back: it is a direct connection between two SHDSL devices with one being set to CPE and the other is set to CO by using a standard RJ-11 telephone cable.
  • Page 69 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router • Bit Rate: Display SHDSL line synch speed rate. Click Apply button to apply your changes. Chapter 4: Configuration...
  • Page 70 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router SHDSL – BiPAC 8520 Standard 4-wired connection: the 4-wired handshaking procedure that is compliant with ITU-T standard. False 4-wired connection: This mode is used when 4-wired connection is disabled. Chapter 4: Configuration...
  • Page 71 Enhanced 4-wired connection: Conexant enhanced 4-wired mode and compliant with Conexant Legacy codes. Sustain2W 4-wired connection: This mode is used to auto detect whether the device uses 2- wired connection or 4-wired connection. • 4-Wired Connection: BiPAC 8520 supports 4 types of SHDSL.bis connection: Standard, False, Enahnced &...
  • Page 72 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Note: When select 2-wired mode, only Port 1 settings need to be configured and the SHDSL (RJ-11 cable) must be connected to LINE 1 on the back of the device. Chapter 4: Configuration...
  • Page 73 • Mode: The SHDSL device can function as a CPE (Customer Premises Equipment) or CO (Central Office). Select CPE mode when the BiPAC 8520 is connected to your ISP. • Back – to –back: it is a direct connection between two SHDSL devices with one being set to CPE and the other is set to CO by using a standard RJ-11 telephone cable.
  • Page 74 SHDSL – BiPAC 8501 • Mode: The SHDSL.bis device can function as a CPE (Customer Premises Equipment) or CO. Select CPE mode when the BiPAC 8501 is connecting to your ISP. • Annex Type: It is the DSL operating mode standard. Select Annex A or Annex B to support up to 5.7Mbps SHDSL.bis function.
  • Page 75 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router SHDSL – BiPAC 8521 Standard 4-wired connection: the 4-wired handshaking procedure that is compliant with ITU-T standard. False 4-wired connection: This mode is used when 4-wired connection is disabled. Chapter 4: Configuration...
  • Page 76 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Enhanced 4-wired connection: Conexant enhanced 4-wired mode and compliant with Conexant Legacy codes. Chapter 4: Configuration...
  • Page 77 • 4-Wired Connection: BiPAC 8521 supports 3 types of SHDSL.bis connection: Standard, False & Enahnced. Select the type of SHDSL.bis connection from the 4-wired connection drop down menu, then select Apply to activate the configuration page. Note: When select 2-wire mode, only Port 1 settings need to be configured and the SHDSL (RJ-11 cable) must be connected to LINE 1 on the back of the device.

  • Page 78: System

    System Listed are items within the System section: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Restart and User Management. Time Zone The router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP server outside your network. Choose your local time zone, click Enable and click the Apply button.

  • Page 79: Remote Access

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Remote Access To temporarily permit remote administration of the router (i.e. from outside your LAN), select a time period the router will permit remote access and click Enable. You may change other configuration options for the web administration interface using Device Management options in the Advanced section of the GUI.

  • Page 80: Firmware Upgrade

    Firmware Upgrade Your router’s “firmware” is the software that allows it to operate and provides all its functionality. Think of your router as a dedicated computer, and the firmware as the software it runs. Over time this software may be improved and modified, and your router allows you to upgrade the software it runs to take on advantage of these changes.

  • Page 81: Backup / Restore

    Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router Backup / Restore These functions allow you to save and to create a backup of your router current settings to a file on your PC, or to restore a previously saved setting. This is useful if you wish to experiment with different settings, knowing that you have a backup in hand in case any mistakes occur.

  • Page 82: Restart Router

    Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router Restart Router Click Restart with option Current Settings to reboot your router (and restore your last saved configuration). If you wish to restart the router using the factory default settings (for example, after a firmware upgrade or if you have saved an incorrect configuration), select Factory Default Settings to reset to factory default settings.

  • Page 83: User Management

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router User Management In order to prevent unauthorized access to your router’s configuration interface, all users are required to login to the system with a password. You can set up multiple user accounts, each with their own password.

  • Page 84: Firewall And Access Control

    Firewall and Access Control Your router includes a full SPI (Stateful Packet Inspection) firewall for controlling Internet access from your LAN, as well as helping to prevent attacks from hackers. In addition to this, when using NAT, the router acts as a “natural” Internet firewall, as all PCs on your LAN will use private IP addresses that cannot be directly accessed from the Internet.
  • Page 85 • Firewall Security and Policy (General Settings): Outbound direction of Packet Filter rules to prevent unauthorized computers or applications accessing the Internet. • URL Filter: To block PCs on your local network from unwanted websites. Listed are items under the Firewall section: General Settings, Packet Filter, Intrusion Detection, URL Filter, IM/P2P Blocking and Firewall Log.

  • Page 86: General Settings

    General Settings You can choose not to enable Firewall, you will not able to add filter rules by yourself in the Packet Filter, or enable the Firewall using preset filter rules and modify the packet filter rules as required. The Packet Filter is used to filter packets based-on Applications (Port) or IP addresses. There are four options to choose when you enable Firewall, these are: •...

  • Page 87: Packet Filter

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Packet Filter This function is only available when Firewall is enabled and one of these four security levels is chosen (All blocked, High, Medium and Low). The predefined port filter rules in the Packet Filter must modify according to the level of Firewall, which is selected.
  • Page 88 Example: Predefined Port Filters Rules The predefined port filter rules for High, Medium and Low security levels are listed. See Table 1. Note: Firewall – All Blocked/User-defined, you must define and create the port filter rules yourself. No predefined rule is set Port Number Application Protocol Start...

  • Page 89: Packet Filter - Add Tcp/Udp Filter

    Packet Filter – Add TCP/UDP Filter • Rule Name: User-define description to identify this entry or click existing predefined rules. The maximum name length is 32 characters. • Time Schedule: It is self-defined time period. You may specify a time schedule for your prioritization policy.

  • Page 90: Packet Filter - Add Raw Ip Filter

    Packet Filter – Add Raw IP Filter • Rule Name: A user-defined name for identifying the rule. • Time Schedule: It is self-defined time period. You may specify a time schedule for your prioritization policy. For setup and detail, refer to Time Schedule section •...
  • Page 91 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Example: Configuring your firewall to allow for a publicly accessible web server on your The predefined port filter rule for HTTP (TCP port 80) is the same whether the firewall is set to a high, medium or low security level.
  • Page 92 Configuring Packet Filter: Click Port Filters. You will then be presented with the predefined port filter rules screen (in this case for the low security level), shown below: Note: You may click Edit the predefined rule instead of Delete it. This is an example to show to how you add a filter on your own.
  • Page 93 The new port filter rule for HTTP is shown below: Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server: Note: For how to configure the HTTP in Virtual Server, go to Add Virtual Server in Virtual Server section for more details.

  • Page 94: Intrusion Detection

    Intrusion Detection The router’s Intrusion Detection System (IDS) is used to detect hacker attacks and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or other connections that the router determines to be suspicious.
  • Page 95 (PING). For SYN Flood, ICMP Echo Storm and ICMP flood, IDS will just warn the user in the Event Log. It cannot protect against such attacks. Table 2: Types of Hacker attack recognized by the IDS. Ascend Kill Ascend Kill data WinNuke 137~139, Flag: Smurf...
  • Page 96 ICMP Flood Count (Default ICMP Echo Src IP: Source IP Dst Port: Destination Port Chapter 4: Configuration Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Max ICMP 100 c/sec) Max PING Count (Default 15 c/sec) Src Port: Source Port Dst IP: Destination IP...

  • Page 97: Url Filtering

    URL Filtering URL (Uniform Resource Locator – e.g. an address in the form of http://www.example.com) filter rules allow you to prevent users on your network from accessing particular websites by their URL. There are no pre-defined URL filter rules; you can add filter rules to meet your requirements.
  • Page 98 dropped. 3. If the packet does not match either of the above two items, it is sent to the remote web server. 4. Please be noted that the completed URL, “www” + domain name, shall be specified. For example to block traffic to www.google.com.au, enter “www.google” or “www.google.com” In the example below, the URL request for www.abc.com will be sent to the remote web server because it is listed in the trusted list, whilst the URL request for www.google or www.google.com will be dropped, because www.google is in the forbidden list.
  • Page 99 IM / P2P Blocking IM, short for Instant Message, is required to use client program software that allows users to communicate, in exchanging text message, with other IM users in real time over the Internet. A P2P application, known as Peer-to-peer, is a group of computer users who share files with specific groups of people across the Internet.

  • Page 100: Firewall Log

    Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router Firewall Log Firewall Log displays log information of all unexpected action taken by your firewall settings. Check the Enable box to activate the logs. Log information can be seen in the Status – Event Log after enabling. Chapter 4: Configuration...

  • Page 101: Vpn (Virtual Private Networks) (Bipac 8500/ 8501/ 8520 Only)

    VPN (Virtual Private Networks) Virtual Private Networks is a way to establish a secured communication tunnel to an organization’s network via the Internet. Your router supports three main types of VPN (Virtual Private Network), PPTP, IPSec and L2TP. PPTP (Point-to-Point Tunneling Protocol) There are two types of PPTP VPN supported;...
  • Page 102 PPTP Connection - Remote • Connection Name: A user-defined name for the connection (e.g. “connection to office”). • Type: Check Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g. your office server), check Dial In if you want the router to operate as a VPN server.
  • Page 103 • Mode: You may select Stateful or Stateless mode. The key will be changed every 256 packets when you select Stateful mode. If you select Stateless mode, the key will be changed in each packet. • Idle Time: Auto-disconnect the VPN connection when there is no activity on the connection for a predetermined period of time.
  • Page 104 Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router Example: Configuring a Remote Access PPTP VPN Dial-out Connection An office of a company establishes a PPTP VPN connection with a file server located at a different location. The router is installed at the office, connecting to a couple of PCs and Servers. Chapter 4: Configuration...
  • Page 105 Configuring the PPTP VPN in the Office You can either input the IP address (69.1.121.33 in this case) or the hostname to reach the server. Item Function Connection VPN_PPTP Name Dial out Server IP Address (or 69.121.1.33 Hostname) Username username Password 123456 Auth.Type...
  • Page 106 PPTP Connection - LAN to LAN • Connection Name: A user-define description of the connection. • Type: Check Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g. your office server), check Dial In if you want it to operate as a VPN server.
  • Page 107 connection or you can manually Enable or Disable encryption. • Key Length: The data can be encrypted by MPPE algorithm with 40 bits or 128 bits. Default is Auto, it is negotiated when establishing a connection. 128 bit keys provide stronger encryption than 40 bit keys.
  • Page 108 Example: Configuring a PPTP LAN-to-LAN VPN Connection The branch office establishes a PPTP VPN tunnel with the head office to connect two private networks over the Internet. The routers are installed in the head office and the branch office respectively. Both office LAN networks MUST be in different subnet with LAN to LAN application.
  • Page 109 Configuring PPTP VPN in the Head Office The IP address 192.168.1.201 will be assigned to the router located in the branch office. Please make sure this IP is not used in the head office LAN. Item Function Connection HeadOffice Name Dial in Private IP Address...
  • Page 110 Configuring PPTP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in the head office. If you registered the DDNS (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the router.
  • Page 111 IPSec (IP Security Protocol) Click Create to create a new IPSec VPN connection account. After you have created the IPSec connection, account information will be displayed. (See example above). • Enable / Disable: This function activates or deactivates the IPSec connection. interrupt the tunnel, check the Disable radio button and click the Apply button to deactivate the connection.
  • Page 112 IPSec VPN Connection • Connection Name: User-defined name for the connection (e.g. “connection to office”). • Local Network: Set the IP address, subnet or address range of the local network. o Single Address: The IP address of the local host. o Subnet: The subnet of the local network.
  • Page 113 o SHA1: A one-way hashing algorithm that produces a 160−bit hash. • Encryption: Select the encryption method from the pull-down menu. There are several options, DES, 3DES, AES (128, 192 and 256) and NULL. NULL means it is a tunnel only with no encryption.
  • Page 114 Advanced Option This function is only available after finish creating an IPSec account. Click Advanced Option to change the following settings: • IKE (Internet key Exchange) Mode: Select IKE mode to Main mode or Aggressive mode. This IKE provides secured key generation and key management. IKE Proposal: o Hash Function: It is a Message Digest algorithm which coverts any length of a message into a unique set of bits.
  • Page 115 more powerful but increase the latency. DES: Stands for Data Encryption Standard, it uses 56 bits encryption method. 3DES: Stands for Triple Data Encryption Standard, it uses 168 (56*3) bits encryption method. AES: Stands for Advanced Encryption Standards, you can use 128, 192 or 256 bits encryption method.
  • Page 116 from 0 to 3600 second; 0 second disables the function. Ping to the IP 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx (A valid IP Address) xxx.xxx.xxx.xxx(A valid IP Address) Disconnection Time after no traffic: It is the NO Response time clock. When no traffic stage time is beyond the Disconnection time set, Router will automatically halt the tunnel connection and re-establish it base on the Reconnection Time set.
  • Page 117 Local Network ID Local Router IP Remote Network ID Remote Router IP IKE Pre-shared Key VPN Connection Type Security Algorithm Both office LAN networks MUST be in different subnet with LAN to LAN application. Functions of Pre-shared Key, VPN Connection Type and Attention Security Algorithm MUST BE identically set up on both sides.
  • Page 118 Configuring IPSec VPN in the Head Office Item Function Connection Name Subnet IP Address Netmask Secure Gateway Address (or Hostname) Subnet IP Address Netmask Authentication Encryption Chapter 4: Configuration Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router IPSec_HeadOffice Given a name of IPSec connection Check the Subnet radio button 192.168.1.0 Head office network...
  • Page 119 Prefer Forward Security Pre-shared Key Chapter 4: Configuration Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router None 12345678...
  • Page 120 Configuring IPSec VPN in the Branch Offiece Item Function Connection Name Subnet IP Address Netmask Secure Gateway Address (or Hostname) Subnet IP Address Netmask Authentication Encryption Chapter 4: Configuration Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router IPSec_BranchOffice Given a name of IPSec connection Check the Subnet radio button 192.168.0.0 Branch office network...
  • Page 121 Prefer Forward Security Pre-shared Key Example: Configuring a IPSec Host-to-LAN VPN Connection Chapter 4: Configuration Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router None 12345678...
  • Page 122 Configuring IPSec VPN in the Office Item Function Connection Name Subnet IP Address Netmask Secure Gateway Address (or Hostname) Single Address IP Address Authentication Encryption Prefer Forward Security Pre-shared Key Chapter 4: Configuration Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router IPSec Given a name of IPSec connection Check the Subnet radio button...
  • Page 123 L2TP (Layer Two Tunneling Protocol) Support two types of L2TP VPN, Remote Access and LAN-to-LAN (please refer below for more information.). Click Create to create a new VPN connection account. After you have created L2TP connection, the account status will be displayed. (See example above).
  • Page 124 L2TP Connection - Remote Access L2TP VPN Connection • Connection Name: User-defined name for the connection (e.g. “connection to office”). • Type: Check the Dial Out radio button if you want your router to operate as a client (connecting to a remote VPN server, e.g. your office server), check the Dial In radion button if it is to operate as a VPN server.
  • Page 125 • Idle Time: Auto-disconnect the VPN connection when there is no activity on the connection for a pre-determined period of time. 0 means this connection is always on. • Active as default route: Commonly used by the Dial-out connection which all packets will route through the VPN tunnel to the Internet;...
  • Page 126 • Remote Host Name (Optional): Enter hostname of remote VPN device. It is a tunnel identifier from the Remote VPN device that will match the Remote hostname provided. If the remote hostname is matched, the tunnel will be connected; otherwise, it will be dropped.
  • Page 127 Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router Example: Configuring a L2TP VPN - Remote Access Dial-in Connection A remote worker establishes a L2TP VPN connection with the head office using Microsoft VPN Adapter (included with Windows XP/2000/ME, etc.). The router is installed in the head office, connecting to a couple of PCs and Servers.
  • Page 128 Configuring L2TP VPN in the Office The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is not used by the Office LAN. Item Function Connection VPN_L2TP Name Dial in Private IP Address 192.168.1.200 Assigned to Dialing User...
  • Page 129 IPSec Authentication Encryption Perfect Forward Secrecy Pre-shared Key Example: Configuring a Remote Access L2TP VPN Dial-out Connection A company’s office establishes a L2TP VPN connection with a file server located at a different location. The router is installed in the office, connecting to a couple of PCs and Servers. Chapter 4: Configuration Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Enabled for enhancing your L2TP VPN security.
  • Page 130 Configuring the L2TP VPN in the Office Item Function Connection Name Dial out Server IP Address (or Hostname) Username Password Auth.Type Idle Timeout IPSec Chapter 4: Configuration Billion BiPAC SHDSL/SHDSL.bis (VPN) Firewall Bridge/ Router VPN_L2TP Given name of L2TP connection Check the Dial out radio button 69.121.1.33 A Dialed server IP...
  • Page 131 Authentication Encryption Perfect Forward Secrecy Pre-shared Key Example: Configuring your Router to Dial-in to the Server Currently, Microsoft Windows operation system does not support L2TP incoming service. Additional software may be required to set up your L2TP incoming service. Chapter 4: Configuration Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router 3DES Both sites should use the same value.
  • Page 132 L2TP Connection - LAN to LAN L2TP VPN Connection • Connection Name: User-defined description of the connection. • Type: Check the Dial Out radio button if you want your router to operate as a client (connecting to a remote VPN server, e.g. your office server), check the Dial In radio button if it is to operate as a VPN server.
  • Page 133 type the server is using (when acting as a client), or the authentication type you want clients to use (when acting as a server). When using PAP, the password is sent unencrypted, whilst CHAP encrypts the password before sending, and this presents challenges at different periods to ensure that the client has not been replaced by an intruder.
  • Page 134 must be able to verify the identity of its peer. This can be done by manually entering the pre-shared key into the router or hosts at both ends. • Remote Host Name (Optional): Enter hostname of remote VPN device. It is a tunnel identifier from the Remote VPN device that matches the Remote hostname provided.
  • Page 135 Example: Configuring L2TP LAN-to-LAN VPN Connection The branch office establishes a L2TP VPN tunnel with the head office to connect two private networks over the Internet. The routers are installed in the head office and branch office respectively. Both office LAN networks MUST be in different subnet with LAN to LAN application.Functions of Pre-shared Key, VPN Connection Type and Attention Security Algorithm MUST BE identically set up at both ends.
  • Page 136 Configuring L2TP VPN in the Head Office The IP address 192.168.1.200 will be assigned to the router located at the branch office. Please make sure this IP is not used by the head office LAN. Item Function Connection Name Dial in Private IP Address Assigned to...
  • Page 137 Username Password Auth.Type Idle Timeout IPSec Authentication Encryption Perfect Forward Secrecy Pre-shared Chapter 4: Configuration Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router username Input username & password to authenticate branch office network 123456 Chap(Auto) Kept as a default value in most cases. The connection will be disconnected when there Is no traffic for a predefined period of time.
  • Page 138 Configuring L2TP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located at head office. If you registered the DDNS (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the router.
  • Page 139 Idle Timeout IPSec Authentication Encryption Perfect Forward Secrecy Pre-shared Key Chapter 4: Configuration Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router The connection will be disconnected when there Is no traffic for a predefined period of time. Idle time 0 means the connection is always on.

  • Page 140: Qos (Quality Of Service)

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router QoS (Quality of Service) QoS function helps you to control your network traffic for each application from LAN (Ethernet and/or Wireless) to WAN (Internet). It facilitates you to control the different quality and speed of throughput for each application when the system is running with full upstream loading.
  • Page 141 Prioritization There are three priority settings provided in the Router: • High • Normal (The default is normal priority for all of traffic without setting) • Low Average utilization of each priority type: High (60%), Normal (30%) and Low (10%). Click Clear •...
  • Page 142 monitored. • DSCP Marking: Differentiated Services Code Point (DSCP), it is the first 6 bits in the ToS byte. DSCP Marking allows users to classify traffic based on DSCP value and send packets to next Router. See Table 4. The DSCP Mapping Table is shown below: Note: To be sure the router(s) in the backbones network have the capability in executing and checking the DSCP through-out the QoS network.
  • Page 143 Outbound IP Throttling (LAN to WAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the application that you set to the specified value multiple of 32kbps. Click Clear • Application: A user-define description to identify this new policy/application. •...

  • Page 144: Inbound Ip Throttling (Wan To Lan)

    Inbound IP Throttling (WAN to LAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the application that you set to the specified value multiple of 32kbps. Click Clear • Application: A user-define description to identify this new policy/application. •...
  • Page 145 • Inbound Rate Limit: To limit the speed of inbound traffic. Example: QoS for your Network Connection Diagram VoIP Normal PCs Restricted PC Information and Settings Upstream: 928 kbps Downstream: 8 Mbps VoIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Restricted User: 192.168.1.100 Chapter 4: Configuration Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router...
  • Page 146 kbps VoIP/VPN HIGH Mission-critical application VPN connection is a mission-critical application used for data exchange between head office and branch office. This mission-critical application must be sent out smoothly without any dropping. Set this application as high priority to prevent other applications to saturate the bandwidth. Voice application Voice is latency-sensitive application.
  • Page 147 Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Advanced setting by using IP throttling With IP throttling you can set more detailed parameters to manage bandwidth allocation even when the applications are located on the same level. Upstream: 928kbps (29*32kbps) Mission-critical Application: 192kbps (6*32kbps) Voice Application: 128kbps (4*32kbps) Restricted Application: 160kbps (5*32kbps)

  • Page 148: Virtual Server ("Port Forwarding")

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Virtual Server (“Port Forwarding”) In TCP/IP and UDP network, a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be delivered to. Some ports have numbers that are pre-assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred to as “well-known ports”.
  • Page 149 internal server. • Time Schedule: A self-defined time period to enable your virtual server. specify a time schedule or Always on for the usage of this Virtual Server Entry. For setup and detail, refer to Time Schedule section • Application: Users-define description to identify this entry or click existing predefined rules.
  • Page 150 Example: If you like to access your Router remotely through the Web/HTTP at all time, you would need to enable port number 80 (Web/HTTP) and map to the Router IP Address. Then all incoming HTTP requests from you (Remote side) will be forwarded to the Router with the IP address of 192.168.1.254.

  • Page 151: Edit Dmz Host

    Edit DMZ Host The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP address as the DMZ Host, all incoming packets that use the port number different from the one used by other Virtual Server entries will be checked by the Firewall and NAT algorithms before being passed to the DMZ host.

  • Page 152: Edit One-To-One Nat (Network Address Translation)

    Edit One-to-One NAT (Network Address Translation) One-to-One NAT maps a specific private/local IP address to a global/public IP address. If you have multiple public/WAN IP addresses from you ISP, you are eligible for One-to-One NAT to utilize these IP addresses. •...
  • Page 153 • Time Schedule: A self-defined time period to enable your virtual server. specify a time schedule or Always on for the usage of this Virtual Server Entry. For setup and detail, refer to Time Schedule section • Application: Users-defined description to identify this entry or click the existing predefined rules.
  • Page 154 Example: List of some well-known and registered port numbers. The Internet Assigned Numbers Authority (IANA) is the central coordinator for the assigning unique parameter values to the Internet protocols. Port numbers range from 0 to 65535, but only ports numbers 0 to 1023 are reserved for privileged services and are designated as “well- known ports”...

  • Page 155: Time Schedule

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Time Schedule The Time Schedule supports up to 16 time slots which helps you to manage your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allow the usage of the Internet for certain users or applications.

  • Page 156: Configuration Of Time Schedule

    Configuration of Time Schedule Edit a Time Slot 1. Choose any Time Slot (ID 1 to ID 16) to edit, click Edit. Note: Watch it carefully, the days you have selected will present in capital letter. Lower case letter shows the day(s) is not selected, and no rule will apply on this day(s). 2.

  • Page 157: Advanced

    Advanced Configuration options within the Advanced section are for users who wish to take advantage of the more advanced features of the router. Users who do not understand the features should not attempt to reconfigure their router, unless advised to do so by the support staff. There are four items within the Advanced section: Static Route, Dynamic DNS, Check Email, Device Management, IGMP, and VLAN Bridge.

  • Page 158: Dynamic Dns

    Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your ADSL connection, so that anyone wishing to connect to you may use your domain name, rather than having to use your dynamic IP address, which changes from time to time.

  • Page 159: Check Emails

    Check Emails This function allows you to have the router check your POP3 mailbox for new Email messages. The Mail LED on your router will lit when it detects new messages waiting for download. You may also view the status of this function using the Status – Email Checking section of the web interface, which also provides details on the number of new messages await for download.

  • Page 160: Device Management

    Device Management The Device Management advanced configuration settings allows you to control your router security options and device monitoring features. Embedded Web Server ( to Management IP accounts) • HTTP Port: This is the port number the router’s embedded web server (for web-based configuration) will use.
  • Page 161 For Example: User A changes HTTP port number to 100, specifies their own IP address of 192.168.1.55, and sets the logout time to be 100 seconds. The router will only allow User A access from the IP address 192.168.1.55 to logon to the Web GUI by typing: http://192.168.1.254:100 in their web browser.
  • Page 162 SNMP V3: Specify a name and password for authentication. And define the access right from an identified IP address. Once the authentication has succeeded, user from this IP address will be able to view and modify the data. SNMP Version: SNMPv2c and SNMPv3 SNMPv2c is the combination of the enhanced protocol features of SNMPv2 without the SNMPv2 security.
  • Page 163 dot1dTp group dot1dStp group (if configured as spanning tree) From RFC 1471 (PPP/LCP MIB): pppLink group pppLqr group From RFC 1472 (PPP/Security MIB): PPP Security Group) From RFC 1473 (PPP/IP MIB): PPP IP Group From RFC 1474 (PPP/Bridge MIB): PPP Bridge Group From RFC1573 (IfMIB): ifMIBObjects Group From RFC1695 (atmMIB):...

  • Page 164: Vlan Bridge

    IGMP IGMP, known as Internet Group Management Protocol, is used to manage hosts from multicast group. • IGMP Forwarding: Accept multicast packet. Default is set to Enable. • IGMP Snooping: Allow switched Ethernet to check and make correct forwarding decisions. Default is set to Disable. VLAN Bridge This section allows you to create a VLAN group and specify the members of the VLAN group.
  • Page 165 Advanced VLAN Setup Example (Triply Play) VLAN_data: Ethernet Port 1, Wireless and Wireless WDS are reserved for Internet - On Ethernet port 1 I also need VC 0/40 bridged. VLAN_Vedio Ethernet ports: 2, 3 and 4: - 0/33 Bi-directional IP - 0/34 Video - 0/35 Video - 0/36 Video Subscriber Services (EPG, EAS, etc.)
  • Page 166 From the example, 0/40 is used for data/internet and with the assumption that PPPoE is used; click the Edit button to change the VPI/VCI to 0/40. Click Create to setup up an additional WAN interface for video applications. A total of 8 VLAN is supported;...
  • Page 167 • Acceptable Frame Type: Specify what kind of traffic can pass through this connection, whether all traffic or only VLAN tagged traffic. • Filter Type: Specify the type of Ethernet filtering performed by the named bridge interface. Allows all types of ethernet packets through the port. Allows only IP/ARP types of ethernet packets through the port.
  • Page 168 From the example: VLAN untagged ports for Data/Internet: ethernet, wireless and wireless_wds. VLAN untagged ports for Video: ethernet1, rfc-1483-0 ~ rfc-1483-6. Click Apply to made changes effective immediately. Mapping the VLAN Bridge with Bridge Interface created in Step1, you will see the relationship in these two screenshots.

  • Page 169: Save Configuration To Flash

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router Save Configuration to Flash After changing the router configuration settings, you must save all of the configuration parameters to FLASH to avoid them being lost after turning off or resetting your router. Click Save to write your new configuration to FLASH.

  • Page 170: Chapter 5: Troubleshooting

    If the router is not functioning properly, first check this chapter for simple troubleshooting before contacting your service provider. Problems starting up the router Problem None of the LEDs are on when you turn on the router. have forgotten your router login and/or password.

  • Page 171: Appendix A: Product Support And Contact Information

    Billion BiPAC 8500/8501/8520/8521 SHDSL (VPN) Firewall Bridge/ Router APPENDIX A: Product Support and Contact Information Most problems can be solved by referring to the Troubleshooting section in the User’s Manual. If you cannot resolve the problem with the Troubleshooting chapter, please contact the dealer where you purchased this product.

This manual is also suitable for:

Bipac 8501/8521Bipac 8500Bipac 8520Bipac 8521Bipac 8501

Table of Contents

Save PDF