Introduction to your Router Welcome to the VoIP Broadband Firewall Router. The router is an “all-in-one” VoIP Broadband router, combining a Broadband router, Ethernet network switch and 2 ports for Voice over IP functionalities, providing everything you need to get the machines on your network connected to the Internet over your DSL/Cable broadband connection.
Page 5
VoIP/(802.11g) Broadband Firewall Router Network Address Translation (NAT) Allows multi-users to access outside resources such as the Internet simultaneously with one IP address/one Internet access account. Many application layer gateway (ALG) are supported such as web browser, ICQ, FTP, Telnet, E-mail, News, Net2phone, Ping, NetMeeting, IP phone and others. SOHO Firewall Security with DoS and SPI Along with the built-in NAT natural firewall feature, the router also provides advanced hacker pattern-filtering protection.
Page 6
VoIP/(802.11g) Broadband Firewall Router It supports web based GUI for configuration and management. It is user-friendly and comes with on-line help. It also supports remote management capability for remote users to configure and manage this product. Firmware Upgradeable Device can be upgraded to the latest firmware through the WEB based GUI. Rich Management Interfaces It supports flexible management interfaces with local console port, LAN port, and WAN port.
The Front LEDs LAN Port 4 – 6 1X — 3X (RJ-45 connector) WLAN (Wireless Router Only) Phone 8 – 9 1X — 2X (RJ-11 connector) LINE VoIP Port 1X — 2X (RJ-11 connector) Chapter 2: Installing the router VoIP/(802.11g) Broadband Firewall Router Meaning Lit when power is ON.
The Rear Ports The Ethernet Port # 3 can be used as a console port. You need a special console tool which already includes in the package to connect with LAN port 3 and PC’s RS-232 port (9-pin serial port). Port Power Switch RESET...
VoIP/(802.11g) Broadband Firewall Router Connect RJ-11 cable to this port when connecting to the LINE telephone wall jack. Cabling The most common problem associated with Ethernet is bad cabling. Make sure that all connected devices are turned on. On the top of the product is a bank of LEDs, as a first check, verifies that the relevant LAN Link and WAN Link LEDs are lit.
The router can be configured with your web browser. A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me, etc. The product provides an easy and user-friendly interface for configuration. Please check your PC’s network components. The TCP/IP protocol stack and Ethernet network adapter must be installed.
Connecting Your Router 1. (a) ATA Mode: Connect the ATA to a WAN (Connect to ADSL modem/router). (b) Broadband Router Mode: Connect the Router to a LAN (Local Area Network) and WAN (Connect to Cable or ADSL modem). 2. Power on the device. 3.
Page 13
Configuring PCs in Windows in Window XP Go to Start / Control Panel (in Classic View). In the Control Panel, double-click Network Connections. Double-click Local Area Connection. (See Figure 3.1) In the LAN Area Connection Status window, click Properties. (See Figure 3.2) Select Internet Protocol (TCP/IP) and click Properties.
Page 14
Configuring PCs in Windows 2000 Go to Start / Settings / Control Panel. In the Control Panel, double-click Network and Dial-up Connections. Double-click Local Area (“LAN”) Connection. (See Figure 3.5) In the LAN Area Connection Status window, click Properties. (See Figure 3.6) Select Internet Protocol (TCP/IP) and click Properties.
Configuring PC in Windows 95/98/ME Go to Start / Settings / Control Panel. In the Control Panel, double-click Network and choose the Configuration tab. Select TCP / IP -> NE2000 Compatible, or the name of any Network Interface Card (NIC) in your PC. (See Figure 3.9) Click Properties.
Page 16
Configuring PC in Windows NT4.0 Go to Start / Settings / Control Panel. In the Panel, double-click Network and choose the Protocols tab. Select TCP/IP Protocol and click Properties. (See Figure 3.12) Select the Obtain an IP address from a DHCP server radio button and click OK.
Factory Default Settings Before configuring your, you need to know the following default settings. Web Interface (Username and Password) Username: admin Password: admin The default username and password are “admin” and “admin” respectively. If you ever forget the username/password to login to the router, you may press the RESET button up to 6 seconds to restore the factory default settings.
Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of service is provided such as DHCP (Obtain an IP Address Automatically, Static IP (Fixed IP Address) and PPPoE. Gather the information as illustrated in the following table and keep it for reference.
VoIP/(802.11g) Broadband Firewall Router Configuring with your Web Browser Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click The default username and password “Go”, a user name and password window prompt will appear. are “admin”...
At the configuration homepage, the left navigation pane where bookmarks are provided links you directly to the desired setup page, including: Status - ARP Table - Wireless Association Table (Wireless Router Only) - Routing Table - DHCP Table - Email Status - VoIP Status - Event Log - Error Log...
Status ARP Table This section displays the router’s ARP (Address Resolution Protocol) Table, which shows the mapping of Internet (IP) addresses to Ethernet (MAC) addresses. This is useful as a quick way of determining the MAC address of the network interface of your PCs to use with the router’s Firewall – MAC Address Filter function.
VoIP/(802.11g) Broadband Firewall Router Cost: The number of hops counted as the cost of the route. RIP Routing Table Destination: The IP address of the destination network. Netmask: The destination netmask address. Gateway: The IP address of the gateway that this route will use. Cost: The number of hops counted as the cost of the route.
VoIP/(802.11g) Broadband Firewall Router Email Status Details and status for the Email Account you have configured the router to check. Please see the Advanced section of this manual for details on this function. VoIP Status Here you can check details and status of VoIP Account you have configured. Please see the VoIP Configuration section for more details.
VoIP/(802.11g) Broadband Firewall Router Event Log This page displays the router’s Event Log entries. Major events are logged to this window, such as when the router’s ADSL connection is disconnected, as well as Firewall events when you have enabled Intrusion or Blocking Logging in the Configuration – Firewall section of the interface. Please see the Firewall section of this manual for more details on how to enable Firewall logging.
VoIP/(802.11g) Broadband Firewall Router NAT Sessions This section lists all current NAT sessions between interface of types external (WAN) and internal (LAN). Diagnostic It tests the connection to computer(s) which is connected to LAN ports and also the WAN Internet connection.
VoIP/(802.11g) Broadband Firewall Router UPnP Portmap The section lists all port-mapping established using UPnP (Universal Plug and Play). Please see the Advanced section of this manual for more details on UPnP and the router’s UPnP configuration options. Chapter 4: Configuration...
VoIP/(802.11g) Broadband Firewall Router ATA / Router Mode You have the option to configure the device to a pure Analog Telephone Adaptor (ATA); doing so, you will lose the access capability to other feature functions such as Firewall, QoS and etc. By default, the device is set to VoIP Router, concurrently, you can enjoy the content functions and at the same making a toll-quality voice calls over the Internet or via a traditional landline.
Page 28
Analog Telephone Adaptor (ATA) vs. VoIP Router Functional Comparison Table Functions Disabled Turn OFF DHCP Server Turn OFF Device IP 0.0.0.0 / 0.0.0.0 Disabled System Disabled Firewall Disabled Disabled Virtual Server Disabled Time Schedule Disabled Advanced Disabled Here is detailed WAN Type description for your reference. DHCP Configure this WAN Interface to use DHCP client protocol to get an IP address from your ISP automatically.
VoIP/(802.11g) Broadband Firewall Router Configuration When you click this item, you get following sub-items to configure your router. LAN, System, Firewall, VoIP, QoS, Virtual Server, Time Schedule and Advanced These functions are described below in the following sections. LAN (Local Area Network) Ethernet, IP Alias, Ethernet Client Filter, Wireless, Wireless Here are the items within LAN section: Security, Wireless Client Filter...
VoIP/(802.11g) Broadband Firewall Router IP Alias This function supports to create multiple virtual IP interfaces on this router. It helps to connect two or more local networks to the ISP or remote node. In this case, an internal router is not required. IP Address: Specify an IP address on this virtual interface.
Ethernet Client Filter The Ethernet Client Filter supports up to 16 Ethernet network machines that helps you to manage your network control to accept traffic from specific authorized machines or can restrict unwanted machine(s) to access your LAN. There are no pre-define Ethernet MAC address filter rules; you can add the filter rules to meet your requirements.
Page 32
VoIP/(802.11g) Broadband Firewall Router Active PC in LAN displays a list of individual Ethernet device’s IP Address & MAC Address which connecting to the router. You can easily by checking the box next to the IP address to be blocked or allowed. Then, Add to insert to the Ethernet Client Filter table.
Wireless (Wireless Router Only) Parameters WLAN Service: Default setting is set to Enable. If you do not have any wireless, both 802.11g and 802.11b, device in your network, select Disable. Mode: The default setting is 802.11b+g (Mixed mode). If you do not know or have both 11g and 11b devices in your network, then keep the default in mixed mode.
Page 34
VoIP/(802.11g) Broadband Firewall Router adjust this power level from minimum 0 up to maximum 255. Note: The Power Level maybe different in each access network user premises environment and choose the most suitable level for your network. Connected: Representing in true or false. That it is the connection status between the system and the build-in wireless card.
VoIP/(802.11g) Broadband Firewall Router Wireless Security (Wireless Router Only) You can disable or enable with WPA or WEP for protecting wireless network. The default mode of wireless security is disabled. WPA-PSK (TKIP) / WPA-PSK (AES) Pre-Shared Key WPA Algorithms: There are two types of the WPA-PSK; the WAP1 adapts the TKIP (Temporal Key Integrity Protocol) encrypted algorithms, which incorporates Message Integrity Code (MIC) to provide protection against hackers.
Page 36
VoIP/(802.11g) Broadband Firewall Router WEP Encryption: To prevent unauthorized wireless stations from accessing data transmitted over the network, the router offers highly secure data encryption, known as WEP. If you require high security for transmissions, there are two alternatives to select from: WEP 64 and WEP 128. WEP 128 will offer increased security over WEP 64.
Wireless Client / MAC Address Filter (Wireless Router Only) The MAC Address supports up to 16 wireless network machines and helps you to manage your network control to accept traffic from specific authorized machines or to restrict unwanted machine(s) to access your LAN.
VoIP/(802.11g) Broadband Firewall Router DHCP Server You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router’s DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP addresses to PCs on your network if they are configured to obtain IP addresses automatically. To disable the router’s DHCP Server, check Disabled and click Next, then click Apply.
VoIP/(802.11g) Broadband Firewall Router System Here are items within the System section: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Restart User Management. Time Zone The router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP server outside your network.
VoIP/(802.11g) Broadband Firewall Router Remote Access To temporarily permit remote administration of the router (i.e. from outside your LAN), select a time period the router will permit remote access for and click Enable. You may change other configuration options for the web administration interface using Device Management options in the Advanced section of the GUI.
Firmware Upgrade Your router’s “firmware” is the software that allows it to operate and provides all its functionality. Think of your router as a dedicated computer, and the firmware as the software it runs. Over time this software may be improved and modified, and your router allows you to upgrade the software it runs to take advantage of these changes.
VoIP/(802.11g) Broadband Firewall Router Backup / Restore These functions allow you to save and backup your router’s current settings to a file on your PC, or to restore a previously saved backup. This is useful if you wish to experiment with different settings, knowing that you have a backup handy in the case of any mistakes.
VoIP/(802.11g) Broadband Firewall Router Restart Router Click Restart with option Current Settings to reboot your router (and restore your last saved configuration). If you wish to restart the router using the factory default settings (for example, after a firmware upgrade or if you have saved an incorrect configuration), select Factory Default Settings to reset to factory default settings.
VoIP/(802.11g) Broadband Firewall Router User Management In order to prevent unauthorized access to your router’s configuration interface, it requires all users to login with a password. You can set up multiple user accounts, each with their own password. You are able to Edit existing users and Create new users who are able to access the device’s configuration interface.
Firewall and Access Control Your router includes a full SPI (Stateful Packet Inspection) firewall for controlling Internet access from your LAN, as well as helping to prevent attacks from hackers. In addition to this, when using NAT, the router acts as a “natural” Internet firewall, as all PCs on your LAN will use private IP addresses that cannot be directly accessed from the Internet.
General Settings You can choose not to enable Firewall and still able to access to URL Filter and IM/P2P Blocking or enable the Firewall using preset filter rules and modify the port filter rules as required. The Packet Filter is used to filter packets based-on Applications (Port) or IP addresses There are four options when you enable the Firewall, they are: All blocked/User-defined: no pre-defined port or address filter rules by default, meaning that...
VoIP/(802.11g) Broadband Firewall Router Packet Filter This function is only available when the Firewall is enabled and one of these four security levels is chosen (All blocked, High, Medium and Low). The predefined port filter rules in the Packet Filter must modify accordingly to the level of Firewall, which is selected.
Page 48
Example: Predefined Port Filters Rules The predefined port filter rules for High, Medium and Low security levels are listed. See Table 1. Note: Firewall – All Blocked/User-defined, you must define and create the port filter rules yourself. No predefined rule is being preconfigured. Port Number Application Protocol Start...
Page 49
MSN (7001) UDP(17) 7001 7001 MSN VEDIO TCP(6) 9000 9000 (9000) Inbound: Internet to LAN ; Outbound: LAN to Internet. YES: Allowed ; NO: Blocked ; N/A: Not Applicable Chapter 4: Configuration VoIP/(802.11g) Broadband Firewall Router...
Page 50
VoIP/(802.11g) Broadband Firewall Router Packet Filter – Add TCP/UDP Filter Rule Name: Users-define description to identify this entry or click to select existing predefined rules. The maximum name length is 32 characters. Time Schedule: It is self-defined time period. You may specify a time schedule for your prioritization policy.
Page 51
VoIP/(802.11g) Broadband Firewall Router Packet Filter – Add Raw IP Filter Rule Name: Users-define description to identify this entry or click to select existing predefined rules. Time Schedule: It is self-defined time period. You may specify a time schedule for your prioritization policy.
Page 52
VoIP/(802.11g) Broadband Firewall Router Example: Configuring your firewall to allow for a publicly accessible web server on your The predefined port filter rule for HTTP (TCP port 80) is the same no matter whether the firewall is set to a high, medium or low security level.
Page 53
Configuring Packet Filter: Click Port Filters. You will then be presented with the predefined port filter rules screen (in this case for the low security level), shown below: Note: You may click Edit the predefined rule instead of Delete it. This is an example to show to how you add a filter on your own.
Page 54
The new port filter rule for HTTP is shown below: Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server: Note: For how to configure the HTTP in Virtual Server, go to Add Virtual Server in Virtual Server section for more details.
Intrusion Detection The router’s Intrusion Detection System (IDS) is used to detect hacker attacks and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or other connections that the router determines to be suspicious.
Page 56
Table 2: Hacker attack types recognized by the IDS Intrusion Name Detect Parameter Blacklist Ascend Kill Ascend Kill data WinNuke Port 135, 137~139, Flag: URG ICMP type 8 Smurf Des IP is broadcast Land attack SrcIP = DstIP UDP Echo Port and Echo/CharGen Scan CharGen Port UDP Dst Port =...
URL Filter URL (Uniform Resource Locator – e.g. an address in the form of http://www.abcde.com or http://www.example.com) filter rules allow you to prevent users on your network from accessing particular websites by their URL. There are no pre-defined URL filter rules; you can add filter rules to meet your requirements.
Page 58
dropped. If the packet does not match either of the above two items, it is sent to the remote web server. Please be note that the completed URL, “www” + domain name, shall be specified. For example “www.google.com” In the example below, the URL request for www.abc.com will be sent to the remote web server because it is listed in the trusted list, whilst the URL request for www.google or www.google.com will be dropped, because www.google is in the forbidden list.
Internet. Both Instant Message and Peer-to-peer applications make communication faster and easier but your network can become increasingly insecure at the same time. Billion’s IM and P2P blocking helps users to restrict LAN PCs to access to the commonly used IM, Yahoo and MSN, and P2P, BitTorrent and eDonkey, applications over the Internet.
VoIP/(802.11g) Broadband Firewall Router Firewall Log Firewall Log display log information of any unexpected action with your firewall settings. Check the Enable box to activate the logs. Log information can be seen in the Status – Event Log after enabling. Chapter 4: Configuration...
VoIP (Voice over Internet Protocol) VoIP enables telephone calls through existing Internet connection instead of going through the PSTN (Public Switched Telephone Network). telephone charges, but also toll-quality voice calls over the Internet. After completing VoIP configuration, remember to apply the changes, SAVE CONFIG and restart to activate your VoIP.
VoIP/(802.11g) Broadband Firewall Router Wizard This section provides easy setup for your VoIP service. Phone port 1 and 2 can be registered to different SIP Service Provider. Voice QoS DSCP Marking: Differentiated Services Code Point (DSCP), it is the first 6 bits in the ToS byte. DSCP Marking allows users to assign specific application traffic to be executed in priority by the next Router based on the DSCP value.
Page 63
VoIP/(802.11g) Broadband Firewall Router Setting for Phone Port 2 Click box of Same as Phone Port 1 to set phone port 2 be identical as phone port 1. Please refer to descriptions in “Setting for Phone Port 1”. User-defined Profiles NOTE: User defined profiles are limited to 8 only.
VoIP/(802.11g) Broadband Firewall Router General Settings This section reflects and contains basic settings for the VoIP module from selected provider in the Wizard section. Fail to provide correct information will halt making calls out to the Internet. SIP Device Parameters SIP: To use VoIP SIP as VoIP call signaling protocol.
Page 65
device must work. When a country is selected, the country parameters are automatically loaded. Voice QoS,: Differentiated Services Code Point (DSCP), it is the first 6 bits in the ToS byte. DSCP Marking allows users to assign specific application traffic to be executed in priority by the next Router based on the DSCP value.
Page 66
VoIP/(802.11g) Broadband Firewall Router Click the Edit to add or remove the responses code. To be sure the code is separated by a comma(,). more information about responses codes, please check link http://voip-info.org/wiki/view/sip+response+codes where you can get to know the meaning of each error code.
VoIP/(802.11g) Broadband Firewall Router Phone Port This section displays status and allows you to edit the account information of your Phones. Click Edit to update your phone information. Login Account Configuration Phone Number: This parameter holds the registration ID of the user within the VoIP SIP registrar. Authentication Username: Same as Phone Number.
Page 68
VoIP/(802.11g) Broadband Firewall Router Confirm Password: Re-enter the password for confirmation. Display Name: This parameter will be appeared on the Caller ID. Codec Preference Codec is known as Coder-Decoder used for data signal conversion. Set the priority of voice compression; Priority 1 owns the top priority. G.729: It is used to encoder and decoder voice information into a single packet which reduces the bandwidth consumption.
PSTN Dial Plan This section enables you to configure “VoIP with PSTN switching” on your system. You can define a range of dial plans to make regular call from VoIP switching to PSTN line. Prefix numbers is essential key to make a distinguishing between VoIP and Regular phone call. If actual numbers dialed matches with prefix number defined in this dial plan, the dialed number will be routed to the PSTN to make a regular call.
Page 70
VoIP Broadband Firewall Router PSTN Dial Plan Examples: 1) Dial with Prefix If you dial 01223 707070, number 01223707070 will be dialed out via FXO to make a regular phone call. 2) Dial without Prefix If you dial 9102, the number 102 will only be dialed out via FXO port to make a regular phone call. 3) Dial at Timeout If you only dial 01223 7070 and no more numbers, after the timeout activates, 012237070 will be dialed to make a regular call via FXO port.
Page 71
VoIP/(802.11g) Broadband Firewall Router If you only dial 97070 and no more numbers, after the timeout activates, 7070 will be dialed without prefix to make a regular call via FXO port. Even though 7070 (only 4 digits) does not match with number of digits 6 defined in the filed, 7070 is still a valid phone number since it has not exceed 6 digits Chapter 4: Configuration...
VoIP/(802.11g) Broadband Firewall Router VoIP Dial Plan This section helps you to make a telephony number dialed as making a regular call via VoIP. You no longer need to memorize a long dial string of number for making a VoIP call. Parameters A listed of special dial feature comes handy when you have a miss call or need to transfer a call to a third party.
Page 73
VoIP/(802.11g) Broadband Firewall Router Dial Plan Rules List Click Add to create and define VoIP dial-plan rule(s). Prefix Processing: Prepend xxx unconditionally: xxx number is appended unconditionally to the front of the dialing number when making a call. Prefix can also be included with any number and/or character such as +, *, #. Note: For special service with +, *, #, you may need to check with your VoIP or Local Telephone Service Provider for information.
Page 74
a traditional phone number (PSTN) to an Internet addresses/ SIP URL. The ENUM number must be registered via a public ENUM site or your VoIP Service Provider. <@ SIPgateway>: It is used for the Intelligent Call Routing feature where you need to set up your SIP account on the VoIP User-defined Profiles link on the VoIP Wizard page.
Page 75
Localcheap.com is the default VoIP provider I set on phone port 1. When I call out any number start with 1 or 2 or 3 and plus rest of the phone number for local call, 03 is always prepended in front of these number.
Page 76
VoIP/(802.11g) Broadband Firewall Router Mobilecheap.com is the default VoIP provider I set on phone port 2. When I call out 123-39-45678 for a mobile call, 123 is replaced with 09. Therefore, 09-39-45678 is the actual phone number called out via Mobilecheap.com provider.
VoIP Broadband Firewall Router Ring & Tone This section allows advanced user to change the existing or newly defined parameters for the various ring tones (dial tone, busy tone, answer tone and etc.) Country Specific Ring & Tone Region: Select a country ring-tone, from the drop-down list, where you are located. This VoIP router provides default parameter of ring tones according to different countries.
Special Dial Codes The following table lists the special dial codes that are built-in to the system: Option Flash-hook (Wireless Router with LINE port only) *74<x><number># *90<phone-number> Chapter 4: Configuration VoIP/(802.11g) Broadband Firewall Router Description Switch to PSTN line Note: A quick press of the hook. On some phones a button is provided which provides Flash-hook functionality.
QoS (Quality of Service) QoS function helps you to control your network traffic for each application from LAN (Ethernet and/or Wireless) to WAN (Internet). It facilitates you to control the different quality and speed of through put for each application when the system is running with full loading of upstream. Here are items within the QoS section: management).
Destination IP address Range: The destination IP address or range of packets to be monitored. DSCP Marking: Differentiated Services Code Point (DSCP), it is the first 6 bits in the ToS byte. DSCP Marking allows users to assign specific application traffic to be executed in priority by the next Router based on the DSCP value.
VoIP/(802.11g) Broadband Firewall Router Outbound IP Throttling (LAN to WAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the application that you set to the specified value’s multiple of 32kbps. You can click Clear to delete the existing Application.
VoIP/(802.11g) Broadband Firewall Router Inbound IP Throttling (WAN to LAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the application that you set to the specified value’s multiple of 32kbps. Click Clear You can click Clear to delete the existing Application.
Page 83
Example: QoS for your Network Connection Diagram VoIP Normal PCs Restricted PC Information and Settings Upstream: 928 kbps Downstream: 8 Mbps VoIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Restricted User: 192.168.1.100 kbps VoIP/VPN HIGH Chapter 4: Configuration VoIP/(802.11g) Broadband Firewall Router Throughput Others Restricted...
Page 84
VoIP/(802.11g) Broadband Firewall Router Mission-critical application Mostly the VPN connection is mission-critical application for doing data exchange between head and branch office. The mission-critical application must be sent out smoothly without any dropping. Set priority as high level for preventing any other applications to saturate the bandwidth. Voice application Voice is latency-sensitive application.
Page 85
VoIP/(802.11g) Broadband Firewall Router Sometime your customers or friends may upload their files to your FTP server and that will saturate your downstream bandwidth. The settings below help you to limit bandwidth for the restricted application. Chapter 4: Configuration...
VoIP/(802.11g) Broadband Firewall Router Virtual Server (“Port Forwarding”) In TCP/IP and UDP networks a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be delivered to. Some ports have numbers that are pre-assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred to as “well-known ports”.
VoIP/(802.11g) Broadband Firewall Router Add Virtual Server Because NAT can act as a “natural” Internet firewall, your router protects your network from being accessed by outside users when using NAT, as all incoming connection attempts will point to your router unless you specifically create Virtual Server entries to forward those ports to a PC on your network.
Example: If you like to remote accessing your Router through the Web/HTTP at all time, you would need to enable port number 80 (Web/HTTP) and map to Router’s IP Address. Then all incoming HTTP requests from you (Remote side) will be forwarded to the Router with IP address of 192.168.1.254. Since port number 80 has already been predefined, next to the Application click Helper.
VoIP/(802.11g) Broadband Firewall Router Edit DMZ Host The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP address as the DMZ Host, all incoming packets will be checked by the Firewall and NAT algorithms then passed to the DMZ host, when a packet received does not use a port number used by any other Virtual Server entries.
Edit One-to-One NAT (Network Address Translation) One-to-One NAT maps a specific private/local IP address to a global/public IP address. If you have multiple public/WAN IP addresses from you ISP, you are eligible for One-to-One NAT to utilize these IP addresses. NAT Type: Select desired NAT type.
Page 91
VoIP/(802.11g) Broadband Firewall Router Time Schedule: A self-defined time period to enable your virtual server. You may specify a time schedule or Always on for the usage of this Virtual Server Entry. For setup and detail, refer to Time Schedule section Application: Users-defined description to identify this entry or click to select existing predefined rules.
Page 92
For further information, please see IANA’s website at: http://www.iana.org/assignments/port-numbers For help on determining which private port numbers are used by common applications on this list, please see the FAQs (Frequently Asked Questions) at: http://www.billion.com Table 5: Well-known and registered Ports...
VoIP/(802.11g) Broadband Firewall Router Time Schedule The Time Schedule supports up to 16 time slots which helps you to manage your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allowing the usage of the Internet by users or applications.
VoIP/(802.11g) Broadband Firewall Router Configuration of Time Schedule Edit a Time Slot 1. Choose any Time Slot (ID 1 to ID 16) to edit, click Edit. Click Edit Note: Watch it carefully, the days you have selected will present in capital letter. Lower case letter shows the day(s) is not selected, and no rule will apply on this day(s).
VoIP/(802.11g) Broadband Firewall Router Advanced Configuration options within the Advanced section are for users who wish to take advantage of the more advanced features of the router. Users who do not understand the features should not attempt to reconfigure their router, unless advised to do so by support staff. Here are items within the Advanced section: Static Route, Dynamic DNS, Check Email, Device Management...
VoIP/(802.11g) Broadband Firewall Router Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your ADSL connection, so that anyone wishing to connect to you may use your domain name, rather than having to use your dynamic IP address, which changes from time to time.
VoIP/(802.11g) Broadband Firewall Router Check Email This function allows you to have the router check your POP3 mailbox for new Email messages. The Mail LED on your router will light when it detects new messages waiting for download. You may also view the status of this function using the Status –...
VoIP/(802.11g) Broadband Firewall Router Device Management The Device Management advanced configuration settings allow you to control your router’s security options and device monitoring features. Embedded Web Server ( 2 Management IP accounts) HTTP Port: This is the port number the router’s embedded web server (for web-based configuration) will use.
Page 99
After 100 seconds, the device will automatically logout User A. Universal Plug and Play (UPnP) UPnP offers peer-to-peer network connectivity for PCs and other network devices, along with control and data transfer between devices. UPnP offers many advantages for users running NAT routers through UPnP NAT Traversal, and on supported systems makes tasks such as port forwarding much easier by letting the application control the required settings, removing the need for the user to control advanced configuration of their device.
Page 100
IP group ICMP group TCP group UDP group EGP (not applicable) Transmission SNMP group From RFC1650 (EtherLike-MIB): dot3Stats From RFC 1493 (Bridge MIB): dot1dBase group dot1dTp group dot1dStp group (if configured as spanning tree) From RFC 1471 (PPP/LCP MIB): pppLink group pppLqr group (not applicable) From RFC 1472 (PPP/Security MIB): PPP Security Group)
VoIP/(802.11g) Broadband Firewall Router IGMP IGMP, known as Internet Group Management Protocol, is used to management hosts from multicast group. IGMP Forwarding: Accepting multicast packet. Default is set to Enable. IGMP Snooping: Allowing switched Ethernet to check and make correct forwarding decisions. Default is set to Disable Save Configuration to Flash After changing the router’s configuration settings, you must save all of the configuration parameters to...
If the router is not functioning properly, first check this chapter for simple troubleshooting before contacting your service provider or Billion support. Problems starting up the router Problem Corrective Action None of the LEDs are Check the connection between the adapter and the router. If the error on when you turn on persists, you may have a hardware problem.
Most problems can be solved by referring to the Troubleshooting section in the User’s Manual. If you cannot resolve the problem with the Troubleshooting chapter, please contact the dealer where you purchased this product. Contact Billion WORLDWIDE http://www.billion.com/ Mac OS is a registered Trademark of Apple Computer, Inc.
Need help?
Do you have a question about the BiPAC 6404VGP and is the answer not in the manual?
Questions and answers