Billion 800VGT User Manual

Billion 800VGT User Manual

Adsl voip router
Hide thumbs Also See for 800VGT:
Table of Contents

Advertisement

Quick Links

Billion 800VGT Router

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 800VGT and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Billion 800VGT

  • Page 1 Billion 800VGT Router...
  • Page 2: Table Of Contents

    Billion 800VGT Router Table of Contents CHAPTER 1: INTRODUCTION ............................4 ............................. 4 NTRODUCTION TO YOUR OUTER ..................................4 EATURES CHAPTER 2: INSTALLING THE ROUTER........................7 ........................7 MPORTANT NOTE FOR USING THIS ROUTER ................................. 7 ACKAGE ONTENTS ................................8 RONT ................................
  • Page 3 Billion 800VGT Router Intrusion Detection ..............................64 URL Filter .................................. 66 IM / P2P Blocking..............................68 Firewall Log................................69 VPN - V ..........................70 IRTUAL RIVATE ETWORKS PPTP (Point-to-Point Tunnelling Protocol) ......................70 IPSec (IP Security Protocol) ............................. 78 L2TP (Layer Two Tunnelling Protocol) ........................87 IP - V ........................
  • Page 4: Chapter 1: Introduction

    Billion 800VGT Router Chapter 1: Introduction Introduction to your Router Your Billion 800VGT router is an “all-in-one” ADSL VoIP router, combining an ADSL 2/2+ modem/router, network switch and 2 telephone ports for Voice over IP functionality, providing everything you need to get you connected to the Internet using your ADSL connection. Features Voice over IP Compliance with SIP Standard This router supports cost-effective, toll-quality voice calls over the Internet.
  • Page 5 Billion 800VGT Router Universal Plug and Play (UPnP) This protocol is used to enable simple and robust connectivity among stand-alone devices and computers from many different vendors. It makes networking simple and affordable for users. UPnP architecture leverages TCP/IP and the Web to enable seamless proximity networking in addition to control and data transfer among networked devices.
  • Page 6 Billion 800VGT Router Dynamic Host Configuration Protocol (DHCP) Client and Server On the WAN interface, the DHCP client can get an IP address from the Internet Service Provider (ISP) automatically. On the LAN interface, the DHCP server can allocate a range of client IP addresses and distribute them, including IP address, subnet mask as well as DNS IP address, local computers.
  • Page 7: Chapter 2: Installing The Router

    Billion 800VGT Router Chapter 2: Installing the Router Important note for using this router Do not use this router in high humidity or high temperatures. Do not use the same power source for this router and other equipment. Do not open or repair the casing yourself. If this router is too hot, Warning turn off the power immediately and have it repaired at a qualified service center.
  • Page 8: The Front Leds

    Billion 800VGT Router The Front LEDs Meaning Lit when power is ON. Lit when the system is ready. Lit when connected to an Ethernet device. LAN Port 3 – 6 1X — Green for 100Mbps; Orange for 10Mbps. (RJ-45 connector) Blinking when data is Transmitted / Received.
  • Page 9: The Rear Ports

    Billion 800VGT Router The Rear Ports The Ethernet Port # 4 can be used as a console port. You need a special console tool which is included in the package, to connect between LAN port 4 and a PC’s RS-232 port (9-pin serial port). Port Meaning Power Switch...
  • Page 10: Cabling

    Billion 800VGT Router Cabling One of the most common causes of ADSL problems is bad cabling or ADSL lines. Make sure that all devices connected to your telephone line are turned on, and that all telephones used on the line are connected via micro filters.
  • Page 11: Chapter 3: Basic Installation

    Billion 800VGT Router Chapter 3: Basic Installation The router can be configured with your web browser. A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me, etc. The product provides an easy and user-friendly interface for configuration. Please check your Computer’s network components.
  • Page 12: Connecting Your Router

    Billion 800VGT Router Connecting Your Router 1. Connect the power adapter as illustrated below and power on the device, make sure that the PWR and SYS LEDs are lit steadily. 2. Connect your network or computer to the router using the LAN (Local Area Network) cable. 3.
  • Page 13: Configuring Pcs In Window Xp

    Billion 800VGT Router Configuring PCs in Window XP Go to Start / Control Panel (in Classic View). In the Control Panel, double-click Network Connections. Double-click Local Area Connection. (See Figure 3.1) Figure 3.1: LAN Area Connection In the LAN Area Connection Status window, click Properties.
  • Page 14: Configuring Pcs In Windows 2000

    Billion 800VGT Router Configuring PCs in Windows 2000 Go to Start / Settings / Control Panel. In the Control Panel, double-click Network and Dial-up Connections. Double-click Local Area (“LAN”) Connection. (See Figure 3.5) Figure 3.5: LAN Area Connection In the LAN Area Connection Status window, click Properties.
  • Page 15: Configuring Pc In Windows 95/98/Me

    Billion 800VGT Router Configuring PC in Windows 95/98/ME Go to Start / Settings / Control Panel. In the Control Panel, double-click Network and choose the Configuration tab. Select TCP / IP -> NE2000 Compatible, or the name of the Network Interface Card (NIC) in your PC. (See Figure 3.9) Click Properties.
  • Page 16: Configuring Pc In Windows Nt4.0

    Billion 800VGT Router Configuring PC in Windows NT4.0 Go to Start / Settings / Control Panel. In the Control Panel, double-click Network and choose the Protocols tab. Select TCP/IP Protocol and click Properties. (See Figure 3.12) Figure 3.12: TCP / IP Select the Obtain an IP address from a DHCP server radio button and click OK.
  • Page 17: Factory Default Settings

    Billion 800VGT Router Factory Default Settings Before configuring your router, you need to know the following default settings. Web Interface (Username and Password) Username: admin Password: admin The default username and password are “admin” and “admin” respectively. If you ever forget the username/password to login to the router, you may press the RESET button for more than 6 seconds to restore the factory default settings.
  • Page 18: Information From Your Isp

    Billion 800VGT Router Information from your ISP Telkom ADSL connections use PPPoE, and automatically assign a WAN IP address to your router. The following information is provided should you wish to connect to an alternative ISP. . Gather the information as illustrated in the following table and keep it for reference. VPI/VCI, VC / LLC-based multiplexing, Username, Password, Service Name, and Domain Name System (DNS) IP address (this is automatically set by the PPPoE...
  • Page 19: Configuring With Your Web Browser

    Billion 800VGT Router Configuring with your Web Browser Open your web browser, enter the IP address of your router, which by default is 10.0.0.2, and click “Go”, a user name and password window prompt will appear. The default username and password are “admin”...
  • Page 20: Chapter 4: Configuration

    Billion 800VGT Router Chapter 4: Configuration On the configuration homepage, the left navigation pane, where bookmarks are provided, links you directly to the various setup pages, including: Status ARP Table Wireless Association Routing Table DHCP Table PPTP Status IPSec Status L2TP Status Email Status VoIP Status...
  • Page 21: Status

    Billion 800VGT Router Status ARP Table This section displays the router’s ARP (Address Resolution Protocol) Table, which shows the mapping of Internet (IP) addresses to Ethernet (MAC) addresses. This is useful as a quick way of determining the MAC address of the network interface of your PCs when you wish to use with the router’s Firewall – MAC Address Filter function.
  • Page 22: Dhcp Table

    Billion 800VGT Router RIP Routing Table Destination: The IP address of the destination network. Netmask: The destination IP networks’ Netmask . Gateway: The IP address of the gateway that this route will use. Cost: The number of hops counted as the cost of the route. DHCP Table Leased: The DHCP assigned IP addresses information.
  • Page 23: Pptp Status

    Billion 800VGT Router PPTP Status This shows details of your configured PPTP VPN Connections. Name: The name you assigned to the particular PPTP connection in your VPN configuration. Type: The type of connection (dial-in/dial-out). Enable: Whether the connection is currently enabled. Active: Whether the connection is currently active.
  • Page 24: L2Tp Status

    Billion 800VGT Router L2TP Status This shows details of your configured L2TP VPN Connections. Name: The name you assigned to the particular L2TP connection in your VPN configuration. Type: The type of connection (dial-in/dial-out). Enable: Whether the connection is currently enabled. Active: Whether the connection is currently active.
  • Page 25: Event Log

    Billion 800VGT Router Event Log This page displays the router’s Event Log entries. Major events are logged to this window, such as when the router’s ADSL connection is disconnected, as well as Firewall events when you have enabled Intrusion or Blocking Logging in the Configuration – Firewall section of the interface. Please see the Firewall section of this manual for more details on how to enable Firewall logging.
  • Page 26: Diagnostic

    Billion 800VGT Router Diagnostic It tests the connection to computer(s) which is connected to LAN ports and also the WAN Internet connection. If PING www.google.com shows FAIL and the rest show PASS, you ought to check that your Computers’ DNS settings are correctly set. UPnP Portmap The section lists all port-mappings established using UPnP (Universal Plug and Play).
  • Page 27: Quick Start

    Billion 800VGT Router Quick Start While it is recommended that you use the installation utility that was supplied with your router, It is also possible you use the built-in Quick Start function in order to configure your router. For detailed instructions on configuring your WAN settings, please see the WAN section of this manual. Usually, the only details you will need for the Quick Start wizard to get you online are your login (often in the form of username@ispname), your password and the encapsulation type.
  • Page 28 Billion 800VGT Router Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options: Select the desired option from the list and click Apply to return to the Quick Start interface to continue configuring your ISP connection.
  • Page 29: Configuration

    Billion 800VGT Router Configuration When you click this item, you will be able to following sub-items to configure the ADSL router. - LAN, Wan, System, Firewall, VPN, VoIP, QoS, Virtual Server, Time Schedule and Advanced These functions are described below in the following sections. LAN - Local Area Network Here are the items within the LAN section: Bridge Interface...
  • Page 30: Ethernet

    Billion 800VGT Router Ethernet Primary IP Address IP Address: The default IP on this router. SubNetmask: The default subnet mask on this router. RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function. IP Alias This function supports to create multiple virtual IP interfaces on this router. this helps if you wish to connect two or more local networks using different IP ranges to internet via the router.
  • Page 31: Ethernet Client Filter

    Billion 800VGT Router Ethernet Client Filter The Ethernet Client Filter supports up to 16 Ethernet network machines and helps you to manage your network control, accepting traffic from specific authorized machines or restricting unwanted machine(s) from access your LAN. There are no pre-define Ethernet MAC address filter rules; you can add the filter rules that meet your requirements.
  • Page 32: Wireless

    Billion 800VGT Router Wireless Parameters WLAN Service: Default setting is Enable. If you do not have any wireless devises (802.11g or 802.11b) on your network, select Disable. Mode: The default setting is 802.11b+g (Mixed mode). If you do not know what type of wireless devises you have, or have both 11g and 11b devices on your network, then keep the default setting (mixed mode).
  • Page 33 Billion 800VGT Router TX PowerLevel: This function enhances the wireless transmitting signal strength. Users may adjust this power level from minimum 0 up to maximum 255. Note: Maximum power Level is not necessarily the best choice in all cases. choose the most suitable level for your network and environment.
  • Page 34: Wireless Security

    Billion 800VGT Router Wireless Security You can disable or enable WPA or WEP for protecting your wireless network. The default mode of wireless security is Enabled. And the default security mode is WPA WPA-PSK (TKIP) / WPA-PSK (AES) Pre-Shared Key WPA Algorithms: There are two types of WPA-PSK security : WPA1 and WPA2.
  • Page 35 Billion 800VGT Router WEP Encryption: To prevent unauthorized wireless stations from accessing data transmitted over the network, the router offers highly secure data encryption, known as WEP. If you require high security for transmissions, there are two alternatives to select from: WEP 64 and WEP 128. WEP 128 will offer increased security over WEP 64.
  • Page 36: Wireless Client / Mac Address Filter

    Billion 800VGT Router Wireless Client / MAC Address Filter The MAC Address supports up to 16 wireless network machines and helps you to manage your network control to accept traffic from specific authorized machines or to restrict unwanted machine(s) from accessing your LAN.
  • Page 37: Port Setting

    Billion 800VGT Router Port Setting This section allows you to configure the settings for the router’s Ethernet ports to solve some of the compatibility problems that may be encountered while connecting to the Internet, as well as allowing users to tweak the performance of their network. Port # Connection Type: this is where you can customize the connection type of each of the routers Ethernet ports.
  • Page 38: Dhcp Server

    Billion 800VGT Router DHCP Server You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router’s DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP addresses to computers on your network if they are configured to obtain IP addresses automatically. To disable the router’s DHCP Server, check Disabled and click Next, then click Apply.
  • Page 39: Wan - Wide Area Network

    Billion 800VGT Router WAN - Wide Area Network WAN refers to your Wide Area Network connection, i.e. your router’s connection to your ISP and the Internet. Here are the items within the WAN section: ISP, DNS ADSL. The factory default is PPPoE. Telkom uses this access protocol. If you wish to change any of these parameters, click Edit.
  • Page 40 Billion 800VGT Router RFC 1483 Routed Connections Description: User-definable name for the connection. VPI and VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account, sharing a single IP address.
  • Page 41 Billion 800VGT Router RFC 1483 Bridged Connections Description: User-definable name for the connection. VPI and VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. Encapsulation method: Select the encapsulation format, this is provided by your ISP. Acceptable Frame Type: Specify what kind of traffic can through this connection, all traffic or only VLAN tagged traffic.
  • Page 42 Billion 800VGT Router PPPoA Routed Connections Description: User-definable name for the connection. VPI/VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account, sharing a single IP address.
  • Page 43 Billion 800VGT Router RIP: RIP v1, RIP v2, and RIP v2 Multicast. Check to enable RIP function. MTU: Maximum Transmission Unit. The size of the largest datagram (excluding media-specific headers) that IP will attempt to send through the interface. Advanced Options (PPPoA) LLC Header: Selects encapsulation mode, select true for using LLC or false for using VC-Mux.
  • Page 44 Billion 800VGT Router IPoA Routed Connections Description: User-definable name for the connection. VPI/VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account, sharing a single IP address.
  • Page 45 Billion 800VGT Router PPPoE Connections Description: User-definable name for this connection. VPI/VCI: Enter the information provided by your ISP. The Telkom standard settings are 8 and 35. ATM Class: The Quality of Service for ATM layer. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single ISP account, sharing a single IP address.
  • Page 46 Billion 800VGT Router Idle Timeout: Auto-disconnect the router when there is no activity on the line for a predetermined period of time. Detail: You can define destination port and packet type (TCP/UDP) information that will not result in the router checking the timer. It allows you to set which outgoing traffic will not trigger and reset the idle timer.
  • Page 47 Billion 800VGT Router PPPoE (multisession) PPPoE multisession allows the user to create multiple PPPoE sessions using a single PVC, using the exact same principles as normal PPPoE as described above. PPPoE with Pass-through Connections PPPoE with pass-through adopts the following method: PPPoE Routed mode + 1483 Bridge Mode. With pure PPPoE connection, the router can get one WAN address for the router.
  • Page 48 Billion 800VGT Router Authentication Protocol: Default is Chap(Auto). Your ISP will advise you whether to use Chap or Pap. Connection: Always on: If you want the router to establish a PPPoE session when starting up and to automatically re-establish the PPPoE session when disconnected by the ISP. Connect on Demand: If you want to establish a PPPoE session only when there is a packet requesting access to the Internet (i.e.
  • Page 49: Dns

    Billion 800VGT Router A Domain Name System (DNS) contains a mapping table for mapping between Domain Names and IP addresses. On the Internet, every host has a unique and user-friendly name (domain name) such as www.helloworld.com as well as an IP address. An IP address is a 32-bit number in the form of xxx.xxx.xxx.xxx, for example 10.0.0.2.
  • Page 50: Adsl

    Billion 800VGT Router ADSL Connect Mode: This mode will automatically detect your ADSL line mode, ADSL2+, ADSL2, G.dmt, G.lite, T1.413, AnnexM2 or AnnexM2+. But in some areas, multimode cannot detect the ADSL line mode very well. If it is the case, please adjust the ADSL line code to G.dmt first. If it still fails, ,please check with your ISP for line connect information.
  • Page 51 Billion 800VGT Router Advanced Options ADSL Parameters help to interpret your ADSL line statistics. SNR Margin: This is known as Signal to Noise Ration Margin. It is the ratio between DSL strength and signal noise. This margin is measured in decibels (dB). Higher the dB figures better the DSL strength is relative to the noise, and better chance to get faster speed.
  • Page 52: System

    Billion 800VGT Router System Here are the items within the System section: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Restart User Management. Time Zone This router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP server outside your network.
  • Page 53: Remote Access

    Billion 800VGT Router Remote Access To temporarily permit remote administration of the router (i.e. from outside your LAN), select a time period the router will permit remote access for and click Enable. You may change other configuration options for the web administration interface using Device Management options in the Advanced section of the GUI. If you wish to permanently enable remote access, choose a time period of 0 minute.
  • Page 54: Backup / Restore

    Billion 800VGT Router Backup / Restore These functions allow you to save and backup your router’s current settings to a file on your Computer, or to restore a previously saved backup. This is useful if you wish to experiment with different settings, knowing that you have a backup handy in the case of any mistakes.
  • Page 55: User Management

    Billion 800VGT Router User Management In order to prevent unauthorized access to your router’s configuration interface, it requires all users to login with a password. You can set up multiple user accounts, each with their own password. You are able to Edit existing users and Create new users who are able to access the device’s configuration interface.
  • Page 56: Firewall And Access Control

    Billion 800VGT Router Firewall and Access Control Your router includes a full SPI (Stateful Packet Inspection) firewall for controlling Internet access from your LAN, as well as helping to prevent attacks from hackers. In addition to this, when using NAT, the router acts as a “natural”...
  • Page 57 Billion 800VGT Router General Settings You can choose not to enable the Firewall and still have access to URL Filter and IM/P2P Blocking, or you can enable the Firewall using preset filter rules and modify the port filter rules as required. The Packet Filter is used to filter packets based-on Applications (Port) or IP addresses.
  • Page 58: Packet Filter

    Billion 800VGT Router Packet Filter This function is only available when the firewall function is enabled and one of these four security levels is chosen (All blocked, High, Medium and Low). The preset port filter rules in the Packet Filter must be modified according to the level of Firewall which is selected.
  • Page 59 Billion 800VGT Router Example: Predefined Port Filters Rules The predefined port filter rules for High, Medium and Low security levels are listed. See Table 1. Firewall – For Blocked/User-defined, you must define and create the port filter rules yourself. No Note: predefined rules are configured for these modes.
  • Page 60 Billion 800VGT Router Packet Filter – Add TCP/UDP Filter Rule Name: Specify a User-defined description identifying this entry or click to select existing predefined rules. The maximum name length is 32 characters. Time Schedule: This is the user-defined time period applicable to the rule. You may specify a time schedule for your prioritization policy.
  • Page 61 Billion 800VGT Router Packet Filter – Add Raw IP Filter Rule Name: Specifies a user-defined description identifying this entry or click to select existing predefined rules. Time Schedule: this is the user-defined time period applicable to the rule. You may specify a time schedule for your prioritization policy.
  • Page 62 Billion 800VGT Router Configuring Packet Filter: Click Port Filters. You will then be presented with the predefined port filter rules screen (in this case, for the low security level) shown below: Note: You may edit the predefined rule instead of deleting it. This is an example showing to how you add a filter on your own.
  • Page 63 Billion 800VGT Router The new port filter rule for HTTP is shown below: Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server: Note: For how to configure the HTTP in Virtual Server mode , go to Add Virtual Server in the Virtual Server section for more details.
  • Page 64: Intrusion Detection

    Billion 800VGT Router Intrusion Detection The router’s Intrusion Detection System (IDS) is used to detect hacker attacks and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or other connections that the router determines to be suspicious.
  • Page 65 Billion 800VGT Router Table 2: Hacker attack types recognized by the IDS Type of Block Intrusion Name Detect Parameter Blacklist Drop Packet Show Log Duration Ascend Kill Ascend Kill data Src IP WinNuke Port 135, 137~139, Src IP Flag: URG ICMP type 8 Victim Smurf...
  • Page 66: Url Filter

    Billion 800VGT Router URL Filter URL (Uniform Resource Locator – e.g. an address in the form of http://www.abcde.com http://www.example.com) filter rules allow you to prevent users on your network from accessing particular websites by their URL. There are no pre-defined URL filter rules; you can add filter rules to meet your requirements.
  • Page 67 Billion 800VGT Router If the packet does not match either of the above two items, it is sent to the remote web server. Please note that the completed URL, “www” + domain name should be specified. For example block traffic www.google.com.au, enter “www.google”...
  • Page 68: Im / P2P Blocking

    Billion 800VGT Router IM / P2P Blocking IM, short for Instant Messaging, is required to use client program software that allows users to communicate, exchanging text message, with other IM users, in real time, over the Internet. A P2P application, known as Peer-to-Peer, is a group of computer users who share files to specific groups of people across the Internet.
  • Page 69: Firewall Log

    Billion 800VGT Router Firewall Log The Firewall Log displays log information of any unexpected action with your firewall settings. Select the Enable box to activate the logging. Log information can be seen in the Status – Event Log screen after enabling. Chapter 4: Configuration...
  • Page 70: Vpn - Virtual Private Networks

    Billion 800VGT Router VPN - Virtual Private Networks Virtual Private Networks are a way to establish secured communication tunnels to an organization’s network via the Internet. Your router supports three main types of VPN (Virtual Private Network), PPTP, IPSec L2TP. PPTP (Point-to-Point Tunnelling Protocol) There are two types of PPTP VPN’s supported;...
  • Page 71 Billion 800VGT Router PPTP Connection - Remote Access Connection Name: A user-defined name for the connection (e.g. “connection to office”). Type: Select Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g.
  • Page 72 Billion 800VGT Router Example: Configuring a Remote Access PPTP VPN Dial-out Connection A company’s office establishes a PPTP VPN connection with a file server located at a separate location. The router is installed in the office, and connected to a couple of PCs and Servers. Dial-out Chapter 4: Configuration...
  • Page 73 Billion 800VGT Router Configuring the PPTP VPN in the Office You can either input the IP address (69.1.121.33 in this case) or hostname to reach the server. Item Function Description Connection Name VPN_PPTP Given name of PPTP connection Dial out Select Dial out Server IP Address 69.121.1.33...
  • Page 74 Billion 800VGT Router PPTP Connection - LAN to LAN Connection Name: User-defined description of the connection. Type: Select Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g. your office server) or select Dial In operates as a VPN server. When configuring your router as a Client, enter the remote Server IP Address (or Hostname) you wish to connection to.
  • Page 75 Billion 800VGT Router Example: Configuring a PPTP LAN-to-LAN VPN Connection The branch office establishes a PPTP VPN tunnel with head office to connect two private networks over the Internet. The routers are installed in the head office and branch office accordingly. Both office LAN networks MUST in different subnet when using the LAN to LAN application.
  • Page 76 Billion 800VGT Router Configuring PPTP VPN in the Head Office The IP address 192.168.1.200 will be assigned to the router located in the branch office. Please make sure this IP is not used in the head office LAN. Item Function Description Connection Name HeadOffice...
  • Page 77 Billion 800VGT Router Configuring PPTP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you registered a DDNS account (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the router.
  • Page 78: Ipsec (Ip Security Protocol)

    Billion 800VGT Router IPSec (IP Security Protocol) Click Create to create a new IPSec VPN connection account. After you have created the IPSec connection, account information will be displayed. (See example above). Enable / Disable: This function activates or deactivates the IPSec connection. If you wish to disable the tunnel, select Disable and click Apply to deactivate the connection.
  • Page 79 Billion 800VGT Router IPSec VPN Connection Connection Name: The user-defined name for the connection (e.g. “connection to office”). Local Network: Set the IP address, subnet or address range of the local network. Single Address: The IP address of the local host. Subnet: The subnet of the local network.
  • Page 80 Billion 800VGT Router 3DES: Stands for Triple Data Encryption Standard, it uses 168 (56*3) bits as an encryption method. AES: Stands for Advanced Encryption Standards, you can use 128, 192 or 256 bits as encryption method. Perfect Forward Secrecy: Choose whether to enable PFS using Diffie-Hellman public-key cryptography to change encryption keys during the second phase of VPN negotiation.
  • Page 81 Billion 800VGT Router IKE (Internet key Exchange) Mode: Select IKE mode to Main mode or Aggressive mode. This IKE provides secured key generation and key management. IKE Proposal: Hash Function: This is a Message Digest algorithm which coverts any length of a message into a unique set of bits.
  • Page 82 Billion 800VGT Router Ping to the IP Interval (sec) Ping to the IP Action 0.0.0.0 0.0.0.0 2000 xxx.xxx.xxx.xxx (Any valid IP Address) xxx.xxx.xxx.xxx(Any valid IP Address) 2000 Yes, activate it in every 2000 second. Disconnection Time after no traffic: This is the “NO Response” timer. When no traffic is received for more than the Disconnection time setting, the router will automatically halt the tunnel connection and re-establish it base after the Reconnection Time has elapsed.
  • Page 83 Billion 800VGT Router Configuring IPSec VPN in the Head Office Item Function Description Connection Name IPSec_HeadOffice Given name of the IPSec connection Subnet Select the Subnet button IP Address 192.168.1.0 Head office network Netmask 255.255.255.0 Secure Gateway Address IP address of the head office router (WAN 69.121.1.30 (or Hostname) side)
  • Page 84 Billion 800VGT Router Configuring IPSec VPN in the Branch Office Item Function Description IPSec_Branch Connection Name Given name of the IPSec connection Office Subnet Select the Subnet button IP Address 192.168.0.0 Branch office network Netmask 255.255.255.0 Secure Gateway Address IP address of the head office router (in WAN 69.121.1.3 (or Hostname) side)
  • Page 85 Billion 800VGT Router Example: Configuring a IPSec Host-to-LAN VPN Connection Chapter 4: Configuration...
  • Page 86 Billion 800VGT Router Configuring IPSec VPN in the Office Item Function Description Connection Name IPSec Given name of the IPSec connection Subnet Select the Subnet button IP Address 192.168.1.0 Head office network Netmask 255.255.255.0 Secure Gateway Address IP address of the head office router (in WAN 69.121.1.30 (or Hostname) side)
  • Page 87: L2Tp (Layer Two Tunnelling Protocol)

    Billion 800VGT Router L2TP (Layer Two Tunnelling Protocol) Two types of L2TP VPN are supported Remote Access and LAN-to-LAN (please refer below for more information.). Click Create to create a new VPN connection account. After you have created L2TP connection, the account status will be displayed. (As shown above). Enable / Disable: This function activates or deactivates the L2TP connection.
  • Page 88 Billion 800VGT Router L2TP Connection - Remote Access L2TP VPN Connection Connection Name: A User-defined name for the connection (e.g. “connection to office”). Type: Select Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g.
  • Page 89 Billion 800VGT Router Active as default route: Normally used when the mode is set to Dial-out. If this is selected, all packets, including internet packets, will route through the VPN tunnel; If this function is enabled, the performance of your Internet connection may be degraded Click Apply after changing the settings. L2TP over IPSec (L2TP/IPSec) VPN Connection IPSec: Enable to enhance your L2TP VPN security.
  • Page 90 Billion 800VGT Router Example: Configuring a L2TP VPN - Remote Access Dial-in Connection A remote worker establishes a L2TP VPN connection with the head office using Microsoft's VPN Adapter (included with Windows Vista/XP/2000/ME, etc.). The router is installed in the head office and is connected to a couple of PCs and Servers.
  • Page 91 Billion 800VGT Router Configuring L2TP VPN in the Office The LAN IP address 192.168.1.200 will be assigned to the remote computer (client). Please make sure this IP is not used on the Office LAN. Item Function Description Connection Name VPN_L2TP Given name of the L2TP connection Dial in select Dial in...
  • Page 92 Billion 800VGT Router Example: Configuring a Remote Access L2TP VPN Dial-out Connection A company’s office establishes a L2TP VPN connection with a file server located at a separate location. The router is installed in the office and is connected to a couple of computers and Servers. Dial-out Configuring the L2TP VPN in the Office Chapter 4: Configuration...
  • Page 93 Billion 800VGT Router Item Function Description Connection Name VPN_L2TP L2TP iven name of the connection Dial out select Dial out Server IP Address (or 69.121.1.33 The Dialed server’s IP address. Hostname) Username username The username & password that is required to connect to the VPN server.
  • Page 94 Billion 800VGT Router Example: Configuring your Router to Dial-in to the Server Currently, Microsoft Windows operation system does not support L2TP incoming service. Additional software may be required to set up your L2TP incoming service. L2TP Connection - LAN to LAN L2TP VPN Connection Connection Name: A User-define description of the connection.
  • Page 95 Billion 800VGT Router PPP Authentication Type: Default is Auto. Use this setting if you want the router to determine which authentication type to use. You can manually specify CHAP (Challenge Handshake Authentication Protocol) or PAP (Password Authentication Protocol) if you know which type the server is using (when acting as a client) If the router is acting as a server enter the authentication type you want clients connecting to you to use.
  • Page 96 Billion 800VGT Router Example: Configuring L2TP LAN-to-LAN VPN Connection The branch office establishes a L2TP VPN tunnel with head office, connecting the two private networks over the Internet. The routers are installed in both the head office and branch office. Both LAN networks MUST be on different subnets when using the LAN to LAN application.
  • Page 97 Billion 800VGT Router Configuring L2TP VPN in the Head Office The IP address 192.168.1.200 will be assigned to the router located in the branch office. Please make sure this IP is not used in the head office LAN. Item Function Description Connection Name HeadOffice...
  • Page 98 Billion 800VGT Router Configuring L2TP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you registered a DDNS account, (please refer to the DDNS section of this manual), you can also use the DDNS domain name instead of the IP address to reach the router.
  • Page 99: Oip - Voice Over Internet Protocol

    Billion 800VGT Router VoIP - Voice over Internet Protocol The VoIP functionality enables telephone calls to be placed through your existing Internet connection instead of going through the PSTN (Public Switched Telephone Network). It is not only cost-effective, especially for long distance telephone calls, but also allows toll-quality voice calls to be placed over the Internet.
  • Page 100 Billion 800VGT Router Setting for Phone Port 1 SIP Service Provider: This section allows you to select your service provider. When the selection is done, the parameters below are automatically displayed. Select Profile: This allows you to select a desired VoIP provider whom is not already defined in the SIP Service Provider list.
  • Page 101: General Settings

    Billion 800VGT Router Profile Name: A user-defined name to identify the profile. Registrar Address(or Hostname): Indicate the VoIP SIP registrar’s IP address. Registrar Port: Specify the port on which the VoIP SIP registrar will listen for register requests from VoIP devices.
  • Page 102 Billion 800VGT Router SIP Device Parameters SIP: Select whether you wish to use SIP as VoIP call signaling protocol. The default setting is Disable. Silence Suppression (VAD): Voice Activation Detection (VAD) prevents the transmission of silence since it will unnecessarily consume your bandwidth. This function is also known as Silence Suppression, and it is a software application that ensures the bandwidth is used only when voice activity is activated.
  • Page 103 Billion 800VGT Router Advanced – Parameters VoIP through IP Interface: IP Interface decides where to send/receive the VoIP traffic. Options include: ipwan and iplan. An easy way to select the interface option is to check the location of the SIP server. it is located somewhere on the Internet, then select ipwan.
  • Page 104: Phone Port

    Billion 800VGT Router Phone Port This section displays status and allows you to edit the account information of your Phones. Click Edit to update your phone information. Login Account Configuration Phone Number: This parameter is the registration ID of the user as recorded in the VoIP SIP registrar. Authentication Username: Same as Phone Number.
  • Page 105 Billion 800VGT Router Codec Preference A codec is a Coder-Decoder and is used for data signal conversion. The priority position sets the priority of each codec; Priority 1 is the top priority. G.729: This type of codec encodes and decodes the voice information into a single packet which reduces the bandwidth consumption.
  • Page 106: Pstn Dial Plan

    Billion 800VGT Router PSTN Dial Plan This section enables you to configure “VoIP with PSTN switching” on your system. You can define a range of dial plans to select which calls are routed over VoIP and which are routed over the PSTN line. Prefix numbers are the essential key to distinguish between VoIP and Regular (PSTN) phone calls.
  • Page 107 Billion 800VGT Router PSTN Dial Plan Examples: 1) Dial with Prefix If you dial 01223 707070, the number 01223707070 will be dialled out via the FXO port, to make a regular (PSTN) phone call. 2) Dial without Prefix If you dial 9102, the number 102 will be dialled out via the FXO port, to make a regular (PSTN) phone call. 3) Dial at Timeout If you only dial 01223 7070 and no more numbers, after the timeout occurs, 012237070 will be dialled to make a regular (PSTN) call via the FXO port.
  • Page 108 Billion 800VGT Router 4) Dial at Timeout no Prefix If you dial 97070 and no more numbers, after the timeout activates, 7070 will be dialled (without the prefix), to make a regular (PSTN) call via the FXO port. Even though 7070 (only 4 digits) does not match the number of digits (6) defined in the Number of Digits field, 7070 is still a valid phone number since it has not exceed this Number.
  • Page 109: Voip Dial Plan

    Billion 800VGT Router VoIP Dial Plan This section helps you to make a VoIP call as easily as a regular call. You no longer need to memorize a long dial string of numbers in order to make a VoIP call. Parameters A list of special dial features comes handy when you have a miss call or need to transfer a call to a third party.
  • Page 110 Billion 800VGT Router Dial Plan Rules List Click Add to create and define VoIP dial-plan rule(s). Prefix Processing: Prepend xxx unconditionally: The entered number, xxx, is appended unconditionally to the front of the dialling number when making a call. This prefix can include any number and/or character such as +, *, #. Note: For special services using +, *or #, you may need to check with your VoIP or Local Telephone Service Provider for information pertaining to correct usage.
  • Page 111 Billion 800VGT Router <@ PSTN>: This refers to making calls via the PSTN line. <@ENUM>: This referes to making a VoIP SIP call, via an E.164 number (“ENUM”), to an ENUM callee. Electronic Number (ENUM) is a system that uses DNS (Domain Network System) based technology to map between a traditional phone number (PSTN) and an Internet address/ SIP URL.
  • Page 112 Billion 800VGT Router Localcheap.com is the defaul t VoIP provider I set on phone port 1. When I dial any number starting with 1 or 2 or 3 , , 03 is always prepended in front of these number. If 23295 is dialled, 03-2-32935 is the actual phone number dialled using localcheap.com as a provider.
  • Page 113: Ring & Tone

    Billion 800VGT Router Mobilecheap.com is the default VoIP provider I set on phone port 2. When I call out 123-39-45678 for a mobile call, 123 is replaced with 09 and 09-39-45678 is the actual phone number dialled using Mobilecheap.com as a provider. The Intelligent Call Gateway not only saves time when changing VoIP settings to different providers so as to ensure a call gets routed using a specific gateway automatically, but it allows you to take advantage...
  • Page 114: Special Dial Codes

    Billion 800VGT Router Special Dial Codes The following table lists the special dial codes that are built into the router. Note that Telkom’s VoIP service may provide the same type of features, and therefore these features might be disabled on the 800VGT platform.
  • Page 115: Qos - Quality Of Service

    Billion 800VGT Router QoS - Quality of Service The QoS function helps you to control your network traffic for each LAN (Ethernet and/or Wireless) application that accesses the WAN (Internet). It allows you to control the quality and speed of throughput for each application, when the system is running with a fully loaded upstream channel.
  • Page 116 Billion 800VGT Router Source IP Address Range: The source IP address or range of packets to be monitored. Destination IP address Range: The destination IP address or range of packets to be monitored. DSCP Marking: Differentiated Services Code Point (DSCP), it is the first 6 bits in the ToS byte. DSCP Marking allows users to assign specific application traffic to be executed in priority by the backbone routers, based on the DSCP value.
  • Page 117: Outbound Ip Throttling (Lan To Wan)

    Billion 800VGT Router Outbound IP Throttling (LAN to WAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the specified application to the specified value (Set in multiples of 32kbps.) You can click Clear to delete the existing Application.
  • Page 118: Inbound Ip Throttling (Wan To Lan)

    Billion 800VGT Router Inbound IP Throttling (WAN to LAN) IP Throttling allows you to limit the speed of IP traffic. The value entered will limit the speed of the specified application to the specified value (Set in multiples of 32kbps.) You can click Clear to delete the existing Application.
  • Page 119 Billion 800VGT Router Example: QoS for your Network Connection Diagram VoIP Normal PCs Restricted PC Information and Settings Upstream: 928 kbps Downstream: 8 Mbps VoIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Restricted User: 192.168.1.100 Throughput VoIP/VPN HIGH Others kbps NORMAL Restricted VoIP/VPN...
  • Page 120 Billion 800VGT Router Mission-critical applications Often, a VPN connection is a mission-critical application for exchanging data between Head and Branch offices. This mission-critical application must be connected smoothly, without any dropping. To ensure this, you should set the priority to the high level to preventing any other applications from saturating the bandwidth. Voice applications Voice applications are latency-sensitive.
  • Page 121: Virtual Server (Known As Port Forwarding)

    Billion 800VGT Router Sometime your customers or friends may upload their files to your FTP server and that will saturate your downstream bandwidth. The settings below will help you to limit bandwidth for such a application that needs restriction. Virtual Server (known as Port Forwarding) In TCP/IP and UDP networks, a port is a 16-bit number used to identify which application program incoming connections should be delivered to.
  • Page 122: Add Virtual Server

    Billion 800VGT Router Add Virtual Server Because NAT can act as a “natural” Internet firewall, your router protects your network from being accessed by outside users when NAT is enabled - all incoming connection attempts will point to your router unless you specifically created Virtual Server entries to forward those ports to a computer on your network.
  • Page 123 Billion 800VGT Router Example: If you would like to remotely access your routers’ Web/HTTP interface all the time, you would need to enable port number 80 (Web/HTTP) and map it to the Router’s LAN IP Address. All incoming HTTP requests on the WAN network will then be forwarded to the router’s IP address of 192.168.1.254. Since port number 80 is already a predefined rule, click Helper in the Application section.
  • Page 124: Edit Dmz Host

    Billion 800VGT Router Edit DMZ Host A DMZ Host is a computer on the LAN that is completely exposed to the Internet. When you have configured a particular internal IP address as the DMZ Host, all incoming packets will be checked by the routers firewall and NAT algorithms, and if the packet does not use a port number that has been assigned by any Virtual Server entry, it will be passed to the DMZ host Cautious: This local computer, which is exposed to the Internet, may face a variety of security risks.you should...
  • Page 125: Edit One-To-One Nat (Network Address Translation)

    Billion 800VGT Router Edit One-to-One NAT (Network Address Translation) One-to-One NAT maps a specific private/local (LAN) IP address to a particular global/public (WAN) IP address. If you have multiple public/WAN IP addresses provided by your ISP, you are will be able to use the One-to-One NAT function to utilize these IP addresses.
  • Page 126 Billion 800VGT Router Time Schedule: The user-defined time period during which your virtual server is enabled. You may specify a time schedule or you can select Always on for this Virtual Server Entry. For setup and details, refer to the Time Schedule section Application: This is a user-defined description to identify this entry.
  • Page 127 Billion 800VGT Router The Internet Assigned Numbers Authority (IANA) is the central coordinator for the assignment of unique parameter values for Internet protocols. Port numbers range from 0 to 65535, but only ports numbers 0 to 1023 are reserved for privileged services and are designated as “well-known ports” (Please refer to Table 5).
  • Page 128: Time Schedule

    Billion 800VGT Router Time Schedule The Time Schedule function supports up to 16 time slots, helping you to manage your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allowing the usage of the Internet by users or applications. This Time Schedule correlates closely to real time.
  • Page 129: Configuration Of Time Schedule

    Billion 800VGT Router Configuration of Time Schedule Edit a Time Slot 1. Choose any Time Slot (ID 1 to ID 16) to edit, click Edit. Click Edit Note: The days that you have selected will show as capital letters. Lower case letters show the day(s) that are not selected, and no rule will apply on these days.
  • Page 130: Advanced

    Billion 800VGT Router Advanced The Configuration options of the Advanced section are for users who wish to take advantage of the more advanced features of the router. Users who do not understand the features should not attempt to reconfigure their router, unless advised to do so by support staff. Here are the items within the Advanced section: Static Route, Dynamic DNS, Check Email, Device Management, IGMP...
  • Page 131: Dynamic Dns

    Billion 800VGT Router Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your ADSL connection, so that anyone wishing to connect to you may use your domain name, rather than having to use your dynamic IP address, which changes from time to time.
  • Page 132: Check Email

    Billion 800VGT Router Check Email This function allows you to have the router check your POP3 mailbox for new Email messages. You may view the status of this function using the Status – Email Checking section of the web interface, which also provides details on the number of new messages waiting.
  • Page 133: Device Management

    Billion 800VGT Router Device Management The Device Management configuration settings allow you to control your router’s security options and device monitoring features. Embedded Web Server ( 2 Management IP Accounts) HTTP Port: This is the port number of the router’s embedded web server (for web-based configuration.) The default value is the standard HTTP port, 80.
  • Page 134 Billion 800VGT Router Universal Plug and Play (UPnP) UPnP offers peer-to-peer network connectivity for PCs and other network devices, along with control and data transfer between devices. UPnP offers many advantages for users running NAT routers through UPnP NAT Traversal. On supported systems, it makes tasks such as port forwarding much easier by letting the application control the required settings, thus removing the need for the user to control the advanced configuration of their router.
  • Page 135 Billion 800VGT Router From RFC 1213 (MIB-II): System group Interfaces group Address Translation group IP group ICMP group TCP group UDP group EGP (not applicable) Transmission SNMP group From RFC1650 (EtherLike-MIB): dot3Stats From RFC 1493 (Bridge MIB): dot1dBase group dot1dTp group dot1dStp group (if configured as spanning tree) From RFC 1471 (PPP/LCP MIB): pppLink group...
  • Page 136: Igmp

    Billion 800VGT Router IGMP IGMP, known as Internet Group Management Protocol, is used to management hosts from multicast group. IGMP Forwarding: Accepting multicast packet. Default is Enable. IGMP Snooping: Allowing switched Ethernet to check and make correct forwarding decisions. Default is Disable.
  • Page 137 Billion 800VGT Router Bridge Interface VLAN Port (Always starts with) Ethernet P1 / P2 / P3 / P4 Ethernet1 P2 / P3 / P4 Ethernet2 P3 / P4 Ethernet3 Step 2: Create WAN Interface Go to Configuration wanlink is the factory default WAN interface which is used for data/internet access. If your ISP uses this access protocol, click Edit to input other parameters if needed.
  • Page 138 Billion 800VGT Router Spaces next to VPI and VCI, type 0 and 33 in respectively. Select appropriate ATM Class, Encapsulation Method, Acceptable Frame Type, Filter Type and PVID for Untagged Frames. VPI and VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer.
  • Page 139 Billion 800VGT Router Step 3: Setup VLAN Service Go to Configuration Advanced VLAN Bridge DefaultVlan lists all member ports. It is necessary to group specific member ports for each VLAN. From the example, two VLAN groups are requested: Data and Video. To create another VLAN group for Video, click on Create VLAN.
  • Page 140: Save Configuration To Flash

    Billion 800VGT Router Having mapped the VLAN Bridge with the Bridge Interface created in Step1, you will see the comfortable relationship in these two screenshots. Step 4: IGMP Snooping Enable Select Configuration Advanced IGMP. IGMP Snooping must be enabled in order to allow the video stream forwarding to correctly function. Save Configuration to Flash After changing the router’s configuration settings, you must save all of the configuration parameters to FLASH to avoid them from being lost after turning off or resetting your router.
  • Page 141: Logout

    Billion 800VGT Router Logout To exit the router’s web interface, choose Logout. Please ensure that you have saved the configuration settings before you logout. Be aware that the router is restricted to only one PC accessing the configuration web pages at a time. Once a PC has logged into the web interface, other PCs cannot get access until the current PC has logged out of the web interface.
  • Page 142: Chapter 5: Troubleshooting

    Billion 800VGT Router Chapter 5: Troubleshooting If the router is not functioning properly, first check this chapter for simple troubleshooting before contacting the Help desk . Problems starting up the router Problem Corrective Action None of the LEDs are Check the connection between the power adapter and the router. If the on when you turn on error persists, you may have a hardware problem.
  • Page 143: Contact Telkom Adsl Support

    Billion 800VGT Router If you do not succeed in solving the problem using the diagnostics utility please contact either Telkom’s or Sizwe’s router helpdesk – please see contact details and operating hours below. Note that both Telkom and Sizwe support personnel will request that you run the diagnostic test and relay the results back to them as the first step in the troubleshooting process, so please have this information handy.

Table of Contents