BIPAC-74 GE S ............1 NTRODUCTION TO YOUR ERIES OUTER ..........................1 UPPORT ..........................1 EATURES BIPAC-74 GE S ..............4 ERIES OUTER PPLICATION BIPAC-74 GE S ......... 5 MPORTANT NOTE FOR USING THE ERIES OUTER ......................5 ACKAGE ONTENTS ........................
Page 4
UPnP Portmap ..........................21 ........................22 UICK TART ......................... 24 ONFIGURATION LAN (Local Area Network)......................24 WAN (Wide Area Network) ......................29 System ............................51 Firewall and Access Control ......................58 VPN (V ) ................... 74 IRTUAL RIVATE ETWORKS PPTP............................74 IPSec............................
If you have any questions or problems that you can’t find the answer for in this manual, please visit the Billion Australia website at http://www.billion.com.au/ and check the FAQ (Frequently Asked Questions), support and forum sections.
Page 6
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE A 4-port 10/100Mbps fast Ethernet switch is built in with automatic switching between MDI and MDI-X for 10Base-T and 100Base-TX ports. An Ethernet straight or cross-over cable can be used directly for auto detection. Multi-Protocol to Establish A Connection Supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483 encapsulation over ATM (bridged or routed), PPP over Ethernet (RFC 2516), IPoA...
Page 7
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Virtual Server (“port forwarding”) Users can specify some services to be visible from outside users. The router can detect incoming service requests and forward either a single port or a range of ports to the specific local computer to handle it.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE BIPAC-74x GE Series Router Application Figure 1.1 Application Diagram Thank you for your purchase, and welcome to the world of broadband Internet! Chapter 1: Introduction...
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Chapter 2: Installing the Router Important note for using the BIPAC-74x GE Series Router Do not use the BIPAC-74x GE in high humidity or high temperatures. Do not use the same power source for the BIPAC-74x GE as other equipment.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE The Front LEDs Only the 743-GE unit has a wireless interface and antenna. 741-GE and 741-GE V2 routers do not have an antenna or wireless interface. Meaning Lit when power is ON. Lit when the system is ready.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE The Rear Ports Only the 743-GE unit has a wireless interface and antenna. 741-GE and 741-GE V2 routers do not have an antenna or wireless interface. Port Meaning Connect the supplied RJ-11 (“telephone”) cable to this port when LINE connecting to the ADSL/telephone network.
LAN Link and ADSL line LEDs are lit. If they are not, verify that you are using the proper cables. Ensure that all other devices connected to the same telephone line as your Billion router (e.g. telephones, fax machines, analogue modems) have a line filter connected between them and...
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Chapter 3: Basic Installation and Configuration The router can be configured with your web browser. A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 95/98/NT/2000/XP/Me, etc.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Configuring PCs in Windows For Windows 98 / ME 1. Go to Start / Settings / Control Panel. In the Control Panel, double-click choose Network Configuration tab. 2. Select TCP / IP -> NE2000 Compatible, or the name of any Network Interface Card (NIC) in your PC.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE For Windows NT4.0 1. Go to Start / Settings / Control Panel. In the Control Panel, double-click Network and choose the Protocols tab. 2. Select TCP/IP Protocol and click Properties. (See Figure 3.4) 3.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE For Windows 2000 Go to Start / Settings / Control Panel. In the Control Panel, double-click Network Dial-up Connections. Double-click Local Area (“LAN”) Connection. (See Figure 3.6) Figure 3.6: LAN Area Connection In the LAN Area Connection Status window, click Properties.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE For Windows XP 1. Go to Start / Control Panel (in Classic View). In the Control Panel, double-click Network Connections. 2. Double-click Local Area Connection. (See Figure 3.10) Figure 3.10: LAN Area Connection 3.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Factory Default Settings Before configuring your, you need to know the following default settings. Web Interface: Username: admin Password : admin LAN Device IP Settings: IP Address: 192.168.1.254 Subnet Mask: 255.255.255.0 ISP setting in WAN site : PPPoE...
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) what kind of service is provided such as PPPoE, PPPoA, RFC1483, IPoA, or PPTP-to-PPPoA Relaying.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Configuring with your Web Browser Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click “Go”, a user name and password window prompt will appear. The default username and password are “admin”...
Logout Language (provides user interface in English language). Please see the relevant sections of this manual for detailed instructions on how to configure your Billion router. Status ARP Table This section displays the router’s ARP (Address Resolution Protocol) Table, which shows the mapping of Internet (IP) addresses to Ethernet (MAC) addresses.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Static: Static status of the ARP table entry: “no” for dynamically-generated ARP table entries “yes” for static ARP table entries added by the user PPTP Status This shows details of your configured PPTP VPN Connections. Name: The name you assigned to the particular PPTP connection in your VPN configuration.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE IPSec Status This shows details of your configured IPSec VPN Connections. Name: The name you assigned to the particular VPN entry. Active: Whether the VPN Connection is currently Active. Connection State: Whether the VPN is Connected or Disconnected.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Email Status Details and status for the Email Account you have configured the router to check. Please see the Advanced section of this manual for details on this function. Event Log This page displays the router’s Event Log entries.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Error Logging Any errors encountered by the router (e.g. invalid names given to entries) are logged to this window. UPnP Portmap The section lists all port-mapping established using UPnP (Universal Plug and Play). Please see the Advanced section of this manual for more details on UPnP and the router’s UPnP configuration options.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Quick Start Quick Start offers a fast and easy way to configure the connection to your ISP. For detailed instructions on configuring your WAN settings, please see the WAN section of this manual.
Page 27
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Click Start to begin scanning for encapsulation types offered by your ISP. If the scan is successful you will then be presented with a list of supported options: Select the desired option from the list and click Apply to return to the Quick Start interface to continue configuring your ISP connection.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Configuration When you click this item, you get following sub-items to configure the ADSL router. LAN, WAN, System, Firewall, VPN, Virtual Server and Advanced These functions are described below in the following sections. LAN (Local Area Network) There are four items within the LAN section: Ethernet, Wireless, Port Setting and DHCP Server.
Page 29
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Wireless (743 GE only) ESSID: This is the unique ID given to the Access Point (AP). By default, the router comes preconfigured with the ESSID “wlan-ap”. To connect the device, your wireless clients must have the same ESSID as the device.
Page 30
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE There are four keys for your selection. The input format is either ASCII or HEX style. WEP64 with ASCII keys requires 5 ASCII characters, and WEP128 with ASCII keys requires 13 ASCII characters.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Port Setting This section allows you to configure the settings for the router’s Ethernet ports to solve some of the compatibility problems that may be encountered while connecting to the Internet, as well allowing users to tweak the performance of their network.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE DHCP Server You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router’s DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP addresses to PCs on your network if they are configured to obtain IP addresses automatically.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE WAN (Wide Area Network) WAN refers to your Wide Area Network connection, i.e. your router’s connection to your ISP and the Internet. There are two items within the WAN section: ISP and DNS. The factory default is PPPoE.
Page 34
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE RFC 1483 Routed Connections Description: Your description of this connection. VPI and VCI: Enter the information provided by your ISP. The default for Australian ISPs is VPI=8, VCI=35. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account, sharing the single IP address.
Page 35
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Advanced (RFC 1483 Routed) The Advanced configuration section is for troubleshooting purposes only. Please DO NOT change these settings unless advised to by your ISP’s technical support staff or your network administrator. There are nine items included in this Advanced Options section: Service, RFC 1483, Atm Channel, Ip Interface, Tcp Mss Clamp, Rip Version and NAT.
Page 36
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Atm Channel ATM Channel: ATM channel related settings. VPI: A field in the ATM header. The VPI is used to identify the virtual path that a circuit belongs to. The VPI can be any value between 0 and 4095. For Australian users this should be 8.
Page 37
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Ip Interface Ip Interface: IP protocol related setting. DHCP: Enables or disables DHCP for this interface. MTU: Maximum Transmission Unit. The size of the largest datagram (excluding media- specific headers) that IP will attempt to send through the interface.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Rip Versions RIP Versions: this specifies whether or not an existing interface can send RIP messages or accept RIP messages. You can specify which version of RIP messages will broadcast routing information on the interface.
Page 39
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE PPPoE Connections Description: A user-definable name for this connection. VPI/VCI: Enter the information provided by your ISP. The default for Australian ISPs will be VPI=8, VCI=35. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single ISP account, sharing a single IP address.
Page 40
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Advanced (PPPoE) The Advanced configuration section is for troubleshooting purposes only. Please DO NOT change these settings unless advised to by your ISP’s technical support staff or your network administrator. There are nine items included in this Advanced Options section: Service, PPPoE, Atm Channel, Ip Interface, Tcp Mss Clamp, Rip Version and NAT.
Page 41
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE PPPoE Access Concentrator: A PPPoE tag that identifies a remote access concentrator (or PPPoE server). PPPoE will only connect to the named access concentrator. If no concentrator tag is set, PPPoE connects to the first access concentrator that responds. The tag name/number is determined by your ISP.
Page 42
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE LLC: This setting allows you to enable/disable whether your system can transmit and receive packets containing LLC headers. Lcp Max Configure: Link Control Protocol; the maximum number of configuration attempts that can be transmitted without reply before assuming that the destination address is unable to respond.
Page 43
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE the LCP protocol. MRU : Maximum Receive Unit. This is negotiated during the LCP protocol stage. Use Ip Addr From IPCP: Specifies if the IP address given by IPCP negotiation process is to be used.
Page 44
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Lcp Echo Every: This is the time frame frame (in seconds at which a specified PPP transport is to send an LCP (Link Control Protocol) echo request . If no reply to the request is received, the PPP connection is torn down.
Page 45
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE RFC 1483 Bridged Connections VPI and VCI: Enter the information provided by your ISP. Encapsulation method: Select the protocol format, this is provided by your ISP. Chapter 3: Basic Installation and Configuration...
Page 46
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Advanced (RFC1483 Bridged) The Advanced configuration section is for troubleshooting purposes only. Please DO NOT change these settings unless advised to by your ISP’s technical support staff or your network administrator. There are five items included in this Advanced Options section: Service, RFC 1483, Atm Channel, Bridge Interface and Spanning Bridge Interface.
Page 47
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Atm Channel Refer to Advanced (RFC 1483 Routed) section. Bridge Interface Ether Filter Type: Specify the type of ethernet filtering performed by the named bridge interface. Allows all types of ethernet packets through the port. Allows only IP/ARP types of ethernet packets through the port.
Page 48
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Spanning Bridge Interface Priority: Set the spanning tree protocol priority. Where two bridges have the same priority, their MAC address is compared and the smaller MAC address is treated as the most significant.
Page 49
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE PPPoA Routed Connections Description: User-definable name for the connection. VPI/VCI: Enter the information provided by your ISP. The default for Australian ISPs is VPI=8, VCI=35. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account, sharing a single IP address.
Page 50
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Advanced (PPPoA) The Advanced configuration section is for troubleshooting purposes only. Please DO NOT change these settings unless advised to by your ISP’s technical support staff or your network administrator. There are nine items included in this Advanced Options section: Service, PPP, Atm Channel, Ip Interface, Tcp Mss Clamp, Rip Versions and NAT.
Page 51
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE IPoA Routed Connections Description: User-definable name for the connection. VPI/VCI: Enter the information provided by your ISP. The default for Australian ISPs is VPI=8, VCI=35. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account, sharing a single IP address.
Page 52
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Advanced (IPoA Routed) The Advanced configuration section is for troubleshooting purposes only. Please DO NOT change these settings unless advised to by your ISP’s technical support staff or your network administrator. There are nine items included in this Advanced Options section: Service, PPP, Atm Channel, Ip Interface, Tcp Mss Clamp, Rip Versions and NAT.
Page 53
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE want another machine to be the ATM ARP server, type the ATM-address of that machine. Lifetime: Set idle time-out for IP over ATM SVCs. If there is no traffic on an SVC for this period, then it will be disconnected.
Page 54
On the Internet, every host has a unique and user-friendly name (domain name) such as www.billion.com.au and an IP address. An IP address is a 32-bit number in the form of xxx.xxx.xxx.xxx, for example 192.168.1.254. You can think of an IP address as a telephone number for devices on the Internet, and the DNS will allow you to find the telephone number for any particular domain name.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE System There are six items within the System section: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Restart Router and User Management. Time Zone The router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP server outside your network.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Remote Access To temporarily permit remote administration of the router (i.e. from outside your LAN), select a time period the router will permit remote access for and click Enable. You may change other configuration options for the web administration interface using Device Management options in the Advanced section of the GUI.
Think of your router as a dedicated computer, and the firmware as the software it runs. Over time this software may be improved and modified, and your Billion router allows you to upgrade the software it runs to take advantage of these changes.
Page 58
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Backup / Restore These functions allow you to save and backup your router’s current settings to a file on your PC, or to restore a previously saved backup. This is useful if you wish to experiment with different settings, knowing that you have a backup handy in the case of any mistakes.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Restart Router Click Restart Router to reboot your router (and restore your last saved configuration). If you wish to restart the router using the factory default settings (for example after a firmware upgrade or if you have saved an incorrect configuration), check the Reset to factory default settings box first.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE User Management In order to prevent unauthorized access to your router’s configuration interface, it requires all users to login with a password. You can set up multiple user accounts, each with their own password.
Page 61
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE accounts by clicking Delete when editing the user. You are strongly advised to change the password on the default “admin” account when you receive your router, and any time you reset your configuration to Factory Defaults. By default this password is “admin”.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Firewall and Access Control Your router includes a full SPI (Stateful Packet Inspection) firewall for controlling Internet access from your LAN, as well as helping to prevent attacks from hackers. In addition to this, when using NAT (Network Address Translation.
Page 63
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE URL Filter: To block PCs on your local network from unwanted websites. You can find six items under the Firewall section: General Settings, Packet Filter, Intrusion Detection, MAC Address Filter, URL Filter and Firewall Log. Chapter 3: Basic Installation and Configuration...
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE General Settings You can choose not to enable Firewall, to add all filter rules by yourself, or enable the Firewall using preset filter rules and modify the port filter rules as required. The Packet Filter is divided into two sections: Port Filters and Address Filters, used to filter packets based-on Applications (Port) or IP addresses.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Port Filters The pre-defined port filter rules for High, Medium and Low security levels are listed below. Port Number Firewall - High Firewall - Medium Firewall - Low Application Protocol Start...
Page 67
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Address Filters Address Filters are used to block traffic to/from particular IP addresses. They can be used to block IP addresses either on the Internet or on your local network. There are no pre- defined address filter rules;...
Page 68
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Example: Configuring your firewall to allow for a publicly accessible web server on your LAN The pre-defined port filter rule for HTTP (TCP port 80) is the same no matter whether the firewall is set to a high, medium or low security level.
Page 69
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Click Port Filters. You will then be presented with the pre-defined port filter rules screen (in this case for the low security level), shown below: Click Delete to delete the existing HTTP rule. Click Add TCP Filter.
Page 70
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Input the port number (80) and set both Inbound & Outbound to Allow. The new port filter rule for HTTP is shown below: Chapter 3: Basic Installation and Configuration...
Page 71
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80 will be forwarded to the PC running your web server: To enable the HTTP service in Virtual Server settings, input the web server PC’s IP address.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Intrusion Detection The router’s Intrusion Detection System (IDS) is used to detect hacker attacks and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or other connections that the router determines to be suspicious.
Page 73
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Max PING Count: This is a threshold value to decide whether an ICMP Echo Storm is occurring or not. Default value is 15 ICMP Echo Requests (PING) per second. Max ICMP Count: This is a threshold to decide whether an ICMP flood is occurring or not.
Page 74
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Example: Logfile entries for attacks detected by the firewall’s IDS Attacked with a TCP packet/Port 1052 from source IP: 64.152.73.206: Attacked by ICMP PING requests: Attacked by NetBIOS_NAME_SERVICE_PORT packet from the source IP address 200.68.76.177 to port 137 (a netbios_ns port): Chapter 3: Basic Installation and Configuration...
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE MAC Address Filter A MAC (Media Access Control) address is the unique network hardware identifier for each PC on your network’s interface (i.e. its Network Interface Card or Ethernet card). Using your router’s MAC Address Filter function, you can configure the switch to only accept traffic from specified machines, or else to block specific machines from accessing your LAN.
Please note that the URL filter blocks web browser (HTTP) connection attempts using port 80 only. For example, if the URL is http://www.billion.com.tw/abcde.html, it will be dropped as the keyword “abcde” occurs in the URL. Chapter 3: Basic Installation and Configuration...
Page 77
3. If the packet does not match either of the above two items, it is sent to the remote web server. 4. Please be note that the domain only should be specified, not the full URL. For example to block traffic to www.billion.com.au, enter “billion” or “billion.com.au” instead of “www.billion.com.au”. In the example below, the URL request for www.billion.com.tw...
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE VPN (Virtual Private Networks) Your router support two main types of VPN (Virtual Private Network), PPTP and IPSec, and these are the two major section choices from the menu on the left. PPTP There are two types of PPTP VPN supported, Remote Access and LAN-to-LAN (please refer below for more information.).
Page 79
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Remote Access PPTP Connection Connection Name: This allows you to identify this particular connection, e.g. “Connection to office”. Type: Check Dial Out if you want your router to operate as a client (connecting to a remote VPN server, e.g.
Page 80
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Mode: You may select Stateful or Stateless mode. The key will be changed every 256 packets when you select Stateful mode. If you select Stateless mode, the key will be changed in each packet.
Page 81
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE LAN to LAN PPTP Connection Connection Name: A user-define description of the connection. When configuring your router establish the connection to a remote LAN, enter the remote Server IP Address (or Hostname) you wish to connection to. When configuring your router as a server to accept incoming connections, enter the Private IP Address Assigned to Dial in User address.
Page 82
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE packets when you select Stateful mode. If you select Stateless mode, the key will be changed in each packet. Idle Time: Auto-disconnect the VPN connection when there is no activity on the connection for a predetermined period of time.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE IPSec Click Create to configure a new IPSec VPN connection. Chapter 3: Basic Installation and Configuration...
Page 84
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Configure a new VPN connection Connection Name: A user-defined name for the connection (e.g. “connection to office”). Local: Local Network: Set the IP address, subnet or address range of the local network. Single Address: The IP address of the local host.
Page 85
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE MD5, however it is slower. MD5: A one-way hashing algorithm that produces a 128−bit hash. SHA-1: A one-way hashing algorithm that produces a 160−bit hash. Encryption: Select the encryption method from the pull-down menu. There are four options, DES, 3DES, AES and NONE.
FAQ section and forums have many examples of configuring third-party VPN applications for establishing connections with your Billion router, as well as many helpful tips from Billion and other users on troubleshooting any issues you may encounter when establishing a VPN.
Page 87
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Example: Configuring a Remote Access PPTP VPN Dial-in Connection A remote worker establishes a PPTP VPN connection with the head office using Microsoft's VPN Adapter (included with Windows 2000/ME, etc.). The router is installed in the head office, connected to a couple of PCs and Servers.
Page 88
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Example: Configuring a Remote Access PPTP VPN Dial-out Connection A company’s office establishes a PPTP VPN connection with a file server located at a separate location. The router is installed in the office, connected to a couple of PCs and Servers. Configuring the PPTP VPN in the Office You can either input the IP address (69.1.121.33 in this case) or hostname to reach the server.
Page 89
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Example: Configuring a LAN-to-LAN PPTP VPN Connection The branch office establishes a PPTP VPN tunnel with head office to connect two private networks over the Internet.. The routers are installed in the head office and branch office accordingly.
Page 90
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Configuring PPTP VPN in the Branch Office The IP address 69.1.121.30 is the Public IP address of the router located in head office. If you registered the DDNS (please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to reach the router.
Page 91
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Example: Configuring a IPSec LAN-to-LAN PPTP VPN Connection Network Configuration and Security Plan Branch Office Head Office Local Network ID 192.168.0.0/24 192.168.1.0/24 Local Router IP 69.1.121.30 69.1.121.3 Remote Network ID 192.168.1.0/24 192.168.0.0/24 Remote Router IP...
Page 92
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Configuring IPSec VPN in the Branch Office Chapter 3: Basic Installation and Configuration...
Examples of well-known and registered port numbers are as below, for further information, please see IANA’s website at: http://www.iana.org/assignments/port-numbers For help on determining which private port numbers are used by common applications on this list, please see the FAQs (Frequently Asked Questions) at: http://www.billion.com.au/ Well-known ports Port Number Protocol Description FTP Data FTP Control TCP &...
Page 94
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE POP3 (Post Office Protocol Version 3) NEWS (Network News Transfer Protocol) NTP (Network Time Protocol) SNMP TCP & UDP HTTPS 1503 T.120 1720 H.323 4000 7070 RealAudio Because NAT can act as a “natural” Internet firewall, your router protects your network from being accessed by outside users when using NAT, as all incoming connection attempts will point to your router unless you specifically create Virtual Server entries to forward those ports to a PC on your network.
Page 95
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Using port forwarding does have security implications, as outside users will be able to connect to PCs on your network. For this reason you are advised to use specific Virtual Server entries just for the ports your application requires instead of simply using DMZ or create a Virtual Server entry for “All”...
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Advanced Configuration options within the Advanced section are for users who wish to take advantage of the more advanced features of the router. Users who do not understand the features should not attempt to reconfigure their router, unless advised to do so by support staff.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your ADSL connection, so that anyone wishing to connect to you may use your domain name, rather than having to use your dynamic IP address, which changes from time to time.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Check Emails This function allows you to have the router check your POP3 mailbox for new Email messages. The Mail LED on your router will light when it detects new messages waiting for download.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Device Management The Device Management advanced configuration settings allow you to control your router’s security options and device monitoring features. Embedded Web Server: HTTP Port: This is the port number the router’s embedded web server (for web-based configuration) will use.
Page 100
Once the string name is matched, users from this IP address will be sent SNMP Traps. SNMP Version : SNMPv2c Billion provides an SNMP utility for download via the website at www.billion.com.au which allows users to obtain information from the router without the need to have advanced knowledge of the workings of SNMP.
Page 101
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Interfaces group Address Translation group IP group ICMP group TCP group UDP group EGP (not applicable) Transmission SNMP group From RFC1650 (EtherLike-MIB): dot3Stats From RFC 1493 (Bridge MIB): dot1dBase group dot1dTp group dot1dStp group (if configured as spanning tree)
Page 102
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE From RFC 1474 (PPP/Bridge MIB): PPP Bridge Group From RFC1573 (IfMIB): ifMIBObjects Group From RFC1695 (atmMIB): atmMIBObjects From RFC 1907 (SNMPv2): only snmpSetSerialNo OID Chapter 3: Basic Installation and Configuration...
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Save Configuration to Flash After changing the router’s configuration settings, you must save all of the configuration parameters to FLASH to avoid them being lost after turning off or resetting your router. Click Save to write your new configuration to FLASH.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Logout To exit the router’s web interface, choose Logout. Please ensure that you have saved the configuration settings before you logout. Be aware that the router is restricted to only one PC accessing the configuration web pages at a time.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Chapter 4: Troubleshooting If the router is not functioning properly, first check this chapter for simple troubleshooting before contacting your service provider or Billion support. Problems starting up the router Problem Corrective Action Check the connection between the adapter and the router.
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE Ensure that all other devices connected to the same telephone line as Frequent loss of ADSL your Billion router (e.g. telephones, fax machines, analogue modems) linesync have a line filter connected between them and the wall socket (unless you (disconnections).
BIPAC-74x Series Router – 741 GE, 741 GE V2.0 and 743 GE APPENDIX A: Specification IP, NAT, PPTP, ARP, ICMP, DHCP, PPPoE, PPPoA, IPoA, PPTP Protocols client, RIP1/2 RJ-45, 4 ports 10/100Base-T LAN Switch LAN Port RJ-11, 1 ADSL port WAN Port Power, System, LAN 1 to 4, WLAN, MAIL, PPP and ADSL LED Indicators...
Most problems can be solved by referring to the Troubleshooting section of this manual. If you cannot resolve the problem with the Troubleshooting chapter, please contact the dealer where you purchased this product. You can also call the Billion Support line at 1300 139 159 or email support via or post your question and check the FAQ (Frequently support@billion.com.au...
Need help?
Do you have a question about the BIPAC-74x GE Series and is the answer not in the manual?
Questions and answers