1. Manuals
  2. Brands
  3. Billion Manuals
  4. Network Router
  5. BiPAC 7401VGP R3
  6. User manual

Billion BiPAC 7401VGP R3 User Manual

Voip/ 802.11g adsl2+ firewall router
Hide thumbs Also See for BiPAC 7401VGP R3:
Table of Contents

Advertisement

Quick Links

See also: Setup Manual
BiPAC 7401VGP R3
VoIP/ 802.11g ADSL2+
Firewall Router

User Manual

6.24b.dm2
Version released:
Last Revised Date: July 04, 2012

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the BiPAC 7401VGP R3 and is the answer not in the manual?

Questions and answers

Related Manuals for Billion BiPAC 7401VGP R3

Summary of Contents for Billion BiPAC 7401VGP R3

  • Page 1: User Manual

    BiPAC 7401VGP R3 VoIP/ 802.11g ADSL2+ Firewall Router User Manual 6.24b.dm2 Version released: Last Revised Date: July 04, 2012...

  • Page 2: Table Of Contents

    Table of Contents Chapter 1: Introduction ........................1 Introduction to your Router ......................1 Features ..........................1 Chapter 2: Installing the Router ......................1 Important note for using this router....................1 Package Contents ........................1 Device Description........................2 Cabling ............................4 Chapter 3: Basic Installation .......................
  • Page 3 General Settings......................86 Packet Filter ........................ 88 Intrusion Detection ...................... 94 URL Filter ........................96 IM / P2P Blocking ......................99 Firewall Log ....................... 100 VoIP - Voice over Internet Protocol ................... 101 SIP Device Parameters ..................... 102 SIP Accounts ......................105 Phone Port ........................

  • Page 4: Chapter 1: Introduction

    Chapter 1: Introduction Introduction to your Router Welcome to the VoIP/ 802.11g ADSL2+ Firewall Router. The router is an “all-in-one” VoIP ADSL router, combining an ADSL modem, ADSL router, Ethernet network switch and 1 port for Voice over IP functionalities, providing everything you need to get the machines on your network connected to the Internet over your ADSL broadband connection.
  • Page 5 Dual WAN Dual WAN is a new way of getting connected to the internet which is to use two of the ADSL/EWAN to deal with the unexpected case and balance traffic load. That is a way of improving greatly the robustness.
  • Page 6 Dynamic Domain Name System (DDNS) The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname. This dynamic IP address is the WAN IP address. For example, to use the service, you must first apply for an account from a DDNS service like http://www.dyndns.org/.
  • Page 7 Dynamic Host Configuration Protocol (DHCP) Client and Server In the WAN site, the DHCP client can get an IP address from the Internet Service Provider (ISP) automatically. In the LAN site, the DHCP server can allocate a range of client IP addresses and distribute them including IP address, subnet mask as well as DNS IP address to local computers.

  • Page 8: Features

    Chapter 2: Installing the Router Important note for using this router Package Contents VoIP/ 802.11g ADSL2+ Firewall Router CD-ROM containing the online manual RJ-11 ADSL/telephone Cable Ethernet (CAT-5) Cable RJ-45 to RS-232 Console Kit Power adapter A detachable antenna (Wireless Model only) Quick Start Guide Splitter/ Micro-filter (Optional)

  • Page 9: Device Description

    Device Description The Front LEDs Port Meaning Both red and green LEDs lit together when power is ON. Power Lit red means system failure. Restart the device or contact support. Lit green when the device is ready. Lit when one of LAN ports is connected to an Ethernet device. Lit green when the speed of transmission hits 100Mbps;...
  • Page 10 The Rear Ports Port Meaning Antenna Connect the detachable antenna to this port. Connect this port to the ADSL/telephone network with the RJ-11 cable (telephone) provided. Line Connect this port to the telephone jack on the wall with RJ-11cable. Phone Connect this port to an analog phone set with RJ-11 cable.

  • Page 11: Cabling

    Cabling One of the most common causes of problem is bad cabling or ADSL line(s). Make sure that all connected devices are turned on. On the front panel of your router is a bank of LEDs. Verify that the LAN Link and ADSL line LEDs are lit. If they are not, verify if you are using the proper cables. Make sure that all devices (e.g.

  • Page 12: Chapter 3: Basic Installation

    Chapter 3: Basic Installation The router can be configured through your web browser. A web browser is included as a standard application following operating systems: Linux, Windows 98/NT/2000/XP/Me/Vista/7, etc. The product provides an easy and user-friendly interface for configuration. Please check your PC network components. The TCP/IP protocol stack and Ethernet network adapter must be installed.

  • Page 13: Connecting Your Router

    Connecting Your Router 1. Connect this router to a LAN (Local Area Network) and the ADSL/telephone (ADSL) network. 2. Power on the device. 3. Make sure the Power LED lit steadily and that the LAN LED is lit. 4. Connect your router to the telephone jack on the wall with RJ-11 cable.

  • Page 14: Network Configuration

    Network Configuration Configuring PC in Windows 7 1 Go to Start. Click on Control Panel. 2. Then click on Network and Internet. When Network Sharing Center window pops up, select and click on Change adapter settings on the left window panel. 4.
  • Page 15 Select Internet Protocol Version 4 (TCP/IPv4) then click Properties. 6. In the TCP/IPv4 properties window, select the Obtain an IP address automatically Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 7. Click OK again in the Local Area Connection Properties...

  • Page 16: Configuring Pc In Windows Vista

    Configuring PC in Windows Vista 1. Go to Start. Click on Network. 2. Then click on Network and Sharing Center at the top bar. 3. When the Network and Sharing Center window pops up, select and click Manage network connections on the left window column.
  • Page 17 5. Select Internet Protocol Version 4 (TCP/IPv4) then click Properties. 6. In the TCP/IPv4 properties window, select the Obtain an IP address automatically Obtain Server address automatically radio buttons. Then click OK to exit the set- ting. 7. Click OK again in the Local Area Connection Properties window to apply the new configuration.

  • Page 18: Configuring Pc In Windows Xp

    Configuring PC in Windows XP 1. Go to Start > Control Panel (in Classic View). In the Control Panel, double-click on Network Connections. 2. Double-click Local Area Connection. 3. In the Local Area Connection Status window, click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties.
  • Page 19 Configuring PC in Windows 2000 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and Dial-up Connections. 2. Double-click Local Area Connection. 3. In the Local Area Connection Status window click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties.

  • Page 20: Configuring Pc In Windows 95/98/Me

    Configuring PC in Windows 95/98/Me 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and choose the Configuration tab. 2. Select TCP/IP > NE2000 Compatible, or the name of your Network Interface Card (NIC) in your PC. 3.
  • Page 21 Configuring PC in Windows NT4.0 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and choose the Protocols tab. 2. Select TCP/IP Protocol click Properties. 3. Select the Obtain an IP address from a DHCP server radio button and click...

  • Page 22: Factory Default Settings

    Factory Default Settings Before configuring your router, you need to know the following default settings. Web Interface (Username and Password) Username: admin Password: admin The default username and password are “admin” and “admin” respectively. Device LAN IP settings IP Address: 192.168.1.254 Subnet Mask: 255.255.255.0 ISP setting in WAN site PPPoE...

  • Page 23: Information From Your Isp

    Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of service is provided such as DHCP (Obtain an IP Address Automatically, Static IP (Fixed IP Address) or PPPoE. Gather the information as illustrated in the following table and keep it for reference.

  • Page 24: Configuring With Your Web Browser

    Configuring with your Web Browser Open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click “Go”, a user name and password window prompt will appear. The default username and password are “admin” and “admin” respectively. (See Figure 3.14) Figure 3.14: User name &...

  • Page 25: Chapter 4: Configuration

    Chapter 4: Configuration At the configuration homepage, the left navigation column provides you the link to each configuration page. The category of each configuration page is listed as below. Status ADSL Status EWAN Status ARP Table DHCP Table Routing Table NAT Sessions UPnP Portmap VoIP Status...

  • Page 26: Status

    Status ADSL Status This section displays the overall status of ADSL, such as DSP firmware version, Operational mode, Upstream/downstream rate, SNR margin, Line Attenuation, CRC Errors and Latency rate. DSP Firmware Version: DSP code version. Connected：To show if the ADSL line has already been connected. Operational Mode: To show the state when user select “AUTO”...
  • Page 27 Line Attenuation (Downstream): This is attenuation of signal in downstream. CRC Errors (Upstream): This is CRC error in upstream. CRC Errors (Downstream): This is CRC error in downstream. Latency (Upstream): This is time delay in downstream. Latency (Upstream): This is time delay in upstream.

  • Page 28: Ewan Status

    EWAN Status Besides using ADSL to get connected to the Internet, the router offers its Ethernet port 1 as a WAN port to be used to connect to Cable Modems, VDSL and fiber optic lines. This alternative, yet faster method to connect to the internet will provide users more flexibility to get online. Total TX Bytes / Packets: The statistics of total data transmission in bytes / packets since system ready.

  • Page 29: Dhcp Table

    DHCP Table Leased: Shows the information of the DHCP assigned IP addresses. Expired: Shows the information of all expired IP addresses. Permanent: Shows the fixed host mapping information. Leased Table IP Address: Shows the IP address that is assigned to each client. MAC Address: Shows the MAC address of each client.

  • Page 30: Routing Table

    Routing Table Routing Table Valid: A check mark indicates a successful routing status. Destination: Shows the IP address of the destination network. Netmask: Shows the destination Netmask address. Gateway/Interface: Shows the IP address of the gateway or the existing interface that this route will use.

  • Page 31: Nat Sessions

    NAT Sessions This section lists all the current NAT sessions between external (WAN) and internal (LAN) interface. UPnP Portmap This section lists all the established port-mapping using UPnP (Universal Plug and Play). See the Advanced section of this manual for more details on UPnP and the router UPnP configuration options.

  • Page 32: Voip Call Log

    VoIP Call Log The call log records the data from your VoIP devices such as the date / time of dial out calls, the duration of the calls, information about the missed calls and also incoming calls.

  • Page 33: Event Log

    Event Log This page displays all the event Log entries of the router such as when gets disconnected and during Firewall triggered events like Intrusion or Blocking Logging. Please see the Firewall section of this manual for more details on how to enable Firewall logging. Click Refresh button to get the latest event log information.

  • Page 34: Error Log

    Error Log Any errors encountered by the router (e.g. invalid names given to entries) are logged to this window. IDS Log Any records about hacker attacks and intrusion attempts from the Internet are logged to this window. Diagnostic It tests the connection to computer(s) which is connected to the LAN ports and also the WAN Internet connection.

  • Page 35: Quick Start

    Quick Start 1. Click Quick Start. Select the connect mode you want. There are 2 options to choose from: ADSL or EWAN. Select ADSL mode from the drop down menu and click Continue. 2. If your ADSL line is not ready, you need to check your ADSL line has been set or not. 3.
  • Page 36 4. The list below has different mode applied for your choice. Choose 0/33/PPPoE (Recommended) and click Apply. 5. Please enter “Username” and “Password” as supplied by your ISP (Internet Service Provider) and click Apply to continue. Profile Port: Select the connection mode. There is ADSL. Protocol: Select the protocol mode.
  • Page 37 Primary DNS / Secondary DNS: Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the netmask.
  • Page 38 6. Configure the Wireless LAN setting. WLAN Service: Default setting is set to Enable. If you want to use wireless, both 802.11g and 802.11b device in your network, you can select Enable. ESSID: The ESSID is the unique name of a wireless access point (AP) to be distinguished from another.
  • Page 39 7. Set up VoIP. SIP: To use VoIP SIP as VoIP call signaling protocol. Default is set to Disable. Region: This selection is a drop-down box, which allows user to select the country for which the VoIP device must work. When a country is selected, the country parameters are automatically loaded.
  • Page 40 8. Wait for the configuration. 9. When ADSL is synchronic, it will appear “check”.

  • Page 41: Configuration

    Configuration When you click this item, the column will expand to display the sub-items that will allow you to further configure your router. LAN, WAN, System, Firewall, VoIP, QoS, Virtual Server, Wake on LAN, Time Schedule and Advanced The function of each configuration sub-item is described in the following sections.

  • Page 42: Lan - Local Area Network

    LAN - Local Area Network Here are the items within the LAN section: Bridge Interface, Ethernet, IP Alias, IPv6 Autoconfig, Ethernet Client Filter, Wireless, Wireless Security, Wireless Client Filter, WPS, Port Setting DHCP Server. Bridge Interface You can setup member ports for each VLAN group under Bridge Interface section. Ethernet: P1 &...

  • Page 43: Ethernet

    Ethernet The router supports more than one Ethernet IP addresses in the LAN that supports multiple internet access at the same time. Users usually only have one subnet in their LAN. The default IP address for the router is 192.168.1.254. Primary IP Address IP Address: The default IP on this router.

  • Page 44: Ip Alias

    IP Alias This function enables the creation of multiple virtual IP interfaces for this router. It helps to connect two or more local networks to the ISP or remote node. In this case, an internal router is not required. IP Address: Specify an IP address for this virtual interface. Netmask: Specify a subnet mask for this virtual interface Security Interface: Specify the firewall setting for this virtual interface.

  • Page 45: Ipv6 Autoconfig

    IPv6 Autoconfig The IPv6 address composes of two parts, thus, the prefix and the interface ID. BiPAC 7401VGP R3 dynamically configure IPv6 address on host with Stateless auto-configuration mode. Stateless auto-configuration requires no manual configuration of hosts, minimal (if any) configuration of routers, and no additional servers.

  • Page 46: Ethernet Client Filter

    Ethernet Client Filter The Ethernet Client Filter can support up to 16 Ethernet network computers. It enables you to accept traffic from specific authorized computers or can restrict unwanted computer(s) to access your LAN. There are no pre-defined Ethernet MAC address filter rules, you can add the filter rules to meet your requirements.

  • Page 47: Wireless

    LAN. Then, click Add to insert the IP to the Ethernet Client Filter table. The maximum number of supported Ethernet client is 16. Wireless Parameters WLAN Service: Choose Disabled/Enable/TimeSlot from the drop-down list. Mode: The default setting is 802.11b+g (Mixed mode). If you do not know or do not have both 11g and 11b devices on your network, then keep the setting in mixed mode.
  • Page 48 Enable: When enabled, you allow anybody with a wireless client to be able to locate the Access Point (AP) of your router. Disable: When disabled, you do not broadcast your ESSID. Therefore, no one will be able to locate the Access Point (AP) of your router. Regulation Domain: There are seven Regulation Domains for you to choose from, including North America (N.America), Europe, France, etc.

  • Page 49: Wireless Security

    Wireless Security You can disable or enable the wireless security function using WPA or WEP for wireless network protection. The default mode of wireless security is set to disabled. WPA-PSK / WPA2-PSK Security Mode: You can disable or enable with WPA or WEP for protecting wireless network. The default mode of wireless security is Disable.
  • Page 50 WEP Authentication: To prevent unauthorized wireless stations from accessing data transmitted over the network, the router offers secure data encryption, known as WEP. If you require high security for transmissions, there are two options to select from: Open System, Share key. WEP Encryption: To prevent unauthorized wireless stations from accessing data transmitted over the network, the router offers highly secure data encryption, known as WEP.

  • Page 51: Wireless Client / Mac Address Filter

    Wireless Client / MAC Address Filter The MAC Address supports up to 16 wireless network PCs and helps you manage your network control to accept traffic from specific authorized PCs or to restrict unwanted PC(s) to access your LAN. There are no pre-defined MAC Address filter rules; you can add the filter rules to meet your requirements。...
  • Page 52 You can check the checkbox next to the MAC address to block or allow the wireless client to access the network. Then, Add to insert to the Wireless Client (MAC Address) Filter table. The maximum Wireless client is 16.

  • Page 53: Wps

    WPS (Wi-Fi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. This protocol is used to build a Wi-Fi network within a home / small office environment in an easy and secured manner. This feature thus provides a much simplified method to configure Wi-Fi Protected Access to those who know very little about wireless security.
  • Page 54 3. Enter the AP PIN into the utility and click on the “next” button. 4. There are 2 ways to trigger the AP as Enrollee: Push the AP WPS button for 1 second and release it. Or In the WPS configuration page, click on the Enrollee radio button and then click the Start button.
  • Page 55 5. The utility will then search for the WPS AP.
  • Page 56 6. SSID and security will be generated automatically (You may change it) and then press the Next button. 7. Your WPS setup is now complete and you will now have security enabled WiFi network.
  • Page 57 Setup Security-enabled Wi-Fi network using WCN in Vista 1. Jot down the AP PIN from the Web (eg. 78749887). 2. Access the Control Panel page (Start > Control Panel). Select Network and Internet > View Network computers and devices. Double click the ADSL Firewall Router icon and then enter the AP PIN code and press Next.
  • Page 58 3. Enter the AP SSID and click Next.
  • Page 59 4. Enter the Passphrase and click Next to complete the setup.
  • Page 60 Adding a new WPS device (wireless client) to the network - PBC Method 1. Push the WPS button for more than 1 second until the wireless LED flashes. Note: Once the WPS button is pushed, steps 2 & 3 should be completed within 2 minutes. 2.
  • Page 61 3. Select Push the button on my access point and click Next.
  • Page 62 4. Your device will now be joined to the wireless network.
  • Page 63 Adding a new WPS device (wireless client) to the network - PIN Method 1. Access the client’s WPS utility, select Join a Wireless Network and then click Next. 2. Select Enter a PIN into my access point or a registrar. Then jot down the PIN number (eg. 41538142) before pressing Next to activate the wireless client WPS PIN method.
  • Page 64 3. Access the WPS Web GUI, and enter the PIN number that you have previously jotted down into the Enrollee PIN column. When it is done, press Start. 4. By now you should have your device joined with a wireless network.

  • Page 65: Port Setting

    Port Setting This section allows you to configure the settings for the router’s Ethernet ports to solve some of the compatibility problems that may be encountered while connecting to the Internet, as well allowing users to tweak the performance of their network. Port # Connection Type: There are Six options to choose from: Auto, disable, 10M half-duplex, 10M full-duplex, 100M half-duplex, 100M full-duplex and Disable.

  • Page 66: Dhcp Server

    DHCP Server You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the router’s DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP addresses to the PCs on your network if they are configured to obtain IP addresses automatically. To disable the router DHCP Server, check Disabled and click Next, then click Apply.

  • Page 67: Wan - Wide Area Network

    WAN - Wide Area Network WAN refers to your Wide Area Network connection, i.e. your router’s connection to your ISP and Internet. Here are the items within the WAN section: Interface, WAN Profile ADSL Mode. WAN Interface The default setting for Connection Mode is ADSL and for Protocol is PPPoE. Main Port: User can select either ADSL, EWAN or Dual WAN mode.
  • Page 68 layer. Username: Enter the username provided by your ISP. You can input up to 128 alpha-numeric characters (case sensitive). Password: Enter the password provided by your ISP. You can input up to 128 alpha-numeric characters (case sensitive). Service Name: This item is for identification purpose. If it is required, your ISP will provide you the information.
  • Page 69 IPv6: check to enable IPv6 service. If enabled, please set the IPv6 Address, Ipv6 DNS, similar as IPv4. IPv6 Address: type the IPv6 address from your ISP, or get it automatically. ” ::” means to obtain IPv6 address automatically. Obtain IPv6 DNS: check Automatic to obtain DNS automatically. If not, please type the concrete one in the Primary field.
  • Page 70 addresses and can access the Internet directly, the NAT function can be disabled. IP (0.0.0.0:Auto): Your WAN IP address. Leave this at 0.0.0.0 to obtain automatically an IP address from your ISP. Auth. Protocol: Default is Auto. Your ISP should advise you on whether to use Chap or Pap. Connection: Always on: If you want the router to establish a PPPoA session when starting up and to automatically re-establish the PPPoA session when disconnected by the ISP.

  • Page 71: Mpoa Connection

    MPoA Connection Profile Port: Select the profile port as ADSL. Protocol: The ATM protocol will be used in the device. Description: A given name for the connection. VPI/VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account, sharing a single IP address.
  • Page 72 MAC Spoofing: Some service providers require the configuring of this option. You must fill in the MAC address that is specified by the service provider when it is required. Default is disabled. Obtain DNS: A Domain Name System (DNS) contains a mapping table for domain name and IP addresses.
  • Page 73 IPoA Routed Connection Profile Port: Select the profile port as ADSL. Protocol: The ATM protocol will be used in the device. Description: A given name for the connection. VPI/VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account, sharing a single IP address.
  • Page 74 Obtain DNS: A Domain Name System (DNS) contains a mapping table for domain name and IP addresses. DNS helps to find the IP address of a specific domain name. Check the checkbox to obtain DNS automatically. Primary DNS: Enter the primary DNS. Secondary DNS: Enter the secondary DNS.

  • Page 75: Pure Bridge

    Pure Bridge Profile Port: Select the profile port as ADSL. Protocol: The ATM protocol will be used in the device. Description: A given name for this connection. VPI/VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. Encap.
  • Page 76 Multiple Session Profile Port: Select the profile port as ADSL. Protocol: The Multiple Session protocol will be used in the device. Description: A given name for this connection. VPI/VCI: Enter the information provided by your ISP. ATM Class: The Quality of Service for ATM layer. Username: Enter the username provided by your ISP.
  • Page 77 Connection: Always on: If you want the router to establish a PPPoA session when starting up and to au- tomatically re-establish the PPPoA session when disconnected by the ISP. Connect on Demand: If you want to establish a PPPoA session only when there is a packet requesting access to the Internet (i.e.
  • Page 78 Multiple Session Second Session / Multiple Session Third Session / Multiple Session Forth Session: Check Enable to activate the second/third/forth session. If you want to establish several connections at the same time, check Enable to enable the second, third or fourth connection. Before this, you need to configure your second, third or fourth connection firstly.
  • Page 79 EWAN In EWAN mode, LAN 1 port will be configured as EWAN port for connecting to Internet. Protocol: You can select one of four protocols for the router’s WAN settings: Obtain an IP Address Automatically, Fixed IP Address, PPPoE, Pure Bridge. 1.
  • Page 80 IPv6: check to enable IPv6 service. Enter IPv6 Gateway address and set IPv6 DNS as same in IPv4 mode. Gateway: type the gateway address to which WAN packets are forwarded. Obtain IPv6 DNS: check Automatic to obtain DNS automatically. If not, please type the concrete ones in the Primary and Secondary field.
  • Page 81 IPv6: check to enable IPv6 service. Enter IPv6 Gateway address and set IPv6 DNS as same in IPv4 mode. IP/Prefix Length: Please specify the IP and the prefix length for the IPv6 address from your ISP. Gateway: Type the gateway to which the WAN packets are forwarded. Obtain IPv6 DNS: check Automatic to obtain DNS automatically.
  • Page 82 3. PPPoE: Select this item if your ISP uses the PPPoE protocol. Username: Enter the username provided by your ISP. You can input up to 128 alphanumeric characters(case sensitive). This is in the format of “username@ispname“ instead of simply “username“. Password: Enter the password provided by your ISP.
  • Page 83 IPv6: check to enable IPv6 service. Enter IPv6 Gateway address and set IPv6 DNS as same in IPv4 mode. IPv6 Address: type the IPv6 address from your ISP, or get it automatically. ” ::” means to obtain IPv6 address automatically. Obtain IPv6 DNS: check Automatic to obtain DNS automatically.

  • Page 84: Adsl Mode

    ADSL Mode Connect Mode: This mode will automatically detect your ADSL line code, ADSL2+, ADSL2, AnnexM2 and AnnexM2+, ADSL, All. Please keep it as the factory setting unless ADSL is detected as the symptom of synchronization problem. Modulation: It will automatically detect the capability of your ADSL line mode. Please use the factory setting unless ADSL is detected as the symptom of synchronization problem.

  • Page 85: System

    System Here are the items within the System section: Time Zone, Remote Access, Firmware Upgrade, Backup/Restore, Restart, User Management Mail Alert. Time Zone The router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the current time from an SNTP server outside your network.

  • Page 86: Remote Access

    Remote Access This feature enables system administrator to set the time interval where the router can be accessed for administration purpose from a remote site (i.e. from outside your LAN). If you wish to permanently enable remote access, set the time period to 0 minute. Firmware Upgrade Your router firmware is the software that enables it to operate and provides all its functionality.

  • Page 87: Backup / Restore

    Backup / Restore This function allows you to save a backup of the current configuration of your router to a file on your PC, or to restore a previously saved configuration. This is very useful if you wish to customize the setting of the router, knowing in advance that you can always restore the setting if any mistakes do occur.

  • Page 88: Restart Router

    Restart Router Click Restart with option Current Settings to reboot your router (and restore your last saved configuration). If you wish to restart the router using the factory default settings (for example, after a firmware upgrade or if you have saved an incorrect configuration), select Factory Default Settings to reset to factory default settings.

  • Page 89: User Management

    User Management In order to prevent unauthorized access to your router’s configuration interface, it requires that all users are to login the GUI with a password. You can set up multiple user accounts, each with their own password. You can Edit any existing user accounts and Add new user account to grant access to the device configuration interface.
  • Page 90 To Add an Account 1. Check the Valid checkbox, fill in all the information: User name, Comment (optional), Password, Confirm Password. 2. When it is done, click the Add button. To delete a user account: 1. Click on the Delete radio button of the account you want to delete. 2.

  • Page 91: Mail Alert

    Mail Alert Mail alert is designed to keep system administrator or other relevant personnel alerted of any unexpected events that might have occured to the network computers or server for monitoring efficiency. With this alert system, appropriate solutions may be tackled to fix problems that may have arisen so that the server can be properly maintained.

  • Page 92: Firewall And Access Control

    Firewall and Access Control Your router includes a full SPI (Stateful Packet Inspection) firewall for Internet access controlling from your LAN. This feature also protects your system from being attacked by hackers. When using NAT, the router acts as a “natural” Internet firewall, as all PCs on your LAN will have their own private IP addresses which are not directly accessible from the Internet.

  • Page 93: General Settings

    General Settings You can choose to disable Firewall and still be able to access the URL Filter, Intrusion Detection and IM/P2P Blocking or enable the Firewall using the preset filter rules and modify the port filter rules as required. The Packet Filter is used to filter packets based on Applications (Port) or IP addresses.

  • Page 95: Packet Filter

    Packet Filter This function is only available when Firewall is enabled with one of the four security levels selected (All blocked, High, Medium and Low). The preset port filter rules in the Packet Filter must be modified accordingly to the level of security selected. See Table1: Predefined Port Filter for more detail information.
  • Page 96 Example: Predefined Port Filters Rules The predefined port filter rules for High, Medium and Low security levels are listed. See Table 1. Note: Firewall – All Blocked/User-defined, you must define and create the port filter rules yourself. No predefined rule is being preconfigured. Table 1: Predefined Port Filter Port Firewall -...
  • Page 97 Packet Filter – Add TCP/UDP Filter Rule Name Helper: User defined description for entry identification. You may also choose from the Select drop-down menu for an existing predefined rule. The maximum name length is 32 characters. Time Schedule: A self defined time period. You may specify a time schedule for your prioritization policy.
  • Page 98 Packet Filter – Add Raw IP Filter Go to “Type” drop-down menu, select “Use Protocol Number”. Rule Name Helper: User defined description for entry identification. You may also choose from the Select drop-down menu for an existing predefined rule. Time Schedule: A self defined time period. You may specify a time schedule for your prioritization policy.
  • Page 99 Example: Configuring your firewall to allow a publicly accessible web server on your LAN The predefined port filter rule for HTTP (TCP port 80) is the same whether the firewall is set to a high, medium or low security level. To setup a web server located on the local network when the firewall is enabled, you have to configure the Port Filters setting for HTTP.
  • Page 100 2. If you want to delete a filter rule, select the delete radio button of the HTTP rule you want to delete. Then click the Edit/Delete button to delete the rule. 3. To add a new rule, Input the Rule Name, Time Schedule, Source/Destination IP, Type, Source/ Destination Port, Inbound and Outbound.

  • Page 101: Intrusion Detection

    Intrusion Detection The router Intrusion Detection System (IDS) is used to detect hacker’s attack and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or other connections that the router determines to be suspicious.
  • Page 102 Blacklist: Show the blacklist information. For SYN Flood, ICMP Echo Storm and ICMP flood, IDS will just warn the user in the Event Log. It cannot protect against such attacks. Table 2: Hacker attack types recognized by the IDS Type of Block Intrusion Name Detect Parameter Blacklist Drop Packet Show Log...

  • Page 103: Url Filter

    URL Filter URL (Uniform Resource Locator) (e.g. an address in the form of http://www.abcde.com or http:// www.example.com) filter rule allows you to prevent users on your network from accessing specific websites defined by their URL. There are no predefined URL filter rules, therefore you can add filter rules to meet your requirements.
  • Page 104 For example, if the URL is http://www.abc.com/abcde.html, the connection will be dropped if the keyword “abcde” occurs in the URL. Domains Filtering: This function checks the whole URL address but not the IP address against your list of domains to block or allow. If it is matched, the URL request will either be sent (Trusted) or dropped (Forbidden).
  • Page 105 Example: Andy wishes to disable all WEB traffic except for the ones listed in the trusted domain, which would prevent Bobby from accessing other websites. Andy selects both conditions in the Domain Filtering thinking that this will stop Bobby. But Bobby knows this function, Domain Filtering, ONLY disables all WEB traffic except for Trusted Domain, BUT not its IP address.

  • Page 106: Im / P2P Blocking

    Both Instant Message and Peer-to-peer applications make communication faster and easier but your network can become increasingly insecure at the same time. Billion’s IM and P2P blocking helps users to restrict LAN PCs to access the commonly used IM, Yahoo and MSN, and P2P, BitTorrent and eDonkey, applications over the Internet.

  • Page 107: Firewall Log

    Firewall Log Firewall Log displays a log that contains information of any unexpected actions that occur to your firewall settings. Check the Enable checkbox to activate event logging. Log information can be seen in the Status – Event Log after the feature is enabled...

  • Page 108: Voip - Voice Over Internet Protocol

    VoIP - Voice over Internet Protocol VoIP enables telephone calls through existing Internet connection instead of going through the PSTN (Public Switched Telephone Network). It is not only cost-effective, especially for a long distance telephone charges, but also toll-quality voice calls over the Internet. Here are the items within the VoIP section: SIP Device Parameters, SIP Accounts, Phone Port, PSTN Dial Plan, VoIP Dial Plan, Call Features, Speed Dial...

  • Page 109: Sip Device Parameters

    SIP Device Parameters This section provides easy setup for your VoIP service. Phone port 1 can be registered to different SIP Service Provider. SIP Device Parameters SIP: To use VoIP SIP as VoIP call signaling protocol. Default is set to Disable. Silence Suppression (VAD): Voice Activation Detection (VAD) prevents transmitting the nature silence to consume the bandwidth.
  • Page 110 Voice QoS, DSCP Marking: Differentiated Services Code Point (DSCP), it is the first 6 bits in the ToS byte. DSCP Marking allows users to assign specific application traffic to be executed in priority by the next Router based on the DSCP value. See Table 4. The DSCP Mapping Table: Note: To be sure the router(s) in the backbones network have the capability in executing and checking the DSCP through-out the QoS network.
  • Page 111 Advanced – PSTN Environment Adjustment PSTN Environment Adjustment options will help you to adjust the onhook and offhook voltage detection values for your environment. You should use these if the default values are incorrect and result in PSTN calls not being detected properly, e.g. calls being terminated within 5 seconds of being answered.

  • Page 112: Sip Accounts

    SIP Accounts This section reflects and contains the basic settings of the VoIP module from the selected provider in the Wizard section. Fail to provide the correct information will stop making calls out to the Internet. Profile Name: Assign a name for profile identification. Registrar Address (or Hostname): Indicate the VoIP SIP registrar IP address.

  • Page 113: Phone Port

    Phone Port This section displays the status and allows for further editing on the account information of the Phones. Click Edit to update your phone information. Port: It allows you to change the phone port setting for specific FXS port. *69 (Return Call): Dial *69 to return the last missed call.
  • Page 114 Codec Preference Codec is known as Coder-Decoder, it is used for data signal conversion. Set the priority of voice compression with Priority 1 represents the top priority. G.729: It is used to encode and decode voice information into a single packet to reduce bandwidth consumption.

  • Page 115: Pstn Dial Plan (Router With Line Port Only)

    PSTN Dial Plan (Router with LINE port only) This section enables you to configure the “VoIP with PSTN switching” on your system. You can define a range of dial plans that will make regular call to switch from VoIP to PSTN line. Prefix number is an essential key to make a difference between VoIP and Regular phone call.
  • Page 116 Note: The length of the number of digit dialed must not exceed the number of digit defined otherwise dialing will be invalid. PSTN Dial Plan Examples: 1. Dial with Prefix If you dial 01223 707070, the number 01223707070 will be dialed out via FXO for making a regular phone call.
  • Page 117 2. Dial without Prefix If you dial 9102, only 102 will be dialed out via FXO port for making a regular phone call. 3. Dial at Timeout If you only dial 01223 7070, the number 012237070 will be dialed to make a regular call via FXO port after a defined timeout interval even though the number of digit entered does not match the number of digit defined.
  • Page 118 If you only dial 97070, the number that is dialed out via FXO port for making a regular call will not have its prefix. Even though 7070 (only 4 digits) does not match the number of digit defined in the field, 7070 is still a valid phone number since it has not exceeded the number of digit defined.

  • Page 119: Voip Dial Plan

    VoIP Dial Plan This feature makes dialing phone number a lot more convenient and easy. Instead of having to memorize long digits of every single contact, VoIP Dial Plan provides you the ease to create dial plans that will enable you to make your phone calls without the need to memorize the phone number.
  • Page 120 No prefix: No prefix is appended to the front of the numbers dialed. This is the default setting for Prefix Processing section. Main Digit Sequence: The call(s) can be called out via SIP, PSTN or ENUM. x: Any numeric number between 0 and 9. .
  • Page 121 Starting with ‘** sign’ + any two digit numbers between 0 + any **xx*x. number (0-9) in variable length. Maximum length is 16. Starting with ‘# sign’ + any digit number (0-9) in variable length #xx. but no shorter than 1 digits. Maximum length is 16. Starting with ‘## sign’...

  • Page 122: Call Feature

    Call Feature VoIP has all the basic features of a traditional phone. Besides the provided basic features, VoIP also comes with several enhanced features that allows you to further customize their settings to suit your personal needs such as call forwarding setting, call waiting time length, conference call feature, anonymous call feature and incoming no answer timer.

  • Page 123: Ring & Tone

    Ring & Tone This section allows advanced user to change the existing or newly defined parameters for various ring tones (dial tone, busy tone, answer tone and etc.)
  • Page 124 Country Specific Ring & Tone Region: Select a country ring tone from the drop-down list that pertains to your residence. This VoIP router will display the default parameters of each ring tone according to the country selected. If your country is not found in the list, you may manually enter the parameters of the ring tone that pertains to the country.
  • Page 125 Tone Parameters You may need to check with your local telephone service provider for such information. Also, it is recommended that this option be configured by an advanced user unless you are instructed to do Click Apply to apply the settings.

  • Page 126: Qos - Quality Of Service

    QoS - Quality of Service QoS function helps you to control the network traffic of each application from LAN (Ethernet and/ or Wireless) to WAN (Internet). It facilitates you the features to control the quality and speed of throughput for each application when the system is running with full upstream load. These are the items within the QoS section: Prioritization, Outbound IP Throttling &...
  • Page 127 Destination IP address Range: The destination IP address or range of packets to be monitored. Destination Port: The destination port of the packets to be monitored. DSCP Marking: Differentiated Services Code Point (DSCP), it is the first 6 bits in the ToS byte.

  • Page 128: Outbound Ip Throttling (Lan To Wan)

    Outbound IP Throttling (LAN to WAN) IP Throttling allows you to limit the speed of the IP traffic. The value entered in the Rate Limit blank will set the speed limitation of the application. Name: User defined description to identify the new policy/name created. Time Schedule: Schedule your prioritization policy.

  • Page 129: Inbound Ip Throttling (Wan To Lan)

    Inbound IP Throttling (WAN to LAN) IP Throttling allows you to limit the speed of the IP traffic. The value entered in the Rate Limit blank will set the speed limitation of the application. Name: User defined description to identify the new policy/application created. Time Schedule: Schedule your prioritization policy.
  • Page 130 Example: QoS for your Network Connection Diagram VoIP Normal PCs Restricted PC...
  • Page 131 Information and Settings Upstream: 928 kbps Downstream: 8 Mbps VoIP User : 192.168.1.1 Normal Users : 192.168.1.2~192.168.1.5 Restricted User: 192.168.1.100...

  • Page 132: Voice Application

    Mission-critical application Mostly the VPN connection is mission-critical application for doing data exchange between head and branch office. The mission-critical application must be sent out smoothly without any drop out. Set the level of priority as high to prevent other applications from saturating the bandwidth. Voice application Voice is latency-sensitive application.
  • Page 133 Restricted Application Some companies will setup their FTP servers for data download while others may use FTP for file sharing. The setting above helps to limit the utilization of the FTP upstream rate. Time schedule also helps to limit its utilization only during daytime.
  • Page 134 Advanced setting by using IP throttling IP throttling enables you to set parameters for bandwidth allocation, although the applications maybe located on the same level. Upstream: 928kbps (29*32kbps) Mission-critical Application: 192kbps (6*32kbps) Voice Application: 128kbps (4*32kbps) Restricted Application: 160kbps (5*32kbps) Other Applications: 448kbps (14*32kbps) 6+4+14+5=29, 29*32kbps=928kbps Sometime your customers or friends may upload their files to your FTP server and that will...

  • Page 135: Virtual Server (Known As Port Forwarding)

    Virtual Server (known as Port Forwarding) In TCP/IP and UDP networks, a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be delivered to. Some ports have numbers that are pre-assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred to as “well-known ports”.

  • Page 136: Add Virtual Server

    Add Virtual Server Because NAT can act as a “natural” Internet firewall, your router protects your network from being accessed by outside users when using NAT, as all incoming connection attempts will point to your router unless you specifically create Virtual Server entries to forward those ports to a PC on your network.
  • Page 137 Example: If you like to remotely access your Router through the Web/HTTP all the time, you will need to enable port number 80 (Web/HTTP) and map to the Router’s IP Address. Then all incoming HTTP requests from you (Remote side) will be forwarded to the Router with an IP address of 192.168.1.254.

  • Page 138: Edit Dmz Host

    Edit DMZ Host DMZ Host is a local computer that is exposed to the Internet. When setting a particular internal IP address as the DMZ Host, all incoming packets especially those that do not use the port number that is being used by any other Virtual Server entries will be checked by the Firewall and NAT algorithms before being passed to the DMZ host.

  • Page 139: Edit One-To-One Nat (Network Address Translation)

    Edit One-to-One NAT (Network Address Translation) One-to-One NAT maps a specific private / local IP address to a global / public IP address. If you have multiple public / WAN IP addresses from your ISP, you are eligible to use these IP addresses in One-to-One NAT .
  • Page 140 Application: User defined description to identify this entry or click the drop-down menu to select an existing predefined rule. :20 predefined rules are available. Application, Protocol and External/Redirect Ports will be filled after the selection. Protocol: It is the supported protocol for the virtual server. In addition to specifying the port number to be used, you will also need to specify the protocol used.
  • Page 141 For further information, please see IANA’s website at http://www.iana.org/assignments/port- numbers For help on determining which private port numbers are used by common applications on this list, please see the FAQs (Frequently Asked Questions) at http://www.billion.com Table 5: Well-known and registered Ports Port Number Protocol Description...

  • Page 142: Wake On Lan

    Wake on LAN This feature provides greater flexibility for users to turn on / boot the computer of the network from a remotely site. MAC Address: Enter the MAC address of the target computer or you can select the MAC address directly from the Select drop down menu on the right.

  • Page 143: Time Schedule

    Time Schedule The Time Schedule supports up to 16 time slots which helps you to manage your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allow the use of the Internet by users or applications. Time Schedule correlates closely with router time.

  • Page 144: Configuration Of Time Schedule

    Configuration of Time Schedule Edit a Time Slot 1. Choose any Time Slot (ID 1 to ID 16) to edit, click Edit radio button. Note: Watch it carefully, the days you have selected will present in capital letter. Lower case letter shows the day(s) is not selected, and no rule will apply on this day(s).
  • Page 145 Delete a Time Slot Click on the Delete radio button of the Time Slot you wish to delete under the Time Slot section, and then click the Edit/Delete button to confirm the deletion of the selected Time profile, i.e. erase the Day and back to default setting of Start Time / End Time.

  • Page 146: Advanced

    Advanced Configuration options within the Advanced section are for users who wish to take advantage of the more advanced features of the router. Users who do not understand the features should not attempt to reconfigure their router, unless advised to do so by support staff. These are the items within the Advanced section: Static Route, Static ARP, Dynamic DNS, Device Management, IGMP and VLAN Bridge.

  • Page 147: Dynamic Dns

    Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your connection, so that anyone wishing to connect to you may use your domain name, rather than having to use your dynamic IP address, which changes from time to time.

  • Page 148: Device Management

    Device Management The Device Management advanced configuration setting allows you to control your router security option and device monitoring features. Device Host Name Host Name: Assign it a name. Note: The Host Name must have more than a word. These two words should be connected with a ‘.’...
  • Page 149 Embedded Web Server ( 2 Management IP Accounts) HTTP Port: This is the port number that the router embedded web server (for web-based configuration) will use. The default value is the standard HTTP port 80. Users may specify an alternative if, for example, they are running a web server on a PC within their LAN. Management IP Address: You may specify an IP address for logon and access the router web server.
  • Page 150 string name is matched, users with this IP address will be sent SNMP Traps. SNMP V3: Specify a name and password for authentication and define the access right from an identified IP address. Once the authentication has succeeded, users with this IP address will be able to view and modify the data.
  • Page 151 SNMP Version: SNMPv2c and SNMPv3 SNMPv2c is the combination of the enhanced protocol features of SNMPv2 without the SNMPv2 security. The “c” comes from the fact that SNMPv2c uses the SNMPv1 community string paradigm for “security”, but is widely accepted as the SNMPv2 standard. SNMPv3 is a strong authentication mechanism, authorization with fine granularity for remote monitoring.

  • Page 152: Igmp

    IGMP IGMP, known as Internet Group Management Protocol, is used to manage hosts from multicast group. IGMP Proxy: Enables or disables the router’s IGMP Proxy. Upstream Interface: When IGMP Proxy enabled, sets one of the router’s existing IP interfaces as the upstream interface;...

  • Page 153: Vlan Bridge

    MLD Forward All: select enable to forward the multicast packets to all ports. If select disable, the multicast packets will be forwarded to ports set according to the MLD Snooping below. MLD Snooping: similar to IGMP snooping, listens in on the MLD conversation between hosts and routers by processing MLD packets sent in a multicast network, and it analyzes all MLD packets between hosts and the connected multicast routers in the network.

  • Page 154: Logout

    Logout To exit the router web interface, choose Logout. Please save your configuration setting before logging out of the system. Be aware that the router configuration interface can only be accessed by one PC at a time. Therefore when a PC has logged into the system interface, the other users cannot access the system interface until the current user has logged out of the system.

  • Page 155: Chapter 5: Troubleshooting

    If your router is not functioning properly, please refer to the suggested solutions provided in this chapter. If your problems persist or the suggested solutions do not meet your needs, please kindly contact your service provider or Billion for support. Problems with the router...
  • Page 156 Problem with LAN interface Problem Suggested Action Cannot PING any PC on LAN Check the Ethernet LEDs on the front panel. The LED should be on for the port that has a PC connected. If it does not lit, and check to see if the cable between your router and the PC is properly connected.

  • Page 157: Appendix: Product Support & Contact

    However if your problems persist or you come across other technical issues that are not listed in the Troubleshooting section, please contact the dealer from where you purchased your product. Contact Billion Worldwide: http://www.billion.com MAC OS is a registered Trademark of Apple Computer, Inc.

Table of Contents