CHAPTER 3 CONFIGURING THE CLIENT PC..........12 TCP/IP Configuration ....................12 Configuring Your Computer in Windows 2000 ............12 Obtain IP Settings From Your Belgacom b-box............14 Manual IP Configuration ..................15 Disable HTTP Proxy..................... 15 Configuring Your Computer in Windows XP DHCP IP Configuration....... 15 Obtain IP Settings from Your Belgacom b-box............
Page 3
Clone MAC Address....................35 LAN ..........................36 Wireless......................... 38 Wireless Settings....................... 38 Channel and SSID..................... 38 Access Control ......................40 Security ........................41 WEP .......................... 42 WPA.......................... 43 802.1X........................45 Easy pairing ......................46 NAT ..........................46 NAT Settings ......................47 Address Mapping ......................
CHAPTER 1 INTRODUCTION Congratulations on your purchase of the Belgacom b-box. We are proud to provide you with a powerful yet simple communication device for connecting your local area network (LAN) to the Internet. For those who want to surf the Internet in the most secure way, this router provides a convenient and powerful solution.
Page 5
Safety Precautions • Do not expose the product to excessive moisture, rain, sand or heat sources. • The product should not be exposed to dripping or splashing. No object filled with liquids, such as vases, should be placed on the product. •...
Also be sure that you have all the necessary cabling before installing the Belgacom b-box. After installing the Belgacom b-box, refer to “Configuring the Belgacom b- box”. Package Contents After unpacking the Belgacom b-box, check the contents of the box to be sure you have received the following components: • Belgacom b-box •...
Page 7
Data passing between devices connected to your local area network can run at up to 100 Mbps over the four Fast Ethernet ports. The Belgacom b-box connections are described in the following figure and table. Item Description Blue ADSL port (RJ-11). Connect your ADSL line to this ADSL Port port.
Connect your ADSL line to this port. Fast Ethernet Connection Connect a PC to one of the RJ-45 ports on the Belgacom b-box with the provided network cable. When inserting an RJ-45 plug, be sure the tab on the plug clicks into position to ensure that it is properly seated.
Ethernet or 100 Mbps Fast Ethernet, as well as the transmission mode to half duplex or full duplex. Use twisted-pair cabling to connect any of the LAN ports on the Belgacom b-box to an Ethernet adapter on your PC. Otherwise, cascade the LAN port on the Belgacom b-box to an Ethernet hub or switch, and then connect your PC or other network equipment to the hub or switch.
TCP/IP Configuration To access the Internet through the Belgacom b-box, you must configure the network settings of the computers on your LAN to use the same IP subnet as the Belgacom b-box. The default network settings for the ADSL Router are: IP Address: 192.168.1.1...
Page 13
Double-click Internet Protocol (TCP/IP). If “Obtain an IP address automatically” and “Obtain DNS server address automatically” are already selected, your computer is already configured for DHCP. If not, select these options. Click Cancel to close each window.
Obtain IP Settings From Your Belgacom b-box Now that you have configured your computer to connect to your Belgacom b-box, it needs to obtain new network settings. By releasing old DHCP IP settings and renewing them with settings from your Belgacom b-box, you can verify that you have configured your computer correctly.
Select “Use the following IP address automatically.” Enter an IP address based on the default network 192.168.1.x (where x is between 2 and 254), use 255.255.255.0 for the subnet mask and the IP address of the Belgacom b-box (default: 192.168.1.1) for the Default gateway field.
Page 16
In the Control Panel window, click Network and Internet Connections. • The Network Connections window will open. Locate and double-click the Local Area Connection icon for the Ethernet adapter that is connected to the Belgacom b-box. • In the connection status screen, click Properties.
3-10 Obtain IP Settings from Your Belgacom b-box Now that you have configured your computer to connect to your Belgacom b-box, it needs to obtain new network settings. By releasing old DHCP IP settings and renewing them with settings from your Belgacom b-box, you can verify that you have configured your computer correctly.
Page 18
(default: 192.168.1.1) for the Default gateway field. 4. Select “Use the following DNS server addresses.” 5. Enter the IP address for the Belgacom b-box in the Preferred DNS server field. This automatically relays DNS requests to the DNS server(s) provided by your ISP. Otherwise, add a specific DNS server into the Alternate DNS Server field and click OK to close the dialog boxes.
You need to verify that the “HTTP Proxy” feature of your web browser is disabled. This is so that your browser can view the Belgacom b-box’s HTML configuration pages. Your computer is now configured to connect to the Belgacom b-box.
Disable HTTP Proxy You need to verify that the “HTTP Proxy” feature of your web browser is disabled. This is so that your browser can view the Belgacom b-box’s HTML configuration pages. The following steps are for Internet Explorer. Internet Explorer Open Internet Explorer and click the Stop button.
Page 21
In the Internet Explorer Preferences window, under Network, select Proxies. Uncheck all check boxes and click OK.
The Belgacom b-box’s management interface consists of a Setup Wizard and an Advanced Setup section. Setup Wizard: Use the Setup Wizard if you want to quickly set up the Belgacom b-box. Go to “Setup Wizard”. Advanced Setup: Advanced Setup supports more advanced functions like hacker attack detection, IP and MAC address filtering, virtual server setup, virtual DMZ host, as well as other functions.
Note: To ensure proper screen refresh after a command entry, be sure that Internet Explorer 5.0 is configured as follows: Under the menu Tools/Internet Options/General/Temporary Internet Files/Settings, the setting for “Check for newer versions of stored pages” should be “Every visit to the page.” Setup Wizard Quickstart The first item in the Setup Wizard is Quickstart.
• Telephone Service The telephone service is disabled by default. If you want to enable the Telephone function of the ADSL Wireless Base Station you can check the enable box to turn on the “Telephone Service” function. • Click the “Save Settings/Next” button. Once you leave your Telephone Service disabled please click on “Save Settings”...
Page 25
Enter the telephone number, Login and Password supplied by your Internet Service provider. Repeat this for each available port. The Belgacom b-box can append telephone numbers to outgoing calls. Select the number you want to use for each port. Click “Save Settings”. The connection status page will appear.
ADSL ADSL (Asymmetric Digital Subscriber Line) is designed to deliver more bandwidth downstream (from the central office to the customer site) than upstream. This section is used to configure the ADSL operation type and shows the ADSL status.
Menu Description System : Sets the local time zone, the password for administrator access, the IP address of a PC that will be allowed to manage the Belgacom b-box remotely, and the IP address of a Domain Name Server. WAN: Specifies the Internet connection settings.
Options/General/Temporary Internet Files/Settings, the setting for “Check for newer versions of stored pages” should be “Every visit to the page.” System Settings Time Settings Set the time zone and time server for the Belgacom b-box. This information is used for log entries and client access control.
By default, management access is only available to users on your local network. However, you can also manage the Belgacom b-box from a remote host by entering the IP address of a remote computer on this screen. Check the Enabled check box, and enter the IP address...
Note: If you check “Enabled” and specify an IP address of 0.0.0.0, any host can manage the Belgacom b-box. For remote management via WAN IP address you need to connect using port 8080. Simply enter WAN IP address followed by :8080 in the address field of your web browser, for example,...
The Belgacom b-box can be connected to your ISP in one of the following ways: ATM PVC Clone MAC ATM PVC The Belgacom b-box uses ATM as its WAN interface. Click on each ATM VC for WAN configuration. See the table below for a description of the parameters. Parameter Description Description Click on the VC to set the values for the connection.
Protocol Protocol used for the connection. ATM Interface Clicking on the ATM VC brings up the following screen. The Belgacom b-box uses ATM as its WAN interface. Protocols including 1483 Routing, 1483 Bridging, MAC Encapsulated Routing (MER), PPPoA and PPPoE with LLC-SNAP and VC-Mux encapsulations are supported for each ATM PVC.
PPPoE: Point-to-Point over Ethernet is a common connection method used for xDSL. MAC Encapsulated Routing: If your ADSL service is a Bridged mode service and you want to share the connection to multiple PC’s, please select MAC Encapsulated Routing. MER is a protocol that allows you do IP routing with NAT enabled. VPI/VCI See Virtual Path Identifier (VPI) and Virtual Circuit Identifier (VCI).
Some ISPs may require that you register your MAC address with them. If this is the case, the MAC address of the Belgacom b-box must be changed manually to the MAC address that you have registered with your ISP. Use the LAN menu to configure the LAN IP address and to enable the DHCP server for...
Page 37
LAN IP IP Address The IP address of the Belgacom b-box. IP Subnet Mask The subnet mask of the Belgacom b-box. DHCP Server To dynamically assign an IP address to client PCs, enable the DHCP (Dynamic Host Configuration Protocol) Server.
You must specify an Service Set ID (SSID) and a common radio channel to be used by the Belgacom b-box and all of its wireless clients. Be sure you configure all of its clients to the same values. The SSID is case-sensitive and can consist of up to 32 alphanumeric...
Page 39
Channel The radio channel used by the wireless router and its clients to communicate with each other. This channel must be the same on the Belgacom b-box and all of its wireless clients. The Belgacom b-box will automatically assign itself a radio channel, or you may select one manually.
Each PC has a unique identifier known as a Medium Access Control (MAC) address. With MAC filtering enabled, only the computers whose MAC address you have listed in the filtering table may connect to the Belgacom b-box. See the description of the Access Control features below.
If you are transmitting sensitive data across radio channels, you should enable wireless security. For a more secure network, the Belgacom b-box can implement one or a combination of the following security mechanisms: •...
network and management resources available, and the software support provided on wireless clients. A summary of wireless security considerations is listed in the following table. Security Client Implementation Support Considerations Built-in •Only provides weak security. support on all •Requires manual key 802.11b and management.
See the description of the Access Control features below. Parameter Description You can choose disabled, 64-bit or 128-bit Mode encryption. When MAC filtering is enabled, all registered Key Entry MAC addresses are controlled by the Access Method Rule. Key Provisioning Select static key or dynamic key. Static WEP Key You may manually enter the keys or automatically generate Setting...
Page 44
With TKIP, WPA uses 48-bit initialization vectors, calculates an 8-byte message integrity code, and generates an encryption key periodically. For authentication, it allows you to use 802.1x authentication for an environment with a RADIUS server installed on your network. Selecting the Pre-shared Key enables WPA to use the pre-shared key in a SOHO network. See the description of the WPA settings below.
Page 45
802.1X Management access will be checked against the authentication database stored on the router. If an authentication RADIUS server is used, you must specify the secret key of the Message-Authenticator attribute, i.e., Message Digest-5 (MD5), and the corresponding parameters in the RADIUS Server Parameters field for the remote authentication protocol. See the description of the 802.1x features below.
Easy pairing Your Belgacom b-box is equipped with a wireless pairing button. This button helps you to set up a wireless network with protection at the push of a button. You can install wireless security by pressing the easy pairing button on your Belgacom b-box. The easy pairing button can be found on the top bezel of your Belgacom b-box and looks like depicted below.
NAT Settings NAT allows one or more public IP addresses to be shared by multiple internal users. Enter the Public IP address you wish to share into the Global IP field. Enter a range of internal IPs that will share the global IP.
Address Mapping Use Address Mapping to allow a limited number of public IP addresses to be translated into multiple private IP addresses for use on the internal LAN network. This also hides the internal network for increased privacy and security.
Using this feature, you can put PCs with public IPs and PCs with private IPs in the same LAN area. If you configure the Belgacom b-box as a virtual server, remote users accessing services such as web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses.
Special Applications Some applications, such as Internet gaming, videoconferencing, Internet telephony and others, require multiple connections. These applications cannot work with Network Address Translation (NAT) enabled. If you need to run applications that require multiple connections, use the following screen to specify the additional public ports to be opened for each application.
Page 51
Note: Choosing a row that already contains data will overwrite the current settings. Example: Trigger Port Trigger Public Comment Type Public Port Type 6112 6112 Battle.net 2300- MSN Game 28800 2400, Zone 47624 For a full list of ports and the services that run on them, see www.iana.org/assignments/port- numbers.
NAT Mapping Table NAT Mapping Table displays the current NAPT address mappings. The NAT address mappings are listed 20 lines per page, click the control buttons to move forwards and backwards. As the NAT mapping is dynamic, a Refresh button is provided to refresh the NAT Mapping Table with the most up-to-date values.
Gateway Enter the WAN IP address of the gateway to the remote network. Configure Allows you to modify or delete configuration settings. Click Add to display the following page and add a new static route to the list. Parameter Description Index Displays the number of the route.
Page 54
Parameter Description General RIP Parameters RIP mode Globally enables or disables RIP. Auto summary If Auto summary is disabled, then RIP packets will include sub-network information from all subnetworks connected to the ADLS Router. If enabled, this sub-network information will be summarized to one piece of information covering all sub-networks.
not participate in sending route broadcasts. Parameter Description Version Sets the RIP version to use on this interface. Poison Reverse A method for preventing loops that would cause endless retransmission of data traffic. Authentication Required None: No authentication. Password: A password authentication key is included in the packet. If this does not match what is expected, the packet will be discarded.
Firewall The Belgacom b-box’s firewall enables access control of client PCs, blocks common hacker attacks, including IP Spoofing, Land Attack, Ping of Death, IP with zero length, Smurf Attack, UDP port loopback, Snork Attack, TCP null scan, and TCP SYN flooding. The firewall does not significantly affect system performance and we advise leaving it enabled to protect your network.
(See the following page for details.) The Belgacom b-box can also limit the access of hosts within the local area network (LAN). The MAC Filtering Table allows the Belgacom b-box to enter up to 32 MAC addresses that are not allowed access to the WAN port.
Define the appropriate settings for client PC services (as shown above). Click “OK” to save your settings. The added PC will now appear in the Access Control page. MAC Filter Use this page to block access to your network using MAC addresses.
The Belgacom b-box can also limit the access of hosts within the local area network (LAN). The MAC Filtering Table allows the Belgacom b-box to enter up to 32 MAC addresses that are allowed access to the WAN port. All other devices will be denied access.
Page 60
The Belgacom b-box allows the user to block access to web sites from a particular PC by entering either a full URL address or just a keyword. This feature can be used to protect children from accessing violent or pornographic web sites.
Schedule Rule You may filter Internet access for local clients based on rules. Each access control rule may be activated at a scheduled time. Define the schedule on the Schedule Rule page, and apply the rule on the Access Control page. Click Add Schedule Rule.
Upon completion, click “OK” to save your schedule rules. Intrusion Detection The Belgacom b-box’s firewall inspects packets at the application layer, maintains TCP and UDP session information including timeouts and number of active sessions, and provides the ability to detect and prevent certain types of network attacks such as Denial-of-Service...
Page 63
The Belgacom b-box protects against DoS attacks including: Ping of Death (Ping flood) attack, SYN flood attack, IP fragment attack (Teardrop Attack), Brute-force attack, Land Attack, IP Spoofing attack, IP with zero length, TCP null scan (Port Scan Attack), UDP port loopback, Snork Attack.
Page 64
the stated destination computer has previously requested the current communication. This is a way of ensuring that all communications are initiated by the recipient computer and are taking place only with sources that are known and trusted from previous interactions. In addition to being more rigorous in their inspection of packets, stateful inspection firewalls also...
Page 65
POP3 Enter your POP3 server address Server (usually the part of the email Address address following the “@” sign). User Name Enter your email account user name. Password Enter your email account password. Connection Policy Fragmentation 10 secs Configures the number of seconds that a packet half-open wait state structure remains active.
sensitive time period Maximum 30 Maximum number of half-open fragmentation half-open packets from the same host. fragmentation packet number from same host Half-open 1 secs Length of time before a half-open fragmentation fragmentation session is detected as half-open. detect sensitive time period Flooding cracker 300 secs Length of time from detecting a flood attack to block time blocking the attack.
Management Protocol (SNMP). A computer attached to the network, called a Network Management Station (NMS), can be used to access this information. Access rights to the agent are controlled by community strings. To communicate with the Belgacom b-box, the NMS must first submit a valid community string for authentication.
Trap Parameter Description IP Address Community Version Traps are sent to this address when errors or specific events occur on the network. A community string (password) specified for trap management. Enter a word, something other than public or private, to prevent unauthorized individuals from reading information on your system.
ADSL ADSL Parameters We recommend leaving the Operation Mode at the default Automatic setting, to automatically negotiate with the remote DSLAM. Parameter Description Operation Mode • Automatic T1.413 Issue 2 G.992.1 (G.DMT) G.992.2 (G.Lite) G.992.3 (ADSL2) G.992.5 (ADSL2+) Status The Status page displays ADSL status information.
Page 70
Parameter Description Status Line Status Data Rate Upstream Downstream Operation Data/Defect Indication Noise Margin Upstream: Downstream: Output Power Attenuation Upstream: Downstream: Fast Path FEC Correction Interleaved Path FEC Correction Fast Path CRC Error Interleaved Path CRC Error Loss of Signal Defect...
Page 71
Loss of Frame Defect Shows the current status of the ADSL line. Actual and maximum upstream data rate. Actual and maximum downstream data rate. Minimum noise margin upstream. Minimum noise margin downstream. Maximum fluctuation in the output power. Maximum reduction in the strength of the upstream signal. Maximum reduction in the strength of the downstream signal.
Configure the port settings on this page, and click “OK” to save the parameters. Telephony providers operate SIP proxies that allow you to register your Belgacom b-box on their system so that your can call friends, family and business associates. There are many Telephony service providers available.
See the table below for a description of the parameters. Parameter Description Phone 1/2 Enable Enable/disable phone 1 and/or 2. Phone Number Your phone number. Display Name Your name, often the same as your phone number. SIP Domain (From your Telephony provider, e.g., “sipcenter.com” or an IP address.) Realm (From your Telephony provider.) Username (From your Telephony provider.) Password (From your Telephony provider.)
Page 74
SIP, the Session Initiation Protocol, is a signaling protocol for Internet conferencing, telephony, presence, events notification and instant messaging. The call waiting feature allows the user to take an incoming call, even though the user is already on the phone. The user upon hearing the new call, can put the original caller on hold and speak to the new caller.
There are four voice codecs supported by the Belgacom b-box, you may try different settings to determine the best audio quality you obtain from the combination of your network connection and your used audio device (head set or hand set).
G.711 A law G.711 U law G.729 G.723.3 See the table below for a description of the parameters. Parameter Description Support Call Enables or disables support for call waiting. Waiting (Default: Disabled) Support User-Agent Enables or disables user-agent header support. Enabling this Header feature includes user agent information in the packet, e.g., the caller’s ID may be displayed.
View the Telephony status for both FXS ports on this page. Click “Refresh” to update this page. This page displays the Port Type, SIP URL and Registration status of the Belgacom b-box. See the table below for a description of the parameters.
Page 78
Call calls. Maintenance Check Backup Router Configuration and click “NEXT” to save your Belgacom b-box’s configuration to a file named “backup.bin” on your PC. You can then check Restore from saved Configuration file (backup.bin) to restore the saved backup configuration file.
Page 79
Download the file to your hard drive. Then click Browse... to find the file on your computer. Select the firmware file and click “Open.” Click “SAVE” to start the upgrade process. Reset Perform a reset from this page. Should your unit become unresponsive for any reason, you can simply perform a reset from this page.
Page 80
Status The Status screen displays WAN/LAN connection status, firmware and hardware version numbers, as well as information on DHCP clients connected to your network.
Page 82
Firewall status. Displays the number of attached clients, the firmware versions, the physical MAC address for each media interface and for the Belgacom b-box, as well as the hardware version and serial number. Displays ATM connection type and status. Displays illegal attempts to access your network.
Page 84
IP address) and subnet mask are used for both the Belgacom LAN, or the b-box and any attached LAN devices. • Be sure the device you want to ping (or Belgacom b- from which you are pinging) has been configured for TCP/IP.
Page 85
• Check that you have a valid network using the connection to the Belgacom b-box and that the port you are using has not been Web browser disabled. • Check the network cabling between the management station and the Belgacom b-box.
GLOSSARY 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over two pairs of Category 3, 4, or 5 UTP cable. 100BASE-TX IEEE 802.3u specification for 100 Mbps Fast Ethernet over two pairs of Category 5 UTP cable. Auto-Negotiation Signalling method allowing each node to select its optimum operational mode (e.g., 10 Mbps or 100 Mbps and half or full duplex) based on the capabilities of the node to which it is connected.
Page 87
A 100 Mbps network communication system based on Ethernet and the CSMA/CD access method. Full Duplex Transmission method that allows two network devices to transmit and receive concurrently, effectively doubling the bandwidth of that link. IEEE Institute of Electrical and Electronic Engineers. IEEE 802.3 Defines carrier sense multiple access with collision detection (CSMA/CD) access method and physical layer specifications.
Page 88
transmission medium, facilitating the exchange of data between network nodes. An acronym for Management Information Base. It is a set of database objects that contains information about the device. RJ-45 Connector A connector for twisted-pair wiring. Straight-through Port An RJ-45 port which does not cross the receive and transmit signals internally (MDI) so it can be connected with straight-through twisted-pair cable to any device having a crossover port (MDI-X).
SPECIFICATIONS Standards Compliance CE Mark Emissions FCC Class B, VCCI Class B Industry Canada Class B EN55022 (CISPR 22) Class B C-Tick - AS/NZS 3548 (1995) Class B Immunity EN 61000-3-2/3 EN 61000-4-2/3/4/5/6/8/11 Safety UL 1950 EN60950 (TÜV) CSA 22.2 No. 950 IEEE 802.3 10 BASE-T Ethernet IEEE 802.3u 100 BASE-TX Fast Ethernet Modem Standards...
Page 90
Storage -40 to 70 °C (-40 to 158 °F) Humidity 5% to 95% (non-condensing)
Information Hereby, Philips Consumer Electronics, BLC P&ACC, declares that this CIA6726N/BG is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Hierbij verklaart, Philips Consumer Electronics, BLC P&ACC dat het toestel CIA6726N/BG in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG.
Need help?
Do you have a question about the B-BOX and is the answer not in the manual?
Questions and answers