Chapter 1: Introduction Introduction to your Router The BiPAC 7800GZ(L), a Dual-WAN 3G / ADSL2+ firewall router integrated with the 802.11g Wire- less Access Point and 4-port switch is a cutting-edge networking product for SOHO and office users. Uniquely, the router offers users more flexibility to directly insert a 3G / HSPA SIM card into its built-in SIM slot instead of requiring external USB modems.
Wireless Mobility and Double-layer Protection An integrated 802.11g Wireless Access Point offers quick yet easy access with data encryption for added security. Wi-Fi Protected Access (WPA-PSK / WPA2-PSK) and Wired Equivalent Privacy (WEP) support ensures high-level data protection and WLAN access control. In addition, rich firewall security features such as SPI, DoS attack prevention and URL content filtering are integrated to provide unparalleled protection for Internet access.
Features • Dual WAN approach - ADSL2+, 3G or Ethernet WAN for broadband connectivity. • 3G/ HSPA embedded with a built-in SIM card slot • Integrated 4-port Ethernet switch, one port can be configured as a WAN interface • 4 IPSec VPN tunnels supported (BiPAC 7800GZ only) •...
Network Protocols and Features • NAT, static routing and RIP-1 / 2 • Universal Plug and Play (UPnP) Compliant • Dynamic Domain Name System (DDNS) • Virtual Server and DMZ • SNTP, DNS relay and IGMP Proxy • IGMP snooping for video service •...
Management • Easy Sign-On (EZSO) and Auto-scan ADSL settings • Web-based GUI for remote and local management • Firmware upgrades and configuration data upload and download via web-based GUI • Embedded Telnet server and SSH for remote and local management •...
Device Description The Front LEDs Meaning Lit red when WAN port fails to get IP address. Lit green when WAN port gets IP address successfully. Internet Lit off when the device is in bridge mode or when ADSL connection is absent. Lit green when the device is successfully connected to an ADSL DSLAM.
The Rear Ports Port Meaning Connect it with the supplied power adapter. Power Power ON/OFF switch. Power Switch Press for more than 5 seconds to restore the device to its default Reset mode. By controlling the pressing time, users can achieve two different effects: (1)WPS: Press less than 5 seconds until WPS LED flashes orange to trigger WPS function.
Cabling One of the most common causes of problem is bad cabling or ADSL line(s). Make sure that all connected devices are turned on. On the front panel of your router is a bank of LEDs. Verify that the LAN Link and ADSL line LEDs are lit. If they are not, verify if you are using the proper cables. If the error persists, you may have a hardware problem.
Chapter 3: Basic Installation The router can be configured through your web browser. A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 98/NT/2000/XP/Me/Vista, etc. The product provides an easy and user-friendly interface for configuration. Please check your PC network components.
Connecting Your Router BiPAC 7800GZ(L) offers three modes to connect to the internet. Besides using ADSL, users can set EWAN (Ethernet port # 4) or 3G for internet connection. BiPAC 7800GZ(L) also allows Dual WAN connection: ADSL fail-over to 3G, EWAN fail-over to 3G, ADSL fail-over to EWAN, and counter likewise.
Network Configuration Configuring PC in windows 7 Go to Start. Click on Control Panel. Then click on Network and Internet. 2. When the Network and Sharing Center window pops up, select and click on Change adapter settings on the left window panel.
Page 20
4. Select Internet Protocol Version 4 (TCP/IPv4) then click Properties. 5. In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. 6. Click OK again in the Local Area Connection Properties window to apply the new configuration.
Configuring PC in Windows Vista 1. Go to Start. Click on Network. 2. Then click on Network and Sharing Center at the top bar. 3. When the Network and Sharing Center window pops up, select and click Manage network connections on the left window column.
Page 22
5. Select Internet Protocol Version 4 (TCP/IPv4) then click Properties. 6. In the TCP/IPv4 properties window, select the Obtain an IP address automatically Obtain Server address automatically radio buttons. Then click OK to exit the setting. 7. Click OK again in the Local Area Connection Properties window to apply the new configuration.
Configuring PC in Windows XP 1. Go to Start > Control Panel (in Classic View). In the Control Panel, double-click on Network Connections 2. Double-click Local Area Connection. 3. In the Local Area Connection Status window, click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties.
Configuring PC in Windows 2000 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and Dial-up Connections. 2. Double-click Local Area Connection. In the Local Area Connection Status window click Properties. 4. Select Internet Protocol (TCP/IP) and click Properties.
Configuring PC in Windows 95/98/Me 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and choose the Configuration tab. 2. Select TCP/IP > NE2000 Compatible, or the name of your Network Interface Card (NIC) in your PC. 3.
Configuring PC in Windows NT4.0 1. Go to Start > Settings > Control Panel. In the Control Panel, double-click on Network and choose the Protocols tab. 2. Select TCP/IP Protocol and click Properties. 3. Select the Obtain an IP address from a DHCP server radio button and click...
Factory Default Settings Before configuring your router, you need to know the following default settings. Web Interface (Username and Password) Three user levels are provided by this router, thus Administrator, Basic and Advanced respectively. You can turn to User Management to change the corresponding passwords and understand more.
Page 28
LAN and WAN Port Addresses The parameters of LAN and WAN ports are pre-set in the factory. The default values are shown in the table. LAN Port WAN Port IP address 192.168.1.254 Subnet Mask 255.255.255.0 The PPPoE function is enabled to automatically get DHCP server function Enabled the WAN port configuration...
Information from your ISP Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of service is provided such as DHCP (Obtain an IP Address Automatically, Static IP (Fixed IP Address) or PPPoE. Gather the information as illustrated in the following table and keep it for reference.
GUI for any detail configuration. This configuration method is usually auto initiated if user is to connect to the internet via Billion's router for the first time.
Page 31
4. The window will then display the Protocol information obtained from the scan result before redirect you to the next configuration page. 5. Please enter all the information in the blanks provided and then click continue. 6. The device will reboot and then load the new configuration.
Page 32
7. If all information provided is valid and the device successfully connects to WAN, a dialog box will appear to signify the completion of the WAN port setup. At this point you can either click Done to finish the EZSO configuration or you can click Next to wireless to proceed to the wireless configuration if you have.
Configuration via Web Interface Open your web browser; enter the IP address of your router, which by default is 192.168.1.254, and click “Go”, a login window prompt will appear. The default username and password are “admin” and “admin” respectively. Congratulations! You are now successfully logon to the Firewall Router! If the authentication succeeds, the homepage Status will appear on the screen.
Quick Start Whether on the Basic or Advanced Configuration Mode, click Quick Start link to WAN Port setup pages. Step 1: Select WAN port connect mode from the connect mode drop down menu. There are three types of connect mode to choose from: EWAN, 3G or ADSL. Step 2: After selecting the connect mode, press Continue to move on to the next configuring page.
Page 35
Note: If the WAN line is not ready, a page will display as below and your new configuration can not be saved. Step 4: After the configuration is successful, click Next to Wireless button and you may proceed to configure the Wireless setting. There are 4 types of security mode: WPA, WPA2, WPA/WPA2 Pre- Shared Key and WEP.
Page 36
3G Connect Mode Connect Mode: Select “3G”. TEL No.: The dial string to make a GPRS / 3G user internetworking call. Username: The username provided by your service provider. APN: An APN is similar to a URL on the WWW, it is what the unit makes a GPRS / UMTS call. Click Continue to go on to next step.
Page 37
Authentication Protocol: Default is Auto. Please consult your ISP on whether to use PAP, CHAP or MSCHAP. PIN: PIN stands for Personal Identification Number. A PIN code is a numeric value used in certain systems as a password to gain access, and authenticate. In mobile phones a PIN code locks the SIM card until you enter the correct code.
Page 38
ADSL Connect Mode Connect Mode: You can choose either “ADSL” “EWAN” or “3G” mode. Protocol: The current ATM protocol in the device. VPI/VCI: The current value of VPI/VCI in the device. Username: To show current authentication username. IP Address: To show current value of IP address in the device. For ADSL connect mode there are 5 types of connection protocols: PPPoE, PPPoA, IPoA, MPoA Pure...
Page 39
PPPoE Connection VPI/VCI: Enter the information provided by your ISP. Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric characters (case sensitive). Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive).
Page 40
PPPoA Connection VPI/VCI: Enter the information provided by your ISP. Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric characters (case sensitive). Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive).
Page 41
MPoA Connection VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encapsulation method: Select the encapsulation format. Select the one provided by your ISP. IP Address: IPOA WAN IP address can only set fixed IP address. Netmask: User can change it to others such as 255.255.255.128. Type the Netmask assigned to you by your ISP (if given).
Page 42
IPoA Connection VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encapsulation method: Select the encapsulation format. Select the one provided by your ISP. IP Address: Your WAN IP address. If the IP is set to 0.0.0.0 (auto IP detect), both Netmask and gateway may be left blank.
Page 43
Pure Bridge Connection VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encapsulation method: Select the encapsulation format. Select the one provided by your ISP.
Page 44
EWAN Connect Mode PPPoE Connection Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric characters (case sensitive). This is in the format of “username@ispname” instead of simply “username”. Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive).
Page 45
Obtain an IP Address Automatically Select this protocol enables the device to automatically retrieve IP address. Fixed IP Address Connection IP Address: Your WAN IP address. Leave the IP address as 0.0.0.0 to enable the device to automatically obtain an IP address from your ISP. Netmask: The default is 0.0.0.0.
Page 46
Pure Bridge Wireless Setting Mode There are 4 types of wireless security modes: WPA, WPA2, WPA/WPA2 Pre-Shared Key WEP.
Page 47
WPA or WPA2 Here take WPA for example. WLAN Service: Default setting is Enable. If you want to use wireless, you can select Enable. ESSID: The ESSID is the unique name of a wireless access point (AP) used to distinguish one from another.
Page 48
WPA/WPA2 Pre-Shared Key WPA and WPA2 pre-shared keys are an authentication mechanism in which users provides some form of credentials to verify that they should be allowed access to a network. This requires a single password entered into each WLAN node (Access Points, Wireless Routers, client adapters, bridges).
Page 49
WLAN Service: Default setting is set to Enable. If you want to use wireless, you can select Enable. ESSID: The ESSID is the unique name of a wireless access point (AP) used to distinguish one from another. For security propose, change to a unique ID name which is already built into the router wireless interface.
Page 50
If you want to enable the RADIUS service, check Enable and then do the following settings. RADIUS Server IP Address: Enter the IP address of RADIUS authentication server. RADIUS Server Port: Enter the port number of RADIUS authentication server here. Default value is 1812.
Basic Configuration Mode Status Device Information Model Name: Provide a name for the router for identification purposes. System Up-Time: Record system up-time. Hardware Version: Hardware version. Software Version: Firmware version. Port Status Port Status: User can look up to see if they are connected to Ethernet, ADSL, 3G, EWAN and Wireless.
WAN – Main Port (ADSL) A WAN (Wide Area Network) is an outside connection to another network or the Internet. PPPoE Connection (ADSL) PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up services using PPP. VPI/VCI: Enter the information provided by your ISP. Username: Enter the username provided by your ISP.
PPPoA Connection (ADSL) PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). It provides access control and billing functionality in a manner similar to dial-up services using PPP. VPI/VCI: Enter the information provided by your ISP. Username: Enter the username provided by your ISP.
MPoA Connection (ADSL) VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encap. method: Select the encapsulation format. Select the one provided by your ISP. IP Address: Enter your WAN IP address. If the IP is set to 0.0.0.0 (auto IP detect), both Netmask and gateway may be left blank.
IPoA Connections (ADSL) VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encap. method: Select the encapsulation format. Select the one provided by your ISP. IP Address: Enter your fixed IP address. Netmask: User can change it to others such as 255.255.255.128. Type the Netmask assigned to you by your ISP (if given).
Pure Bridge Connections (ADSL) VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encap. method: Select the encapsulation format. Select the one provided by your ISP. Click Apply to confirm the settings.
WAN – Main Port (EWAN) Besides using ADSL to get connected to the Internet, Ethernet port 4 of BiPAC 7800GZ(L) can be used as an alternative to connect to Cable Modems, VDSL and fiber optic lines. This alternative not only provides faster connection to the Internet, it also provides users with more flexibility to get online.
Obtain IP Address Automatically (EWAN) Select this protocol enables the device to automatically retrieve IP address. Main Port: Choose EWAN as the main port. Click Apply to confirm the change. Fixed IP Address (EWAN) IP Address: Enter your fixed IP address. Netmask: User can change it to others such as 255.255.255.128.
Pure Bridge (EWAN) Main Port: Select EWAN as the profile port. WAN – Main Port (3G) The setup of 3G is simplified by the web browser-based configuration. It is easy for you to access to the Internet wherever a 3G connection is available. Mode: There are 5 options of phone service standards: GSM 2G only, UTMS 3G only, GSM 2G preferred, UMTS 3G preferred, and Automatic.
Page 60
systems as a password to gain access, and authenticate. In mobile phones a PIN code locks the SIM card until you enter the correct code. If you enter the PIN code incorrectly into the phone 3 times in a row, then the SIM card will be blocked and you will require a PUK code from your network/ service provider.
WLAN Wireless Parameters WLAN Service: Default setting is set to Enable. If you do not have any wireless, select Disable. ESSID: The ESSID is a unique name of a wireless access point (AP) used to distinguish one from another. For security purpose, change the default wlan-ap to a unique ID name that is already built into the router wireless interface.
Page 62
Security Mode WPA or WPA2 Security Mode: You can disable or enable with WPA or WEP for protecting wireless network. RADIUS/802.1x: Select Whether to enable or disable the RADIUS Service. WPA Shared Key: The key for network authentication. The input format is in character style and key size should be in the range between 8 and 63 characters.
Page 63
Security Mode: You can disable or enable with WPA or WEP for protecting wireless network. RADIUS/802.1x: Choose this box enable RADIUS/802.1x authentication protocol for boosting up WLAN Security. WEP Authentication: To prevent unauthorized wireless stations from accessing data transmitted over the network, the router offers secure data encryption, known as WEP. If you require high security for transmissions, there are 3 options to select from: Open System, Share Key and Both.
Page 64
If you want to enable the RADIUS service, check Enable and then do the following settings. WEP Authentication: If you enable RADIUS/802.1x, then the default WEP Authentication is Open System. RADIUS Server IP Address: Enter the IP address of RADIUS authentication server. RADIUS Server Port: Enter the port number of RADIUS authentication server here.
Advanced Configuration Mode Status Device Information Model Name: Displays the model name. Host Name: Provide a name for the router for identification purposes. Host Name lets you change the router name. System Up-Time: Records system up-time. Current time: Set the current time. See the Time Zone section for more information. Hardware Version: Device version.
ADSL Status DSP Firmware Version: DSP code version. DMT Status: Current DMT Status. Operational Mode: Displays the ADSL state when the connect mode is set to AUTO. Click Operational Mode link to go to the ADSL Mode configuration page. Click Operational Mode to go to configuration page to configure ADSL mode.
WAN Statistics Interface: the name of the WAN Connection Protocol: the protocol the WAN Connection adopt VPI/VCI: Virtual Path Identifier and Virtual Channel Identifier of the WAN Connection, it is provided by ISP. Received: Include received Bytes, Pkts, Errs and Drops. Transmitted: Include transmitted Bytes, Pkts, Errs and Drops.
3G Status Status: The current status of the 3G card. Click to go to 3G configuration page. Status Signal Strength: The signal strength bar indicates current 3G signal strength. Network Name: The network name that the device is connected to. Network Mode: The current operation mode in 3G card, it depends on service provider and card’s limitation.
ARP Table This table stores mapping information that the device uses to find the Layer 2 Media Access Control (MAC) address that corresponds to the Layer 3 IP address of the device via the Address Resolution Protocol (ARP) feature. IP Address: Shows the IP Address of the device that the MAC address maps to. MAC Address: Shows the MAC address that is corresponded to the IP address of the device it is mapped to.
DHCP Table The DHCP Table lists the DHCP lease information for all IP addresses assigned by the DHCP server in the device. IP Address: The IP address which is assigned to the host with this MAC address. MAC Address: The MAC Address of internal dhcp client host. Client Host Name: The Host Name of internal dhcp client.
System Log Display system logs accumulated up to the present time. You can trace its historical information with this function. Refresh: Click to update the system log. Clear: Click to clear the current log from the screen.
Firewall Log Firewall Log display log information of any unexpected action with your firewall settings. This page displays the router’s Firewall Log entries. The log shows log entries when you have enabled Intrusion Detection or Block WAN PING in the Configuration – Firewall section of the interface. Please see the Firewall section of this manual for more details on how to enable Firewall logging.
IPSec Status The IPSec Table provides administrators with detailed information regarding the configured IPSec VPN Connections. Name: The name you assigned to the particular VPN entry. Active: Whether the VPN Connection is currently Active. Local Subnet: The local IP Address or Subnet used. Remote Subnet: The Subnet of the remote site.
Configuration When you click this item, the column will expand to display the sub-items that will allow you to further configure your router. LAN, WAN, System, Firewall, VPN, QoS, Virtual Server, Wake on LAN, Certificate, Time and Advanced. Schedule The function of each configuration sub-item is described in the following sections.
LAN - Local Area Network A Local Area Network (LAN) is a shared communication system network where many computers are connected. This type of network is area defined and is usually limited to a confined region within a building or just within the same storey of a building. There are 7 items within the LAN section: Ethernet, Alias, Wireless, Wireless...
Wireless Parameters WLAN Service: Default setting is set to Enable. If you do not have any wireless, select Disable. Time Schedule: A self defined time period. You may specify a time schedule for your prioritization policy. Here we provide two groups of Time Schedule setting. You can flexibly set the time you want the wireless connection works.
Page 77
Hide ESSID: This function enables the router to become invisible on the network. Thus, any clients using the wireless setting to search for available or specific router on the network will not be able to discover the router whose Hide ESSID function is set to enabled. The default setting is disabled. ...
Page 78
3. Peer WDS MAC Address: It is the third associated AP’s MAC Address. 4. Peer WDS MAC Address: It is the fourth associated AP’s MAC Address. Note: For MAC Address, the format can be: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx. Click Apply to confirm the settings. You can click Security settings link next to Cancel button to go to Wireless Security screen (see Wireless Security section).
Wireless Security You can disable or enable wireless security function using WPA or WEP for protecting wireless network. The default mode of wireless security is disabled. WPA or WPA2 Here take WPA for example. Security Mode: You can choose the type of security mode you want to apply from the drop-down menu.
Page 80
If you want to enable the RADIUS service, check Enable and then do the following settings. RADIUS Server IP Address: Enter the IP address of RADIUS authentication server. RADIUS Server Port: Enter the port number of RADIUS authentication server here. Default value is 1812.
Page 81
Security Mode: Choose the type of security mode WEP from the drop-down menu. RADIUS/802.1x: Choose this box enable RADIUS/802.1x authentication protocol for boosting up WLAN Security. WEP Authentication: To prevent unauthorized wireless stations from accessing data transmitted over the network, the router offers secure data encryption, known as WEP. There are 3 options to select from: Open System, Shared Key or Both.
Page 82
If you want to enable the RADIUS service, check Enable and then do the following settings. WEP Authentication: If you enable RADIUS/802.1x, then the default WEP Authentication is Open System. RADIUS Server IP Address: Enter the IP address of RADIUS authentication server. RADIUS Server Port: Enter the port number of RADIUS authentication server here.
WPS (WiFi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. This feature greatly simplifies the steps needed to create a Wi-Fi network for a residential or an office setting. WPS supports 2 types of configuration methods which are commonly known among consumers: PIN Method &...
Page 84
Wi-Fi Network Setup PIN Method: Configure AP as Registrar 1. Jot down the client’s Pin (eg. 16837546). 2. Enter the Enrollee’s PIN number and then press Start. 3. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Config Mode as Enrollee, press the WPS button on the top bar, select the AP (eg.
Page 85
4. The client’s SSID and security setting will now be configured to match the SSID and security setting of the registrar.
Page 86
PIN Method: Configure AP as Enrollee 1. In the WPS configuration page, change the Role to Enrollee. Then press Start. 2. Jot down the WPS PIN (eg. 25879810). 3. Launch the wireless client’s WPS utility (eg. Ralink Utility). Set the Config Mode as Registrar. Enter the PIN number in the PIN Code column then choose the correct AP (eg.
Page 87
4. The router’s (AP’s) SSID and security setting will now be configured to match the SSID and security setting of the registrar.
Page 88
5. Now to make sure that the setup is correctly done, cross check to see if the SSID and the security setting of the registrar setting match with the parameters found on both Wireless Configuration and Wireless Security Configuration page.
Page 89
The parameters on both Wireless Configuration and Wireless Security Configuration page are as follows:...
Page 90
PBC Method: 1. Press the PBC button of the AP. 2. Launch the wireless client’s WPS Utility (eg. Ralink Utility). Set the Config Mode as Enrollee. Then press the WPS button and choose the correct AP (eg. wlan-ap) from the WPS AP List section before pressing the PBC button to run the scan.
Page 91
3. When the PBC button is pushed, a wireless communication will be established between your router and the PC. The client’s SSID and security setting will now be configured to match the SSID and security setting of the router.
Page 92
Wi-Fi Network Setup with Windows Vista WCN: 1. Jot down the AP PIN from the Web (eg. 25879810). 2. Access the Wireless configuration of the web GUI. Set the WPS State to Unconfigured then click Apply.
Page 93
3. In your Vista operating system, access the Control Panel page, then select Network and Internet > View Network Computers and Devices. Double click on the BiPAC 7800GZ(L) icon and enter the AP PIN in the column provided then press Next.
Page 94
4. Enter the AP SSID then click Next. 5. Enter the Passphrase then click Next.
Page 95
6. When you have come to this step, you will have completed the Wi-Fi network setup using the built-in WCN feature in Windows Vista.
DHCP Server DHCP allows networked devices to obtain information on the parameter of IP, Netmask, Gateway as well as DNS through the Ethernet Address of the device. To configure the router’s DHCP Server, select DHCP Server from the DHCP Server Mode drop- down menu.
Page 97
If you select DHCP Relay from the DHCP Server Mode drop-down menu, you must enter the IP address of the DHCP server that assigns an IP address to the DHCP client in the LAN. Use this function only if advised to do so by your network administrator or ISP. Click Apply to enable this function.
VRRP VRRP is designed to eliminate the single point of failure inherent in the static default routed environment. VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers in a LAN. The VRRP router controlling the IP address associated with a virtual router is called the Master, and forwards packets sent to these IP addresses.
WAN - Wide Area Network A WAN (Wide Area Network) is a computer network that covers a broad geographical area (e.g. Internet) that is used to connect LAN and other types of network systems. There are 4 items within the WAN section: Interface, Profile, Mobile Networks...
Page 100
EWAN Main Port: Select the main port from the drop-down menu. Click Apply to confirm the change. Dual WAN Main Port: Select the main port from the drop-down menu. WAN1: Choose ADSL EWAN or 3G for WAN1. Click the link to go to WAN Profile page to configure its parameters.
Page 101
Failover Probe Cycle: Set the time duration for the Failover Probe Cycle to determine when the router will switch to the backup connection (backup port) once the main connection (main port) fails. Failback Probe Cycle: Set the time duration for the Failback Probe Cycle to determine when the router will switch back to the main connection (main port) from the backup connection (backup port) once the main connection communicates again.
WAN Profile ADSL PPPoE (ADSL) PPPoE (PPP over Ethernet) provides access control in a manner similar to dial-up services using PPP. Description: A given name for the connection. VPI/VCI: Enter the information provided by your ISP. Encap. method: Select the encapsulation format. Select the one provided by your ISP. Username: Enter the username provided by your ISP.
Page 103
Primary DNS / Secondary DNS: Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the Netmask. Connection: Click on Always on to establish a PPPoE session during start up and to automatically re-establish the PPPoE session when disconnected by the ISP.
Page 104
PPPoA (ADSL) PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). It provides access control and billing functions in a manner similar to dial-up services using PPP. Description: A given name for the connection. VPI/VCI: Enter the information provided by your ISP. Encap.
Page 105
Idle Timeout: Auto-disconnect the broadband firewall gateway when there is no activity on the line for a predetermined period of time. MTU: Control the maximum Ethernet packet size your PC will send.
Page 106
MPoA (ADSL) Description: A given name for the connection. VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encap. method: Select the encapsulation format. Select the one provided by your ISP. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single ISP account by sharing a single IP address.
Page 107
IPoA (ADSL) Description: A given name for the connection. VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encap. method: Select the encapsulation format. Select the one provided by your ISP. NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single ISP account by sharing a single IP address.
Page 108
Pure Bridge (ADSL) Description: A given name for the connection. VPI/VCI: Enter the VPI and VCI information provided by your ISP. Encap. method: Select the encapsulation format. Select the one provided by your ISP.
Page 109
Usage Allowance: to control 3G flow, click it to further configure about 3G flow, refer to the following for more information. 3G Usage Allowance Mode: There are 5 options of phone service standards: GSM 2G only, UTMS 3G only, GSM 2G preferred, UMTS 3G preferred, and Automatic.
Page 110
Connection: Always On: The router will make UMTS/GPRS call when starting up. Click on Always On, the Keep Alive field will display. Keep Alive: Check Enable to allow the router automatically send message out periodically to prevent the connection being dropped out by your ISP. Type the circle time, default is 60 seconds.
Page 111
Mode: include Volume-based and Time-based control. Volume-based include “only Download”, ”only Upload” and “Download and Upload” to limit the flow. Time-based control the flow by providing specific hours per month. The billing period begins on: the beginning day of billing each month. Over usage allowance action: what to do when the flow is over usage allowance, the available methods are “E-mail Alert”, ”Email Alert and Disconnect”...
Page 112
EWAN PPPoE (EWAN) Username: Enter the username provided by your ISP. You can input up to 256 alphanumeric characters (case sensitive). Password: Enter the password provided by your ISP. You can input up to 32 alphanumeric characters (case sensitive). Service Name: This item is for identification purposes. If it is required, your ISP will provide you the necessary information.
Page 113
specified by your service provider when this information is required. The default setting is set to disable. Click Apply to confirm the settings.
Page 114
Obtain an IP Address Automatically (EWAN) NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing the single IP address. If users on your LAN have their own public IP addresses to access the Internet, NAT function can be disabled. MAC Spoofing: This option is required by some service Providers.
Page 115
Fixed IP Address (EWAN) NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet through a single IP account by sharing the single IP address. If users on your LAN have their own public IP addresses to access the Internet, NAT function can be disabled. MAC Spoofing: This option is required by some service Providers.
Pure Bridge (EWAN) Profile Port: Select EWAN as the profile port. Protocol: Select Pure Bridge. Mobile Networks Select Network: Select the appropriate mobile network from the drop-down menu. Default is Auto. Click Apply to confirm the settings.
ADSL Mode ADSL Mode: There are 2 modes: Annex L and Annex M that you can select for this connection. Modulator: There are 5 modes: ADSL2, ADSL2+, G.Lite, T1.413 and G.Dmt that you can select for this connection. SRA: select whether to enable SRA feature. SRA, short for Seamless Rate Adaptation, is a technology used to adapt the rate seamlessly without any influence to the working system, to assure of the quality of the ADSL system.
System There are 9 items within the System section: Time Zone, Firmware Upgrade, Backup/Restore, Restart, User Management, Mail Alert, Alert, Syslog Diagnostics Tools. Time Zone The router does not have a real time clock on board; instead, it uses the Simple Network Time Protocol (SNTP) to get the most current time from an SNTP server outside your network.
Firmware Upgrade Your router’s firmware is the software that enables it to operate and provides all its functionality. Think of your router as a dedicated computer, and the firmware as the software that runs in your router. Thus, by upgrading the newly improved version of the firmware allows you the advantage to use newly integrated features.
Backup / Restore These functions allow you to save a backup of the current configuration of your router to a defined location on your PC, or to restore a previously saved configuration. This is useful if you wish to experiment with different settings, knowing that you have a backup in hand in case any mistakes occur.
Restart There are 2 options for you to choose from before restarting the 7800GZ(L) device. You can either choose to restart your device to restore it to the Factory Default Settings or to restart the device with your current settings applied. Restarting your device to Factory Default Setting will be useful especially after you have accidentally changed your settings that may result in undesirable outcome.
User Management In order to prevent unauthorized access to your router configuration interface, it requires all users to login with a username and password. Three user levels are provided here. Each user level there’s a default provided password. You must access the router with the appropriate username and password.
Mail Alert Mail alert is designed to keep system administrator or other relevant personnel alerted of any unexpected events that might have occurred to the network computers or server for monitoring efficiency. With this alert system, appropriate solutions may be tackled to fix problems that may have arisen so that the server can be properly maintained Main Port: Choose the main port to be configured.
Page 124
message once a WAN IP change has been detected. Recipient’s Email (3G Usage Allowance): Enter the email address that will receive the alert message once the 3G over Usage Allowance occurs. Alert Mail Time (intrusion Detection): the interval for sending alert mail. Recipient’s Email (intrusion Detection): Enter the email address that will receive the alert message once the intrusion is detected.
SMS Alert SMS alert, similar to Mail Alert, is designed to keep system administrator or other relevant personnel alerted of any unexpected events that might have occurred to the network computers or server for monitoring efficiency. But instead of informing by Email, related persons can get the information via the short message on their phones sent by this device when WAN was changed to failover / failback mode or WAN IP was changed Recipient’s Number (Failover / Failback): type the phone number which you want the person to...
Syslog Remote Server: Specify the server that is used to save the device's syslog. Server IP Address: The IP address of remote server. Server UDP Port: The UDP Port of remote server. Diagnostics Tools Destination IP / Domain Name: Input the IP or domain name to be tested. Trace IP: Input IP to be traced.
Firewall Listed are the items under the Firewall section: Packet Filter, Ethernet MAC Filter, Wireless MAC Filter, Intrusion Detection, Block WAN PING Filter. Packet Filter Packet filtering enables you to configure your router to block specific internal / external users (IP address) from Internet access, or disable specific service requests (Port number) to / from the Internet.
Page 128
External Port: This is the Port or Port Range that defines the application. Direction: Determine whether the rule is for outgoing packets or for incoming packets. Time Schedule: A self defined time period. You may specify a time schedule for your prioritization policy.
Page 129
Allowing_Any (allowing any incoming packets to be forwarded in): Editing and Deleting Editing: Press the Edit radio button beside the item, and change the parameters, then press Edit/Delete to confirm.
Page 130
Deleting: Check the checkbox, press Edit/Delete, then the item will be removed. Reorder When there are more than one Filter rule, you can reorder them to the priority you want. The former is prior to the latter one. Click or to change the priority of the filter, then press Reorder to confirm.
Ethernet MAC Filter A MAC (Media Access Control) address is the unique network hardware identifier for each PC on your network’s interface (i.e. its Network Interface Card or Ethernet card). Using your router’s MAC Address Filter function, you can configure the network to block specific machines from accessing your LAN.
Wireless MAC Filter A MAC (Media Access Control) address is the unique network hardware identifier for each PC on your network’s interface (i.e. its Network Interface Card or Ethernet card). Using your router’s MAC Address Filter function, you can configure the network to block specific machines from accessing your LAN.
Intrusion Detection The router Intrusion Detection System (IDS) is used to detect hacker’s attack and intrusion attempts from the Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or other connections that the router determines to be suspicious.
Block WAN Ping This feature is to be enabled when you want the public WAN IP address on your router not to respond to any ping command. This feature is disabled by default. To activate the Block WAN PING feature, check the Enable box then click the Apply button.
URL Filter The URL Filter is a powerful tool that can be used to limit access to certain URLs on the Internet. You can block web sites based on keywords or even block out an entire domain. Certain web features can also be blocked to grant added security to your network. Keywords Filtering: Allow blocking against specific keywords within a particular URL rather than having to specify a complete URL (e.g.
Page 136
Keywords filtering Click the checkbox to enable this feature. To edit the list of filtered keywords, click Details. Enter a keyword to be filtered and click Apply. Your new keyword will be added to the filtered keyword listing. Domains Filtering Click the top checkbox to enable this feature.
Virtual Private Networks is ways to establish secured communication tunnels to an organization’s network via the Internet. Your router supports the following: IPSec, GRE. IPSec NAT Traversal NAT Traversal: This directive enables use of the NAT-Traversal IPsec extension (NAT-T). NAT-T allows one or both peers to reside behind a NAT gateway (i.e., doing address- or port-translation).
Page 138
Single Address: The IP address of the local host. Subnet: The subnet of the local network. For example, IP: 192.168.1.0 with Netmask 255.255.255.0 specifies class subnet starting from 192.168.1.1 (i.e. 192.168.1.1 through to 192.168.1.254). Remote Secure Gateway: The IP address of the remote VPN device that is connected and establishes a VPN tunnel.
Page 139
AES: Stands for Advanced Encryption Standards, you can use 128, 192 or 256 bits as encryption method. Integrity Algorithm: Authentication establishes the integrity of the datagram and ensures it is not tampered with in transmit. There are 2 options: Message Digest 5 (MD5) and Secure Hash Algorithm (SHA1).
Page 140
Detection Interval: The period cycle for dead peer detection. The interval can be 180~86400 seconds. Idle Timeout: Auto-disconnect the IPSec connection after trying several consecutive times. Add: Click this button to add a new IPSec entry and the added entry will appear at the bottom table.
Generic Routing Encapsulation (GRE) is a tunneling protocol that can encapsulate a wide variety of network layer protocol packet types inside IP tunnels, creating a virtual point-to-point link to various brands of routers at remote points over an Internet Protocol (IP) internetwork. Name: A given name for the connection.
QoS - Quality of Service QoS helps you to control the data upload traffic of each application from LAN (Ethernet and/or Wireless) to WAN (Internet). It facilitates you the features to control the quality and speed of throughput for each application when the system is running with full upstream load. After clicking the QoS item, you can Add/Edit/Delete a QoS policy.
Page 143
Internal IP Address / External IP Address: This is used to classify the traffic of a specific range of internal/external IP address(es). Input the range you want to classify. If only the first IP block is filled, only that IP will be classified. If you leave these four fields empty, it means any classify IP address. Internal Port: This is the Port Range that defines the ports allowed by the Remote/WAN to connect to the application.
Page 144
Example 1: Optimize Your Home Network with QoS If you are actively engaged in using P2P and are afraid of slowing down internet access throughput of other users within your network, you can thus use QoS function to set different priorities for the different applications that members of your network will be using to avoid bandwidth traffic from getting overloaded.
Page 146
Example 2: Optimize Your Home Network with QoS If you are only using a specific PC for the P2P application, you can create a rule that has a low priority. In this way, P2P application will not congest the data transmission rate when there are other applications present.
Virtual Server Virtual Server allows you to direct incoming traffic from WAN side (identified by Protocol and External port) to the Internal server with private IP address on the LAN side. The Internal port is required only if the external port needs to be converted to a different port number used by the server on the LAN side.
Page 148
Examples of well-known and registered port numbers are shown below, for further information, please see IANA’s website at: http://www.iana.org/assignments/port-numbers. For help on determining which private port numbers are used by common applications on this list, please see the FAQs (Frequently Asked Questions) at http://www.billion.com. Well-known and Registered Ports Port Number Protocol...
Port Mapping Application: Select the service you wish to configure. Protocol: A protocol is automatically applied when an application is selected from the list-box or you may select a protocol type which you want. But when RAW is selected, you must set the protocol number to identify the protocol that the application utilzie.
Page 150
In addition to specifying the port number used, you also need to specify the protocol used. The protocol is determined by a particular application. Most applications use TCP or UDP, however you may also specify other protocols using the drop-down Protocol menu. Setting the protocol to “all” causes all incoming connection attempts using all protocols on all port numbers to be forwarded to the specified IP address.
The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP address as the DMZ Host, all incoming packets that do not use a port number which is already used by any other Virtual Server entries will first be checked by the Firewall and NAT algorithms before it is passed to the DMZ host.
One-to-One NAT One-to-One NAT maps a specific private/local address to a global/public IP address. If you have multiple public/WAN IP address from your ISP, you are eligible for One-to-One NAT to utilize these IP addresses. WAN IP Pool: select Enable to activate the feature and Click Apply to submit your configuration. WAN Port: choose the WAN port you are going to configure multiple IPs for One-to-One NAT.
Wake on LAN This feature provides greater flexibility for users to turn on / boot the computer of the network from a remotely site. MAC Address: Enter the MAC address of the target computer or you can select the MAC address directly from the Select drop down menu on the right.
Certificate This feature is used for TR069 ACS Server authentication of the device used certificate, if necessary. If the imported certificate doesn't match the authorized certificate of the ACS Server, the device will have no access to the server. Trusted CA Certificate Name: the certificate identification name.
Page 156
Click Import Certificate button to import your certificate. Enter the certificate name and insert the certificate.
Time Schedule The Time Schedule supports up to 16 time slots which helps you to manage your Internet connection. In each time profile, you may schedule specific day(s) i.e. Monday through Sunday to restrict or allow the use of the Internet by users or applications. Time Schedule correlates closely with router time.
Advanced Configuration options within the Advanced section are for users who wish to take advantage of the more advanced features of the router. Users who do not understand the features should not attempt to reconfigure their router, unless advised to do so by support staff. Here are the items within the Advanced section: Static Route,...
Page 160
Delete: To remove a static route entry, check the Delete box of the selected entry then click the "Edit/Delete" button.
Static ARP This feature allows you to map the layer-2 MAC (Media Access Control) address that corresponds to the layer-3 IP address of the device. IP Address: Enter the IP of the device that the corresponding MAC address will be mapped to. MAC Address: Enter the MAC address that corresponds to the IP address of the device.
Static DNS The Domain Name System (DNS) is a hierarchical naming system built on a distributed database for computers, services, or any resource connected to the Internet or a private network. It associates various information with domain names assigned to each of the participating entities. Most importantly, it translates domain names meaningful to humans into the numerical identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide.
Dynamic DNS The Dynamic DNS function lets you alias a dynamic IP address to a static hostname, so if your ISP does not assign you a static IP address you can still use a domain name. This is especially useful when hosting servers via your ADSL connection, so that anyone wishing to connect to you may use your domain name, rather than the dynamic IP address which is assigned to you by ISP.
Page 164
Domain Name, Username and Password: Enter your registered domain name and your username and password for this service. Period: Enter the length of the period in the blank; you can set the period unit in day, hour or minute. Click Apply to confirm the settings.
VLAN VLAN (Virtual Local Area Network) is a group of devices on different physical LAN segments that can communicate with each other as if they were all on the same physical LAN segment. Type: Select the VLAN type from the drop-down menu. There are two options: Tag Based and Disable.
Page 166
Example: IPTV Service Setting Go to Advanced mode > Configuration > WAN > WAN Profile. Add a new WAN profile using the Pure Bridge protocol. Information should be provided by your local service provider. Note: Description name should not contain any space.
Page 167
Then go to Advanced mode > Configuration > Advanced > VLAN. Then configure a port that will use the IPTV application. The example below is a setting that illustrates that only Ethernet port #4 can connect to STB and use IPTV. Note: The VLAN setting illustrated bridges both WAN Profile and the Ethernet Port 4 so that the Ethernet port can connect to STB and get the IP directly from the IPTV Service Network.
Device Management The Device Management advanced configuration settings allow you to control your router’s security options and device monitoring features. Device Host Name Host Name: Assign it a name. HTTP Port: The default HTTP port number is 80, you can change it to another one. (The Host Name cannot be used with one word only.
Page 169
Installing UPnP in Windows Example Follow the steps below to install the UPnP in Windows Me. Step 1: Click Start and Control Panel. Double-click Add/Remove Programs. Step 2: Click on the Windows Setup tab and select Communication in the Components selection box.
Page 170
Step 4: Click OK to go back to the Add/Remove Programs Properties window. Click Next. Step 5: Restart the computer when prompted. Follow the steps below to install the UPnP in Windows XP. Step 1: Click Start and Control Panel. Step 2: Double-click Network Connections.
Page 171
Step 6: Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. Auto-discover Your UPnP-enabled Network Device Step 1: Click start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Step 2: Right-click the icon and select Properties. Step 3: In the Internet Connection Properties window, click Settings to see the port mappings that were automatically created.
Page 172
Step 4: You may edit or delete the port mappings or click Add to manually add port mappings. Step 5: Select Show icon in notification area when connected option and click OK. An icon displays in the system tray.
Page 173
Step 6: Double-click on the icon to display your current Internet connection status. Web Configurator Easy Access With UPnP, you can access web-based configuration for the BiPAC 7800GZ(L) without first finding out the IP address of the router. This helps if you do not know the router’s IP address. Follow the steps below to access web configuration.
IGMP IGMP, known as Internet Group Management Protocol, is used to manage hosts from multicast group. IGMP Proxy: IGMP proxy enables the system to issue IGMP host messages on behalf of the hosts that the system has discovered through standard IGMP interfaces. The system acts as a proxy for its hosts.
TR-069 Client Please contact your ISP for the information of TR069. Inform: You may enable or disable the periodic inform feature. Inform Interval: Enter the length of the periodic inform interval (unit: seconds). ACS URL: Enter the ACS URL address. ACS Username: Enter the ACS server login name.
Remote Access Remote Access Control: Select Enable to allow management access from remote side (mostly from internet). "Allowed Access IP Address Range" was used to restrict which IP address could login to access system web GUI. Valid: means to enable the IP address Range limitation. IP Address Range: specify the IP address Range.
Web Access Control Web access control is to only entitle authorized IPs to access the router’s configuration webpage. Web Access Control: Select “Enable” to allow the management of Web control. Allowed Access IP: Enter the IP Address allowed. Time Schedule: Choose the time scheduled for the setting.
Save Configuration to Flash After changing the router’s configuration settings, you must save all of the configuration parameters to FLASH to avoid losing them after turning off or resetting your router. Click “Save Config“ and click “Apply” to write your new configuration to FLASH.
Restart Click “Restart” with option Current Settings to reboot your router (and restore your last saved configuration). If you wish to restart the router using the factory default settings (for example, after a firmware upgrade or if you have saved an incorrect configuration), select Factory Default Settings to reset to factory default settings.
Logout To exit the router web interface, choose Logout. Please save your configuration setting before logging out of the system. Be aware that the router configuration interface can only be accessed by one PC at a time. Therefore when a PC has logged into the system interface, the other users cannot access the system interface until the current user has logged out of the system.
If your router is not functioning properly, please refer to the suggested solutions provided in this chapter. If your problems persist or the suggested solutions do not meet your needs, please kindly contact your service provider or Billion for support. Problems with the router...
Page 182
Problem with LAN interface Problem Suggested Action Check the Ethernet LEDs on the front panel. Cannot PING any PC on LAN The LED should be on for the port that has a PC connected. If it does not lit, check to see if the cable between your router and the PC is properly connected.
Appendix: Product Support & Contact If you come across any problems please contact the dealer from where you purchased your product. Contact Billion Worldwide: http://www.billion.com MAC OS is a registered Trademark of Apple Computer, Inc. Windows 7/98, Windows NT, Windows 2000, Windows Me, Windows XP and Windows Vista are registered...
Need help?
Do you have a question about the BiPAC 7800GZ(L) and is the answer not in the manual?
Questions and answers