Billion BiGuard 10 User Manual

Ibusiness security gateway small-office; ibusiness security gateway home-office
Hide thumbs Also See for BiGuard 10:

Advertisement

Quick Links

BiGuard 10
iBusiness Security Gateway Small-Office
BiGuard 2
iBusiness Security Gateway Home-Office
www.billion.uk.com
User's Manual
Version Release 3.00 (FW:1.03)

Advertisement

Table of Contents
loading

Summary of Contents for Billion BiGuard 10

  • Page 1 BiGuard 10 iBusiness Security Gateway Small-Office BiGuard 2 iBusiness Security Gateway Home-Office www.billion.uk.com User’s Manual Version Release 3.00 (FW:1.03)
  • Page 2: Copyright Information

    Published by Billion Electric Corporation. All rights reserved. Disclaimer Billion does not assume any liability arising out of the application of use of any products or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. Billion reserves the right to make changes in any products described herein without notice.
  • Page 3: Safety Warnings

    Safety Warnings Your BiGuard 2/10 is built for reliability and long service life. For your safety, be sure to read and follow the following safety warnings. • Read this installation guide thoroughly before attempting to set up your BiGuard 2/10. •...
  • Page 4: Table Of Contents

    Table of Contents Chapter 1: Introduction 1.1 Overview 1.2 Product Highlights 1.2.1 Virtual Private Network Support 1.2.2 Advanced Firewall Security 1.2.3 Intelligent Bandwidth Management 1.3 Package Contents 1.3.1 BiGuard 10 1.3.1.1 Front Panel 1.3.1.2 Rear Panel 1.3.1.3 Rack Mounting 1.3.1.4 Cabling 1.3.2 BiGuard 2...
  • Page 5 Chapter 3: Getting Started 3.1 Overview 3.2 Before You Begin 3.3 Connecting Your Router 3.4 Configuring PCs for TCP/IP Networking 3.4.1 Overview – *see CD provided for 3.4.1-3.4.4 3.4.2 Windows XP 3.4.2.1 Configuring 3.4.2.2 Verifying Settings 3.4.3 Windows 2000 3.4.3.1 Configuring 3.4.3.2 Verifying Settings...
  • Page 6 Chapter 4: Router Configuration 4.1 Overview 4.2 Status & Support - *see CD provided for 4.2.1-4.6 4.2.1 ARP Table 4.2.2 Routing Table 4.2.3 Session Table 4.2.4 DHCP Table 4.2.5 IPSec Status 4.2.6 PPTP Status 4.2.7 System Log 4.2.8 IPSec Log 4.3 Quick Start 4.3.1 DHCP 4.3.2 Static IP...
  • Page 7 4.4.5 Firewall 4.4.5.1 Packet Filter 4.4.5.2 URL Filter 4.4.5.3 LAN MAC Filter 4.4.5.4 Block WAN Request 4.4.5.5 Intrusion Detection 4.4.6 VPN 4.4.6.1 IPSec 4.4.6.1.1 IPSec Wizard 4.4.6.1.2 IPSec Policy 4.4.6.2 PPTP 4.4.7 QoS 4.4.8 Virtual Server 4.4.8.1 4.4.8.2 Port Forwarding 4.4.9 Advanced 4.4.9.1 Static Route...
  • Page 8 5.5 Problems with Date and Time 5.6 Restoring Factory Defaults *For Appendix A-H please consult the CD provided Appendix A: Product Specifications A.1 BiGuard 10 Product Specifications A.2 BiGuard 2 Product Specifications Appendix B: Customer Support Appendix C: FCC Interference Statement Appendix D: Network, Routing, and Firewall Basics D.1 Network Basics...
  • Page 9: Overview

    Appendix E: Virtual Private Networking E.1 What is a VPN? E.1.1 VPN Applications E.2 What is IPSec? E.2.1 IPSec Security Components E.2.1.1 Authentication Header (AH) E.2.1.2 Encapsulating Security Payload (ESP) E.2.1.3 Security Associations (SA) E.2.2 IPSec Modes E.2.3 Tunnel Mode AH E.2.4 Tunnel Mode ESP E.2.5 Internet Key Exchange (IKE) Appendix F: IPSec Logs and Events...
  • Page 10: Product Highlights

    Chapter 1: Introduction 1.1 Overview Congratulations on purchasing BiGuard 2/10 Router from Billion. Combining a router with an Ethernet network switch, BiGuard 2/10 is a state-of-the-art device that provides everything you need to get your network connected to the Internet over your Cable or DSL connection quickly and easily.
  • Page 11: Intelligent Bandwidth Management

    BiGuard 2/10 to automatically sort out actual speeds for unmatched convenience. 1.3 Package Contents BiGuard 10 BiGuard 10 iBusiness Security Gateway Small-Office Bracket x 2 (for rack-mounting) Screw x 4 (for rack-mounting) Getting Started CD-ROM...
  • Page 12 Link/ACT: Lit when device is connected. Blinking when data is transmitting/receiving. Lit when connected to an Ethernet device. 1 – 8 10/100M : Lit green when connected at 100Mbps. Not lit when connected at 10Mbps. Link/ACT: Lit when device is connected. Blinking when data is transmitting/receiving.
  • Page 13: Biguard 2

    1.3.1.3 Rack Mounting To rack mount BiGuard 10, carefully secure the device to your rack on both sides using the included brackets and screws. See the diagram below for a more detailed explanation. 1.3.1.4 Cabling Most Ethernet networks currently use unshielded twisted pair (UTP) cabling. The UTP cable contains eight conductors, arranged in four twisted pairs, and terminated with an RJ45 type connector.
  • Page 14: Front Panel

    1.3.2.1 Front Panel Function POWER A solid light indicates a steady connection to a power source. STATUS A blinking light indicates the device is writing to flash memory. Lit when connected to an Ethernet device. 10/100M : Lit green when connected at 100Mbps. Not lit when connected at 10Mbps.
  • Page 15: Cabling

    Port Meaning After the device is powered on, press it to reset the device or restore to factory default settings. 0-3 seconds: The Status LED will light RESET 6 seconds above: restore to factory default settings (this is used when you cannot login to the router.
  • Page 16: Chapter 2: Router Applications

    Chapter 2: Router Applications 2.1 Overview Your BiGuard 2/10 Router is a versatile device that can be configured to not only protect your network from malicious attackers, but also ensure optimal usage of available bandwidth with Quality of Service (QoS). Alternatively, BiGuard 2/10 can also be set to handle secure connections with Virtual Private Networking (VPN).
  • Page 17: Qos Policies For Different Applications

    Scheduler Meter Classifier Outbound Inbound 2.2.2 QoS Policies for Different Applications By setting different QoS policies according to the applications you are running, you can use BiGuard 2/10 to optimize the bandwidth that is being used on your network. VoIP Normal PCs Restricted PC...
  • Page 18: Guaranteed / Maximum Bandwidth

    As illustrated in the diagram above, applications such as Voiceover IP (VoIP) require low network latencies to function properly. If bandwidth is being used by other applications such as an FTP server, users using VoIP will experience network lag and/or service interruptions during use. To avoid this scenario, this network has assigned VoIP with a guaranteed bandwidth and higher priority to ensure smooth communications.
  • Page 19: Policy Based Traffic Shaping

    2.2.4 Policy Based Traffic Shaping Policy Based Traffic Shaping allows you to apply specific traffic policies across a range of IP addresses or ports. This is particularly useful for assigning different policies for different PCs on the network. Policy based traffic shaping lets you better manage your bandwidth, providing reliable Internet and network service to your organization.
  • Page 20: Management By Ip Or Mac Address

    2.2.6 Management by IP or MAC address BiGuard 2/10 can also be configured to apply traffic policies based on a particular IP or MAC address. This allows you to quickly assign different traffic policies to a specific computer on the network.
  • Page 21: Diffserv (Dscp Marking)

    2.2.7 DiffServ (DSCP Marking) DiffServ (a.k.a. DSCP Marking) allows you to classify traffic based on IP DSCP values. These markings can be used to identify traffic within the network. Other interfaces can match traffic based on the DSCP markings. DSCP markings are used to decide how packets should be treated, and is a useful tool to give precedence to varying types of data.
  • Page 22: Concentrator

    secure tunnel. The next type of VPN setup is the Gateway to Multiple Gateway setup, where one gateway (Headquarter) is communicating with multiple gateways (Branch Offices) over the Internet. As with all VPNs, data is kept secure with secure tunnels. The final type of VPN setup is the Client to Gateway.
  • Page 23 Concentrator: Please refer to appendix H for example settings. See CD provided. Local ID Type: Subnet Local subnet: 192.168.3.0 Local mask: 255.255.255.0 Remote ID Type: Subnet Local ID Type: Subnet Remote subnet: 0.0.0.0 Local subnet: 0.0.0.0 Remote mask: 0.0.0.0 Local mask: 0.0.0.0 Remote ID Type: Subnet Remote subnet: 192.168.3.0 200.200.200.1...
  • Page 24: Overview

    Chapter 3: Getting Started 3.1 Overview BiGuard 2/10 is designed to be a powerful and flexible network device that is also easy to use. With an intuitive web-based configuration, BiGuard 2/10 allows you to administer your network via virtually any Java-enabled web browser and is fully compatible with Linux, Mac OS, and Windows 98/Me/NT/2000/XP operating systems.
  • Page 25: Connecting Your Router

    Be sure to also review the Safety Warnings located in the preface of this manual before working with your BiGuard 2/10. 3.3 Connecting Your Router Connecting BiGuard 2/10 is an easy three-step process: 1. Connect BiGuard 2/10 to your LAN by connecting Ethernet cables from your networked PCs to the LAN ports on the router.
  • Page 26: Configuring Pcs For Tcp/Ip Networking

    3.4 Configuring PCs for TCP/IP Networking Now that your BiGuard 2/10 is connected properly to your network, it’s time to configure your networked PCs for TCP/IP networking. In order for your networked PCs to communicate with your router, they must have the following characteristics: 1.
  • Page 27: Factory Default Settings

    3.5 Factory Default Settings Before configuring your BiGuard 2/10, you need to know the following default settings: Web Interface: Username: admin Password: admin LAN Device IP Settings: IP Address: 192.168.1.254 Subnet Mask: 255.255.255.0 ISP setting in WAN site: Obtain an IP Address automatically (DHCP Client) DHCP server: DHCP server is enabled.
  • Page 28: Information From Your Isp

    IP address 192.168.1.254 Subnet Mask 255.255.255.0 The DHCP Client is enabled to DHCP server Enabled automatically get the WAN port function configuration from the ISP. IP addresses for 100 IP addresses continuing distribution to from 192.168.1.100 through 192.168.1.199 3.6 Information From Your ISP 3.6.1 Protocols Before configuring this device, you have to check with your ISP (Internet Service Provider) to find out what kind of service is provided such as DHCP, Static IP, PPPoE,...
  • Page 29: Configuration Information

    firewall are configured, BiGuard 2/10 will login automatically, and you will no longer need to run the login program from your PC. 3.6.2 Configuration Information If your ISP does not dynamically assign configuration information but instead uses fixed configurations, you will need the following basic information from your ISP: - An IP address and subnet mask - A gateway IP address - One or more domain name server (DNS) IP addresses...
  • Page 30 3. In the Network Connections window, right-click Local Area Connection and select Properties. 4. Select Internet Protocol (TCP/IP) and click Properties.
  • Page 31 5. If an IP address, subnet mask and a Default gateway are shown, write down the information. If no address is present, your account’s IP address is dynamically assigned. Click the Obtain an IP address automatically radio button.
  • Page 32 6. If any DNS server addresses are shown, write them down. Click the Obtain DNS server address automatically radio button. 7. Click OK to save your changes.
  • Page 33: Web Configuration Interface

    3.7 Web Configuration Interface BiGuard 2/10 includes a Web Configuration Interface for easy administration via virtually any browser on your network. To access this interface, open your web browser, enter the IP address of your router, which by default is 192.168.1.254, and click Go.
  • Page 34 Chapter 4: Router Configuration 4.1 Overview The Web Configuration Interface makes it easy for you to manage your network via any PC connected to it. On the Web Configuration homepage, you will see the navigation pane located on the left hand side. From it, you will be able to select various options used to configure your router.
  • Page 35 4. To exit the router’s web interface, click LOGOUT. Please ensure that you have saved your configuration settings before you logout. Be aware that the router is restricted to only one PC accessing the web configuration interface at a time. Once a PC has logged into the web interface, other PCs cannot gain access until the current PC has logged out.
  • Page 36 Telephone Support for Internet Access ONLY is available during office hours from Mon-Fri 10am–5pm on 0870-8501528. If you are successfully connected to the Internet and have a support query please contact www.billion.uk.com/esupport and submit a ticket. This symbol on the product or in the instructions means that your electrical and electronic equipment should be disposed at the end of its life separately from your household waste.

This manual is also suitable for:

Biguard 2

Table of Contents